1g\xd5BB5CZ=\xbbv\xbc}0x0, 0x1a5a60000000, 0x0, 0x1, 0x4}, &(0x7f0000000040)=0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {&(0x7f0000000200)}}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0xc58, 0x800e, 0x8, 0x0, 0x3, 0x1fe, 0x7ff, r4}, &(0x7f00000001c0)=0x20) ioctl$VIDIOC_CROPCAP(r3, 0x400455c8, 0x0) 11:39:58 executing program 3: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1042, 0x0) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='\x00\x00m\f\xb3') openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0}, &(0x7f00000000c0)=0xc) ioctl$SIOCAX25DELUID(r3, 0x89e2, &(0x7f00000001c0)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, r4}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) 11:40:09 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086610, &(0x7f0000000000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) [ 848.076243][T16489] EXT4-fs warning (device sda1): ext4_resize_begin:45: There are errors in the filesystem, so online resizing is not allowed 11:40:09 executing program 3: clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) write$P9_RRENAMEAT(r2, 0x0, 0x0) 11:40:09 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086610, &(0x7f0000000000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x4, @local, 0x1}, {0xa, 0x4e21, 0x1ff, @remote, 0x101}, r2, 0xd4a}}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory\x01\x00\x00\x00\x16\x00\x00\x00\xeafW\x1dn\xf0\x130\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086610, &(0x7f0000000000)) 11:40:20 executing program 4 (fault-call:4 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) 11:40:20 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086610, &(0x7f0000000000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc} 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 869.594815][T16610] RSP: 002b:00007fd92d4aaa88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 869.594831][T16610] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000457ec9 [ 869.594841][T16610] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bce80 [ 869.594851][T16610] RBP: 000000000073bf00 R08: 0000000000000000 R09: 00000000fbad8001 11:40:30 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086610, &(0x7f0000000000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0x0, &(0x7f0000000040), &(0x7f0000000200)) r3 = getegid() r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nullb0\x00', 0x101000, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0xfffffffffffffff8) setregid(r2, r3) 11:40:41 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086610, &(0x7f0000000000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc} 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 880.375723][T16659] RSP: 002b:00007fd92d4aaa88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 880.384145][T16659] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000457ec9 [ 880.392112][T16659] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bce80 11:40:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc} 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 881.468241][T16708] RSP: 002b:00007fd92d4aaa88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 881.476667][T16708] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000457ec9 [ 881.484642][T16708] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bce80 [ 881.492598][T16708] RBP: 000000000073bf00 R08: 0000000000000000 R09: 00000000fbad8001 [ 881.500558][T16708] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd92d4ab6d4 [ 881.508515][T16708] R13: 00000000004c658c R14: 00000000004db6c8 R15: 0000000000000003 [ 881.557685][T16745] EXT4-fs warning (device sda1): ext4_resize_begin:45: There are errors in the filesystem, so online resizing is not allowed 11:40:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f00000001c0)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x14000, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000040)=""/43, &(0x7f00000000c0)=0x2b) 11:40:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x5414, 0x0) 11:40:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086610, &(0x7f0000000000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc} 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 881.963031][T16756] RSP: 002b:00007fd92d4aaa88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 881.971453][T16756] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000457ec9 [ 881.979423][T16756] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bce80 [ 881.987413][T16756] RBP: 000000000073bf00 R08: 0000000000000000 R09: 00000000fbad8001 11:40:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory\x01\x00\x00\x00\x16\x00\x00\x00\xeafW\x1dn\xf0\x130\x00', 0x26e1, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x9) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086610, &(0x7f0000000000)) 11:40:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086610, &(0x7f0000000000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc} 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 882.506992][T16783] RSP: 002b:00007fd92d4aaa88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 882.515395][T16783] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000457ec9 [ 882.523374][T16783] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bce80 [ 882.531326][T16783] RBP: 000000000073bf00 R08: 0000000000000000 R09: 00000000fbad8001 [ 882.539289][T16783] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd92d4ab6d4 [ 882.547251][T16783] R13: 00000000004c658c R14: 00000000004db6c8 R15: 0000000000000003 [ 884.046883][T14847] Bluetooth: hci0: command 0x1003 tx timeout [ 884.052998][T10211] Bluetooth: hci0: sending frame failed (-49) [ 886.126761][T14847] Bluetooth: hci0: command 0x1001 tx timeout [ 886.132889][T10211] Bluetooth: hci0: sending frame failed (-49) [ 888.206756][T16517] Bluetooth: hci0: command 0x1009 tx timeout 11:40:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c12") ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086610, &(0x7f0000000000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0x0, &(0x7f0000000040), &(0x7f0000000200)) r3 = getegid() r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nullb0\x00', 0x101000, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0xfffffffffffffff8) setregid(r2, r3) [ 892.217211][T16799] FAULT_INJECTION: forcing a failure. [ 892.217211][T16799] name failslab, interval 1, probability 0, space 0, times 0 [ 892.243737][T16803] EXT4-fs warning: 6 callbacks suppressed [ 892.243761][T16803] EXT4-fs warning (device sda1): ext4_resize_begin:45: There are errors in the filesystem, so online resizing is not allowed [ 892.256793][T16799] CPU: 0 PID: 16799 Comm: syz-executor3 Not tainted 5.0.0-rc1-next-20190114 #11 [ 892.269685][T16808] EXT4-fs warning (device sda1): ext4_resize_begin:45: There are errors in the filesystem, so online resizing is not allowed [ 892.271622][T16799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 892.271629][T16799] Call Trace: [ 892.271652][T16799] dump_stack+0x1db/0x2d0 [ 892.271674][T16799] ? dump_stack_print_info.cold+0x20/0x20 [ 892.271698][T16799] ? inode_init_owner+0x340/0x340 [ 892.313002][T16799] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 892.313028][T16799] should_fail.cold+0xa/0x14 [ 892.313058][T16799] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 892.329675][T16799] ? ___might_sleep+0x1e7/0x310 [ 892.329695][T16799] ? arch_local_save_flags+0x50/0x50 [ 892.329719][T16799] ? evm_inode_post_setattr+0x47/0x70 [ 892.329742][T16799] __should_failslab+0x121/0x190 [ 892.329763][T16799] should_failslab+0x9/0x14 [ 892.329780][T16799] kmem_cache_alloc+0x2be/0x710 [ 892.329794][T16799] ? find_held_lock+0x35/0x120 [ 892.329818][T16799] ? do_sys_ftruncate+0x41e/0x550 [ 892.369353][T16799] getname_flags+0xd6/0x5b0 [ 892.373872][T16799] getname+0x1a/0x20 [ 892.374879][T16812] EXT4-fs warning (device sda1): ext4_resize_begin:45: There are errors in the filesystem, so online resizing is not allowed [ 892.377781][T16799] do_sys_open+0x3a5/0x7c0 [ 892.377804][T16799] ? filp_open+0x80/0x80 [ 892.377829][T16799] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 892.377848][T16799] ? trace_hardirqs_off_caller+0x300/0x300 [ 892.377866][T16799] ? trace_hardirqs_on_thunk+0x1a/0x1c 11:40:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory\x01\x00\x00\x00\x16\x00\x00\x00\xeafW\x1dn\xf0\x130\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086610, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000000c0)={0x0, 0x70, 0xffffffff, 0xffffffffffff7fff, 0x1, 0x9, 0x0, 0x7fff, 0x2000, 0xd, 0x6, 0x780b67f1, 0x1, 0x80000000000000, 0x4, 0x9, 0x4, 0xffffffffffffffc0, 0x3, 0x5, 0x20, 0xffffffffffff0000, 0x10000, 0x8001, 0x5, 0x1, 0x10001, 0x2, 0x100, 0x101, 0x9, 0xa7, 0xfffffffffffffffb, 0x9, 0x7, 0x1f, 0x3, 0x750, 0x0, 0x4, 0x5, @perf_bp={&(0x7f0000000040), 0x1}, 0x8000, 0x6, 0x7fff, 0x0, 0xce27, 0x871, 0x1}) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000140)) 11:40:53 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_vs_stats\x00') ioctl$GIO_FONT(r0, 0x4b60, &(0x7f00000000c0)=""/58) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory\x01\x00\x00\x00\x16\x00\x00\x00\xeafW\x1dn\xf0\x130\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086610, &(0x7f0000000000)) [ 892.377887][T16799] __x64_sys_open+0x7e/0xc0 [ 892.377910][T16799] do_syscall_64+0x1a3/0x800 [ 892.401673][T16812] EXT4-fs warning (device sda1): ext4_resize_begin:45: There are errors in the filesystem, so online resizing is not allowed [ 892.405531][T16799] ? syscall_return_slowpath+0x5f0/0x5f0 [ 892.405553][T16799] ? prepare_exit_to_usermode+0x232/0x3b0 [ 892.405577][T16799] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 892.405616][T16799] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 892.455792][T16799] RIP: 0033:0x411e71 [ 892.465563][T16799] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 892.485175][T16799] RSP: 002b:00007fd92d4aaa80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 892.485192][T16799] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000411e71 [ 892.485202][T16799] RDX: 00007fd92d4aaafa RSI: 0000000000000002 RDI: 00007fd92d4aaaf0 [ 892.485213][T16799] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a 11:40:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c12") ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086610, &(0x7f0000000000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0x0, &(0x7f0000000040), &(0x7f0000000200)) r3 = getegid() r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nullb0\x00', 0x101000, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0xfffffffffffffff8) setregid(r2, r3) [ 892.485223][T16799] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 892.485233][T16799] R13: 0000000000000000 R14: 00000000004db6c8 R15: 0000000000000003 [ 892.510800][T16817] EXT4-fs warning (device sda1): ext4_resize_begin:45: There are errors in the filesystem, so online resizing is not allowed 11:40:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fstatfs(r0, &(0x7f0000000040)=""/41) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000000c0)={0x3, 0xdd, "45d778a073d4928c00abe96dca93e52f861a6fc513e1df02e53e6a8a97bcf970ec936720277a82efc1f2eaf4de80ca91a4a2e7933d4d7a4d68853079dffe8903c6c360623575b5927bbd49c3012d9ab9609f9aa85f6be4a2eecfb5b42cb2d6100acfd4498d8803eb3903f634e3e422dc5f35fa60301c06ea5e018912ac48bc8f077a05ca1964cabf9e45b1dc6411c4b11c392235ece6e50efc8e4bd4f00d26ae08397e3f191c597d956dda1e0465b915ce6d31e7c637a6d23b34dc570e9ed86336345d150ddb038de87b0d96af3f963acdad08fbe3974a57391f3bff40"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory\x01\x00\x00\x00\x16\x00\x00\x00\xeafW\x1dn\xf0\x130\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086610, &(0x7f0000000000)) 11:40:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x541d, 0x0) 11:40:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400300, 0x0) connect$netrom(r1, &(0x7f00000001c0)={{0x3, @default}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @null]}, 0x48) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) sendfile(r0, r1, &(0x7f0000000040), 0x4000000000000000) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r2, 0x400455c8, 0x0) 11:40:53 executing program 3 (fault-call:0 fault-nth:6): syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 892.765959][T16832] EXT4-fs warning (device sda1): ext4_resize_begin:45: There are errors in the filesystem, so online resizing is not allowed 11:40:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188") ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086610, &(0x7f0000000000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc} 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 893.031707][T16839] RSP: 002b:00007fd92d4aaa80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 893.031723][T16839] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000411e71 11:40:54 executing program 2: [ 893.031733][T16839] RDX: 00007fd92d4aaafa RSI: 0000000000000002 RDI: 00007fd92d4aaaf0 [ 893.031743][T16839] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 893.031752][T16839] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 893.031760][T16839] R13: 0000000000000000 R14: 00000000004db6c8 R15: 0000000000000003 11:40:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188") ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086610, &(0x7f0000000000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc} 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 893.649581][T16870] RSP: 002b:00007fd92d4aaa80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 893.657968][T16870] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000411e71 [ 893.665916][T16870] RDX: 00007fd92d4aaafa RSI: 0000000000000002 RDI: 00007fd92d4aaaf0 [ 893.673865][T16870] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 893.681818][T16870] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 893.689782][T16870] R13: 0000000000000000 R14: 00000000004db6c8 R15: 0000000000000003 [ 895.166770][T14847] Bluetooth: hci0: command 0x1003 tx timeout [ 895.172848][T10211] Bluetooth: hci0: sending frame failed (-49) [ 897.246975][T16517] Bluetooth: hci0: command 0x1001 tx timeout [ 897.253115][T10211] Bluetooth: hci0: sending frame failed (-49) [ 899.326738][T14847] Bluetooth: hci0: command 0x1009 tx timeout 11:41:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40000, 0x0) write$P9_RXATTRWALK(r1, &(0x7f0000000040)={0xf, 0x1f, 0x1, 0xffffffff}, 0xf) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r0, 0x400000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) 11:41:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7, &(0x7f0000000040)="0adc1f7000000000000000") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory\x01\x00\x00\x00\x16\x00\x00\x00\xeafW\x1dn\xf0\x130\x00', 0x26e1, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086610, &(0x7f0000000000)) 11:41:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188") ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086610, &(0x7f0000000000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc} 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 904.146918][T16892] RSP: 002b:00007fd92d4aaa80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 904.155337][T16892] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000411e71 [ 904.163309][T16892] RDX: 00007fd92d4aaafa RSI: 0000000000000002 RDI: 00007fd92d4aaaf0 [ 904.171301][T16892] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a 11:41:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a0") ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086610, &(0x7f0000000000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0x0, 0x2, 0x9}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f00000000c0)={r3}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory\x01\x00\x00\x00\x16\x00\x00\x00\xeafW\x1dn\xf0\x130\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086610, &(0x7f0000000000)) 11:41:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a0") ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086610, &(0x7f0000000000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x7d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r1) 11:41:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x5423, 0x0) 11:41:05 executing program 3 (fault-call:0 fault-nth:9): syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:41:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a0") ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086610, &(0x7f0000000000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0x0) getresuid(&(0x7f0000000840)=0x0, &(0x7f0000000880), &(0x7f00000008c0)) getgroups(0x3, &(0x7f0000000900)=[0xee01, 0x0, 0x0]) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000940)=0x0) r6 = getuid() getresgid(&(0x7f0000000980), &(0x7f00000009c0)=0x0, &(0x7f0000000a00)) r8 = getpgid(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a40)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000b40)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b80)={0x0, 0x0, 0x0}, &(0x7f0000000bc0)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00)={0x0}, &(0x7f0000000c40)=0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000c80)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000d80)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, &(0x7f0000000e00)=0xc) r14 = gettid() fstat(r0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000001340)={0x0, 0x20, 0x40, 0x80000, r1}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000001380)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f00000014c0)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001500)={0x0, 0x0, 0x0}, &(0x7f0000001540)=0xc) r21 = getpid() lstat(&(0x7f0000001580)='./file0\x00', &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r23 = getegid() r24 = getpid() fstat(r0, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) r26 = getegid() sendmmsg$unix(r1, &(0x7f0000001d00)=[{&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000240)="329aafb5f10a44bdfa2b35e5d017bf7ad4d9cddc056c7e1b1312", 0x1a}, {&(0x7f0000000740)="dccd96e5bbe34da33288367bbc800b483668f397ac1a64ff0a40b68aa976ef6bbe1cc3c36cad1a6c3ca71c1cc00d136efe15160a341658728d97b218864d7af9e9712cd59132c882c5ee19d4db59a9d61988596627869866d34340530f3fe8aaa587c87892c3294a606a148913ad50f8dc405424f9c7529a95e761d32b1dc7ad261c4ca7629fd5b7d69f65e492748ef558c3bf7a66a1ce0899a16474e45070e16359c51aed230500187c3e2f498fc50600ef8d914b67282d914ad98161e6f87e55b9dd5256e04b843a7cd611ade06b0c1bbb2848565bc8d592c16b81617c50659ccbd4", 0xe3}], 0x2, &(0x7f0000000f80)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @rights={0x38, 0x1, 0x1, [r1, r1, r0, r1, r1, r0, r0, r1, r0]}, @rights={0x20, 0x1, 0x1, [r1, r0, r1, r1]}, @cred={0x20, 0x1, 0x2, r11, r12, r13}, @cred={0x20, 0x1, 0x2, r14, r15, r16}], 0xf8}, {&(0x7f0000001080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001300)=[{&(0x7f0000001100)="7be964b051f20d72b1ef7d3603d7560e88ef2b37293e8691843120cd551b262083d522c2ac7b28cd64245d665c3c145c8144df95680ec17eae8fe752f96d2d90fbc5c171a248f0a60594310276e70c2f80da62622bb638fc72a2a14ad88d020c813fb78e803ab3b1e2913720a0c706db18728d6f58277b216aec5371fcfcc563c4d05e00f43353a0feae5718761256665a32bfeb7b2f959562c3ea2062da924dd57396cdad3b8b8803cc4001a5f128a947d9597167cdd028c096dda6e874478819b253bf6ed1", 0xc6}, {&(0x7f0000001200)}, {&(0x7f0000001240)="3e3b51eec7afcd634121f34a326b2a3e94484f75f496fe56d1f7c9c65056968ac94f1b0a7a23507e214156caab1e30018c4c15f12d27aab0d0ab7d823450770a82d487e1c0433bfe463954e09ecfb62a5c2024fd7128c5e30dc8a46a24f8c0152619dba08625a42b5c4ee09db2b4943fcab5022f49a54adfade54cf1c83d54ed52", 0x81}], 0x3, &(0x7f0000001640)=[@rights={0x38, 0x1, 0x1, [r1, r0, r0, r1, r1, r0, r1, r1, r0]}, @rights={0x30, 0x1, 0x1, [r1, r1, r0, r1, r1, r1, r0]}, @rights={0x18, 0x1, 0x1, [r0]}, @rights={0x28, 0x1, 0x1, [r0, r17, r0, r0, r1]}, @cred={0x20, 0x1, 0x2, r18, r19, r20}, @cred={0x20, 0x1, 0x2, r21, r22, r23}], 0xe8, 0x20000000}, {&(0x7f0000001740)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001800)=[{&(0x7f00000017c0)="15fb09c51fbfdae9d9ffec7fdc99bf5876b8e647888551f91a2a805ad5530354878546919d4567672056b1f7c53f78e67290e37a8d4dfd8288334434cd93", 0x3e}], 0x1, &(0x7f0000001840), 0x0, 0x10}, {&(0x7f0000001880)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001bc0)=[{&(0x7f0000001900)="598c435167b0b0158b48a706ef18dae4e8200fb076a840143fe00f60d36185229087ae3e4e4eb1974f262239117ccb2063c98cb43920859fb40949100a596fc53fdad1c71e62904befaf64de49702401e1180b7b3b314795248d6f036b523ddd7b2eb4f494ecd5a6e47e62da37f41b7a45067c9cf42a2704a4bbb655982373a9bd722b0b56d3a5f1173fddbf605defc51a9b177c61398f289077a8", 0x9b}, {&(0x7f00000019c0)="18caed7cb43517e8909838ae7458d303ca8f5311cc49385455ebbeec366842e13b0a6b11e78430b3595de7a96ae8180d958c2ffcccda12cd7e3fc8a61351bd9f9bc8cfd897552fcf231539e633c219ddbb220ed69d73771e319b06c45cc58ff7ed6171d6f3d5e79ba81d95e2989d94dd150a27a6a1347f8e5a60e637c52a3a4090e466bda7f070b9e43e5a7835f0fea318af7eb0abacaf761495a518cb8d5d0a3ce0467da42c3b5ec4b1fb02e9e6c2beedaf8ff5dd0111c3ac70f8d5fc56a787c51154ca13ca579e1e359711b0e00b57dfee36abf3137af512bc438c0cac858a02c9e0dabcc7ff", 0xe7}, {&(0x7f0000001ac0)="25e661eb67f6061066280e49bd0c59469477d9befb0f449aa205db830386bad4a6ecdc67c17eec5e72b290c6a85ca258c21673c6d30370430ae285b7b8ae78d6ee62a2c9a3cbfee5309b4f489bb37270c0849fda846b2b34dd499a350b3b69c294dd4c4b126f1605259f954d27dc8da1f4fd5772a388cef25c0a397d329530e247e50372c098bc0d204cc0cdd4d41b84b6543a0f557a259e8f789fbc5fffe92fb4e98c4daf81d12d2ace25c74622b1aa7ed25fa7", 0xb4}, {&(0x7f0000001b80)}], 0x4, &(0x7f0000001c80)=[@cred={0x20, 0x1, 0x2, r24, r25, r26}, @rights={0x18, 0x1, 0x1, [r1, r0]}, @rights={0x20, 0x1, 0x1, [r1, r1, r0]}], 0x58, 0x800}], 0x4, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086610, &(0x7f0000000000)) pread64(r0, &(0x7f0000000100)=""/181, 0xb5, 0x5a) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f0000000340)={"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"}) [ 904.633290][T16932] FAULT_INJECTION: forcing a failure. [ 904.633290][T16932] name failslab, interval 1, probability 0, space 0, times 0 [ 904.652107][T16925] EXT4-fs warning (device sda1): ext4_resize_begin:45: There are errors in the filesystem, so online resizing is not allowed [ 904.665221][T16932] CPU: 1 PID: 16932 Comm: syz-executor3 Not tainted 5.0.0-rc1-next-20190114 #11 [ 904.668802][T16934] EXT4-fs warning (device sda1): ext4_resize_begin:45: There are errors in the filesystem, so online resizing is not allowed [ 904.674271][T16932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 904.674279][T16932] Call Trace: [ 904.674303][T16932] dump_stack+0x1db/0x2d0 [ 904.674329][T16932] ? dump_stack_print_info.cold+0x20/0x20 [ 904.710639][T16932] should_fail.cold+0xa/0x14 [ 904.715240][T16932] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 904.721100][T16932] ? ___might_sleep+0x1e7/0x310 [ 904.725962][T16932] ? arch_local_save_flags+0x50/0x50 [ 904.731289][T16932] __should_failslab+0x121/0x190 [ 904.736243][T16932] should_failslab+0x9/0x14 [ 904.740785][T16932] kmem_cache_alloc_trace+0x2d1/0x760 [ 904.746153][T16932] ? __mutex_lock+0x622/0x1670 [ 904.750907][T16932] ? find_held_lock+0x35/0x120 [ 904.755786][T16932] ? lo_ioctl+0x25b/0x23e0 [ 904.760210][T16932] ? __fget+0x473/0x710 [ 904.764376][T16932] ? loop_get_status64+0x150/0x150 [ 904.769496][T16932] __kthread_create_on_node+0x122/0x530 [ 904.775051][T16932] ? kthread_parkme+0xb0/0xb0 [ 904.779711][T16932] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 904.785685][T16932] ? rcu_read_unlock_special+0x380/0x380 [ 904.791318][T16932] ? loop_get_status64+0x150/0x150 [ 904.796413][T16932] kthread_create_on_node+0xbb/0xf0 [ 904.801591][T16932] ? __kthread_create_on_node+0x530/0x530 [ 904.807301][T16932] ? kthread_park+0x1b0/0x1b0 [ 904.811995][T16932] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 904.818215][T16932] lo_ioctl+0xc80/0x23e0 [ 904.822447][T16932] ? lo_rw_aio+0x1e50/0x1e50 [ 904.827164][T16932] ? __fget+0x473/0x710 [ 904.831322][T16932] ? lo_rw_aio+0x1e50/0x1e50 [ 904.835943][T16932] blkdev_ioctl+0x10e0/0x2120 [ 904.840619][T16932] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 904.846837][T16932] ? blkpg_ioctl+0xc10/0xc10 [ 904.851424][T16932] ? lock_downgrade+0xbe0/0xbe0 [ 904.856276][T16932] ? kasan_check_read+0x11/0x20 [ 904.861121][T16932] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 904.867082][T16932] ? rcu_read_unlock_special+0x380/0x380 [ 904.872725][T16932] ? __fget+0x49a/0x710 [ 904.876923][T16932] block_ioctl+0xee/0x130 [ 904.881238][T16932] ? blkdev_fallocate+0x410/0x410 [ 904.886306][T16932] do_vfs_ioctl+0x107b/0x17d0 [ 904.890978][T16932] ? putname+0xef/0x130 [ 904.895116][T16932] ? ioctl_preallocate+0x2f0/0x2f0 [ 904.900206][T16932] ? __fget_light+0x2db/0x420 [ 904.904872][T16932] ? fget_raw+0x20/0x20 [ 904.909078][T16932] ? do_sys_open+0x3f9/0x7c0 [ 904.913655][T16932] ? do_syscall_64+0x8c/0x800 [ 904.918423][T16932] ? do_syscall_64+0x8c/0x800 [ 904.923088][T16932] ? lockdep_hardirqs_on+0x415/0x5d0 [ 904.928365][T16932] ? security_file_ioctl+0x93/0xc0 [ 904.933476][T16932] ksys_ioctl+0xab/0xd0 [ 904.937620][T16932] __x64_sys_ioctl+0x73/0xb0 [ 904.942198][T16932] do_syscall_64+0x1a3/0x800 [ 904.946774][T16932] ? syscall_return_slowpath+0x5f0/0x5f0 [ 904.952492][T16932] ? prepare_exit_to_usermode+0x232/0x3b0 [ 904.958216][T16932] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 904.963757][T16932] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 904.969643][T16932] RIP: 0033:0x457d37 [ 904.973531][T16932] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 cd b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 904.993115][T16932] RSP: 002b:00007fd92d4aaa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 905.001503][T16932] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000457d37 [ 905.009458][T16932] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 905.017411][T16932] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 905.025362][T16932] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 11:41:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x5424, 0x0) 11:41:06 executing program 2: r0 = socket$kcm(0x2b, 0x200000000000001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r0) 11:41:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory\x01\x00\x00\x00\x16\x00\x00\x00\xeafW\x1dn\xf0\x130\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086610, &(0x7f0000000000)) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e22, 0x0, @local, 0x9}}, 0x0, 0x6, 0x0, "ef2dab4e5748f6f956222e1f1125b3ad8116b44b1bde6215f047b9ff5c678d26a724b27d0287d724f1abbaef7db549877f79e1dfb31c91a4b83aec1675bb575ca7a61b41a48ab09e430038743146d0f4"}, 0xd8) 11:41:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086610, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc} 3d 01 f0 ff ff 0f 83 cd b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 905.521467][T16956] RSP: 002b:00007fd92d4aaa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 905.529861][T16956] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000457d37 [ 905.537809][T16956] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 905.545755][T16956] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 905.553700][T16956] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 905.561647][T16956] R13: 0000000000000000 R14: 00000000004db6c8 R15: 0000000000000003 [ 907.246800][T14847] Bluetooth: hci0: command 0x1003 tx timeout [ 907.252898][T10211] Bluetooth: hci0: sending frame failed (-49) [ 909.326797][T14847] Bluetooth: hci0: command 0x1001 tx timeout [ 909.332887][T10211] Bluetooth: hci0: sending frame failed (-49) [ 911.406760][T14847] Bluetooth: hci0: command 0x1009 tx timeout 11:41:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) getpeername$tipc(r1, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r0, 0x0) fsetxattr$security_ima(r1, &(0x7f00000000c0)='security.ima\x00', &(0x7f00000001c0)=@md5={0x1, "938899ae3f46d5af7dc8d14978e21aeb"}, 0x11, 0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r2, 0x400455c8, 0x0) 11:41:17 executing program 2: rt_sigprocmask(0x0, 0x0, 0x0, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 11:41:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000040)) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.swap.current\x00vm\x18!\x04)Sr\xd2\x88\x80', 0x26e1, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={r1, 0x0, 0x9e2, 0x8, 0x796}) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086610, &(0x7f0000000000)) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000140)={0x0, 0x1, {0x24, 0x10, 0x6, 0x9, 0x9, 0x2, 0x1, 0x108}}) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x53, 0x4, 0x9, {0x0, 0x1}, {0xffffffff, 0x1}, @period={0x5c, 0xc9a6, 0x1, 0x80000000, 0x8001, {0x0, 0x6, 0xfffffffffffffffc, 0x1c}, 0x8, &(0x7f0000000380)=[0xbb, 0x200, 0x4, 0x100000000, 0x8, 0x5, 0x100000000, 0x7]}}) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="73797a30b2a6856ae663d296239aace6d2b82cf866488b1e8aacb5116b37ddd3382610aa9c116a8085e1d681eec007c6d30b22be704358d60dd64b9770275a40f92121d7a7fccb7a98fe2c91a090a19b9199b875c0327aaef323286531f0e43799cb53ac356c9e35915eedf3a0d28f23134db903506feaa655b92a32864a3b9ef286cefbc7e0b76f5a79baa6d4b1afbb839ac0fb3801f05810d41df24ffdaaf33166efc778"], 0x94) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x4, 0x1ff, 0x3f}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000180)=0x5, r2, 0x0, 0x0, 0x1}}, 0x20) 11:41:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x5425, 0x0) 11:41:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086610, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x4, 0x10, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a95000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) fchmodat(0xffffffffffffffff, &(0x7f000058f000)='./file0\x00', 0x0) mprotect(&(0x7f0000307000/0x1000)=nil, 0x1000, 0x8000000001) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) clock_settime(0x4, &(0x7f0000000140)={r1, r2+30000000}) mremap(&(0x7f0000676000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000590000/0x4000)=nil) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory\x01\x00\x00\x00\x16\x00\x00\x00\xeafW\x1dn\xf0\x130\x00', 0x26e1, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f00000000c0)='./file0/file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086610, &(0x7f0000000000)) [ 916.027905][T16966] ? kmem_cache_alloc+0x12d/0x710 [ 916.027956][T16966] ? kernfs_new_node+0x99/0x130 [ 916.027977][T16966] ? kernfs_create_dir_ns+0x52/0x160 [ 916.072164][T16966] ? internal_create_group+0x8cd/0xd80 [ 916.077643][T16966] ? sysfs_create_group+0x20/0x30 [ 916.082672][T16966] ? lo_ioctl+0x1147/0x23e0 [ 916.087160][T16966] ? blkdev_ioctl+0x10e0/0x2120 [ 916.091997][T16966] ? block_ioctl+0xee/0x130 [ 916.096479][T16966] ? do_vfs_ioctl+0x107b/0x17d0 [ 916.101325][T16966] ? ksys_ioctl+0xab/0xd0 [ 916.105632][T16966] ? __x64_sys_ioctl+0x73/0xb0 [ 916.110379][T16966] ? do_syscall_64+0x1a3/0x800 [ 916.115125][T16966] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 916.121173][T16966] ? print_usage_bug+0xd0/0xd0 [ 916.125943][T16966] idr_alloc_u32+0x1d8/0x3a0 [ 916.130548][T16966] ? __fprop_inc_percpu_max+0x2d0/0x2d0 [ 916.136102][T16966] ? lock_acquire+0x1db/0x570 [ 916.140795][T16966] ? __kernfs_new_node+0x125/0x8a0 [ 916.145905][T16966] idr_alloc_cyclic+0x153/0x330 [ 916.150742][T16966] ? idr_alloc+0x1b0/0x1b0 [ 916.155158][T16966] ? kasan_check_read+0x11/0x20 [ 916.160021][T16966] __kernfs_new_node+0x1c1/0x8a0 [ 916.164961][T16966] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 916.170409][T16966] ? __schedule+0x148d/0x1e60 [ 916.175179][T16966] ? add_lock_to_list.isra.0+0x450/0x450 [ 916.180797][T16966] ? pci_mmcfg_check_reserved+0x170/0x170 [ 916.186512][T16966] ? bd_set_size+0x2c1/0x370 [ 916.191085][T16966] ? find_held_lock+0x35/0x120 [ 916.195826][T16966] ? bd_set_size+0x2c1/0x370 [ 916.200396][T16966] kernfs_new_node+0x99/0x130 [ 916.205060][T16966] kernfs_create_dir_ns+0x52/0x160 [ 916.210154][T16966] internal_create_group+0x8cd/0xd80 [ 916.215437][T16966] ? remove_files.isra.0+0x190/0x190 [ 916.220714][T16966] ? down_read+0x120/0x120 [ 916.225116][T16966] ? resched_curr+0x1a0/0x1a0 [ 916.229786][T16966] sysfs_create_group+0x20/0x30 [ 916.234615][T16966] lo_ioctl+0x1147/0x23e0 [ 916.238933][T16966] ? lo_rw_aio+0x1e50/0x1e50 [ 916.243506][T16966] ? __fget+0x473/0x710 [ 916.247641][T16966] ? lo_rw_aio+0x1e50/0x1e50 [ 916.252215][T16966] blkdev_ioctl+0x10e0/0x2120 [ 916.256872][T16966] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 916.263101][T16966] ? blkpg_ioctl+0xc10/0xc10 [ 916.267671][T16966] ? lock_downgrade+0xbe0/0xbe0 [ 916.272508][T16966] ? kasan_check_read+0x11/0x20 [ 916.277357][T16966] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 916.283316][T16966] ? rcu_read_unlock_special+0x380/0x380 [ 916.288931][T16966] ? __fget+0x49a/0x710 [ 916.293087][T16966] block_ioctl+0xee/0x130 [ 916.297414][T16966] ? blkdev_fallocate+0x410/0x410 [ 916.302417][T16966] do_vfs_ioctl+0x107b/0x17d0 [ 916.307073][T16966] ? putname+0xef/0x130 [ 916.311208][T16966] ? ioctl_preallocate+0x2f0/0x2f0 [ 916.316311][T16966] ? __fget_light+0x2db/0x420 [ 916.320987][T16966] ? fget_raw+0x20/0x20 [ 916.325124][T16966] ? do_sys_open+0x3f9/0x7c0 [ 916.329704][T16966] ? do_syscall_64+0x8c/0x800 [ 916.334375][T16966] ? do_syscall_64+0x8c/0x800 [ 916.339031][T16966] ? lockdep_hardirqs_on+0x415/0x5d0 [ 916.344305][T16966] ? security_file_ioctl+0x93/0xc0 [ 916.349423][T16966] ksys_ioctl+0xab/0xd0 [ 916.353564][T16966] __x64_sys_ioctl+0x73/0xb0 [ 916.358135][T16966] do_syscall_64+0x1a3/0x800 [ 916.362716][T16966] ? syscall_return_slowpath+0x5f0/0x5f0 [ 916.368345][T16966] ? prepare_exit_to_usermode+0x232/0x3b0 [ 916.374042][T16966] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 916.379570][T16966] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 916.385436][T16966] RIP: 0033:0x457d37 [ 916.389309][T16966] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 cd b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 916.408909][T16966] RSP: 002b:00007fd92d4aaa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 916.417312][T16966] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000457d37 [ 916.425277][T16966] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 916.433239][T16966] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 916.441201][T16966] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 916.449148][T16966] R13: 0000000000000000 R14: 00000000004db6c8 R15: 0000000000000003 [ 916.472088][T16966] gfs2: not a GFS2 filesystem [ 916.498345][T16974] loop2: p1 p2 p3 p4 < > 11:41:17 executing program 3 (fault-call:0 fault-nth:12): syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 916.605969][T16995] EXT4-fs warning (device sda1): ext4_resize_begin:45: There are errors in the filesystem, so online resizing is not allowed 11:41:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086610, &(0x7f0000000000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000180)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc} 3d 01 f0 ff ff 0f 83 cd b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 917.080524][T17004] RSP: 002b:00007fd92d4aaa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 917.088950][T17004] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000457d37 [ 917.096921][T17004] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 917.104879][T17004] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 917.112843][T17004] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 917.120799][T17004] R13: 0000000000000000 R14: 00000000004db6c8 R15: 0000000000000003 [ 917.142417][T17008] print_req_error: I/O error, dev loop2, sector 201 flags 80700 [ 917.159493][T17010] print_req_error: I/O error, dev loop2, sector 1 flags 80700 [ 917.168131][T17013] print_req_error: I/O error, dev loop2, sector 101 flags 80700 [ 917.175942][ T2479] print_req_error: I/O error, dev loop2, sector 101 flags 0 [ 917.183568][ T2479] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 917.192032][T17011] print_req_error: I/O error, dev loop2, sector 301 flags 80700 [ 917.207834][T17004] gfs2: not a GFS2 filesystem [ 917.223611][ T2479] print_req_error: I/O error, dev loop2, sector 1 flags 0 [ 917.230805][ T2479] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 917.246839][ T2479] print_req_error: I/O error, dev loop2, sector 301 flags 0 [ 917.254124][ T2479] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 917.263221][ T2479] print_req_error: I/O error, dev loop2, sector 5 flags 0 [ 917.270429][ T2479] Buffer I/O error on dev loop2p1, logical block 1, async page read [ 917.278817][ T2479] print_req_error: I/O error, dev loop2, sector 105 flags 0 [ 917.286111][ T2479] Buffer I/O error on dev loop2p2, logical block 1, async page read [ 917.294217][ T2479] print_req_error: I/O error, dev loop2, sector 201 flags 0 [ 917.301534][ T2479] Buffer I/O error on dev loop2p3, logical block 0, async page read [ 917.309645][ T2479] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 917.317705][ T2479] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 917.325776][ T2479] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 917.333903][ T2479] Buffer I/O error on dev loop2p1, logical block 1, async page read [ 918.686801][T14847] Bluetooth: hci0: command 0x1003 tx timeout [ 918.692897][T10211] Bluetooth: hci0: sending frame failed (-49) [ 920.766880][T14847] Bluetooth: hci0: command 0x1001 tx timeout [ 920.772978][T10211] Bluetooth: hci0: sending frame failed (-49) [ 922.846840][T14847] Bluetooth: hci0: command 0x1009 tx timeout 11:41:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x19) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f00000001c0)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0x400455c8, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x9527, 0x88002) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x3, 0x200440) 11:41:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086610, &(0x7f0000000000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000180)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc} 3d 01 f0 ff ff 0f 83 cd b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 927.168646][T17039] RSP: 002b:00007fd92d4aaa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 927.177056][T17039] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000457d37 11:41:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x5437, 0x0) 11:41:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x1b1247c8326c9134, 0x0) socket$isdn(0x22, 0x3, 0x11) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f00000000c0)=""/204) ioctl$NBD_SET_SOCK(r1, 0xab00, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory\x01\x00\x00\x00\x16\x00\x00\x00\xeafW\x1dn\xf0\x130\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086610, &(0x7f0000000000)) [ 927.185022][T17039] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 927.192989][T17039] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 927.200958][T17039] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 927.208925][T17039] R13: 0000000000000000 R14: 00000000004db6c8 R15: 0000000000000003 [ 927.287679][T17039] gfs2: not a GFS2 filesystem 11:41:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5420, 0x7ffffd) 11:41:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200, 0x0) ioctl$SIOCGETLINKNAME(r2, 0x89e0, &(0x7f00000001c0)={0x3, 0x3}) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) [ 927.325929][T17058] EXT4-fs warning (device sda1): ext4_resize_begin:45: There are errors in the filesystem, so online resizing is not allowed 11:41:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086610, &(0x7f0000000000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000100)=""/116, 0x74) 11:41:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x5441, 0x0) 11:41:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory\x01\x00\x00\x00\x16\x00\x00\x00\xeafW\x1dn\xf0\x130\x00', 0x26e1, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086610, &(0x7f0000000040)) [ 927.493326][T17070] QAT: Invalid ioctl 11:41:28 executing program 3 (fault-call:0 fault-nth:14): syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 927.587760][T17083] QAT: Invalid ioctl 11:41:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') write$P9_RREMOVE(r1, &(0x7f00000000c0)={0x6, 0x7b, 0x5}, 0x7) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r2, 0x400455c8, 0x0) [ 927.609363][T17084] EXT4-fs warning (device sda1): ext4_resize_begin:45: There are errors in the filesystem, so online resizing is not allowed [ 927.615958][T17086] FAULT_INJECTION: forcing a failure. [ 927.615958][T17086] name failslab, interval 1, probability 0, space 0, times 0 [ 927.636961][T17086] CPU: 1 PID: 17086 Comm: syz-executor3 Not tainted 5.0.0-rc1-next-20190114 #11 [ 927.645988][T17086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 927.656064][T17086] Call Trace: 11:41:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x5450, 0x0) 11:41:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086610, &(0x7f0000000000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000100)=""/116, 0x74) [ 927.659364][T17086] dump_stack+0x1db/0x2d0 [ 927.663708][T17086] ? dump_stack_print_info.cold+0x20/0x20 [ 927.669441][T17086] ? add_lock_to_list.isra.0+0x450/0x450 [ 927.675079][T17086] ? kernfs_activate+0x8f/0x2c0 [ 927.679945][T17086] should_fail.cold+0xa/0x14 [ 927.684284][T17088] EXT4-fs warning (device sda1): ext4_resize_begin:45: There are errors in the filesystem, so online resizing is not allowed [ 927.684544][T17086] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 927.703259][T17086] ? ___might_sleep+0x1e7/0x310 11:41:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008910, &(0x7f0000000080)="dcdfadb1003f3188a070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory\x01\x00\x00\x00\x16\x00\x00\x00\xeafW\x1dn\xf0\x130\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086610, &(0x7f0000000000)) [ 927.708128][T17086] ? arch_local_save_flags+0x50/0x50 [ 927.713432][T17086] __should_failslab+0x121/0x190 [ 927.718382][T17086] should_failslab+0x9/0x14 [ 927.722906][T17086] kmem_cache_alloc+0x2be/0x710 [ 927.727775][T17086] ? __mutex_unlock_slowpath+0x195/0x870 [ 927.733433][T17086] __kernfs_new_node+0xfe/0x8a0 [ 927.738329][T17086] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 927.743812][T17086] ? mutex_unlock+0xd/0x10 [ 927.748223][T17086] ? kernfs_activate+0x21c/0x2c0 [ 927.753166][T17086] ? kernfs_walk_and_get_ns+0x340/0x340 [ 927.758707][T17086] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 927.764960][T17086] ? kernfs_link_sibling+0x210/0x420 [ 927.770246][T17086] kernfs_new_node+0x99/0x130 [ 927.774936][T17086] __kernfs_create_file+0x51/0x340 [ 927.780050][T17086] sysfs_add_file_mode_ns+0x222/0x560 [ 927.785440][T17086] internal_create_group+0x3d2/0xd80 [ 927.790733][T17086] ? remove_files.isra.0+0x190/0x190 [ 927.796031][T17086] ? down_read+0x120/0x120 [ 927.800453][T17086] ? resched_curr+0x1a0/0x1a0 [ 927.805152][T17086] sysfs_create_group+0x20/0x30 [ 927.810011][T17086] lo_ioctl+0x1147/0x23e0 [ 927.814349][T17086] ? lo_rw_aio+0x1e50/0x1e50 [ 927.818936][T17086] ? __fget+0x473/0x710 [ 927.823105][T17086] ? lo_rw_aio+0x1e50/0x1e50 [ 927.827703][T17086] blkdev_ioctl+0x10e0/0x2120 [ 927.832393][T17086] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 927.838628][T17086] ? blkpg_ioctl+0xc10/0xc10 [ 927.843238][T17086] ? lock_downgrade+0xbe0/0xbe0 [ 927.848110][T17086] ? kasan_check_read+0x11/0x20 [ 927.852964][T17086] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 927.858940][T17086] ? rcu_read_unlock_special+0x380/0x380 [ 927.864586][T17086] ? __fget+0x49a/0x710 [ 927.868765][T17086] block_ioctl+0xee/0x130 [ 927.873099][T17086] ? blkdev_fallocate+0x410/0x410 [ 927.878116][T17086] do_vfs_ioctl+0x107b/0x17d0 [ 927.882818][T17086] ? putname+0xef/0x130 [ 927.886994][T17086] ? ioctl_preallocate+0x2f0/0x2f0 [ 927.892089][T17086] ? __fget_light+0x2db/0x420 [ 927.896757][T17086] ? fget_raw+0x20/0x20 [ 927.900931][T17086] ? do_sys_open+0x3f9/0x7c0 [ 927.905562][T17086] ? do_syscall_64+0x8c/0x800 [ 927.910250][T17086] ? do_syscall_64+0x8c/0x800 [ 927.914915][T17086] ? lockdep_hardirqs_on+0x415/0x5d0 [ 927.920194][T17086] ? security_file_ioctl+0x93/0xc0 [ 927.925319][T17086] ksys_ioctl+0xab/0xd0 [ 927.929473][T17086] __x64_sys_ioctl+0x73/0xb0 [ 927.934049][T17086] do_syscall_64+0x1a3/0x800 [ 927.938653][T17086] ? syscall_return_slowpath+0x5f0/0x5f0 [ 927.944785][T17086] ? prepare_exit_to_usermode+0x232/0x3b0 [ 927.950508][T17086] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 927.956063][T17086] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 927.961952][T17086] RIP: 0033:0x457d37 [ 927.965839][T17086] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 cd b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 927.985420][T17086] RSP: 002b:00007fd92d4aaa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 927.993812][T17086] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000457d37 [ 928.001774][T17086] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 928.009751][T17086] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 928.017717][T17086] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 928.025686][T17086] R13: 0000000000000000 R14: 00000000004db6c8 R15: 0000000000000003 [ 928.068061][T17086] gfs2: not a GFS2 filesystem [ 928.125909][T17100] EXT4-fs warning (device sda1): ext4_resize_begin:45: There are errors in the filesystem, so online resizing is not allowed 11:41:29 executing program 3 (fault-call:0 fault-nth:15): syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:41:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086610, &(0x7f0000000000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000100)=""/116, 0x74) 11:41:29 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x5451, 0x0) [ 928.227657][T17104] EXT4-fs warning (device sda1): ext4_resize_begin:45: There are errors in the filesystem, so online resizing is not allowed [ 928.291926][T17107] FAULT_INJECTION: forcing a failure. [ 928.291926][T17107] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 928.305182][T17107] CPU: 1 PID: 17107 Comm: syz-executor3 Not tainted 5.0.0-rc1-next-20190114 #11 [ 928.314209][T17107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 928.324277][T17107] Call Trace: [ 928.327587][T17107] dump_stack+0x1db/0x2d0 [ 928.331948][T17107] ? dump_stack_print_info.cold+0x20/0x20 [ 928.337679][T17107] ? mark_held_locks+0x100/0x100 [ 928.342620][T17107] ? delete_node+0x31a/0xcb0 [ 928.347225][T17107] should_fail.cold+0xa/0x14 [ 928.351849][T17107] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 928.357664][T17107] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 928.363913][T17107] ? check_preemption_disabled+0x48/0x290 [ 928.369650][T17107] ? debug_smp_processor_id+0x1c/0x20 [ 928.375033][T17107] ? perf_trace_lock+0x12f/0x750 [ 928.379986][T17107] ? debug_smp_processor_id+0x1c/0x20 [ 928.385475][T17107] should_fail_alloc_page+0x50/0x60 [ 928.390689][T17107] __alloc_pages_nodemask+0x323/0xdc0 [ 928.396051][T17107] ? add_lock_to_list.isra.0+0x450/0x450 [ 928.401670][T17107] ? __alloc_pages_slowpath+0x2c60/0x2c60 [ 928.407394][T17107] ? ___might_sleep+0x1e7/0x310 [ 928.412232][T17107] ? trace_hardirqs_off+0xb8/0x310 [ 928.417331][T17107] cache_grow_begin+0x9c/0x8c0 [ 928.422086][T17107] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 928.428310][T17107] ? check_preemption_disabled+0x48/0x290 [ 928.434089][T17107] kmem_cache_alloc+0x645/0x710 [ 928.438947][T17107] ? __mutex_unlock_slowpath+0x195/0x870 [ 928.444937][T17107] __kernfs_new_node+0xfe/0x8a0 [ 928.449808][T17107] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 928.455298][T17107] ? mutex_unlock+0xd/0x10 [ 928.459700][T17107] ? kernfs_activate+0x21c/0x2c0 [ 928.464630][T17107] ? kernfs_walk_and_get_ns+0x340/0x340 [ 928.470178][T17107] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 928.476418][T17107] ? kernfs_link_sibling+0x210/0x420 [ 928.481691][T17107] kernfs_new_node+0x99/0x130 [ 928.486377][T17107] __kernfs_create_file+0x51/0x340 [ 928.491478][T17107] sysfs_add_file_mode_ns+0x222/0x560 [ 928.496844][T17107] internal_create_group+0x3d2/0xd80 [ 928.502125][T17107] ? remove_files.isra.0+0x190/0x190 [ 928.507401][T17107] ? down_read+0x120/0x120 [ 928.511822][T17107] ? resched_curr+0x1a0/0x1a0 [ 928.516506][T17107] sysfs_create_group+0x20/0x30 [ 928.521342][T17107] lo_ioctl+0x1147/0x23e0 [ 928.525660][T17107] ? lo_rw_aio+0x1e50/0x1e50 [ 928.530279][T17107] ? __fget+0x473/0x710 [ 928.534438][T17107] ? lo_rw_aio+0x1e50/0x1e50 [ 928.539036][T17107] blkdev_ioctl+0x10e0/0x2120 [ 928.543701][T17107] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 928.549928][T17107] ? blkpg_ioctl+0xc10/0xc10 [ 928.554518][T17107] ? lock_downgrade+0xbe0/0xbe0 [ 928.559353][T17107] ? kasan_check_read+0x11/0x20 [ 928.564192][T17107] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 928.570169][T17107] ? rcu_read_unlock_special+0x380/0x380 [ 928.575797][T17107] ? __fget+0x49a/0x710 [ 928.579942][T17107] block_ioctl+0xee/0x130 [ 928.584257][T17107] ? blkdev_fallocate+0x410/0x410 [ 928.589287][T17107] do_vfs_ioctl+0x107b/0x17d0 [ 928.593950][T17107] ? putname+0xef/0x130 [ 928.598091][T17107] ? ioctl_preallocate+0x2f0/0x2f0 [ 928.603188][T17107] ? __fget_light+0x2db/0x420 [ 928.607848][T17107] ? fget_raw+0x20/0x20 [ 928.611989][T17107] ? do_sys_open+0x3f9/0x7c0 [ 928.616578][T17107] ? do_syscall_64+0x8c/0x800 [ 928.621254][T17107] ? do_syscall_64+0x8c/0x800 [ 928.625930][T17107] ? lockdep_hardirqs_on+0x415/0x5d0 [ 928.631203][T17107] ? security_file_ioctl+0x93/0xc0 [ 928.636320][T17107] ksys_ioctl+0xab/0xd0 [ 928.640464][T17107] __x64_sys_ioctl+0x73/0xb0 [ 928.645044][T17107] do_syscall_64+0x1a3/0x800 [ 928.649629][T17107] ? syscall_return_slowpath+0x5f0/0x5f0 [ 928.655245][T17107] ? prepare_exit_to_usermode+0x232/0x3b0 [ 928.660974][T17107] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 928.666516][T17107] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 928.672390][T17107] RIP: 0033:0x457d37 [ 928.676304][T17107] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 cd b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 928.695898][T17107] RSP: 002b:00007fd92d4aaa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 928.704300][T17107] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000457d37 [ 928.712257][T17107] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 928.720222][T17107] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 928.728189][T17107] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 928.736143][T17107] R13: 0000000000000000 R14: 00000000004db6c8 R15: 0000000000000003 [ 928.761989][T17107] gfs2: not a GFS2 filesystem [ 929.566694][T14847] Bluetooth: hci0: command 0x1003 tx timeout [ 929.573836][ T1170] Bluetooth: hci0: sending frame failed (-49) [ 930.206687][T16517] Bluetooth: hci1: command 0x1003 tx timeout [ 930.212832][ T1170] Bluetooth: hci1: sending frame failed (-49) [ 931.646755][T16517] Bluetooth: hci0: command 0x1001 tx timeout [ 931.652853][ T1170] Bluetooth: hci0: sending frame failed (-49) [ 932.286755][T16517] Bluetooth: hci1: command 0x1001 tx timeout [ 932.292843][ T1170] Bluetooth: hci1: sending frame failed (-49) [ 933.726726][T14847] Bluetooth: hci0: command 0x1009 tx timeout [ 934.366723][T14847] Bluetooth: hci1: command 0x1009 tx timeout 11:41:38 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x5, 0x240000) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x22000, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x8, r3, 0x4}) 11:41:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x5452, 0x0) 11:41:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086610, &(0x7f0000000000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc} 3d 01 f0 ff ff 0f 83 cd b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 938.014835][T17127] RSP: 002b:00007fd92d4aaa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 938.023237][T17127] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000457d37 [ 938.031189][T17127] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 938.039140][T17127] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 938.047098][T17127] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 938.055062][T17127] R13: 0000000000000000 R14: 00000000004db6c8 R15: 0000000000000003 [ 938.067269][T17127] gfs2: not a GFS2 filesystem 11:41:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x545d, 0x0) 11:41:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') write$P9_RREMOVE(r1, &(0x7f00000000c0)={0x6, 0x7b, 0x5}, 0x7) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r2, 0x400455c8, 0x0) 11:41:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086610, &(0x7f0000000000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc} 3d 01 f0 ff ff 0f 83 cd b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 938.594969][T17147] RSP: 002b:00007fd92d4aaa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 938.603378][T17147] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000457d37 [ 938.611352][T17147] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 938.619322][T17147] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 938.627299][T17147] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 938.635273][T17147] R13: 0000000000000000 R14: 00000000004db6c8 R15: 0000000000000003 [ 938.689289][T17147] gfs2: not a GFS2 filesystem 11:41:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x5460, 0x0) [ 939.726834][ T12] Bluetooth: hci0: command 0x1003 tx timeout [ 939.732950][ T1170] Bluetooth: hci0: sending frame failed (-49) [ 940.767021][T14847] Bluetooth: hci1: command 0x1003 tx timeout [ 940.773119][ T1170] Bluetooth: hci1: sending frame failed (-49) [ 941.807068][T14847] Bluetooth: hci0: command 0x1001 tx timeout [ 941.813190][ T1170] Bluetooth: hci0: sending frame failed (-49) [ 942.846828][ T12] Bluetooth: hci1: command 0x1001 tx timeout [ 942.852956][ T1170] Bluetooth: hci1: sending frame failed (-49) [ 943.886823][ T12] Bluetooth: hci0: command 0x1009 tx timeout [ 944.927046][T14847] Bluetooth: hci1: command 0x1009 tx timeout 11:41:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory\x01\x00\x00\x00\x16\x00\x00\x00\xeafW\x1dn\xf0\x130\x00', 0x26e1, 0x0) r2 = accept4$llc(r1, 0x0, &(0x7f0000000040), 0x80000) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086610, &(0x7f0000000000)) fsetxattr$trusted_overlay_opaque(r2, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x1) 11:41:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086610, &(0x7f0000000000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc} 3d 01 f0 ff ff 0f 83 cd b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 948.201517][T17177] RSP: 002b:00007fd92d4aaa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 948.209915][T17177] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000457d37 [ 948.217891][T17177] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 948.225853][T17177] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 948.233819][T17177] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 948.241786][T17177] R13: 0000000000000000 R14: 00000000004db6c8 R15: 0000000000000003 [ 948.285638][T17177] gfs2: not a GFS2 filesystem 11:41:50 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x400, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x80000) fstat(r1, &(0x7f0000000100)) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000000c0)={0x81, 0x5ccc, 0x1000000000000001}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory\x01\x00\x00\x00\x16\x00\x00\x00\xeafW\x1dn\xf0\x130\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086610, &(0x7f0000000000)) fstatfs(r3, &(0x7f0000000040)=""/6) 11:41:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086610, &(0x7f0000000000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc} 3d 01 f0 ff ff 0f 83 cd b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 949.573454][T17205] RSP: 002b:00007fd92d4aaa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 949.581867][T17205] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000457d37 [ 949.589840][T17205] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 949.597828][T17205] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 949.605805][T17205] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 949.613791][T17205] R13: 0000000000000000 R14: 00000000004db6c8 R15: 0000000000000003 [ 949.648592][T17205] gfs2: not a GFS2 filesystem 11:41:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00F\xa2\xe3R\x95;\x8e\xae5n6\x92\x86D\x10\x89y~7\xcf\xc7\xa3}\f8>\xfa\x84\xa5>U\xd8\xc1\xf5\x91.\n;\xf7\xdd\xfe]Q[\x86M\xc8\xc0\xf0\xd7\xb4\xc3\x98\x93\xb2\x17\x04\xb6p\xe1\xe7\x96%\x86\xa3\xdf2\xd3l\x05\xd3\'r}Y\xa06\xc8\x04T#E\xca`\xf9\xf3\x19\xd6\xa7\x1d\t0&j\xe5\x80\f\xcc\x84O\xa4\xd87T\x05_\x17\xcb\xed;\xcaB(h\x0f\xde\xda\x8c\x86\x9dQ\xc0\x11\x11A\xa2F\x8eJyo\x99\xb2\xd8$\xa8i\b\xb4\xbb+\xad\x18J\fy\x85\xe7R\x13\xe2U\xb3)\xe8<]\xb0\xafs\xc0\x00\xb0\n\xa1\x06\xb4{,\xd8&yd\x19\xd7\bqkw\x951<\x18\x99\xab\x10w\xa4\xdc=\xca\x9b\x85v\xe4_\x84hj0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) openat$vfio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vfio/vfio\x00', 0x6d80, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f00000001c0)={0x8, 0x120, 0xfa00, {0x3, {0x0, 0x1, "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", 0x73, 0x7, 0x4, 0x20, 0x1, 0x9, 0x10001, 0x2}, r2}}, 0x128) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0x400455c8, 0x0) [ 949.679899][T17218] EXT4-fs warning (device sda1): ext4_resize_begin:45: There are errors in the filesystem, so online resizing is not allowed 11:41:50 executing program 3 (fault-call:0 fault-nth:20): syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 949.776090][T17218] EXT4-fs warning (device sda1): ext4_resize_begin:45: There are errors in the filesystem, so online resizing is not allowed [ 949.826444][T17231] FAULT_INJECTION: forcing a failure. [ 949.826444][T17231] name failslab, interval 1, probability 0, space 0, times 0 [ 949.846952][T17231] CPU: 0 PID: 17231 Comm: syz-executor3 Not tainted 5.0.0-rc1-next-20190114 #11 [ 949.856029][T17231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 949.866090][T17231] Call Trace: [ 949.869378][T17231] dump_stack+0x1db/0x2d0 [ 949.873696][T17231] ? dump_stack_print_info.cold+0x20/0x20 [ 949.879413][T17231] ? save_stack+0x45/0xd0 [ 949.883749][T17231] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 949.889570][T17231] ? kasan_slab_alloc+0xf/0x20 [ 949.894327][T17231] ? kmem_cache_alloc_node+0x144/0x710 [ 949.899788][T17231] ? __alloc_skb+0xf4/0x730 [ 949.904291][T17231] ? kobject_uevent_env+0xa63/0x102b [ 949.909582][T17231] should_fail.cold+0xa/0x14 [ 949.914175][T17231] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 949.919980][T17231] ? ___might_sleep+0x1e7/0x310 [ 949.924829][T17231] ? arch_local_save_flags+0x50/0x50 [ 949.930104][T17231] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 949.936337][T17231] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 949.942597][T17231] __should_failslab+0x121/0x190 [ 949.947545][T17231] should_failslab+0x9/0x14 [ 949.952044][T17231] kmem_cache_alloc_node_trace+0x270/0x720 [ 949.957845][T17231] ? __alloc_skb+0xf4/0x730 [ 949.962362][T17231] __kmalloc_node_track_caller+0x3d/0x70 [ 949.968006][T17231] __kmalloc_reserve.isra.0+0x40/0xe0 [ 949.973378][T17231] __alloc_skb+0x12d/0x730 [ 949.977806][T17231] ? skb_trim+0x190/0x190 [ 949.982150][T17231] ? netlink_has_listeners+0x2e7/0x4a0 [ 949.987617][T17231] ? netlink_tap_init_net+0x3e0/0x3e0 [ 949.992992][T17231] alloc_uevent_skb+0x83/0x1e2 [ 949.997768][T17231] kobject_uevent_env+0xa63/0x102b [ 950.002889][T17231] ? resched_curr+0x1a0/0x1a0 [ 950.007567][T17231] kobject_uevent+0x20/0x26 [ 950.012067][T17231] lo_ioctl+0x11c6/0x23e0 [ 950.016399][T17231] ? lo_rw_aio+0x1e50/0x1e50 [ 950.021008][T17231] ? __fget+0x473/0x710 [ 950.025154][T17231] ? lo_rw_aio+0x1e50/0x1e50 [ 950.029726][T17231] blkdev_ioctl+0x10e0/0x2120 [ 950.034388][T17231] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 950.040622][T17231] ? blkpg_ioctl+0xc10/0xc10 [ 950.045208][T17231] ? lock_downgrade+0xbe0/0xbe0 [ 950.050042][T17231] ? kasan_check_read+0x11/0x20 [ 950.054879][T17231] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 950.060860][T17231] ? rcu_read_unlock_special+0x380/0x380 [ 950.066492][T17231] ? __fget+0x49a/0x710 [ 950.070635][T17231] block_ioctl+0xee/0x130 [ 950.074958][T17231] ? blkdev_fallocate+0x410/0x410 [ 950.079980][T17231] do_vfs_ioctl+0x107b/0x17d0 [ 950.084651][T17231] ? putname+0xef/0x130 [ 950.088796][T17231] ? ioctl_preallocate+0x2f0/0x2f0 [ 950.093892][T17231] ? __fget_light+0x2db/0x420 [ 950.098566][T17231] ? fget_raw+0x20/0x20 [ 950.102733][T17231] ? do_sys_open+0x3f9/0x7c0 [ 950.107341][T17231] ? do_syscall_64+0x8c/0x800 [ 950.112025][T17231] ? do_syscall_64+0x8c/0x800 [ 950.116696][T17231] ? lockdep_hardirqs_on+0x415/0x5d0 [ 950.121992][T17231] ? security_file_ioctl+0x93/0xc0 [ 950.127116][T17231] ksys_ioctl+0xab/0xd0 [ 950.131281][T17231] __x64_sys_ioctl+0x73/0xb0 [ 950.135877][T17231] do_syscall_64+0x1a3/0x800 [ 950.140467][T17231] ? syscall_return_slowpath+0x5f0/0x5f0 [ 950.146094][T17231] ? prepare_exit_to_usermode+0x232/0x3b0 [ 950.151796][T17231] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 950.157367][T17231] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 950.163252][T17231] RIP: 0033:0x457d37 [ 950.167139][T17231] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 cd b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 950.186744][T17231] RSP: 002b:00007fd92d4aaa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 950.195158][T17231] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000457d37 [ 950.203110][T17231] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 950.211063][T17231] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 950.219023][T17231] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 950.227004][T17231] R13: 0000000000000000 R14: 00000000004db6c8 R15: 0000000000000003 [ 950.245776][ T12] Bluetooth: hci0: command 0x1003 tx timeout [ 950.252624][T17231] gfs2: not a GFS2 filesystem [ 950.269185][T10211] Bluetooth: hci0: sending frame failed (-49) [ 952.286931][ T12] Bluetooth: hci0: command 0x1001 tx timeout [ 952.293038][T10211] Bluetooth: hci0: sending frame failed (-49) [ 954.366738][T14847] Bluetooth: hci0: command 0x1009 tx timeout 11:41:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x40049409, 0x0) 11:41:59 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) mkdir(&(0x7f0000000100)='./control/../file0\x00', 0x0) 11:41:59 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) getxattr(&(0x7f0000000040)='./control/file0\x00', 0x0, 0x0, 0xffffffffffffffcc) rmdir(&(0x7f00000000c0)='./control\x00') 11:41:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") sendmmsg$alg(r0, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="db7b3fc52b7cd33edc07e45b00bb532d31705071285e5438139d2c3ce42a2a2d28dd2dd6b8dbd1db1d9c49f9870454d4a038374a133e30bcc99118c97f9c02d51ac29cb8d0f32c7823362eddf5f985e6943e4cd57ddba32923927f4a0b0aab85b27f996a51c2b0f3cb66db325453f74a52e2ff0c0702cb05dae8f6bff80deca2e2f646475d8dbde9b049315ab2394966581130367c0fdbdaad9c95cb5eab967ecd858869c7299a0e8eca6ed147ae06bb70b3c8a70f37316171e86a9a539c48f2f5775a5bf513ed158aebfc4905dd3d1deed8f96471b6ea08770d40473411dd8aed2c5b9973d31833", 0xe8}], 0x1, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0xff}, @assoc={0x18, 0x117, 0x4, 0x4}, @assoc={0x18, 0x117, 0x4, 0x7}, @iv={0x100, 0x117, 0x2, 0xea, "7268885dc3c6ca7e492e656e6a9c455813de12074d615c39023d9d3c8c65ec32dbcb0f2bb2fc6efaa975eba852407a33b2ad025952b620d2814d03139efe0fe727ac78bac8bf09a0927b105152d6ffd957cc00f834050cdb784c7378044a16edd6e2702363b4ae0a4f83a0e3de620dae801c0d2666628d14ad40998ee7b61f71cb964e130514dcd3c06a1a61168a594e626a161cc818fb4071c136c09b5805438e0db68f7488ad4c5687fbaf5f194ac50998e7c115c74627d3a41c77efbf6500efb82fe34bc6ab2f762e53ba492202de6a6976f3b3955fea493d06ecefcf9199fd1f702c9ee47674d228"}, @assoc={0x18, 0x117, 0x4, 0x9}], 0x160, 0x4}, {0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)="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", 0x1000}], 0x1, 0x0, 0x0, 0x998e3f04b8cd6444}], 0x2, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory\x01\x00\x00\x00\x16\x00\x00\x00\xeafW\x1dn\xf0\x130\x00', 0x26e1, 0x0) ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f0000000280)={0xfffffffffffff000, "635262feaf0a6cbb4a6e7330029cf37a3b1209802e19e41c8c45d0ae53cdd753", 0x3, 0x1}) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086610, &(0x7f0000000000)) 11:41:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="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", 0x115, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0xffffffb7, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x7e) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'i\x8az\x00\x00\b\x00'}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vsock\x00', 0x20800, 0x0) r4 = openat(r1, &(0x7f0000000300)='./file0\x00', 0x40, 0x10) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000340)={0x2, r4}) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r0, 0x0) r5 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x7fff, 0x80280) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000240)=0x17) r6 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x200, 0x20000) ioctl$VIDIOC_CROPCAP(r6, 0x400455c8, 0x0) 11:41:59 executing program 3 (fault-call:0 fault-nth:21): syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 958.123922][T17245] EXT4-fs warning (device sda1): ext4_resize_begin:45: There are errors in the filesystem, so online resizing is not allowed [ 958.124418][T17244] Unknown ioctl 1074310946 [ 958.141556][T17252] FAULT_INJECTION: forcing a failure. [ 958.141556][T17252] name failslab, interval 1, probability 0, space 0, times 0 [ 958.154309][T17252] CPU: 0 PID: 17252 Comm: syz-executor3 Not tainted 5.0.0-rc1-next-20190114 #11 [ 958.163339][T17252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 11:41:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory\x01\x00\x00\x00\x16\x00\x00\x00\xeafW\x1dn\xf0\x130\x00', 0x26e1, 0x0) ioctl(r1, 0xa6, &(0x7f00000000c0)="2014905475f5dea1c3ab928370906e750a381b44e9affb737bebc712fb5bab217fd9e83aaac2a16bbaba3ce0c17d1abc024f5e42c2ff78f6c766feac116b83def52e26d74f50f23227e2e354462942c472645c068f9a9b08d066d6cb832085b8c9a068cd645fa16471b0efc880dc5650c647f7cdd82e9edf1e36621d57b70d7e5535af630111f2c5c2bbb1bb6379b759e335c63d02d4a09ba630f2881ed347f71185486249bf2cf6581c58f86bfc44067572610ba129fd2d65ad8c709ef6a4c62f1ce689c07ec72b957566a81d90a739de96c95a7236de38115cbfe4e6456fab2174d88d08b73d7bd20b1c4b0bf1") socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)=""/184, &(0x7f0000000340)=""/4096, &(0x7f0000001340)=""/49, 0x2000}) write$P9_RXATTRCREATE(r1, &(0x7f00000001c0)={0x7, 0x21, 0x1}, 0x7) r2 = msgget$private(0x0, 0x40) msgctl$MSG_STAT(r2, 0xb, &(0x7f0000000040)=""/54) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086610, &(0x7f0000000000)) syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x6, 0x10080) 11:41:59 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) [ 958.173393][T17252] Call Trace: [ 958.176697][T17252] dump_stack+0x1db/0x2d0 [ 958.181046][T17252] ? dump_stack_print_info.cold+0x20/0x20 [ 958.186775][T17252] ? save_stack+0x45/0xd0 [ 958.191116][T17252] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 958.196933][T17252] ? kasan_slab_alloc+0xf/0x20 [ 958.201702][T17252] ? kmem_cache_alloc_node+0x144/0x710 [ 958.207180][T17252] ? __alloc_skb+0xf4/0x730 [ 958.211701][T17252] ? kobject_uevent_env+0xa63/0x102b [ 958.217008][T17252] should_fail.cold+0xa/0x14 11:41:59 executing program 2: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x69, 0xe78f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 11:41:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x4020940d, 0x0) [ 958.221622][T17252] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 958.227450][T17252] ? ___might_sleep+0x1e7/0x310 [ 958.232329][T17252] ? arch_local_save_flags+0x50/0x50 [ 958.237627][T17252] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 958.243876][T17252] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 958.250136][T17252] __should_failslab+0x121/0x190 [ 958.255366][T17252] should_failslab+0x9/0x14 [ 958.260928][T17252] kmem_cache_alloc_node_trace+0x270/0x720 [ 958.266755][T17252] ? __alloc_skb+0xf4/0x730 [ 958.271283][T17252] __kmalloc_node_track_caller+0x3d/0x70 [ 958.276940][T17252] __kmalloc_reserve.isra.0+0x40/0xe0 [ 958.282315][T17252] __alloc_skb+0x12d/0x730 [ 958.286747][T17252] ? skb_trim+0x190/0x190 [ 958.291082][T17252] ? netlink_has_listeners+0x2e7/0x4a0 [ 958.296534][T17252] ? netlink_tap_init_net+0x3e0/0x3e0 [ 958.301911][T17252] alloc_uevent_skb+0x83/0x1e2 [ 958.306670][T17252] kobject_uevent_env+0xa63/0x102b [ 958.311784][T17252] ? resched_curr+0x1a0/0x1a0 [ 958.316470][T17252] kobject_uevent+0x20/0x26 [ 958.320961][T17252] lo_ioctl+0x11c6/0x23e0 [ 958.325277][T17252] ? lo_rw_aio+0x1e50/0x1e50 [ 958.329878][T17252] ? __fget+0x473/0x710 [ 958.334027][T17252] ? lo_rw_aio+0x1e50/0x1e50 [ 958.338601][T17252] blkdev_ioctl+0x10e0/0x2120 [ 958.343261][T17252] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 958.349492][T17252] ? blkpg_ioctl+0xc10/0xc10 [ 958.354118][T17252] ? lock_downgrade+0xbe0/0xbe0 [ 958.358963][T17252] ? kasan_check_read+0x11/0x20 [ 958.363815][T17252] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 958.369784][T17252] ? rcu_read_unlock_special+0x380/0x380 [ 958.375407][T17252] ? __fget+0x49a/0x710 [ 958.379577][T17252] block_ioctl+0xee/0x130 [ 958.383913][T17252] ? blkdev_fallocate+0x410/0x410 [ 958.388940][T17252] do_vfs_ioctl+0x107b/0x17d0 [ 958.393599][T17252] ? putname+0xef/0x130 [ 958.397771][T17252] ? ioctl_preallocate+0x2f0/0x2f0 [ 958.402881][T17252] ? __fget_light+0x2db/0x420 [ 958.407540][T17252] ? fget_raw+0x20/0x20 [ 958.411697][T17252] ? do_sys_open+0x3f9/0x7c0 [ 958.416318][T17252] ? do_syscall_64+0x8c/0x800 [ 958.421012][T17252] ? do_syscall_64+0x8c/0x800 [ 958.425680][T17252] ? lockdep_hardirqs_on+0x415/0x5d0 [ 958.430967][T17252] ? security_file_ioctl+0x93/0xc0 [ 958.436084][T17252] ksys_ioctl+0xab/0xd0 [ 958.440229][T17252] __x64_sys_ioctl+0x73/0xb0 [ 958.444804][T17252] do_syscall_64+0x1a3/0x800 [ 958.449388][T17252] ? syscall_return_slowpath+0x5f0/0x5f0 [ 958.455006][T17252] ? prepare_exit_to_usermode+0x232/0x3b0 [ 958.460711][T17252] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 958.466257][T17252] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 958.472132][T17252] RIP: 0033:0x457d37 [ 958.476016][T17252] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 cd b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 958.495625][T17252] RSP: 002b:00007fd92d4aaa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 958.504015][T17252] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000457d37 [ 958.511967][T17252] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 958.519919][T17252] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 958.527873][T17252] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 958.535826][T17252] R13: 0000000000000000 R14: 00000000004db6c8 R15: 0000000000000003 [ 958.561784][T17257] Unknown ioctl 1074310946 [ 958.596828][T17252] gfs2: not a GFS2 filesystem [ 958.633448][T17264] EXT4-fs warning (device sda1): ext4_resize_begin:45: There are errors in the filesystem, so online resizing is not allowed 11:41:59 executing program 3 (fault-call:0 fault-nth:22): syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:41:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x3, 0x3, 0x0, 0x1f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x714}, 0x0, 0x9, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x401, 0x43) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) 11:41:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x80045432, 0x0) 11:41:59 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$TUNSETQUEUE(r1, 0x400454d9, 0x0) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x2da802004d180600, 0x500001c) [ 958.789890][T17264] EXT4-fs warning (device sda1): ext4_resize_begin:45: There are errors in the filesystem, so online resizing is not allowed 11:42:00 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x90040, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f00000000c0)={0x800100f, 0x1, 0x2}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory\x01\x00\x00\x00\x16\x00\x00\x00\xeafW\x1dn\xf0\x130\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086610, &(0x7f0000000000)) [ 958.849247][T17284] FAULT_INJECTION: forcing a failure. [ 958.849247][T17284] name failslab, interval 1, probability 0, space 0, times 0 11:42:00 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000600)='/dev/uhid\x00', 0x2, 0x0) write(r0, 0x0, 0xfea5) [ 958.889940][ T27] audit: type=1804 audit(1547466120.034:68): pid=17291 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir869193996/syzkaller.8fQOn7/416/memory.events" dev="sda1" ino=16709 res=1 [ 958.930615][T17284] CPU: 0 PID: 17284 Comm: syz-executor3 Not tainted 5.0.0-rc1-next-20190114 #11 [ 958.939909][T17284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 958.949971][T17284] Call Trace: [ 958.953281][T17284] dump_stack+0x1db/0x2d0 [ 958.958094][T17284] ? dump_stack_print_info.cold+0x20/0x20 [ 958.963825][T17284] ? save_stack+0x45/0xd0 [ 958.968181][T17284] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 958.974015][T17284] ? kasan_slab_alloc+0xf/0x20 [ 958.978787][T17284] ? kmem_cache_alloc_node+0x144/0x710 [ 958.984258][T17284] ? __alloc_skb+0xf4/0x730 [ 958.988787][T17284] ? kobject_uevent_env+0xa63/0x102b [ 958.994091][T17284] should_fail.cold+0xa/0x14 [ 958.998713][T17284] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 959.004536][T17284] ? ___might_sleep+0x1e7/0x310 [ 959.009393][T17284] ? arch_local_save_flags+0x50/0x50 [ 959.014703][T17284] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 959.020954][T17284] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 959.027213][T17284] __should_failslab+0x121/0x190 [ 959.032165][T17284] should_failslab+0x9/0x14 [ 959.036703][T17284] kmem_cache_alloc_node_trace+0x270/0x720 [ 959.042548][T17284] ? __alloc_skb+0xf4/0x730 [ 959.047072][T17284] __kmalloc_node_track_caller+0x3d/0x70 [ 959.052714][T17284] __kmalloc_reserve.isra.0+0x40/0xe0 [ 959.058111][T17284] __alloc_skb+0x12d/0x730 [ 959.062537][T17284] ? skb_trim+0x190/0x190 [ 959.066891][T17284] ? netlink_has_listeners+0x2e7/0x4a0 [ 959.072375][T17284] ? netlink_tap_init_net+0x3e0/0x3e0 [ 959.077768][T17284] alloc_uevent_skb+0x83/0x1e2 [ 959.082573][T17284] kobject_uevent_env+0xa63/0x102b [ 959.087708][T17284] ? resched_curr+0x1a0/0x1a0 [ 959.092402][T17284] kobject_uevent+0x20/0x26 [ 959.096911][T17284] lo_ioctl+0x11c6/0x23e0 [ 959.101270][T17284] ? lo_rw_aio+0x1e50/0x1e50 [ 959.106016][T17284] ? __fget+0x473/0x710 [ 959.110179][T17284] ? lo_rw_aio+0x1e50/0x1e50 [ 959.114796][T17284] blkdev_ioctl+0x10e0/0x2120 [ 959.119507][T17284] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 959.125752][T17284] ? blkpg_ioctl+0xc10/0xc10 [ 959.130350][T17284] ? lock_downgrade+0xbe0/0xbe0 [ 959.135222][T17284] ? kasan_check_read+0x11/0x20 [ 959.140086][T17284] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 959.146080][T17284] ? rcu_read_unlock_special+0x380/0x380 [ 959.151742][T17284] ? __fget+0x49a/0x710 [ 959.155916][T17284] block_ioctl+0xee/0x130 [ 959.160253][T17284] ? blkdev_fallocate+0x410/0x410 [ 959.165316][T17284] do_vfs_ioctl+0x107b/0x17d0 [ 959.170003][T17284] ? putname+0xef/0x130 [ 959.174183][T17284] ? ioctl_preallocate+0x2f0/0x2f0 [ 959.179326][T17284] ? __fget_light+0x2db/0x420 [ 959.184013][T17284] ? fget_raw+0x20/0x20 [ 959.188186][T17284] ? do_sys_open+0x3f9/0x7c0 [ 959.192798][T17284] ? do_syscall_64+0x8c/0x800 [ 959.197484][T17284] ? do_syscall_64+0x8c/0x800 [ 959.202172][T17284] ? lockdep_hardirqs_on+0x415/0x5d0 [ 959.207468][T17284] ? security_file_ioctl+0x93/0xc0 [ 959.212611][T17284] ksys_ioctl+0xab/0xd0 [ 959.216779][T17284] __x64_sys_ioctl+0x73/0xb0 [ 959.221396][T17284] do_syscall_64+0x1a3/0x800 [ 959.226011][T17284] ? syscall_return_slowpath+0x5f0/0x5f0 [ 959.231658][T17284] ? prepare_exit_to_usermode+0x232/0x3b0 [ 959.237397][T17284] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 959.242962][T17284] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 959.248860][T17284] RIP: 0033:0x457d37 [ 959.252783][T17284] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 cd b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 959.273412][T17284] RSP: 002b:00007fd92d4aaa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 11:42:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x80045440, 0x0) [ 959.281827][T17284] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000457d37 [ 959.289802][T17284] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 959.299483][T17284] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 959.307473][T17284] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 959.315451][T17284] R13: 0000000000000000 R14: 00000000004db6c8 R15: 0000000000000003 [ 959.336124][T17284] gfs2: not a GFS2 filesystem [ 959.395034][T17294] EXT4-fs warning (device sda1): ext4_resize_begin:45: There are errors in the filesystem, so online resizing is not allowed [ 959.475054][T17303] EXT4-fs warning (device sda1): ext4_resize_begin:45: There are errors in the filesystem, so online resizing is not allowed 11:42:00 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x30}], 0x1}}], 0x1, 0x0, 0x0) 11:42:00 executing program 3 (fault-call:0 fault-nth:23): syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:42:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x800455c9, 0x0) 11:42:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x4, 0x208900) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory\x01\x00\x00\x00\x16\x00\x00\x00\xeafW\x1dn\xf0\x130\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086610, &(0x7f0000000000)) [ 959.629762][T17308] FAULT_INJECTION: forcing a failure. [ 959.629762][T17308] name failslab, interval 1, probability 0, space 0, times 0 [ 959.722598][ T27] audit: type=1804 audit(1547466120.864:69): pid=17287 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor0" name="/root/syzkaller-testdir869193996/syzkaller.8fQOn7/416/memory.events" dev="sda1" ino=16709 res=1 [ 959.723514][T17308] CPU: 1 PID: 17308 Comm: syz-executor3 Not tainted 5.0.0-rc1-next-20190114 #11 [ 959.756346][T17308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 959.766419][T17308] Call Trace: [ 959.769994][T17308] dump_stack+0x1db/0x2d0 [ 959.774346][T17308] ? dump_stack_print_info.cold+0x20/0x20 [ 959.780080][T17308] ? lock_downgrade+0xbe0/0xbe0 [ 959.784942][T17308] ? kasan_check_read+0x11/0x20 [ 959.789821][T17308] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 959.795827][T17308] should_fail.cold+0xa/0x14 [ 959.800433][T17308] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 959.806251][T17308] ? ___might_sleep+0x1e7/0x310 [ 959.811131][T17308] ? arch_local_save_flags+0x50/0x50 [ 959.816440][T17308] __should_failslab+0x121/0x190 [ 959.821392][T17308] should_failslab+0x9/0x14 [ 959.825905][T17308] kmem_cache_alloc+0x2be/0x710 [ 959.830774][T17308] ? __fget_light+0x2db/0x420 [ 959.835469][T17308] getname_flags+0xd6/0x5b0 [ 959.839984][T17308] do_mkdirat+0xba/0x2f0 [ 959.844240][T17308] ? __ia32_sys_mknod+0xb0/0xb0 [ 959.849115][T17308] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 959.855201][T17308] ? trace_hardirqs_off_caller+0x300/0x300 [ 959.861016][T17308] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 959.866490][T17308] __x64_sys_mkdir+0x5c/0x80 [ 959.871093][T17308] do_syscall_64+0x1a3/0x800 [ 959.875696][T17308] ? syscall_return_slowpath+0x5f0/0x5f0 [ 959.881341][T17308] ? prepare_exit_to_usermode+0x232/0x3b0 [ 959.887078][T17308] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 959.892644][T17308] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 959.898540][T17308] RIP: 0033:0x4572e7 [ 959.902440][T17308] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 3d c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 1d c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 11:42:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x800455ca, 0x0) [ 959.922050][T17329] RSP: 002b:00007fd92d4aaa88 EFLAGS: 00000246 [ 959.922071][T17329] EXT4-fs warning (device sda1): ext4_resize_begin:45: There are errors in the filesystem, so online resizing is not allowed [ 959.922075][T17308] ORIG_RAX: 0000000000000053 [ 959.928141][T17308] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004572e7 [ 959.928152][T17308] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000300 [ 959.928161][T17308] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a 11:42:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f00000000c0)=""/156, 0x9c}], 0x2, &(0x7f00000001c0)=""/62, 0x3e}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory\x01\x00\x00\x00\x16\x00\x00\x00\xeafW\x1dn\xf0\x130\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086610, &(0x7f0000000000)) [ 959.928170][T17308] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 959.928179][T17308] R13: 0000000000000000 R14: 00000000004db6c8 R15: 0000000000000003 [ 959.943236][ T27] audit: type=1804 audit(1547466121.094:70): pid=17320 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir869193996/syzkaller.8fQOn7/416/memory.events" dev="sda1" ino=16709 res=1 [ 959.952246][T17327] EXT4-fs warning (device sda1): ext4_resize_begin:45: There are errors in the filesystem, so online resizing is not allowed [ 960.150116][T17339] EXT4-fs warning (device sda1): ext4_resize_begin:45: There are errors in the filesystem, so online resizing is not allowed [ 960.185797][T17342] EXT4-fs warning (device sda1): ext4_resize_begin:45: There are errors in the filesystem, so online resizing is not allowed [ 960.846817][T14847] Bluetooth: hci1: command 0x1003 tx timeout [ 960.852952][T14847] Bluetooth: hci0: command 0x1003 tx timeout [ 960.859150][ T1170] Bluetooth: hci0: sending frame failed (-49) [ 962.926757][T14847] Bluetooth: hci0: command 0x1001 tx timeout [ 962.934274][ T1170] Bluetooth: hci0: sending frame failed (-49) [ 962.940451][T14847] Bluetooth: hci1: command 0x1001 tx timeout [ 965.006770][ T12] Bluetooth: hci1: command 0x1009 tx timeout [ 965.006803][T14847] Bluetooth: hci0: command 0x1009 tx timeout 11:42:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) 11:42:10 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$TUNSETQUEUE(r1, 0x400454d9, 0x0) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x2da802004d180600, 0x500001c) 11:42:10 executing program 3 (fault-call:0 fault-nth:24): syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:42:10 executing program 2: syz_execute_func(&(0x7f0000000040)="ba66440f50f564ff0941c335e280c99735584258c27d794e0066420fe2e33e0f1110c442019dcc4bd319c483ad0d958a00000000") open$dir(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 11:42:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x800455cc, 0x0) 11:42:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory\x01\x00\x00\x00\x16\x00\x00\x00\xeafW\x1dn\xf0\x130\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086610, &(0x7f0000000000)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[@timestamp, @timestamp], 0x2) [ 969.110785][T17351] EXT4-fs warning (device sda1): ext4_resize_begin:45: There are errors in the filesystem, so online resizing is not allowed [ 969.127713][T17355] FAULT_INJECTION: forcing a failure. [ 969.127713][T17355] name failslab, interval 1, probability 0, space 0, times 0 [ 969.155295][T17351] EXT4-fs warning (device sda1): ext4_resize_begin:45: There are errors in the filesystem, so online resizing is not allowed [ 969.178441][T17355] CPU: 0 PID: 17355 Comm: syz-executor3 Not tainted 5.0.0-rc1-next-20190114 #11 [ 969.187494][T17355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 969.187502][T17355] Call Trace: [ 969.187529][T17355] dump_stack+0x1db/0x2d0 [ 969.187555][T17355] ? dump_stack_print_info.cold+0x20/0x20 [ 969.187572][T17355] ? error_exit+0xb/0x20 [ 969.187606][T17355] should_fail.cold+0xa/0x14 [ 969.187632][T17355] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 969.187660][T17355] ? ___might_sleep+0x1e7/0x310 [ 969.187680][T17355] ? arch_local_save_flags+0x50/0x50 [ 969.187711][T17355] __should_failslab+0x121/0x190 [ 969.187734][T17355] should_failslab+0x9/0x14 [ 969.187754][T17355] kmem_cache_alloc+0x2be/0x710 [ 969.187778][T17355] ? __fget_light+0x2db/0x420 [ 969.225795][T17355] getname_flags+0xd6/0x5b0 [ 969.235913][T17355] do_mkdirat+0xba/0x2f0 [ 969.264364][T17355] ? __ia32_sys_mknod+0xb0/0xb0 [ 969.269226][T17355] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 969.275322][T17355] ? trace_hardirqs_off_caller+0x300/0x300 [ 969.281144][T17355] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 969.286613][T17355] __x64_sys_mkdir+0x5c/0x80 [ 969.286634][T17355] do_syscall_64+0x1a3/0x800 [ 969.286655][T17355] ? syscall_return_slowpath+0x5f0/0x5f0 [ 969.286674][T17355] ? prepare_exit_to_usermode+0x232/0x3b0 [ 969.286698][T17355] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 969.286737][T17355] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 969.286750][T17355] RIP: 0033:0x4572e7 [ 969.286782][T17355] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 3d c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 1d c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 969.317509][ T27] audit: type=1804 audit(1547466130.354:71): pid=17353 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir869193996/syzkaller.8fQOn7/417/memory.events" dev="sda1" ino=16704 res=1 [ 969.320736][T17355] RSP: 002b:00007fd92d4aaa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 969.320753][T17355] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004572e7 [ 969.320763][T17355] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000300 [ 969.320772][T17355] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 969.320795][T17355] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 11:42:10 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000280)="2300000022008152915a655267d7d137022ff96e27bf28b285fe3903a44a6017edcaa3", 0x23}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmsg$kcm(r0, &(0x7f0000001c80)={0x0, 0x0, 0x0}, 0x0) 11:42:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0xc0045878, 0x0) 11:42:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0xc0045878, 0x0) 11:42:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x1, 0xc, 0x5, 0x5, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000000), 0x0}, 0x20) [ 969.320803][T17355] R13: 0000000000000000 R14: 00000000004db6c8 R15: 0000000000000003 11:42:10 executing program 5: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='memory\x01\x00\x00\x00\x16\x00\x00\x00\xeafW\x1dn\xf0\x130\x00', 0xffffffffffffff9c}, 0x10) lseek(r0, 0x0, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory\x01\x00\x00\x00\x16\x00\x00\x00\xeafW\x1dn\xf0\x130\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086610, &(0x7f0000000000)) 11:42:10 executing program 3 (fault-call:0 fault-nth:25): syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 969.561807][T17381] EXT4-fs warning (device sda1): ext4_resize_begin:45: There are errors in the filesystem, so online resizing is not allowed [ 969.785776][T17392] FAULT_INJECTION: forcing a failure. [ 969.785776][T17392] name failslab, interval 1, probability 0, space 0, times 0 [ 969.811138][T17392] CPU: 0 PID: 17392 Comm: syz-executor3 Not tainted 5.0.0-rc1-next-20190114 #11 [ 969.820181][T17392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 969.830250][T17392] Call Trace: [ 969.833557][T17392] dump_stack+0x1db/0x2d0 [ 969.837901][T17392] ? dump_stack_print_info.cold+0x20/0x20 [ 969.843629][T17392] ? path_init+0x1ef0/0x1ef0 [ 969.848246][T17392] should_fail.cold+0xa/0x14 [ 969.852853][T17392] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 969.858679][T17392] ? ___might_sleep+0x1e7/0x310 [ 969.863542][T17392] ? arch_local_save_flags+0x50/0x50 [ 969.868852][T17392] __should_failslab+0x121/0x190 [ 969.873805][T17392] should_failslab+0x9/0x14 [ 969.878328][T17392] kmem_cache_alloc+0x2be/0x710 [ 969.883203][T17392] __d_alloc+0xae/0xbe0 [ 969.887378][T17392] ? d_lookup+0x163/0x360 [ 969.891735][T17392] ? shrink_dcache_for_umount+0x2b0/0x2b0 [ 969.897467][T17392] ? d_alloc_parallel+0x1f10/0x1f10 [ 969.902676][T17392] ? trace_hardirqs_on+0xbd/0x310 [ 969.907712][T17392] ? lookup_dcache+0x23/0x140 [ 969.912399][T17392] ? trace_hardirqs_off_caller+0x300/0x300 [ 969.918198][T17392] ? lock_acquire+0x1db/0x570 [ 969.922871][T17392] ? filename_create+0x1a8/0x5a0 [ 969.927803][T17392] ? ___might_sleep+0x1e7/0x310 [ 969.932668][T17392] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 969.938409][T17392] d_alloc+0x99/0x420 [ 969.942398][T17392] ? __d_lookup+0x960/0x960 [ 969.946910][T17392] ? __d_alloc+0xbe0/0xbe0 [ 969.951333][T17392] __lookup_hash+0xcd/0x190 [ 969.955821][T17392] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 969.962067][T17392] filename_create+0x1d6/0x5a0 [ 969.966867][T17392] ? kern_path_mountpoint+0x40/0x40 [ 969.972063][T17392] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 969.978293][T17392] ? getname_flags+0x277/0x5b0 [ 969.983059][T17392] do_mkdirat+0xcf/0x2f0 [ 969.987309][T17392] ? __ia32_sys_mknod+0xb0/0xb0 [ 969.992171][T17392] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 969.998234][T17392] ? trace_hardirqs_off_caller+0x300/0x300 [ 970.004038][T17392] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 970.009485][T17392] __x64_sys_mkdir+0x5c/0x80 [ 970.014061][T17392] do_syscall_64+0x1a3/0x800 [ 970.018653][T17392] ? syscall_return_slowpath+0x5f0/0x5f0 [ 970.024286][T17392] ? prepare_exit_to_usermode+0x232/0x3b0 [ 970.030051][T17392] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 970.035604][T17392] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 970.041491][T17392] RIP: 0033:0x4572e7 [ 970.045407][T17392] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 3d c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 1d c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 970.065004][T17392] RSP: 002b:00007fd92d4aaa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 970.073404][T17392] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004572e7 [ 970.081368][T17392] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000300 [ 970.089337][T17392] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 970.097386][T17392] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 970.105361][T17392] R13: 0000000000000000 R14: 00000000004db6c8 R15: 0000000000000003 [ 971.406723][T14847] Bluetooth: hci0: command 0x1003 tx timeout [ 971.412825][T10211] Bluetooth: hci0: sending frame failed (-49) [ 973.486876][T16517] Bluetooth: hci0: command 0x1001 tx timeout [ 973.493161][T10211] Bluetooth: hci0: sending frame failed (-49) [ 975.566721][T14847] Bluetooth: hci0: command 0x1009 tx timeout 11:42:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r2, 0x400455c8, 0x0) 11:42:21 executing program 2: accept$inet6(0xffffffffffffff9c, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f00000000c0)=0x1c) r0 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0) mmap(&(0x7f00002e4000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) name_to_handle_at(r0, &(0x7f00002e4000)='./file\xff\xff', &(0x7f00000000c0)=ANY=[], &(0x7f0000001ffc), 0x1400) 11:42:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0xc0189436, 0x0) 11:42:21 executing program 5: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/capi/capi20ncci\x00', 0x800000024, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000240)={0x0, 0x100000001}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000002c0)={r1, 0x5}, &(0x7f0000000340)=0x8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r3, @remote, @multicast2}, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory\x01\x00\x00\x00\x16\x00\x00\x00\xeafW\x1dn\xf0\x130\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086610, &(0x7f0000000000)) 11:42:21 executing program 0: 11:42:21 executing program 3 (fault-call:0 fault-nth:26): syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 979.907215][T17403] FAULT_INJECTION: forcing a failure. [ 979.907215][T17403] name failslab, interval 1, probability 0, space 0, times 0 [ 979.950532][T17411] EXT4-fs warning (device sda1): ext4_resize_begin:45: There are errors in the filesystem, so online resizing is not allowed [ 979.983106][T17403] CPU: 1 PID: 17403 Comm: syz-executor3 Not tainted 5.0.0-rc1-next-20190114 #11 [ 979.992155][T17403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 980.002208][T17403] Call Trace: [ 980.005509][T17403] dump_stack+0x1db/0x2d0 [ 980.009856][T17403] ? dump_stack_print_info.cold+0x20/0x20 [ 980.015579][T17403] ? kasan_check_write+0x14/0x20 [ 980.020521][T17403] ? __brelse+0x105/0x180 [ 980.024865][T17403] should_fail.cold+0xa/0x14 [ 980.029469][T17403] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 980.035288][T17403] ? ___might_sleep+0x1e7/0x310 [ 980.040151][T17403] ? arch_local_save_flags+0x50/0x50 [ 980.045447][T17403] ? __lock_acquire+0x572/0x4a10 [ 980.050399][T17403] __should_failslab+0x121/0x190 [ 980.055361][T17403] should_failslab+0x9/0x14 [ 980.059879][T17403] kmem_cache_alloc+0x2be/0x710 [ 980.064732][T17403] ? mark_held_locks+0x100/0x100 [ 980.069734][T17403] ext4_alloc_inode+0xa5/0x860 [ 980.074509][T17403] ? ratelimit_state_init+0xb0/0xb0 [ 980.079710][T17403] ? __find_get_block+0xf20/0xf20 [ 980.084736][T17403] ? ext4_map_blocks+0x40f/0x1b90 [ 980.089764][T17403] ? is_bpf_text_address+0xd3/0x170 [ 980.094975][T17403] ? add_lock_to_list.isra.0+0x450/0x450 [ 980.100608][T17403] ? add_lock_to_list.isra.0+0x450/0x450 [ 980.106242][T17403] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 980.112483][T17403] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 980.118726][T17403] ? ratelimit_state_init+0xb0/0xb0 [ 980.123939][T17403] alloc_inode+0x66/0x190 [ 980.128273][T17403] new_inode_pseudo+0x71/0x1b0 [ 980.133047][T17403] ? prune_icache_sb+0x1c0/0x1c0 [ 980.137998][T17403] new_inode+0x1f/0x40 [ 980.142087][T17403] __ext4_new_inode+0x454/0x6eb0 [ 980.147043][T17403] ? rcu_softirq_qs+0x20/0x20 [ 980.151733][T17403] ? is_bpf_text_address+0xd3/0x170 [ 980.156945][T17403] ? ext4_free_inode+0x1a30/0x1a30 [ 980.162060][T17403] ? unwind_get_return_address+0x61/0xa0 [ 980.167693][T17403] ? __save_stack_trace+0x8a/0xf0 [ 980.172750][T17403] ? save_stack+0xa9/0xd0 [ 980.177088][T17403] ? __kasan_slab_free+0x102/0x150 [ 980.182196][T17403] ? kasan_slab_free+0xe/0x10 [ 980.186885][T17403] ? kmem_cache_free+0x86/0x260 [ 980.191733][T17403] ? putname+0xef/0x130 [ 980.195885][T17403] ? filename_create+0x29d/0x5a0 [ 980.200820][T17403] ? do_mkdirat+0xcf/0x2f0 [ 980.205241][T17403] ? __x64_sys_mkdir+0x5c/0x80 [ 980.210006][T17403] ? do_syscall_64+0x1a3/0x800 [ 980.214776][T17403] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 980.220854][T17403] ? print_usage_bug+0xd0/0xd0 [ 980.225620][T17403] ? do_raw_spin_unlock+0xa0/0x330 [ 980.230734][T17403] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 980.237030][T17403] ? __dquot_initialize+0x632/0xda0 [ 980.242236][T17403] ? d_instantiate_anon+0x30/0x30 [ 980.247276][T17403] ? dquot_get_next_dqblk+0x180/0x180 [ 980.252659][T17403] ? check_preemption_disabled+0x48/0x290 [ 980.258382][T17403] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 980.264035][T17403] ext4_mkdir+0x45a/0xef0 [ 980.268401][T17403] ? ext4_init_dot_dotdot+0x520/0x520 [ 980.273773][T17403] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 980.280004][T17403] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 980.286237][T17403] ? security_inode_permission+0xd5/0x110 [ 980.291960][T17403] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 980.298198][T17403] ? security_inode_mkdir+0xee/0x120 [ 980.303493][T17403] vfs_mkdir+0x433/0x690 [ 980.307746][T17403] do_mkdirat+0x271/0x2f0 [ 980.312083][T17403] ? __ia32_sys_mknod+0xb0/0xb0 [ 980.316943][T17403] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 980.323014][T17403] ? trace_hardirqs_off_caller+0x300/0x300 [ 980.328832][T17403] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 980.334297][T17403] __x64_sys_mkdir+0x5c/0x80 [ 980.338890][T17403] do_syscall_64+0x1a3/0x800 [ 980.343488][T17403] ? syscall_return_slowpath+0x5f0/0x5f0 [ 980.349124][T17403] ? prepare_exit_to_usermode+0x232/0x3b0 [ 980.354857][T17403] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 980.360417][T17403] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 980.366308][T17403] RIP: 0033:0x4572e7 [ 980.370216][T17403] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 3d c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 1d c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 980.389812][T17403] RSP: 002b:00007fd92d4aaa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 980.398237][T17403] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004572e7 [ 980.406217][T17403] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000300 [ 980.414199][T17403] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 980.422167][T17403] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 980.430147][T17403] R13: 0000000000000000 R14: 00000000004db6c8 R15: 0000000000000003 11:42:21 executing program 2: 11:42:21 executing program 0: 11:42:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0xc020660b, 0x0) [ 980.459509][T17414] EXT4-fs warning (device sda1): ext4_resize_begin:45: There are errors in the filesystem, so online resizing is not allowed 11:42:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="2adcc300000000000000000000") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory\x01\x00\x00\x00\x16\x00\x00\x00\xeafW\x1dn\xf0\x130\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086610, &(0x7f0000000000)) 11:42:21 executing program 2: 11:42:21 executing program 0: io_setup(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) io_destroy(0x0) [ 980.704800][T17436] EXT4-fs warning (device sda1): ext4_resize_begin:45: There are errors in the filesystem, so online resizing is not allowed 11:42:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r2, &(0x7f0000ffd000/0x3000)=nil, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) 11:42:21 executing program 3 (fault-call:0 fault-nth:27): syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:42:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x10000, 0x800) dup(r1) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r2, 0x400455cb, 0x0) 11:42:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000000c0)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f00000001c0)='bcsf0\x00\x00\x00\x00\x00\x00\x00\xff\x00') 11:42:21 executing program 0: clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$unix(0x1, 0x0, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x2, 0x10000) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000140), 0x10) setsockopt(r0, 0x65, 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) close(r0) timer_delete(0x0) unshare(0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 11:42:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000200)={@remote, 0x0}, &(0x7f0000000240)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'team0\x00', r3}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@local}}, 0xfffffffffffffffd) accept$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0}, &(0x7f00000004c0)=0x14) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000540)=0x14) accept4$packet(0xffffffffffffff9c, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'bond_slave_0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000700)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f0000000800)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000880)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000008c0)={0x0, @local, @loopback}, &(0x7f0000000900)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000009c0)={{{@in6=@initdev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000ac0)=0xe8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000b00)={0x0, @broadcast, @multicast1}, &(0x7f0000000b40)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000b80)={@loopback, 0x0}, &(0x7f0000000bc0)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c40)={'veth0_to_team\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000c80)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000cc0)={'batadv0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000d80)=0x14) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000dc0)={0x0, @empty, @remote}, &(0x7f0000000e00)=0xc) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000e40)={@dev, 0x0}, &(0x7f0000000e80)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000ec0)={'veth0_to_bond\x00', r12}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000f00)={'hwsim0\x00', 0x0}) getsockname(r0, &(0x7f0000000f40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000fc0)=0x80) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000001000)={{{@in=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000001100)=0xe8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001140)={0x0, @empty, @remote}, &(0x7f0000001180)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001280)={@ipv4={[], [], @loopback}, 0x0}, &(0x7f00000012c0)=0x14) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000001c80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40010}, 0xc, &(0x7f0000001c40)={&(0x7f0000001300)={0x90c, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x110, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x20}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xa851}}, {0x8, 0x6, r5}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffffbee0}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x218, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffff8001}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x7fff}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}]}}, {{0x8, 0x1, r14}, {0x3c, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r15}, {0x1d4, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7e}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x100000000}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r17}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x100, 0x8, 0x9, 0x4}, {0x100000001, 0x10001, 0x6, 0x1}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x5, 0x40, 0x1}, {0xffffffff, 0x6, 0x858, 0x6}, {0x9, 0xffff, 0x7, 0x4}, {0x34, 0x9f3, 0x100000001, 0x5}]}}}]}}, {{0x8, 0x1, r19}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8, 0x1, r20}, {0x88, 0x2, [{0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x0, 0x2, 0x8, 0x39}, {0x7, 0x1, 0x7, 0xff}, {0x6, 0x100000000, 0x7, 0x3}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xffffffff}}}]}}, {{0x8, 0x1, r21}, {0xb4, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x8001}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r22}, {0x18c, 0x2, [{0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x457cca88}}, {0x8, 0x6, r23}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r24}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r25}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r26}}}]}}, {{0x8, 0x1, r27}, {0x74, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}]}}]}, 0x90c}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r28 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x10000, 0x0) r29 = openat$cgroup_ro(r28, &(0x7f0000000100)='p\x00\x00\x00\x00\x00\x00\x00\x00en\xf4\b', 0x26e1, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r29, 0x40086610, &(0x7f0000000000)) 11:42:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x4000, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080)={0x0, 0x0, 0x8}, 0x8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0xfffffffffffffffc}) r2 = syz_open_pts(r0, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x7) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xc) ioctl$VIDIOC_CROPCAP(r2, 0x400455cb, 0x0) [ 980.870877][T17452] FAULT_INJECTION: forcing a failure. [ 980.870877][T17452] name failslab, interval 1, probability 0, space 0, times 0 [ 980.961123][T17452] CPU: 0 PID: 17452 Comm: syz-executor3 Not tainted 5.0.0-rc1-next-20190114 #11 [ 980.970295][T17452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 980.980368][T17452] Call Trace: [ 980.983666][T17452] dump_stack+0x1db/0x2d0 [ 980.987992][T17452] ? dump_stack_print_info.cold+0x20/0x20 [ 980.993707][T17452] ? kasan_check_write+0x14/0x20 [ 980.998641][T17452] ? __brelse+0x105/0x180 [ 981.002963][T17452] should_fail.cold+0xa/0x14 [ 981.007546][T17452] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 981.013360][T17452] ? ___might_sleep+0x1e7/0x310 [ 981.018345][T17452] ? arch_local_save_flags+0x50/0x50 [ 981.023618][T17452] ? __lock_acquire+0x572/0x4a10 [ 981.028546][T17452] __should_failslab+0x121/0x190 [ 981.033472][T17452] should_failslab+0x9/0x14 [ 981.037976][T17452] kmem_cache_alloc+0x2be/0x710 [ 981.042836][T17452] ? mark_held_locks+0x100/0x100 [ 981.047767][T17452] ext4_alloc_inode+0xa5/0x860 [ 981.052517][T17452] ? ratelimit_state_init+0xb0/0xb0 [ 981.057711][T17452] ? __find_get_block+0xf20/0xf20 [ 981.062852][T17452] ? ext4_map_blocks+0x40f/0x1b90 [ 981.067875][T17452] ? is_bpf_text_address+0xd3/0x170 [ 981.073077][T17452] ? add_lock_to_list.isra.0+0x450/0x450 [ 981.078698][T17452] ? add_lock_to_list.isra.0+0x450/0x450 [ 981.084337][T17452] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 981.090574][T17452] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 981.096813][T17452] ? ratelimit_state_init+0xb0/0xb0 [ 981.102009][T17452] alloc_inode+0x66/0x190 [ 981.106344][T17452] new_inode_pseudo+0x71/0x1b0 [ 981.111095][T17452] ? prune_icache_sb+0x1c0/0x1c0 [ 981.116029][T17452] new_inode+0x1f/0x40 [ 981.120142][T17452] __ext4_new_inode+0x454/0x6eb0 [ 981.125090][T17452] ? rcu_softirq_qs+0x20/0x20 [ 981.129772][T17452] ? is_bpf_text_address+0xd3/0x170 [ 981.134983][T17452] ? ext4_free_inode+0x1a30/0x1a30 [ 981.140101][T17452] ? unwind_get_return_address+0x61/0xa0 [ 981.145872][T17452] ? __save_stack_trace+0x8a/0xf0 [ 981.150895][T17452] ? save_stack+0xa9/0xd0 [ 981.155213][T17452] ? __kasan_slab_free+0x102/0x150 [ 981.160308][T17452] ? kasan_slab_free+0xe/0x10 [ 981.164974][T17452] ? kmem_cache_free+0x86/0x260 [ 981.169808][T17452] ? putname+0xef/0x130 [ 981.174067][T17452] ? filename_create+0x29d/0x5a0 [ 981.178992][T17452] ? do_mkdirat+0xcf/0x2f0 [ 981.183388][T17452] ? __x64_sys_mkdir+0x5c/0x80 [ 981.188148][T17452] ? do_syscall_64+0x1a3/0x800 [ 981.192900][T17452] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 981.198957][T17452] ? print_usage_bug+0xd0/0xd0 [ 981.203784][T17452] ? do_raw_spin_unlock+0xa0/0x330 [ 981.208900][T17452] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 981.215134][T17452] ? __dquot_initialize+0x632/0xda0 [ 981.220332][T17452] ? d_instantiate_anon+0x30/0x30 [ 981.225375][T17452] ? dquot_get_next_dqblk+0x180/0x180 [ 981.230747][T17452] ? check_preemption_disabled+0x48/0x290 [ 981.236463][T17452] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 981.242093][T17452] ext4_mkdir+0x45a/0xef0 [ 981.246415][T17452] ? ext4_init_dot_dotdot+0x520/0x520 [ 981.251893][T17452] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 981.258120][T17452] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 981.264355][T17452] ? security_inode_permission+0xd5/0x110 [ 981.270065][T17452] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 981.276297][T17452] ? security_inode_mkdir+0xee/0x120 [ 981.281573][T17452] vfs_mkdir+0x433/0x690 [ 981.285802][T17452] do_mkdirat+0x271/0x2f0 [ 981.290125][T17452] ? __ia32_sys_mknod+0xb0/0xb0 [ 981.294976][T17452] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 981.301039][T17452] ? trace_hardirqs_off_caller+0x300/0x300 [ 981.306838][T17452] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 981.312287][T17452] __x64_sys_mkdir+0x5c/0x80 [ 981.316880][T17452] do_syscall_64+0x1a3/0x800 [ 981.321459][T17452] ? syscall_return_slowpath+0x5f0/0x5f0 [ 981.327081][T17452] ? prepare_exit_to_usermode+0x232/0x3b0 [ 981.333083][T17452] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 981.338629][T17452] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 981.344512][T17452] RIP: 0033:0x4572e7 [ 981.348392][T17452] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 3d c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 1d c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 981.367999][T17452] RSP: 002b:00007fd92d4aaa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 981.376407][T17452] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004572e7 [ 981.384379][T17452] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000300 [ 981.392343][T17452] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 981.400307][T17452] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 11:42:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x620000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x2000) creat(&(0x7f00000000c0)='./file0\x00', 0x20) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x501800, 0x0) pipe2(&(0x7f0000000140), 0x800) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0xa0000, 0x0) r3 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x0, 0x80c0) syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x0, 0x800) syz_open_dev$dmmidi(&(0x7f0000000240)='/dev/dmmidi#\x00', 0x4, 0x20000) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20ncci\x00', 0x900, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x40, 0x0) syz_open_dev$admmidi(&(0x7f0000000300)='/dev/admmidi#\x00', 0xff, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000340)='/proc/capi/capi20ncci\x00', 0x41, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000004c0)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000540)=@assoc_value={r4, 0x188ba00000}, &(0x7f0000000580)=0x8) openat$rtc(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rtc0\x00', 0x103000, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000400)='/dev/snd/pcmC#D#c\x00', 0xffffffff, 0x101140) syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x5, 0x80000) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cachefiles\x00', 0x410040, 0x0) r5 = dup3(r1, r0, 0x80000) ioctl$VIDIOC_CROPCAP(r5, 0x400455cb, 0x0) [ 981.408270][T17452] R13: 0000000000000000 R14: 00000000004db6c8 R15: 0000000000000003 11:42:22 executing program 3 (fault-call:0 fault-nth:28): syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:42:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil}) [ 981.499089][T17483] FAULT_INJECTION: forcing a failure. [ 981.499089][T17483] name failslab, interval 1, probability 0, space 0, times 0 [ 981.512073][T17483] CPU: 1 PID: 17483 Comm: syz-executor3 Not tainted 5.0.0-rc1-next-20190114 #11 [ 981.521071][T17483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 981.531100][T17483] Call Trace: [ 981.531144][T17483] dump_stack+0x1db/0x2d0 [ 981.531155][T17483] ? dump_stack_print_info.cold+0x20/0x20 [ 981.531164][T17483] ? __lock_acquire+0x572/0x4a10 [ 981.531180][T17483] should_fail.cold+0xa/0x14 [ 981.531192][T17483] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 981.531207][T17483] ? mark_held_locks+0x100/0x100 [ 981.538826][T17483] ? rcu_softirq_qs+0x20/0x20 [ 981.569304][T17483] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 981.575537][T17483] ? check_preemption_disabled+0x48/0x290 [ 981.581232][T17483] ? debug_smp_processor_id+0x1c/0x20 [ 981.586578][T17483] ? perf_trace_lock+0x12f/0x750 [ 981.591501][T17483] ? __kernel_text_address+0xd/0x40 [ 981.596683][T17483] __should_failslab+0x121/0x190 [ 981.601599][T17483] should_failslab+0x9/0x14 [ 981.606078][T17483] kmem_cache_alloc+0x47/0x710 [ 981.610820][T17483] ? __es_remove_extent+0x871/0xb30 [ 981.616011][T17483] __es_insert_extent+0x366/0x1190 [ 981.621102][T17483] ? ext4_es_free_extent+0x770/0x770 [ 981.626399][T17483] ? do_raw_read_unlock+0x70/0x70 [ 981.631611][T17483] ? __lock_is_held+0xb6/0x140 [ 981.636433][T17483] ext4_es_insert_extent+0x369/0xc80 [ 981.641772][T17483] ? ext4_es_scan_clu+0x50/0x50 [ 981.646622][T17483] ? ext4_es_init_tree+0x70/0x70 [ 981.651559][T17483] ext4_ext_put_gap_in_cache+0x176/0x200 [ 981.657253][T17483] ? ext4_rereserve_cluster+0x240/0x240 [ 981.662785][T17483] ? ext4_find_extent+0x76e/0x9d0 [ 981.667789][T17483] ? ext4_find_extent+0x6a6/0x9d0 [ 981.672796][T17483] ext4_ext_map_blocks+0x2ab8/0x60a0 [ 981.678058][T17483] ? __ext4_journal_get_write_access+0x70/0xa0 [ 981.684207][T17483] ? ext4_ext_release+0x10/0x10 [ 981.689033][T17483] ? check_preemption_disabled+0x48/0x290 [ 981.694733][T17483] ? __lock_is_held+0xb6/0x140 [ 981.699483][T17483] ? lock_acquire+0x1db/0x570 [ 981.704133][T17483] ? ext4_map_blocks+0x46f/0x1b90 [ 981.709138][T17483] ? ___might_sleep+0x1e7/0x310 [ 981.713982][T17483] ? lock_release+0xc40/0xc40 [ 981.718635][T17483] ? ext4_es_lookup_extent+0x478/0xdd0 [ 981.724080][T17483] ? down_read+0x8d/0x120 [ 981.728396][T17483] ? ext4_map_blocks+0x46f/0x1b90 [ 981.733409][T17483] ? __down_interruptible+0x740/0x740 [ 981.738761][T17483] ext4_map_blocks+0xf80/0x1b90 [ 981.743591][T17483] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 981.749724][T17483] ? ext4_issue_zeroout+0x190/0x190 [ 981.754901][T17483] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 981.760355][T17483] ext4_getblk+0x11b/0x610 [ 981.764763][T17483] ? ext4_iomap_begin+0x1430/0x1430 [ 981.769937][T17483] ? __sanitizer_cov_trace_pc+0x48/0x50 [ 981.775473][T17483] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 981.781824][T17483] ? __dquot_initialize+0x632/0xda0 [ 981.787008][T17483] ? d_instantiate_anon+0x30/0x30 [ 981.792279][T17483] ext4_bread+0x8d/0x2b0 [ 981.796505][T17483] ? ext4_getblk+0x610/0x610 [ 981.801073][T17483] ? check_preemption_disabled+0x48/0x290 [ 981.806782][T17483] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 981.812394][T17483] ext4_append+0x150/0x370 [ 981.816793][T17483] ext4_mkdir+0x6b1/0xef0 [ 981.821109][T17483] ? ext4_init_dot_dotdot+0x520/0x520 [ 981.826473][T17483] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 981.832692][T17483] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 981.838911][T17483] ? security_inode_permission+0xd5/0x110 [ 981.844614][T17483] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 981.850832][T17483] ? security_inode_mkdir+0xee/0x120 [ 981.856109][T17483] vfs_mkdir+0x433/0x690 [ 981.860338][T17483] do_mkdirat+0x271/0x2f0 [ 981.864654][T17483] ? __ia32_sys_mknod+0xb0/0xb0 [ 981.869492][T17483] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 981.875765][T17483] ? trace_hardirqs_off_caller+0x300/0x300 [ 981.881585][T17483] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 981.887055][T17483] __x64_sys_mkdir+0x5c/0x80 [ 981.892890][T17483] do_syscall_64+0x1a3/0x800 [ 981.897491][T17483] ? syscall_return_slowpath+0x5f0/0x5f0 [ 981.903127][T17483] ? prepare_exit_to_usermode+0x232/0x3b0 [ 981.908860][T17483] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 981.914419][T17483] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 981.920323][T17483] RIP: 0033:0x4572e7 [ 981.924231][T17483] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 3d c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 1d c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 981.944306][T17483] RSP: 002b:00007fd92d4aaa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 981.952743][T17483] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004572e7 [ 981.960710][T17483] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000300 [ 981.968687][T17483] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 981.976666][T17483] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 981.984631][T17483] R13: 0000000000000000 R14: 00000000004db6c8 R15: 0000000000000003 [ 982.011238][T17483] gfs2: not a GFS2 filesystem 11:42:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory\x01\x00\x00\x00\x16\x00\x00\x00\xeafW\x1dn\xf0\x130\x00', 0x26e1, 0x0) r2 = request_key(&(0x7f0000000040)='big_key\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='memory\x01\x00\x00\x00\x16\x00\x00\x00\xeafW\x1dn\xf0\x130\x00', 0x0) r3 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f00000001c0)=""/69) keyctl$negate(0xd, r2, 0x2, r3) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086610, &(0x7f0000000000)) 11:42:23 executing program 3 (fault-call:0 fault-nth:29): syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 982.168179][T17499] EXT4-fs warning (device sda1): ext4_resize_begin:45: There are errors in the filesystem, so online resizing is not allowed [ 982.274510][T17507] FAULT_INJECTION: forcing a failure. [ 982.274510][T17507] name failslab, interval 1, probability 0, space 0, times 0 [ 982.317408][T17507] CPU: 1 PID: 17507 Comm: syz-executor3 Not tainted 5.0.0-rc1-next-20190114 #11 [ 982.326445][T17507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 982.336503][T17507] Call Trace: [ 982.339801][T17507] dump_stack+0x1db/0x2d0 [ 982.344145][T17507] ? dump_stack_print_info.cold+0x20/0x20 [ 982.349867][T17507] ? check_noncircular+0x20/0x20 [ 982.354817][T17507] should_fail.cold+0xa/0x14 [ 982.359419][T17507] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 982.365231][T17507] ? ___might_sleep+0x1e7/0x310 [ 982.370085][T17507] ? arch_local_save_flags+0x50/0x50 [ 982.375389][T17507] ? block_commit_write+0x30/0x30 [ 982.380425][T17507] __should_failslab+0x121/0x190 [ 982.385384][T17507] should_failslab+0x9/0x14 [ 982.389888][T17507] __kmalloc+0x2dc/0x740 [ 982.394134][T17507] ? ext4_find_extent+0x76e/0x9d0 [ 982.399158][T17507] ext4_find_extent+0x76e/0x9d0 [ 982.404020][T17507] ext4_ext_map_blocks+0x261/0x60a0 [ 982.409232][T17507] ? __ext4_journal_get_write_access+0x70/0xa0 [ 982.415416][T17507] ? ext4_ext_release+0x10/0x10 [ 982.420269][T17507] ? check_preemption_disabled+0x48/0x290 [ 982.425995][T17507] ? __lock_is_held+0xb6/0x140 [ 982.430783][T17507] ? lock_acquire+0x1db/0x570 [ 982.435717][T17507] ? ext4_map_blocks+0x46f/0x1b90 [ 982.440792][T17507] ? ___might_sleep+0x1e7/0x310 [ 982.445655][T17507] ? lock_release+0xc40/0xc40 [ 982.450334][T17507] ? ext4_es_lookup_extent+0x478/0xdd0 [ 982.455805][T17507] ? down_read+0x8d/0x120 [ 982.460134][T17507] ? ext4_map_blocks+0x46f/0x1b90 [ 982.465160][T17507] ? __down_interruptible+0x740/0x740 [ 982.470547][T17507] ext4_map_blocks+0xf80/0x1b90 [ 982.475400][T17507] ? unwind_get_return_address+0x61/0xa0 [ 982.481043][T17507] ? ext4_issue_zeroout+0x190/0x190 [ 982.486258][T17507] ext4_getblk+0x11b/0x610 [ 982.490678][T17507] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 982.496744][T17507] ? ext4_iomap_begin+0x1430/0x1430 [ 982.501958][T17507] ? do_raw_spin_unlock+0xa0/0x330 [ 982.507068][T17507] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 982.513308][T17507] ? __dquot_initialize+0x632/0xda0 [ 982.518512][T17507] ? d_instantiate_anon+0x30/0x30 [ 982.523542][T17507] ext4_bread+0x8d/0x2b0 [ 982.527787][T17507] ? ext4_getblk+0x610/0x610 [ 982.532377][T17507] ? check_preemption_disabled+0x48/0x290 [ 982.538094][T17507] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 982.543749][T17507] ext4_append+0x150/0x370 [ 982.548183][T17507] ext4_mkdir+0x6b1/0xef0 [ 982.552523][T17507] ? ext4_init_dot_dotdot+0x520/0x520 [ 982.557898][T17507] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 982.564141][T17507] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 982.570384][T17507] ? security_inode_permission+0xd5/0x110 [ 982.576140][T17507] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 982.582392][T17507] ? security_inode_mkdir+0xee/0x120 [ 982.587681][T17507] vfs_mkdir+0x433/0x690 [ 982.591928][T17507] do_mkdirat+0x271/0x2f0 [ 982.596261][T17507] ? __ia32_sys_mknod+0xb0/0xb0 [ 982.601112][T17507] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 982.607184][T17507] ? trace_hardirqs_off_caller+0x300/0x300 [ 982.612996][T17507] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 982.618462][T17507] __x64_sys_mkdir+0x5c/0x80 [ 982.623082][T17507] do_syscall_64+0x1a3/0x800 [ 982.627676][T17507] ? syscall_return_slowpath+0x5f0/0x5f0 [ 982.633308][T17507] ? prepare_exit_to_usermode+0x232/0x3b0 [ 982.639059][T17507] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 982.644617][T17507] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 982.650507][T17507] RIP: 0033:0x4572e7 [ 982.654400][T17507] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 3d c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 1d c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 982.674011][T17507] RSP: 002b:00007fd92d4aaa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 982.682421][T17507] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004572e7 [ 982.690392][T17507] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000300 [ 982.698361][T17507] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 982.706418][T17507] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 982.714390][T17507] R13: 0000000000000000 R14: 00000000004db6c8 R15: 0000000000000003 [ 982.740117][T17507] gfs2: not a GFS2 filesystem [ 983.006756][T16517] Bluetooth: hci0: command 0x1003 tx timeout [ 983.012926][T10211] Bluetooth: hci0: sending frame failed (-49) [ 985.086866][T16517] Bluetooth: hci0: command 0x1001 tx timeout [ 985.092958][T10211] Bluetooth: hci0: sending frame failed (-49) [ 987.166798][T16517] Bluetooth: hci0: command 0x1009 tx timeout 11:42:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x100, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f00000000c0)={0x1, 0x3, 0x4}) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory\x01\x00\x00\x00\x16\x00\x00\x00\xeafW\x1dn\xf0\x130\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086610, &(0x7f0000000000)) 11:42:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) 11:42:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061124000000000009500000000000000"], 0x0, 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 11:42:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r2, 0x400455c8, 0x0) 11:42:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x304, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x200000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@ipv4={[], [], @remote}, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f00000000c0)={@local, 0x38, r3}) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) 11:42:32 executing program 3 (fault-call:0 fault-nth:30): syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 991.420814][T17517] FAULT_INJECTION: forcing a failure. [ 991.420814][T17517] name failslab, interval 1, probability 0, space 0, times 0 [ 991.439119][T17516] EXT4-fs warning (device sda1): ext4_resize_begin:45: There are errors in the filesystem, so online resizing is not allowed [ 991.456981][T17517] CPU: 1 PID: 17517 Comm: syz-executor3 Not tainted 5.0.0-rc1-next-20190114 #11 [ 991.466032][T17517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 991.476095][T17517] Call Trace: [ 991.479431][T17517] dump_stack+0x1db/0x2d0 [ 991.483775][T17517] ? dump_stack_print_info.cold+0x20/0x20 [ 991.489526][T17517] should_fail.cold+0xa/0x14 [ 991.494143][T17517] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 991.499970][T17517] ? ___might_sleep+0x1e7/0x310 [ 991.504840][T17517] ? arch_local_save_flags+0x50/0x50 [ 991.510162][T17517] __should_failslab+0x121/0x190 [ 991.515117][T17517] should_failslab+0x9/0x14 [ 991.519631][T17517] __kmalloc+0x2dc/0x740 [ 991.523887][T17517] ? ext4_find_extent+0x76e/0x9d0 [ 991.528922][T17517] ext4_find_extent+0x76e/0x9d0 [ 991.533788][T17517] ext4_ext_map_blocks+0x261/0x60a0 [ 991.539008][T17517] ? __ext4_journal_get_write_access+0x70/0xa0 [ 991.545182][T17517] ? ext4_ext_release+0x10/0x10 [ 991.550037][T17517] ? __lock_is_held+0xb6/0x140 [ 991.554820][T17517] ? lock_acquire+0x1db/0x570 [ 991.559505][T17517] ? ext4_map_blocks+0x922/0x1b90 [ 991.564535][T17517] ? ___might_sleep+0x1e7/0x310 [ 991.569397][T17517] ? lock_release+0xc40/0xc40 [ 991.574080][T17517] ? ext4_es_lookup_extent+0x478/0xdd0 [ 991.579559][T17517] ? down_write+0x8a/0x130 [ 991.583981][T17517] ? ext4_map_blocks+0x922/0x1b90 [ 991.589006][T17517] ? down_read+0x120/0x120 [ 991.593434][T17517] ext4_map_blocks+0x98a/0x1b90 [ 991.598293][T17517] ? ext4_issue_zeroout+0x190/0x190 [ 991.603536][T17517] ext4_getblk+0x11b/0x610 [ 991.607955][T17517] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 991.614027][T17517] ? ext4_iomap_begin+0x1430/0x1430 [ 991.619232][T17517] ? do_raw_spin_unlock+0xa0/0x330 [ 991.624374][T17517] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 991.630618][T17517] ? __dquot_initialize+0x632/0xda0 [ 991.635817][T17517] ? d_instantiate_anon+0x30/0x30 [ 991.640876][T17517] ext4_bread+0x8d/0x2b0 [ 991.645125][T17517] ? ext4_getblk+0x610/0x610 [ 991.649726][T17517] ? check_preemption_disabled+0x48/0x290 [ 991.655451][T17517] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 991.661100][T17517] ext4_append+0x150/0x370 [ 991.665530][T17517] ext4_mkdir+0x6b1/0xef0 [ 991.669883][T17517] ? ext4_init_dot_dotdot+0x520/0x520 [ 991.675257][T17517] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 991.681501][T17517] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 991.687746][T17517] ? security_inode_permission+0xd5/0x110 [ 991.693473][T17517] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 991.699714][T17517] ? security_inode_mkdir+0xee/0x120 [ 991.705008][T17517] vfs_mkdir+0x433/0x690 [ 991.709260][T17517] do_mkdirat+0x271/0x2f0 [ 991.713605][T17517] ? __ia32_sys_mknod+0xb0/0xb0 [ 991.718459][T17517] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 991.724533][T17517] ? trace_hardirqs_off_caller+0x300/0x300 [ 991.730355][T17517] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 991.735842][T17517] __x64_sys_mkdir+0x5c/0x80 [ 991.740439][T17517] do_syscall_64+0x1a3/0x800 [ 991.745037][T17517] ? syscall_return_slowpath+0x5f0/0x5f0 [ 991.750679][T17517] ? prepare_exit_to_usermode+0x232/0x3b0 [ 991.756409][T17517] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 991.761973][T17517] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 991.767870][T17517] RIP: 0033:0x4572e7 [ 991.771767][T17517] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 3d c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 1d c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 991.791374][T17517] RSP: 002b:00007fd92d4aaa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 991.799875][T17517] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004572e7 [ 991.807852][T17517] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000300 11:42:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000040)={0x2, 0x4, 0xffffffffffffffe0, 0x0, 0x0, [], [], [], 0x5, 0x9}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory\x01\x00\x00\x00\x16\x00\x00\x00\xeafW\x1dn\xf0\x130\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086610, &(0x7f0000000000)) [ 991.815827][T17517] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 991.823804][T17517] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 991.831812][T17517] R13: 0000000000000000 R14: 00000000004db6c8 R15: 0000000000000003 11:42:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x800455ca, 0x0) 11:42:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) [ 991.913676][T17535] EXT4-fs warning (device sda1): ext4_resize_begin:45: There are errors in the filesystem, so online resizing is not allowed 11:42:33 executing program 3 (fault-call:0 fault-nth:31): syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:42:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r2, 0x400455c8, 0x0) [ 992.056377][T17542] EXT4-fs warning (device sda1): ext4_resize_begin:45: There are errors in the filesystem, so online resizing is not allowed 11:42:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x800455ca, 0x0) 11:42:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) [ 992.135088][T17550] FAULT_INJECTION: forcing a failure. [ 992.135088][T17550] name failslab, interval 1, probability 0, space 0, times 0 [ 992.186611][T17550] CPU: 0 PID: 17550 Comm: syz-executor3 Not tainted 5.0.0-rc1-next-20190114 #11 [ 992.195671][T17550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 992.205724][T17550] Call Trace: [ 992.209024][T17550] dump_stack+0x1db/0x2d0 [ 992.213383][T17550] ? dump_stack_print_info.cold+0x20/0x20 [ 992.219126][T17550] should_fail.cold+0xa/0x14 [ 992.223726][T17550] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 992.229554][T17550] ? ___might_sleep+0x1e7/0x310 11:42:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) [ 992.234413][T17550] ? arch_local_save_flags+0x50/0x50 [ 992.239711][T17550] __should_failslab+0x121/0x190 [ 992.244656][T17550] should_failslab+0x9/0x14 [ 992.249172][T17550] __kmalloc_track_caller+0x2d8/0x740 [ 992.254563][T17550] ? strncpy_from_user+0x4e0/0x4e0 [ 992.259696][T17550] ? strndup_user+0x77/0xd0 [ 992.259716][T17550] memdup_user+0x26/0xb0 [ 992.259736][T17550] strndup_user+0x77/0xd0 [ 992.272982][T17550] ksys_mount+0x3c/0x150 [ 992.277237][T17550] __x64_sys_mount+0xbe/0x150 [ 992.282310][T17550] do_syscall_64+0x1a3/0x800 [ 992.286935][T17550] ? syscall_return_slowpath+0x5f0/0x5f0 [ 992.292574][T17550] ? prepare_exit_to_usermode+0x232/0x3b0 [ 992.298305][T17550] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 992.303897][T17550] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 992.309786][T17550] RIP: 0033:0x45a93a [ 992.313685][T17550] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ed 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ca 8c fb ff c3 66 0f 1f 84 00 00 00 00 00 11:42:33 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x0, [], [{0x7, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x5}, {0x6, 0x1, 0x7, 0x0, 0x6, 0x7f}], [[], [], [], []]}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008916, &(0x7f0000000100)="0adc1f025b123f8b5580e74f073188a07000000000002b58051da3fd057a3100d26f6a603aadbf25937d750397d32c99a7243dac713872339c38a928d9c11ef19ec4099fb8bd3e21611ab434dc341feb8ec2cc65c7398577da5db73f7baa0ab7b674cbc2f8d7815b61985dcc6e6e6116") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory\x01\x00\x00\x00\x16\x00\x00\x00\xeafW\x1dn\xf0\x130\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086610, &(0x7f0000000000)) [ 992.333288][T17550] RSP: 002b:00007fd92d4aaa88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 992.341713][T17550] RAX: ffffffffffffffda RBX: 00007fd92d4aab30 RCX: 000000000045a93a [ 992.349686][T17550] RDX: 00007fd92d4aaad0 RSI: 0000000020000300 RDI: 00007fd92d4aaaf0 [ 992.357655][T17550] RBP: 0000000020000300 R08: 00007fd92d4aab30 R09: 00007fd92d4aaad0 [ 992.365622][T17550] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 992.373596][T17550] R13: 0000000000000000 R14: 00000000004db6c8 R15: 0000000000000003 11:42:33 executing program 3 (fault-call:0 fault-nth:32): syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 992.543584][T17573] EXT4-fs warning (device sda1): ext4_resize_begin:45: There are errors in the filesystem, so online resizing is not allowed [ 992.605821][T17578] FAULT_INJECTION: forcing a failure. [ 992.605821][T17578] name failslab, interval 1, probability 0, space 0, times 0 [ 992.619160][T17578] CPU: 1 PID: 17578 Comm: syz-executor3 Not tainted 5.0.0-rc1-next-20190114 #11 [ 992.628186][T17578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 992.638246][T17578] Call Trace: [ 992.641563][T17578] dump_stack+0x1db/0x2d0 [ 992.645912][T17578] ? dump_stack_print_info.cold+0x20/0x20 [ 992.651657][T17578] should_fail.cold+0xa/0x14 [ 992.656266][T17578] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 992.662083][T17578] ? __sigqueue_alloc+0x235/0x710 [ 992.667114][T17578] ? find_held_lock+0x35/0x120 [ 992.671891][T17578] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 992.678170][T17578] __should_failslab+0x121/0x190 [ 992.683119][T17578] should_failslab+0x9/0x14 [ 992.687633][T17578] kmem_cache_alloc+0x47/0x710 [ 992.692417][T17578] __sigqueue_alloc+0x3ca/0x710 [ 992.697283][T17578] ? dequeue_signal+0x6a0/0x6a0 [ 992.702622][T17578] ? __lock_acquire+0x572/0x4a10 [ 992.707570][T17578] ? mark_held_locks+0x100/0x100 [ 992.712521][T17578] __send_signal+0xdbb/0x1a10 [ 992.717214][T17578] ? prepare_signal+0xe10/0xe10 [ 992.717298][T17578] ? lock_acquire+0x1db/0x570 [ 992.717313][T17578] ? force_sig_info+0x55/0x310 [ 992.717346][T17578] ? kasan_check_write+0x14/0x20 [ 992.717361][T17578] ? do_raw_spin_lock+0x156/0x360 [ 992.717373][T17578] ? lock_release+0xc40/0xc40 [ 992.717390][T17578] ? rwlock_bug.part.0+0x90/0x90 [ 992.717404][T17578] ? trace_hardirqs_on_caller+0x310/0x310 [ 992.717433][T17578] send_signal+0x49/0xd0 [ 992.726977][T17578] force_sig_info+0x251/0x310 [ 992.727004][T17578] force_sig_fault+0x11b/0x180 [ 992.727021][T17578] ? force_sigsegv+0x120/0x120 [ 992.727047][T17578] ? kasan_check_write+0x14/0x20 [ 992.727059][T17578] ? up_read+0x212/0x2b0 [ 992.727082][T17578] __bad_area_nosemaphore+0x332/0x420 [ 992.727103][T17578] ? vmacache_find+0x65/0x310 [ 992.794665][T17578] bad_area+0x69/0x80 [ 992.798656][T17578] __do_page_fault+0x996/0xda0 [ 992.798672][T17578] ? __ia32_sys_mknod+0xb0/0xb0 [ 992.798690][T17578] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 992.798716][T17578] do_page_fault+0xe6/0x7d8 [ 992.798731][T17578] ? trace_hardirqs_on_caller+0xc0/0x310 [ 992.798751][T17578] ? vmalloc_sync_all+0x30/0x30 [ 992.798764][T17578] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 992.798783][T17578] ? syscall_return_slowpath+0x5f0/0x5f0 [ 992.798808][T17578] ? prepare_exit_to_usermode+0x232/0x3b0 [ 992.808403][T17578] ? page_fault+0x8/0x30 [ 992.808423][T17578] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 992.808441][T17578] ? page_fault+0x8/0x30 [ 992.808456][T17578] page_fault+0x1e/0x30 [ 992.808469][T17578] RIP: 0033:0x451b7f [ 992.808484][T17578] Code: bc d1 f3 0f 7f 27 f3 0f 7f 6f 10 f3 0f 7f 77 20 f3 0f 7f 7f 30 49 83 c0 0f 49 29 d0 48 8d 7c 17 31 e9 95 0b 00 00 66 0f ef c0 0f 6f 0e f3 0f 6f 56 10 66 0f 74 c1 66 0f d7 d0 49 83 f8 11 0f [ 992.808492][T17578] RSP: 002b:00007fd92d4aaa88 EFLAGS: 00010283 [ 992.808505][T17578] RAX: 00007fd92d4aab30 RBX: 0000000000000010 RCX: 0000000000000000 [ 992.808514][T17578] RDX: 00000000000000e0 RSI: 0000000000000000 RDI: 00007fd92d4aab30 [ 992.808530][T17578] RBP: 0000000000000000 R08: 00000000000000e0 R09: 000000000000000a [ 992.856977][T17578] R10: 0000000000000075 R11: 00000000004e09c0 R12: 0000000000000004 [ 992.856987][T17578] R13: 0000000000000000 R14: 00000000004db6c8 R15: 0000000000000003 [ 992.866548][T17578] gfs2: not a GFS2 filesystem [ 993.886740][T14847] Bluetooth: hci0: command 0x1003 tx timeout [ 993.892845][T10211] Bluetooth: hci0: sending frame failed (-49) [ 995.966780][T14847] Bluetooth: hci0: command 0x1001 tx timeout [ 995.972895][T10211] Bluetooth: hci0: sending frame failed (-49) [ 998.046977][T16517] Bluetooth: hci0: command 0x1009 tx timeout 11:42:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40000, 0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={r3, 0x5, 0x30}, &(0x7f0000000200)=0xc) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) 11:42:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x800455ca, 0x0) 11:42:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f00000001c0)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x14000, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000040)=""/43, &(0x7f00000000c0)=0x2b) 11:42:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)="7107fcad417f9274dcaa937e3a16acb4a36015c737ae31270a1407ee0e0c336ed917778ae6f06d2201d3daf41391075a5e317cafdc399b54975f2087616718febade32f5fd8acc068749a39d442a0bce690cf2f2fa4037ddf332e1046e79aa67fbfad069dcd5f6d3c38fa3d6a435fb61b9bf01a4f62e", 0x76}, {&(0x7f0000000200)="42abf69110d0fc17a6c753f6e0423f95f48de93fbc35bf0e1726e865d04cc44fa46a7af45740e56d50c0c8dc7722a19c493744a94844249d21134311f7f2d70e5ee6ddda9658cfb6b958a722fc29f13b98414e1bdd24ec17bba715313cdbf02564f2513c20e70f44aece68e88167621db27f3371f0f34fb713be78ee40c4a76b1135f3f27039d35b619e8f1552d1f64ebdf80b76107c8d2ade", 0x99}, {&(0x7f00000002c0)="a1e89afdd6152e09cd1a7ab16db695ae86b5eec9cf851f52e287d2d5cc6b207e43", 0x21}, {&(0x7f0000000300)="fbff33f930350560d8637c824ba3fc8f441f461bdedc1c958e0bcc9d22c87977bfbcd7397cd433a82a2be390be49d795b0710366892dde44301abbf89fa1089afd151ab001ed3bdd63c9b95b6bf98fe470c307572a6e9d6a8608dd6a660c269be13f10fdc0ef49201d74592d6476dc3d5593ea8664e519e8f1a91e2e9c07deb933b7f33ac8219eaa09ec6472f4b72b2549e01638ae55e739d330d31282", 0x9d}, {&(0x7f00000003c0)="c9b07bbb80863b44facedc2e2957aa681b4a1001a744a6dbf1e6c6844cd5fba2fb6eb46e5902d05a3d510dc227647671c0c2721c530a471bf18a48f373ec4622151b7732f81f73f5a2fff662481abfbeb1f69b265ff313624c8a751c620d89f1d814d9a2c190ad796a1849030e41cba725307911760169375ae1ff84b75881aef10e", 0x82}], 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") fcntl$dupfd(r0, 0x0, r0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000100)={{0x0, @multicast1, 0x4e21, 0x2, 'ovf\x00', 0x0, 0x400, 0x43}, {@rand_addr=0x1, 0x4e24, 0x2000, 0x5, 0x7fff, 0x80}}, 0x44) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x400, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='memory\x01\x00\x00\x00\x16\x00\x00\x00\xeafW\x1dn\xf0\x130\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086610, &(0x7f0000000000)) 11:42:43 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) get_robust_list(r0, &(0x7f0000000200)=&(0x7f00000001c0)={&(0x7f00000000c0)={&(0x7f0000000040)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, &(0x7f0000000240)=0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x40000) ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0106418, &(0x7f0000000300)={0x8, 0xffff, 0x6, 0xe39, 0x11, 0x6}) r3 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) r4 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x5, 0x400002) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x2a, &(0x7f0000000340)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, 0x0}, 0x288) fcntl$setsig(r4, 0xa, 0x3c) ioctl$VIDIOC_CROPCAP(r3, 0x400455cb, 0x0) 11:42:43 executing program 3 (fault-call:0 fault-nth:33): syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1002.253080][T17591] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 1002.272904][T17600] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 1002.295916][T17599] FAULT_INJECTION: forcing a failure. [ 1002.295916][T17599] name failslab, interval 1, probability 0, space 0, times 0 [ 1002.308517][T17599] CPU: 1 PID: 17599 Comm: syz-executor3 Not tainted 5.0.0-rc1-next-20190114 #11 [ 1002.317538][T17599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1002.327598][T17599] Call Trace: [ 1002.330903][T17599] dump_stack+0x1db/0x2d0 [ 1002.335241][T17599] ? dump_stack_print_info.cold+0x20/0x20 [ 1002.340972][T17599] ? debug_smp_processor_id+0x1c/0x20 [ 1002.346359][T17599] ? perf_trace_lock+0x12f/0x750 [ 1002.351317][T17599] should_fail.cold+0xa/0x14 [ 1002.355932][T17599] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1002.361754][T17599] ? __sigqueue_alloc+0x235/0x710 [ 1002.361771][T17599] ? find_held_lock+0x35/0x120 [ 1002.361810][T17599] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1002.361855][T17599] __should_failslab+0x121/0x190 [ 1002.361878][T17599] should_failslab+0x9/0x14 [ 1002.361894][T17599] kmem_cache_alloc+0x47/0x710 [ 1002.361920][T17599] __sigqueue_alloc+0x3ca/0x710 [ 1002.396910][T17599] ? dequeue_signal+0x6a0/0x6a0 11:42:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) fcntl$lock(r1, 0x24, &(0x7f0000000000)) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory\x01\x00\x00\x00\x16\x00\x00\x00\xeafW\x1dn\xf0\x130\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086610, &(0x7f0000000000)) 11:42:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0x800455ca, 0x0) [ 1002.401779][T17599] ? __lock_acquire+0x572/0x4a10 [ 1002.406723][T17599] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1002.412971][T17599] ? check_preemption_disabled+0x48/0x290 [ 1002.412985][T17599] ? mark_held_locks+0x100/0x100 [ 1002.413009][T17599] __send_signal+0xdbb/0x1a10 [ 1002.428349][T17599] ? prepare_signal+0xe10/0xe10 [ 1002.428374][T17599] ? lock_acquire+0x1db/0x570 [ 1002.428389][T17599] ? force_sig_info+0x55/0x310 [ 1002.428412][T17599] ? kasan_check_write+0x14/0x20 [ 1002.428428][T17599] ? do_raw_spin_lock+0x156/0x360 11:42:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f00000001c0)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x14000, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000040)=""/43, &(0x7f00000000c0)=0x2b) [ 1002.428442][T17599] ? lock_release+0xc40/0xc40 [ 1002.428460][T17599] ? rwlock_bug.part.0+0x90/0x90 [ 1002.428475][T17599] ? trace_hardirqs_on_caller+0x310/0x310 [ 1002.428506][T17599] send_signal+0x49/0xd0 [ 1002.447752][T17599] force_sig_info+0x251/0x310 [ 1002.457437][T17599] force_sig_fault+0x11b/0x180 [ 1002.457456][T17599] ? force_sigsegv+0x120/0x120 [ 1002.457485][T17599] ? kasan_check_write+0x14/0x20 [ 1002.457498][T17599] ? up_read+0x212/0x2b0 [ 1002.457523][T17599] __bad_area_nosemaphore+0x332/0x420 [ 1002.481804][T17599] ? vmacache_find+0x65/0x310 [ 1002.481829][T17599] bad_area+0x69/0x80 [ 1002.481859][T17599] __do_page_fault+0x996/0xda0 [ 1002.501119][T17599] ? __ia32_sys_mknod+0xb0/0xb0 [ 1002.501138][T17599] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1002.501168][T17599] do_page_fault+0xe6/0x7d8 [ 1002.501183][T17599] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1002.501206][T17599] ? vmalloc_sync_all+0x30/0x30 [ 1002.519446][T17599] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1002.535603][T17599] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1002.535623][T17599] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1002.535638][T17599] ? page_fault+0x8/0x30 [ 1002.535658][T17599] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1002.535677][T17599] ? page_fault+0x8/0x30 [ 1002.557997][T17599] page_fault+0x1e/0x30 [ 1002.558010][T17599] RIP: 0033:0x451b7f [ 1002.558025][T17599] Code: bc d1 f3 0f 7f 27 f3 0f 7f 6f 10 f3 0f 7f 77 20 f3 0f 7f 7f 30 49 83 c0 0f 49 29 d0 48 8d 7c 17 31 e9 95 0b 00 00 66 0f ef c0 0f 6f 0e f3 0f 6f 56 10 66 0f 74 c1 66 0f d7 d0 49 83 f8 11 0f [ 1002.558033][T17599] RSP: 002b:00007fd92d4aaa88 EFLAGS: 00010283 [ 1002.558045][T17599] RAX: 00007fd92d4aab30 RBX: 0000000000000010 RCX: 0000000000000000 [ 1002.558054][T17599] RDX: 00000000000000e0 RSI: 0000000000000000 RDI: 00007fd92d4aab30 [ 1002.558062][T17599] RBP: 0000000000000000 R08: 00000000000000e0 R09: 000000000000000a [ 1002.558071][T17599] R10: 0000000000000075 R11: 00000000004e09c0 R12: 0000000000000004 [ 1002.558087][T17599] R13: 0000000000000000 R14: 00000000004db6c8 R15: 0000000000000003 11:42:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0x800455ca, 0x0) [ 1002.564931][T17610] EXT4-fs warning (device sda1): ext4_resize_begin:45: There are errors in the filesystem, so online resizing is not allowed [ 1002.578902][T17599] gfs2: not a GFS2 filesystem 11:42:43 executing program 3 (fault-call:0 fault-nth:34): syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:42:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory\x01\x00\x00\x00\x16\x00\x00\x00\xeafW\x1dn\xf0\x130\x00', 0x26e1, 0x0) tee(r1, r1, 0x10000, 0x6) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086610, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xe3c, 0x1, 0xc658, 0x80000001, 0xfffffffffffff3dc}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r2, 0x1f}, 0x8) [ 1002.789360][T17624] FAULT_INJECTION: forcing a failure. [ 1002.789360][T17624] name failslab, interval 1, probability 0, space 0, times 0 [ 1002.837296][T17624] CPU: 1 PID: 17624 Comm: syz-executor3 Not tainted 5.0.0-rc1-next-20190114 #11 [ 1002.846363][T17624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1002.856432][T17624] Call Trace: [ 1002.859752][T17624] dump_stack+0x1db/0x2d0 [ 1002.864094][T17624] ? dump_stack_print_info.cold+0x20/0x20 [ 1002.869827][T17624] ? add_lock_to_list.isra.0+0x450/0x450 [ 1002.875491][T17624] should_fail.cold+0xa/0x14 [ 1002.880100][T17624] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1002.885927][T17624] ? ___might_sleep+0x1e7/0x310 [ 1002.890792][T17624] ? arch_local_save_flags+0x50/0x50 [ 1002.896095][T17624] ? lock_downgrade+0xbe0/0xbe0 [ 1002.900952][T17624] ? lock_release+0xc40/0xc40 [ 1002.905649][T17624] __should_failslab+0x121/0x190 [ 1002.910626][T17624] should_failslab+0x9/0x14 [ 1002.915144][T17624] __kmalloc_track_caller+0x2d8/0x740 [ 1002.920533][T17624] ? strncpy_from_user+0x4e0/0x4e0 [ 1002.925664][T17624] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1002.932380][T17624] ? strndup_user+0x77/0xd0 [ 1002.936902][T17624] memdup_user+0x26/0xb0 [ 1002.941160][T17624] strndup_user+0x77/0xd0 [ 1002.945548][T17624] ksys_mount+0x7b/0x150 [ 1002.949820][T17624] __x64_sys_mount+0xbe/0x150 [ 1002.954527][T17624] do_syscall_64+0x1a3/0x800 [ 1002.959133][T17624] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1002.963249][T17634] EXT4-fs warning (device sda1): ext4_resize_begin:45: There are errors in the filesystem, so online resizing is not allowed [ 1002.964774][T17624] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1002.964799][T17624] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1002.964831][T17624] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1002.994885][T17624] RIP: 0033:0x45a93a [ 1002.998797][T17624] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ed 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ca 8c fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 1003.018423][T17624] RSP: 002b:00007fd92d4aaa88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1003.026855][T17624] RAX: ffffffffffffffda RBX: 00007fd92d4aab30 RCX: 000000000045a93a [ 1003.034836][T17624] RDX: 00007fd92d4aaad0 RSI: 0000000020000300 RDI: 00007fd92d4aaaf0 [ 1003.039677][T17637] EXT4-fs warning (device sda1): ext4_resize_begin:45: There are errors in the filesystem, so online resizing is not allowed [ 1003.042820][T17624] RBP: 0000000020000300 R08: 00007fd92d4aab30 R09: 00007fd92d4aaad0 [ 1003.042831][T17624] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 1003.042840][T17624] R13: 0000000000000000 R14: 00000000004db6c8 R15: 0000000000000003 [ 1004.766702][T14847] Bluetooth: hci1: command 0x1003 tx timeout [ 1004.772773][T14847] Bluetooth: hci0: command 0x1003 tx timeout [ 1004.772817][ T1170] Bluetooth: hci1: sending frame failed (-49) [ 1004.785825][ T1170] Bluetooth: hci0: sending frame failed (-49) [ 1006.846752][T16517] Bluetooth: hci0: command 0x1001 tx timeout [ 1006.852917][T16517] Bluetooth: hci1: command 0x1001 tx timeout [ 1006.852984][ T1170] Bluetooth: hci0: sending frame failed (-49) [ 1006.865147][ T1170] Bluetooth: hci1: sending frame failed (-49) [ 1008.926778][T14847] Bluetooth: hci1: command 0x1009 tx timeout [ 1008.932834][T14847] Bluetooth: hci0: command 0x1009 tx timeout 11:42:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000000)={0x3, 0x3}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r2, 0x400455c8, 0x0) 11:42:54 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r0, 0x400455cb, 0x0) r1 = dup(r0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) 11:42:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0x800455ca, 0x0) 11:42:54 executing program 5: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x100) write$P9_RXATTRWALK(r0, &(0x7f0000000280)={0xf, 0x1f, 0x2, 0x6}, 0xf) r1 = accept$packet(0xffffffffffffff9c, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) flistxattr(r1, &(0x7f0000000100)=""/218, 0xda) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000340)={0x0, 0x0, @ioapic}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x400000, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory\x01\x00\x00\x00\x16\x00\x00\x00\xeafW\x1dn\xf0\x130\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086610, &(0x7f0000000000)) 11:42:54 executing program 3 (fault-call:0 fault-nth:35): syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1013.159521][T17648] FAULT_INJECTION: forcing a failure. [ 1013.159521][T17648] name failslab, interval 1, probability 0, space 0, times 0 [ 1013.220027][T17648] CPU: 1 PID: 17648 Comm: syz-executor3 Not tainted 5.0.0-rc1-next-20190114 #11 [ 1013.229086][T17648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1013.239137][T17648] Call Trace: [ 1013.239163][T17648] dump_stack+0x1db/0x2d0 [ 1013.239188][T17648] ? dump_stack_print_info.cold+0x20/0x20 [ 1013.239223][T17648] should_fail.cold+0xa/0x14 [ 1013.239247][T17648] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1013.239274][T17648] ? ___might_sleep+0x1e7/0x310 [ 1013.239297][T17648] ? arch_local_save_flags+0x50/0x50 [ 1013.246905][T17648] __should_failslab+0x121/0x190 [ 1013.246925][T17648] should_failslab+0x9/0x14 [ 1013.246940][T17648] __kmalloc_track_caller+0x2d8/0x740 [ 1013.246957][T17648] ? strncpy_from_user+0x4e0/0x4e0 [ 1013.246974][T17648] ? strndup_user+0x77/0xd0 [ 1013.246993][T17648] memdup_user+0x26/0xb0 [ 1013.301750][T17648] strndup_user+0x77/0xd0 [ 1013.306091][T17648] ksys_mount+0x3c/0x150 [ 1013.310356][T17648] __x64_sys_mount+0xbe/0x150 [ 1013.315063][T17648] do_syscall_64+0x1a3/0x800 [ 1013.319666][T17648] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1013.325309][T17648] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1013.331050][T17648] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1013.336607][T17648] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1013.342502][T17648] RIP: 0033:0x45a93a [ 1013.346404][T17648] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ed 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ca 8c fb ff c3 66 0f 1f 84 00 00 00 00 00 11:42:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0x800455ca, 0x0) 11:42:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x101400, 0x0) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000040)) 11:42:54 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x3}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x1000000}, [@map={0x18, 0x3, 0x1, 0x0, r0}], {0x95, 0xffffffff00000000}}, &(0x7f0000000440)='syzkaller\x00', 0x6, 0x21a, &(0x7f00000000c0)=""/144}, 0x48) 11:42:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x420800) r2 = openat$cgroup_ro(r1, &(0x7f0000000300)='memory\x01\x00\x00\x00\x16\x00\x00\x00\xeafW\x1dn\xf0\x130\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086610, &(0x7f0000000000)) [ 1013.366012][T17648] RSP: 002b:00007fd92d4aaa88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1013.374431][T17648] RAX: ffffffffffffffda RBX: 00007fd92d4aab30 RCX: 000000000045a93a [ 1013.382417][T17648] RDX: 00007fd92d4aaad0 RSI: 0000000020000300 RDI: 00007fd92d4aaaf0 [ 1013.390398][T17648] RBP: 0000000020000300 R08: 00007fd92d4aab30 R09: 00007fd92d4aaad0 [ 1013.398376][T17648] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 1013.406373][T17648] R13: 0000000000000000 R14: 00000000004db6c8 R15: 0000000000000003 11:42:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x40000000000000}) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x2, 0x20600) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000180)='eql\x00') r3 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x80000000, 0x101000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={r2, r3, 0x0, 0x1}, 0x10) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000240)=0x100) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) 11:42:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x500, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000300)='\x00\x00\x00\x00cct.usage_all\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086610, &(0x7f0000000000)) 11:42:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0x800455ca, 0x0) [ 1015.486787][T16517] Bluetooth: hci0: command 0x1003 tx timeout [ 1015.494401][T10209] Bluetooth: hci0: sending frame failed (-49) [ 1017.566789][T16517] Bluetooth: hci0: command 0x1001 tx timeout [ 1017.572922][T10209] Bluetooth: hci0: sending frame failed (-49) [ 1019.646713][T14847] Bluetooth: hci0: command 0x1009 tx timeout 11:43:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a4e7450c4c1310adc1f02c7c4109823562bfbe2bd1ca44e5b75a3a0bae85e4585a7a50600000000000000ddd2f357bce025bbb56ed64c5f5b5b943147aa2fbee9e7f18ee0") prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.stat\x00', 0x26e1, 0x0) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) 11:43:05 executing program 3 (fault-call:0 fault-nth:36): syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:43:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0x800455ca, 0x0) 11:43:05 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x2da802004d180600, 0x500001c) socketpair(0x0, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) 11:43:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000040)={0xfffffffffffff05e, 0x3ff, 0x200, 0x4c7, 0x1, 0x2, 0x4, 0xffff, 0x0}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000001c0)={r2, 0x8001}, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x25f6, 0x0, 0x4, 0xffffffffffffffff}) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000080)={0x3000, 0x4, 0x7fffffff, 0x1, 0xffffffff}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0xf) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000300)) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0x400455c8, 0x0) r3 = getpgrp(0x0) r4 = getuid() r5 = getegid() setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={r3, r4, r5}, 0xc) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f00000002c0)={0x3, &(0x7f0000000280)=[{0xffff, 0xfffffffffffffe41, 0x4, 0x9}, {0x4, 0x5d, 0x4, 0x6}, {0x101, 0x3, 0xf91f, 0x8000}]}) 11:43:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x400000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) [ 1024.074136][T17698] FAULT_INJECTION: forcing a failure. [ 1024.074136][T17698] name failslab, interval 1, probability 0, space 0, times 0 11:43:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x800455ca, 0x0) [ 1024.144218][T17698] CPU: 0 PID: 17698 Comm: syz-executor3 Not tainted 5.0.0-rc1-next-20190114 #11 [ 1024.153275][T17698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1024.163388][T17698] Call Trace: [ 1024.166710][T17698] dump_stack+0x1db/0x2d0 [ 1024.171059][T17698] ? dump_stack_print_info.cold+0x20/0x20 [ 1024.176829][T17698] ? add_lock_to_list.isra.0+0x450/0x450 [ 1024.182484][T17698] should_fail.cold+0xa/0x14 [ 1024.187095][T17698] ? fault_create_debugfs_attr+0x1e0/0x1e0 11:43:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000480)={0x0, 0x57, "661dc52d6663a3c7a2f900266d845e38f3ffa248990eac0a36760ab6649e6de94b759e2aaf400d44a8069ed54a6a656b930bfa7c835546cc60beb2af36244500f5773ab44c2485934cd41cae99352f944ee428fde5c7db"}, &(0x7f0000000500)=0x5f) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e21, @empty}}}, &(0x7f0000000600)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000008c0)=[{&(0x7f0000000040)=@in6={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, [], 0x12}, 0x8}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000140)="250ffe21d0fbfe4fc73c9119f09b97d846778800a1e36d498eb547820f37170e02ad13690e98e9d2f47c765d088bed77392a814e0779214bb95c692c7c158a7778257b1a9b4c96a719cf544eb5dcbdc37e22abf7b822f320501bc5c54536faebe3f184b987e05e2429c4de7368a0154b0bdbd9bd89aff88dd5db18656de80e355096ab3604a4924f05d1b1a9e304a202ea6a4e96af416fa742aceb74c35a9439fa840f2301c03395cf4c2609b12e21507bc4b86a49b2cec312b3ca122737bbbcd331dd2f51eb4d", 0xc7}, {&(0x7f0000000240)="3d899a424fb61ceb6c8c5e26bd049f5b798991dc5f0f58091fca3582af085010d4e50a5c94d8cb9ad7e2eabfa1ac32a2dc9863d222d23a6461f64b86c651085c890c7f67633e51ff35e3de61b6c10d294bd04f75a34f40e99c3b303e058712490d600b6359382bafa56c2bbd81140b0fec5ccd99c8f4540dafe47d62250678532d97d9324a06eb91d481dac3f8736fdc79f028800d5c07359fb10c670996baa68a9a7d2dfe6ffb08552a0e5be0ca2a77a78ff4bc4e486b844827e6afefdeedf6cb765be19f", 0xc5}, {&(0x7f0000000340)="9708089fffa9eae12f7dcfa157334d7a1ff95ef3835bd5cac3e5a4a060bb8b589797015a8c205b21e83164eb813d566c22086e7f66ca0e11de6c5166d36a92960836f6a564b9fefe16517e03225e98d21d13744f963cf881c5e0a9025de10da22ba5300ef755d2f6753e620dbd2e4737ffe640e9f883abf88f2de3b1161a986ed9c3f2da97e3c9143b081aaf4fa79e6e1e5c98422c0444291d59c436a7eb586f7fc9747c433b0036a43da156c8b30d461326252f693c6d37d5", 0xb9}, {&(0x7f0000000400)="bd0b61c403b3340f910209bd5d75070ffa7016eab2a57dd813c0b001f66a8bbf5954d48f3641947ab0984b01289ad1953b011d0e7163c3f82dd546a0d5b01be2338772edd34fa108faa83a5723478be65917a420d432549f4719783f30e4598d64d656f871d81b5214d3779b90091c9f8c43ad10121e775f7fb5", 0x7a}], 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="300000007dd4fbdf497cdbe4ce000000008400000001000000f70b06000080000006000000000000007d0000", @ANYRES32=r3, @ANYBLOB="180000000000000084000000060000000100000000000000180000000000000084000000060000000700000000000000200000000000000084000000020000007f000400010400007c070000", @ANYRES32=r4], 0x80, 0x20000000}, {&(0x7f00000006c0)=@in6={0xa, 0x4e23, 0x7, @empty, 0x6d97}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000700)="79a2aef64d13b7f5f22f586567ea6b0cf6a97e3f25e8ce7902350e361b0f874b023b217a582aa92c8cc8890d1fc3a3126257105ba745fa32719dd22df4de41dd9846d6acda32df4bbb2c779bad555387e7dfc7c1d840cba3acc89b299af9c8b0feb4c787f283fee88a2a6512efc2b4a4150810c8ffd9ba1c15e25c1d3808007f54ab94d013fa0b43bf581dd86cc8fd3eb11f6fcb19923e4e269e5bb2940553a3211d6ac3447a588ac1", 0xa9}, {&(0x7f00000007c0)="576476cb4dcb69e7de4a87946d77b3ea92bee5654986ad29d1dd2aae999be58c2b12ecb98da866d23239df4a0854967c871a680abd3a3fe3c2d401f98596038ac7dedbadc4e9a1cc8a807a71badd7f1d06ef384c98d5056043c818305addf60c7446032f5b1e20870a0ec3b8eb5cbb18bfbbbefb43373ef9efbe34d0a29c07a4721c2c95bd65fe19a82d7049023ce36b41a73590e5b1f81856507f5255b828b9870c8362b2ca9b75f3f3ab1e7ba08605ff83ab4cf9bffb19d5abb766", 0xbc}], 0x2, 0x0, 0x0, 0x1}], 0x2, 0xf6aa52d93ee788a4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) [ 1024.192921][T17698] ? ___might_sleep+0x1e7/0x310 [ 1024.197783][T17698] ? arch_local_save_flags+0x50/0x50 [ 1024.203074][T17698] ? lock_downgrade+0xbe0/0xbe0 [ 1024.207936][T17698] ? __check_object_size+0xa3/0x790 [ 1024.213146][T17698] __should_failslab+0x121/0x190 [ 1024.218122][T17698] should_failslab+0x9/0x14 [ 1024.222641][T17698] kmem_cache_alloc_trace+0x2d1/0x760 [ 1024.228028][T17698] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1024.234276][T17698] ? _copy_from_user+0xdd/0x150 [ 1024.239143][T17698] copy_mount_options+0x5c/0x440 [ 1024.244093][T17698] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1024.250392][T17698] ksys_mount+0xa7/0x150 [ 1024.254667][T17698] __x64_sys_mount+0xbe/0x150 [ 1024.259382][T17698] do_syscall_64+0x1a3/0x800 [ 1024.263991][T17698] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1024.269640][T17698] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1024.275612][T17698] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1024.281182][T17698] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1024.287078][T17698] RIP: 0033:0x45a93a [ 1024.290978][T17698] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ed 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ca 8c fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 1024.311578][T17698] RSP: 002b:00007fd92d4aaa88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1024.311595][T17698] RAX: ffffffffffffffda RBX: 00007fd92d4aab30 RCX: 000000000045a93a [ 1024.311605][T17698] RDX: 00007fd92d4aaad0 RSI: 0000000020000300 RDI: 00007fd92d4aaaf0 [ 1024.311614][T17698] RBP: 0000000020000300 R08: 00007fd92d4aab30 R09: 00007fd92d4aaad0 11:43:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory\x01\x00\x00\x00\x16\x00\x00\x00\xeafW\x1dn\xf0\x130\x00', 0x26e1, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086610, &(0x7f0000000000)) [ 1024.311624][T17698] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 1024.311633][T17698] R13: 0000000000000000 R14: 00000000004db6c8 R15: 0000000000000003 11:43:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x800455ca, 0x0) [ 1024.384995][T17719] EXT4-fs warning (device sda1): ext4_resize_begin:45: There are errors in the filesystem, so online resizing is not allowed 11:43:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) [ 1024.420591][T17721] EXT4-fs warning (device sda1): ext4_resize_begin:45: There are errors in the filesystem, so online resizing is not allowed 11:43:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-monitor\x00', 0x208a40, 0x0) syz_open_dev$radio(&(0x7f0000000300)='/dev/radio#\x00', 0x1, 0x2) r2 = syz_open_dev$cec(&(0x7f0000000340)='/dev/cec#\x00', 0x3, 0x2) ioctl$VIDIOC_CROPCAP(r2, 0x400455c8, 0x0) r3 = gettid() ptrace$poke(0x5, r3, &(0x7f0000000000), 0x5ec8d5af) r4 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x4, 0x101000) setsockopt$inet_tcp_buf(r4, 0x6, 0x1f, &(0x7f00000001c0)="aebb46be4f02ada025173f5cb06d09f0a0e578ff0eba0c5be90f5ef6295678da057e0c220166136f45c94fdb73733202c99f2715d92cadea0eaee1c368069904ad1428d660e41ac90fa95509dd1fbc1881850188fec9ea9ff73f70ac5a036ebc870840b322a9b700cb3a2285a9e5dfe65d95bccc98f71fb7425ff8ba99186170564450e088b3a1187dc1102549a4ac41538d890d274dff91", 0x98) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f00000000c0)) write$P9_RRENAME(r4, &(0x7f0000000280)={0x7, 0x15, 0x1}, 0xfda7) [ 1024.494672][ T27] audit: type=1804 audit(1547466185.634:72): pid=17709 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir869193996/syzkaller.8fQOn7/428/memory.events" dev="sda1" ino=16795 res=1 11:43:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x800455ca, 0x0) 11:43:05 executing program 3 (fault-call:0 fault-nth:37): syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:43:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory\x01\x00\x00\x00\x16\x00\x00\x00\xeafW\x1dn\xf0\x130\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086610, &(0x7f0000000000)) r2 = gettid() sched_getattr(r2, &(0x7f0000000040), 0x30, 0x0) [ 1024.763654][T17744] FAULT_INJECTION: forcing a failure. [ 1024.763654][T17744] name failslab, interval 1, probability 0, space 0, times 0 [ 1024.788340][T17747] EXT4-fs warning (device sda1): ext4_resize_begin:45: There are errors in the filesystem, so online resizing is not allowed [ 1024.821528][T17744] CPU: 1 PID: 17744 Comm: syz-executor3 Not tainted 5.0.0-rc1-next-20190114 #11 [ 1024.830723][T17744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1024.840806][T17744] Call Trace: [ 1024.844128][T17744] dump_stack+0x1db/0x2d0 [ 1024.848478][T17744] ? dump_stack_print_info.cold+0x20/0x20 [ 1024.854225][T17744] ? add_lock_to_list.isra.0+0x450/0x450 [ 1024.859879][T17744] should_fail.cold+0xa/0x14 [ 1024.864494][T17744] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1024.870328][T17744] ? ___might_sleep+0x1e7/0x310 [ 1024.875196][T17744] ? arch_local_save_flags+0x50/0x50 [ 1024.880487][T17744] ? lock_downgrade+0xbe0/0xbe0 [ 1024.882913][ T27] audit: type=1804 audit(1547466185.964:73): pid=17699 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor0" name="/root/syzkaller-testdir869193996/syzkaller.8fQOn7/428/memory.events" dev="sda1" ino=16795 res=1 [ 1024.885343][T17744] ? __check_object_size+0xa3/0x790 [ 1024.885376][T17744] __should_failslab+0x121/0x190 [ 1024.885397][T17744] should_failslab+0x9/0x14 [ 1024.885413][T17744] kmem_cache_alloc_trace+0x2d1/0x760 [ 1024.885435][T17744] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1024.912519][T17747] EXT4-fs warning (device sda1): ext4_resize_begin:45: There are errors in the filesystem, so online resizing is not allowed [ 1024.915262][T17744] ? _copy_from_user+0xdd/0x150 [ 1024.915285][T17744] copy_mount_options+0x5c/0x440 [ 1024.915306][T17744] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1024.959479][T17744] ksys_mount+0xa7/0x150 [ 1024.959515][T17744] __x64_sys_mount+0xbe/0x150 [ 1024.959536][T17744] do_syscall_64+0x1a3/0x800 [ 1024.959556][T17744] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1024.959577][T17744] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1024.970053][T17744] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1024.970081][T17744] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1024.970093][T17744] RIP: 0033:0x45a93a 11:43:06 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x2da802004d180600, 0x500001c) socketpair(0x0, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) 11:43:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x3, 0x0, 0x3, 0x8a, 0x1, 0x6}) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) 11:43:06 executing program 2: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r0, 0x800455ca, 0x0) 11:43:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/autofs\x00', 0x200, 0x0) open(&(0x7f0000000480)='./file0\x00', 0x10000, 0x100) r1 = syz_open_dev$audion(&(0x7f00000004c0)='/dev/audio#\x00', 0x0, 0x80000) r2 = openat$cgroup_ro(r1, &(0x7f0000000380)='cpuset.effective_mems\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086610, &(0x7f0000000000)) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000100)={@empty, @dev={0xfe, 0x80, [], 0x13}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6, 0x4, 0xc1, 0x500, 0x6, 0x800008, r3}) 11:43:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000010002000000000002000600", @ANYRES32=r1, @ANYBLOB="040004000000000008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="10000500000000802000050000000000"], 0x3c, 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x9, 0xedd}) r4 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r4, 0x400455cb, 0x0) [ 1024.970108][T17744] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ed 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ca 8c fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 1024.970123][T17744] RSP: 002b:00007fd92d4aaa88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1024.979374][T17744] RAX: ffffffffffffffda RBX: 00007fd92d4aab30 RCX: 000000000045a93a [ 1024.979385][T17744] RDX: 00007fd92d4aaad0 RSI: 0000000020000300 RDI: 00007fd92d4aaaf0 [ 1024.979394][T17744] RBP: 0000000020000300 R08: 00007fd92d4aab30 R09: 00007fd92d4aaad0 [ 1024.979402][T17744] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 1024.979411][T17744] R13: 0000000000000000 R14: 00000000004db6c8 R15: 0000000000000003 [ 1025.035752][ T27] audit: type=1804 audit(1547466186.144:74): pid=17710 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir869193996/syzkaller.8fQOn7/428/memory.events" dev="sda1" ino=16795 res=1 11:43:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory\x01\x00\x00\x00\x16\x00\x00\x00\xeafW\x1dn\xf0\x130\x00', 0x26e1, 0x0) syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8, 0x2) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086610, &(0x7f0000000000)) 11:43:06 executing program 2: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r0, 0x800455ca, 0x0) 11:43:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff43dc, 0x0, 0x0, 0x0, 0x0, 0x4, 0xff}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r2 = getuid() syz_mount_image$hfs(&(0x7f00000000c0)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000180)="88aae99e4ed406eeef6b8fa1f677ff2102a424ba9c43eb004a3d29a914e4978451afd4f40107e91ba3ed8f3d3cde1d67bbd06ef07e658f2c9afb3aa286220c6050a4c841e863545a93320178c46e404c948d9627ebdfd87493b79c6b252fd5755165f4a77ceffa70c6cf346e7f7e5f63524e0496dffb41145a59fb5d06984348e84259458869485218efd5571722d5444e584cc03c596a1fc0152b31fdaf35cbdfc1e0e1ea95f0889e31277a8b40a8adb32fbacc3bf5deece05063a881b411e1ddeb8cc146e0c3e573477844f763bf578e0176011321adc4059163b669068e7aacfbab242536626211", 0xe9, 0x2}, {&(0x7f0000000280)="c4a053cd7fc6c38cb77a17d42d6897a7", 0x10, 0x80000001}], 0x80404, &(0x7f0000000300)={[{@session={'session', 0x3d, 0x10}}, {@umask={'umask', 0x3d, 0xecf}}], [{@subj_type={'subj_type'}}, {@pcr={'pcr', 0x3d, 0x19}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@appraise_type='appraise_type=imasig'}, {@dont_appraise='dont_appraise'}, {@uid_lt={'uid<', r2}}, {@obj_type={'obj_type', 0x3d, '#mime_type$securityGPL'}}]}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x20000, 0x0) ioctl$VIDIOC_CROPCAP(r3, 0x400455cb, 0x0) 11:43:06 executing program 3 (fault-call:0 fault-nth:38): syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1025.269283][T17772] FAULT_INJECTION: forcing a failure. [ 1025.269283][T17772] name failslab, interval 1, probability 0, space 0, times 0 [ 1025.316822][T17781] EXT4-fs warning (device sda1): ext4_resize_begin:45: There are errors in the filesystem, so online resizing is not allowed [ 1025.317019][T17772] CPU: 1 PID: 17772 Comm: syz-executor3 Not tainted 5.0.0-rc1-next-20190114 #11 [ 1025.338784][T17772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1025.348891][T17772] Call Trace: [ 1025.352198][T17772] dump_stack+0x1db/0x2d0 [ 1025.356553][T17772] ? dump_stack_print_info.cold+0x20/0x20 [ 1025.358822][T17784] EXT4-fs warning (device sda1): ext4_resize_begin:45: There are errors in the filesystem, so online resizing is not allowed [ 1025.362284][T17772] ? save_stack+0x45/0xd0 [ 1025.362301][T17772] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1025.362317][T17772] ? kasan_kmalloc+0x9/0x10 [ 1025.362335][T17772] ? legacy_init_fs_context+0x48/0xe0 [ 1025.362373][T17772] should_fail.cold+0xa/0x14 [ 1025.399855][T17772] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1025.405682][T17772] ? ___might_sleep+0x1e7/0x310 [ 1025.410545][T17772] ? arch_local_save_flags+0x50/0x50 [ 1025.415844][T17772] ? check_preemption_disabled+0x48/0x290 [ 1025.421578][T17772] __should_failslab+0x121/0x190 [ 1025.426548][T17772] should_failslab+0x9/0x14 [ 1025.431069][T17772] __kmalloc_track_caller+0x2d8/0x740 [ 1025.436461][T17772] ? legacy_init_fs_context+0x48/0xe0 [ 1025.436479][T17772] ? vfs_parse_fs_string+0x226/0x2b0 [ 1025.436502][T17772] kmemdup_nul+0x31/0xa0 [ 1025.451382][T17772] vfs_parse_fs_string+0x226/0x2b0 [ 1025.451404][T17772] ? vfs_parse_fs_param+0x4b0/0x4b0 [ 1025.451429][T17772] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1025.451446][T17772] ? alloc_fs_context+0x3bb/0x640 [ 1025.451481][T17772] do_mount+0x710/0x2fa0 [ 1025.477252][T17772] ? copy_mount_string+0x40/0x40 [ 1025.482195][T17772] ? kmem_cache_alloc_trace+0x354/0x760 [ 1025.487758][T17772] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1025.494005][T17772] ? _copy_from_user+0xdd/0x150 [ 1025.498862][T17772] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1025.498892][T17772] ? copy_mount_options+0x30e/0x440 [ 1025.498916][T17772] ksys_mount+0xdb/0x150 11:43:06 executing program 2: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r0, 0x800455ca, 0x0) 11:43:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x3, 0x2000) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_user\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086610, &(0x7f0000000000)) [ 1025.498936][T17772] __x64_sys_mount+0xbe/0x150 [ 1025.498958][T17772] do_syscall_64+0x1a3/0x800 [ 1025.510382][T17772] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1025.510402][T17772] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1025.510425][T17772] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1025.510453][T17772] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1025.510465][T17772] RIP: 0033:0x45a93a [ 1025.510485][T17772] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ed 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ca 8c fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 1025.535284][T17772] RSP: 002b:00007fd92d4aaa88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1025.535300][T17772] RAX: ffffffffffffffda RBX: 00007fd92d4aab30 RCX: 000000000045a93a [ 1025.535310][T17772] RDX: 00007fd92d4aaad0 RSI: 0000000020000300 RDI: 00007fd92d4aaaf0 [ 1025.535320][T17772] RBP: 0000000020000300 R08: 00007fd92d4aab30 R09: 00007fd92d4aaad0 [ 1025.535329][T17772] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 1025.535338][T17772] R13: 0000000000000000 R14: 00000000004db6c8 R15: 0000000000000003 [ 1025.635657][ T27] audit: type=1804 audit(1547466186.774:75): pid=17771 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir869193996/syzkaller.8fQOn7/429/memory.events" dev="sda1" ino=16814 res=1 11:43:06 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x300, r0, &(0x7f0000000180)) 11:43:07 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x28, &(0x7f0000000380)}, 0x10) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(r0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f00000004c0)='./file0\x00', 0x0, 0x210}, 0x10) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x200000000002100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) close(r1) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x541b, 0x0) socketpair(0x26, 0x0, 0xfffffffffffffffe, 0x0) [ 1027.166718][T14847] Bluetooth: hci0: command 0x1003 tx timeout [ 1027.172823][T10209] Bluetooth: hci0: sending frame failed (-49) [ 1029.246818][T14847] Bluetooth: hci0: command 0x1001 tx timeout [ 1029.252920][T10209] Bluetooth: hci0: sending frame failed (-49) [ 1031.326783][T14847] Bluetooth: hci0: command 0x1009 tx timeout 11:43:16 executing program 3 (fault-call:0 fault-nth:39): syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:43:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x800455ca, 0x0) 11:43:16 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xc00) mkdir(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000000c0)={0xfffffffffffffec4, 0x0, 0x0, 0x21c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)="fc"}) 11:43:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400000, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) 11:43:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x40000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000400)={0x57, 0x2a8b, 0x3f, {0x4, 0x3}, {0x10001, 0x8}, @const={0xfffffffffffeffff, {0x200, 0xdd, 0x0, 0x30c}}}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), r3}}, 0x18) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r2, 0x400455c8, 0x0) 11:43:16 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xea\x93aG\xd4\xfd\x1eB\xdc`b\xce\xbbHe)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8mCR\xfc\xcb$u3\xec\xde%\xd0]\xd8\xebD\x82S\x17?\xd6As\xe3\xb1\x9aF\xe6\xba[\xc7%\x88 \xeeQR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)\xfb\xe0\tm\x17\xd8\xda@4\xbdj*T\x1e^\xf7o\xee\xdf\r\xb8w\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2\x16\x13{\x1aRo:\x16\x00+$\xedX\xb7KVqU\x18\xe2k\xbd\x0eV\x16\x14g\x1b\xb0\xcf\x93', 0x0) write(r0, &(0x7f0000000000)='/', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfec) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) fchmodat(r1, &(0x7f0000000080)='./file0\x00', 0x0) 11:43:16 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xc00) mkdir(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000000c0)={0xfffffffffffffec4, 0x0, 0x0, 0x21c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)="fc"}) [ 1035.582162][T17825] FAULT_INJECTION: forcing a failure. [ 1035.582162][T17825] name failslab, interval 1, probability 0, space 0, times 0 [ 1035.598843][T17830] binder: 17822:17830 ioctl c0306201 20000040 returned -11 11:43:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x75f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000002680)='/dev/zero\x00', 0x80, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000026c0)=0x1, 0x4) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) [ 1035.716234][T17825] CPU: 0 PID: 17825 Comm: syz-executor3 Not tainted 5.0.0-rc1-next-20190114 #11 [ 1035.725300][T17825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1035.735402][T17825] Call Trace: [ 1035.738711][T17825] dump_stack+0x1db/0x2d0 [ 1035.743066][T17825] ? dump_stack_print_info.cold+0x20/0x20 [ 1035.748806][T17825] should_fail.cold+0xa/0x14 [ 1035.753888][T17825] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1035.759716][T17825] ? ___might_sleep+0x1e7/0x310 11:43:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000180)={0x1000, {{0xa, 0x4e24, 0x404, @local, 0xa65}}, 0x1, 0x1, [{{0xa, 0x800004e24, 0x6, @ipv4={[], [], @local}, 0x7f}}]}, 0x110) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x4) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000340)=0xf) ioctl$VIDIOC_CROPCAP(r2, 0x400455cb, 0x0) io_setup(0x3, &(0x7f0000000080)=0x0) io_cancel(r3, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000380)="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", 0x1000, 0x3f, 0x0, 0x1, r1}, &(0x7f00000013c0)) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x1, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100), &(0x7f00000002c0)=0xb) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video1\x00', 0x2, 0x0) [ 1035.764584][T17825] ? arch_local_save_flags+0x50/0x50 [ 1035.769923][T17825] __should_failslab+0x121/0x190 [ 1035.774902][T17825] should_failslab+0x9/0x14 [ 1035.779434][T17825] kmem_cache_alloc_trace+0x2d1/0x760 [ 1035.784854][T17825] alloc_fs_context+0x5a/0x640 [ 1035.789654][T17825] fs_context_for_mount+0x25/0x30 [ 1035.794694][T17825] do_mount+0x15bb/0x2fa0 [ 1035.798768][T17843] binder: 17840:17843 ioctl c0306201 20000040 returned -11 [ 1035.799046][T17825] ? copy_mount_string+0x40/0x40 [ 1035.811168][T17825] ? kmem_cache_alloc_trace+0x354/0x760 11:43:16 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xc00) mkdir(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000000c0)={0xfffffffffffffec4, 0x0, 0x0, 0x21c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)="fc"}) [ 1035.816740][T17825] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1035.822987][T17825] ? _copy_from_user+0xdd/0x150 [ 1035.827853][T17825] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1035.834123][T17825] ? copy_mount_options+0x30e/0x440 [ 1035.839338][T17825] ksys_mount+0xdb/0x150 [ 1035.843619][T17825] __x64_sys_mount+0xbe/0x150 [ 1035.848312][T17825] do_syscall_64+0x1a3/0x800 [ 1035.852914][T17825] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1035.858565][T17825] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1035.864313][T17825] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1035.869881][T17825] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1035.875781][T17825] RIP: 0033:0x45a93a [ 1035.879685][T17825] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ed 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ca 8c fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 1035.899296][T17825] RSP: 002b:00007fd92d4aaa88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1035.907718][T17825] RAX: ffffffffffffffda RBX: 00007fd92d4aab30 RCX: 000000000045a93a 11:43:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x800455ca, 0x0) [ 1035.915693][T17825] RDX: 00007fd92d4aaad0 RSI: 0000000020000300 RDI: 00007fd92d4aaaf0 [ 1035.923670][T17825] RBP: 0000000020000300 R08: 00007fd92d4aab30 R09: 00007fd92d4aaad0 [ 1035.931719][T17851] binder: 17849:17851 ioctl c0306201 20000040 returned -11 [ 1035.931818][T17825] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 1035.946968][T17825] R13: 0000000000000000 R14: 00000000004db6c8 R15: 0000000000000003 11:43:17 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xc00) mkdir(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000000c0)={0xfffffffffffffec4, 0x0, 0x0, 0x21c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)="fc"}) 11:43:17 executing program 3 (fault-call:0 fault-nth:40): syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:43:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x800455ca, 0x0) 11:43:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x2040, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) close(r0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x2, 0x400001) [ 1036.155741][T17863] binder: 17862:17863 ioctl c0306201 20000040 returned -11 11:43:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x800455ca, 0x0) [ 1036.369089][T17877] FAULT_INJECTION: forcing a failure. [ 1036.369089][T17877] name failslab, interval 1, probability 0, space 0, times 0 [ 1036.382744][T17877] CPU: 0 PID: 17877 Comm: syz-executor3 Not tainted 5.0.0-rc1-next-20190114 #11 [ 1036.391804][T17877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1036.401857][T17877] Call Trace: [ 1036.401885][T17877] dump_stack+0x1db/0x2d0 [ 1036.401911][T17877] ? dump_stack_print_info.cold+0x20/0x20 [ 1036.401933][T17877] ? save_stack+0x45/0xd0 [ 1036.401961][T17877] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1036.425725][T17877] ? kasan_kmalloc+0x9/0x10 [ 1036.430242][T17877] ? legacy_init_fs_context+0x48/0xe0 [ 1036.435630][T17877] should_fail.cold+0xa/0x14 [ 1036.440227][T17877] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1036.440253][T17877] ? ___might_sleep+0x1e7/0x310 [ 1036.440276][T17877] ? arch_local_save_flags+0x50/0x50 [ 1036.456202][T17877] ? check_preemption_disabled+0x48/0x290 [ 1036.461952][T17877] __should_failslab+0x121/0x190 [ 1036.466896][T17877] should_failslab+0x9/0x14 [ 1036.466913][T17877] __kmalloc_track_caller+0x2d8/0x740 [ 1036.466934][T17877] ? legacy_init_fs_context+0x48/0xe0 [ 1036.466964][T17877] ? vfs_parse_fs_string+0x226/0x2b0 [ 1036.466986][T17877] kmemdup_nul+0x31/0xa0 [ 1036.467006][T17877] vfs_parse_fs_string+0x226/0x2b0 [ 1036.467025][T17877] ? vfs_parse_fs_param+0x4b0/0x4b0 [ 1036.467048][T17877] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1036.476902][T17877] ? alloc_fs_context+0x3bb/0x640 [ 1036.476945][T17877] do_mount+0x710/0x2fa0 [ 1036.476973][T17877] ? copy_mount_string+0x40/0x40 [ 1036.476993][T17877] ? kmem_cache_alloc_trace+0x354/0x760 [ 1036.477011][T17877] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1036.477031][T17877] ? _copy_from_user+0xdd/0x150 [ 1036.539170][T17877] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1036.545420][T17877] ? copy_mount_options+0x30e/0x440 [ 1036.550637][T17877] ksys_mount+0xdb/0x150 [ 1036.554892][T17877] __x64_sys_mount+0xbe/0x150 [ 1036.559590][T17877] do_syscall_64+0x1a3/0x800 [ 1036.564200][T17877] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1036.569860][T17877] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1036.575590][T17877] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1036.581164][T17877] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1036.587066][T17877] RIP: 0033:0x45a93a [ 1036.590963][T17877] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ed 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ca 8c fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 1036.610571][T17877] RSP: 002b:00007fd92d4aaa88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1036.618983][T17877] RAX: ffffffffffffffda RBX: 00007fd92d4aab30 RCX: 000000000045a93a [ 1036.626973][T17877] RDX: 00007fd92d4aaad0 RSI: 0000000020000300 RDI: 00007fd92d4aaaf0 [ 1036.634946][T17877] RBP: 0000000020000300 R08: 00007fd92d4aab30 R09: 00007fd92d4aaad0 [ 1036.642932][T17877] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 1036.650936][T17877] R13: 0000000000000000 R14: 00000000004db6c8 R15: 0000000000000003 [ 1037.726764][T16517] Bluetooth: hci1: command 0x1003 tx timeout [ 1037.732876][T16517] Bluetooth: hci0: command 0x1003 tx timeout [ 1037.739207][ T1170] Bluetooth: hci0: sending frame failed (-49) [ 1039.806805][T14847] Bluetooth: hci0: command 0x1001 tx timeout [ 1039.812853][T14847] Bluetooth: hci1: command 0x1001 tx timeout [ 1039.812924][ T1170] Bluetooth: hci0: sending frame failed (-49) [ 1041.886917][T16517] Bluetooth: hci1: command 0x1009 tx timeout [ 1041.892952][T16517] Bluetooth: hci0: command 0x1009 tx timeout 11:43:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x8) bind$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, {0x6, 0x7fff, 0x1f, 0x40, 0x1, 0x81}, 0x3}, 0xa) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) 11:43:27 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xc00) mkdir(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)="fc"}) 11:43:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x400, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7, 0x42002) bind$rose(r2, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @default}, 0x1c) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x80010, r0, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) 11:43:27 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xea\x93aG\xd4\xfd\x1eB\xdc`b\xce\xbbHe)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8mCR\xfc\xcb$u3\xec\xde%\xd0]\xd8\xebD\x82S\x17?\xd6As\xe3\xb1\x9aF\xe6\xba[\xc7%\x88 \xeeQR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)\xfb\xe0\tm\x17\xd8\xda@4\xbdj*T\x1e^\xf7o\xee\xdf\r\xb8w\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2\x16\x13{\x1aRo:\x16\x00+$\xedX\xb7KVqU\x18\xe2k\xbd\x0eV\x16\x14g\x1b\xb0\xcf\x93', 0x0) write(r0, &(0x7f0000000000)='/', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfec) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) fchmodat(r1, &(0x7f0000000080)='./file0\x00', 0x0) 11:43:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x800455ca, 0x0) 11:43:27 executing program 3 (fault-call:0 fault-nth:41): syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1045.953276][T17888] FAULT_INJECTION: forcing a failure. [ 1045.953276][T17888] name failslab, interval 1, probability 0, space 0, times 0 [ 1045.994680][T17888] CPU: 0 PID: 17888 Comm: syz-executor3 Not tainted 5.0.0-rc1-next-20190114 #11 [ 1046.003735][T17888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1046.013788][T17888] Call Trace: [ 1046.013815][T17888] dump_stack+0x1db/0x2d0 [ 1046.013838][T17888] ? dump_stack_print_info.cold+0x20/0x20 [ 1046.013868][T17888] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1046.033230][T17888] should_fail.cold+0xa/0x14 [ 1046.037834][T17888] ? fault_create_debugfs_attr+0x1e0/0x1e0 11:43:27 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xc00) mkdir(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)="fc"}) 11:43:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x800455ca, 0x0) [ 1046.043666][T17888] ? ___might_sleep+0x1e7/0x310 [ 1046.048522][T17888] ? arch_local_save_flags+0x50/0x50 [ 1046.053810][T17888] ? alloc_fs_context+0x5a/0x640 [ 1046.058762][T17888] __should_failslab+0x121/0x190 [ 1046.058803][T17888] should_failslab+0x9/0x14 [ 1046.058822][T17888] kmem_cache_alloc_trace+0x2d1/0x760 [ 1046.058838][T17888] ? rcu_read_lock_sched_held+0x110/0x130 [ 1046.058856][T17888] ? kmem_cache_alloc_trace+0x354/0x760 [ 1046.058883][T17888] legacy_init_fs_context+0x48/0xe0 11:43:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.events\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000400)) r2 = syz_open_pts(r0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x101, "710bfcb8cd796c6074e8c405e9b82c7e8330acadda286205e1ea9325ce917bb0", 0x5, 0x2, 0x3, 0xa58, 0x35bb, 0xacd8, 0x100000001, 0x8, [0x4, 0x3, 0x2, 0x4]}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) ioctl$VIDIOC_CROPCAP(r2, 0x400455cb, 0x0) [ 1046.090153][T17888] ? generic_parse_monolithic+0x240/0x240 [ 1046.095877][T17888] alloc_fs_context+0x365/0x640 [ 1046.095900][T17888] fs_context_for_mount+0x25/0x30 [ 1046.095932][T17888] do_mount+0x15bb/0x2fa0 [ 1046.095958][T17888] ? copy_mount_string+0x40/0x40 [ 1046.115050][T17888] ? kmem_cache_alloc_trace+0x354/0x760 [ 1046.120612][T17888] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1046.126863][T17888] ? _copy_from_user+0xdd/0x150 [ 1046.131730][T17888] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1046.137975][T17888] ? copy_mount_options+0x30e/0x440 11:43:27 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xc00) mkdir(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)="fc"}) [ 1046.143188][T17888] ksys_mount+0xdb/0x150 [ 1046.143212][T17888] __x64_sys_mount+0xbe/0x150 [ 1046.143247][T17888] do_syscall_64+0x1a3/0x800 [ 1046.143269][T17888] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1046.162366][T17888] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1046.168124][T17888] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1046.168153][T17888] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1046.168165][T17888] RIP: 0033:0x45a93a [ 1046.168181][T17888] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ed 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ca 8c fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 1046.168190][T17888] RSP: 002b:00007fd92d4aaa88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1046.168205][T17888] RAX: ffffffffffffffda RBX: 00007fd92d4aab30 RCX: 000000000045a93a [ 1046.168215][T17888] RDX: 00007fd92d4aaad0 RSI: 0000000020000300 RDI: 00007fd92d4aaaf0 [ 1046.168231][T17888] RBP: 0000000020000300 R08: 00007fd92d4aab30 R09: 00007fd92d4aaad0 [ 1046.219489][T17888] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 11:43:27 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xc00) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000000c0)={0xfffffffffffffec4, 0x0, 0x0, 0x21c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)="fc"}) [ 1046.219499][T17888] R13: 0000000000000000 R14: 00000000004db6c8 R15: 0000000000000003 11:43:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x800455ca, 0x0) [ 1046.442473][T17926] binder: 17925:17926 ioctl c0306201 20000040 returned -11 [ 1048.366741][T14847] Bluetooth: hci0: command 0x1003 tx timeout [ 1048.372868][T10209] Bluetooth: hci0: sending frame failed (-49) [ 1050.446764][T16517] Bluetooth: hci0: command 0x1001 tx timeout [ 1050.452857][T10209] Bluetooth: hci0: sending frame failed (-49) [ 1052.526766][T14847] Bluetooth: hci0: command 0x1009 tx timeout 11:43:37 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f00000001c0)={{0x2, 0x3, 0x3ff, 0x3, 0xfffffffffffffffe}, 0x1b, 0x6}) set_thread_area(&(0x7f0000000000)={0x10001, 0x20001000, 0xffffffffffffffff, 0xdcdd, 0x8, 0xfffffffffffffffd, 0xf533, 0x6, 0x6, 0x3}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCGETS(r0, 0x5401, &(0x7f00000000c0)) bind$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x3, @dev={0xac, 0x14, 0x14, 0x26}}}, 0x1e) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ubi_ctrl\x00', 0x200201, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000280)={0x7, 0x4, 0x1, 0x20, 0x1aa4, 0x412f, 0x8}) ioctl$VIDIOC_CROPCAP(r2, 0x400455c8, 0x0) 11:43:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) recvmsg$kcm(r1, &(0x7f0000000380)={&(0x7f00000000c0)=@xdp, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)=""/212, 0xd4}, {&(0x7f0000000240)=""/188, 0xbc}], 0x2, &(0x7f0000000340)=""/14, 0xe}, 0x100) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x800f) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x10000, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$VIDIOC_CROPCAP(r2, 0x400455cb, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r3, 0xc0285629, &(0x7f0000000440)={0x0, 0xffffffffffffff6d, 0x1ff, [], &(0x7f0000000400)=0x2}) r4 = syz_open_pts(r0, 0x600000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ec0)={0x0, r3, 0x0, 0x1f, &(0x7f0000000e80)='trustedwlan0-posix_acl_access#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000f00)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000001000)=0xe8) fstat(r0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000012c0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000001300)={{{@in6=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f0000001400)=0xe8) r10 = getgid() r11 = gettid() getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000038c0)={{{@in6=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f00000039c0)=0xe8) r13 = getegid() r14 = getpid() stat(&(0x7f0000004f00)='./file0\x00', &(0x7f0000004f40)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000004fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r3, &(0x7f00000050c0)=[{&(0x7f0000000480)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000500)="a3ba5adabcc944ac3c068f014b503995ab1bf85015acff8cb99291316c51d2d0448a818fce76d6ccd29ad2d180a419d4dc94bcd052dbd8a8101dd422c3ff1f04d7306a2a283337729b136d42e1f21b61b2fd2a88e454c009ffa0b126751846723dea0879dbde41ec99503a8f29f46f10275546c7964825b888cd6cd603c45e3d1a022dbb8af87dda93b35df4cfa7f04065e2f28fe80a13440bd8dcbcb3175ec9b18fb391920914c97c320ee653950c2f52543a4aafb3a9fa7fb2f02a90a7aa1a2052", 0xc2}, {&(0x7f0000000600)="2075b78354e8e6d95925eab41be49c51e9ddd32b91c24e97d1bcd803d14fe65c69714b4aec22bf9580c6e7f37ae456b875bcf971ca41b84e590c56014f02fa74c72c9f591c9f4a3eac5f58aee2b7ba169f2c6df81b7486e8f16b4ea12bdd9436fdd2ca3848eed307a6bfac6b2cdd0ad94988c445558d393aadfe82c03749685e5e72ccc01642127ecb93b2d3b4542b63b3b3faa82dec54568fa298270f9f23b83f62673170acadde4292b2d3b2d3cc7ec5976e6a1d81e63d041dd2", 0xbb}, {&(0x7f00000006c0)="d9ed64d9a0696259513f7f4e36ec6bb7aa1d053b439b0995e7124c6ad55bb94df58d9d8d18d10301f330c4b9657df8311065d0df0f3b4e8601a33b82c61cae", 0x3f}, {&(0x7f0000000700)="7bafd22d8542164b78fccf4cfd1f1927b651e8d61fc26eb75182444ac6bf147f8bf86304fe7db8213eb21f7a7e80802930179b60cce5a348f0f74b9d2f4fd8b6758f914c7febaabf5c53ed92b7cfa4928343cc06c02d1b88eae2c9289323d48c3d424526e0d37e71d758ca0827d9f19e73f82e2d00ab6033a0319a50ada718a22b0504d91b3bb12ad78994e04a0ea875d22adbe5ee5333c4f28e366c2e8e10f4a760f001382e37a590244db41f5fb4cfb8cc1cfac2a218feb013d73d5541a243559169083dee028b57d8f966d2d992b5c60ceabd3e851c515f8326675795e0dd5578d656094c76da2dad1cd3854232494da68d", 0xf3}, {&(0x7f0000000800)}], 0x5, 0x0, 0x0, 0x810}, {&(0x7f00000008c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000940)="124ca91b63752397183437a0995b45dbaab517d279b8aa11a590e59b34149116a792e8263c56a71e93cf043be0ba30cf7f0864ae2e0f128a3ef993ce6eb239395520499fd779ff8b60700e433da97c526976743f32ac8bc5083bc721efa60675aed497e50c2f75be69106dd6e82f6a4f2daf5b9c580d355b10bf431a50bf41e1fa8824153504608d5f2476ce1bd48a0a372e8be4e244836fa17184f7853892e0234a3c1824e9a5af2115580c75be172910dec57991b396b2a1830465e996a9bfbe5c7e031a5f1bebcb19d7bf957629b089d99931b03b38f02793cd01ff5003e8e41157dabb82f99391502004425ea2057cc5d52c72", 0xf5}, {&(0x7f0000000a40)="acb5d8fe653007b99f290ba92452f0d287152796e15c1cb312e562b25b3c638771b99d9afaeb9bc529e0a1828924d6af4de82cee311b26de817deda17431e345acaca1073cd4ebf589e5855ddf3f74e3694e35e2556f5574bb1b3cf82c266d7b3b339d938554f5f44e38c3715f4cd34116f0", 0x72}, {&(0x7f0000000ac0)="5d5d57f8f21e5da520af00b7cd156c53a050a9024c2ada1cd8376572ac1f0f00f40831d8452554650dbbd51cf070f6bac593e65e24c042b487d706b36e784424a0c17cc3ed72cf3cf975e2f1663b39dff42fee81dbe7ed52835209aad0b0051149ca4af059ad2cab320146f1cff2f3fb46a101391db9e34058b00a1b0278bb543315f6761b7e8669cc77a1f3825158327a03322ac979f48c2679b33ec9af9ba07d2fb8cd766660ebc6954563f01d6485e3e7738c0c4b348cedf229945c76dc20163cfa485048f91769022c27233f363aa8f5548b9e5073e3a77b31ec3a652330b3e161", 0xe3}, {&(0x7f0000000bc0)="0acfec2f1ba0e2aeaac1046568c065379f6d4fbe85af73d436efcb2f9fa9660b3d2a095d78d2fb8c46fb757405eae0195bb34d3f42d0", 0x36}], 0x4, 0x0, 0x0, 0x4000004}, {&(0x7f0000000c40)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000cc0)="5d5222e4fdce65991b452b33aea03618fc5dd364f3ee3f4ddf427a8f67eb2b166f505ad37fffb2b8dff35f3d24", 0x2d}, {&(0x7f0000000d00)="5d9edd773ffa87de63c8edea01c5522ac4d2156fe2300bc0616a689e0dc78551d82fc4029c28c3c8517ca0fafef4e6143940b234a26f0e7b99b64c8fc7174aa41310ef42", 0x44}, {&(0x7f0000000d80)="d81b36432e99314a3ded154b7a80c006b2615f3bb0b2dbae94704d263dfb6fc4de19", 0x22}, {&(0x7f0000000dc0)="762d24fe210ca02a037b10fd937c48278294ddad711960cac21dde1928e7c538ca53386d808a382a5a5dbfbeb630c7799006ddb8784d231892dcd1d7303e4d0dce228a9059804be8956100b9ab61ffeabd622253f582d8818e8d9792eb", 0x5d}], 0x4, &(0x7f00000010c0)=[@rights={0x18, 0x1, 0x1, [r1]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}], 0x38, 0x800}, {&(0x7f0000001100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001280)=[{&(0x7f0000001180)="07b623ffca7cbff5e51f9eb663d727b382709ce5f16d00f2856fbb463825eff8dc958efa2c83ebe7493fe2fb942e46c27825b3c24da330512eabf97cafcd8e06097e541fcffa1c351eb2aa421a743d8a2794cff3b1f016cea05afd970fd83b935557e9969158f19760d84882f03af7f1991521f20522a74e2cfe74ed5145849957a480cefa6b8cb5292ee45f85d9a9c84400ff632ce1cea13525655776df93d24b653508c97f265495f4f8ab74a77bec4193c7c67ab2ae723ea9d463806f4eb02d8860e2c190472219ae843135d4cd405e6fce9d3b535f5b9a5de8394e6dee7bca6cc5def2832bb4fef2163588a4aea5", 0xf0}], 0x1, &(0x7f0000001440)=[@cred={0x20, 0x1, 0x2, r8, r9, r10}, @rights={0x18, 0x1, 0x1, [r0]}, @rights={0x20, 0x1, 0x1, [r2, r1, r2]}], 0x58, 0x804}, {&(0x7f00000014c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000015c0)=[{&(0x7f0000001540)="23b80bcf5ff5314b54df9190a332411c714c9a16331299be7c5b27712d96a24b8c683da695b7a4a1ab20c87e9ffd7ac1b1c89c1f309222857005867172591cd353645d570107ad085e9e6bc294c6695ee8b6cdea2b5652e3809279d3ccbf11fcf7a929f623c90213c990405e9469434f30b044", 0x73}], 0x1, 0x0, 0x0, 0x4}, {&(0x7f0000001600)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003840)=[{&(0x7f0000001680)="4587", 0x2}, {&(0x7f00000016c0)="9266420a593713ffde54f03b39148ab51fb6d5c07088489d524a19fc7f3c2ed045700a570458cae1f5eef9c80490303edb7280b900d6456be03f5a75d7d30ca3643fff19741b5d550ac73e8c95bb538ceac92623b877d4ae6059c22319cdc38823ea73d231d5c370ed98cfdba6ad464da0bbfa4f090abe6dde6ec1dedc1610ca5fad8a9594125074936a2933509dfb52cf9947c7320c9830417f36d2c9fc96a30faae2ca7c94b98c5bc21550feddc79a18a5142ef7a7459db0e55f138eb7b4b7c8fe97251c6a7784b68c03fa845c", 0xce}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000027c0)="54317eff11b69bc9d0be76119d0027679602ded17404f5b0f6aa0da12e908cd1b8f8658026c03004bf781c40f9c571feb4e600d802571da1af0960cfc286a9589181923db188aca48d87dd436bbf49014ab71b88cf088e214551b2a2689b9573870124", 0x63}, {&(0x7f0000002840)="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", 0x1000}], 0x5, &(0x7f0000003a00)=[@cred={0x20, 0x1, 0x2, r11, r12, r13}], 0x20, 0x20000010}, {&(0x7f0000003a40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003b00)=[{&(0x7f0000003ac0)="5e37208de4b4bc189eb909831fa0364275ce02456b90833f0f6ae9eabde4382ed93cce64ec242cf222917fc8b51fafafea", 0x31}], 0x1, &(0x7f0000003b40)=[@rights={0x20, 0x1, 0x1, [r1, r3, r2, r3]}, @rights={0x18, 0x1, 0x1, [r2, r4]}, @rights={0x38, 0x1, 0x1, [r3, r4, r1, r0, r4, r0, r4, r1, r3, r2]}], 0x70, 0x20004040}, {&(0x7f0000003bc0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000004e80)=[{&(0x7f0000003c40)="a56fb7b28bb430e5457d537cb1a3d2dccebb841955aafbb576f48ba2ac9804ecb4b9ae8d5a89072d3bc13522595703f4a29d5d2f0456d15c81882d16e8e357a4a5d1d5ae", 0x44}, {&(0x7f0000003cc0)="4055ba09fa0f6414019d6bb9857fc05710354769ae9b79da7ffc467450ce797dbd56b41721e01aaafe2d2d6da851b240939a333c3817b5d73a3ec4b5661043dd44241f5a849df0ed2ef450d57edeac1b2aaffa806e84451bea475e00e0f76f2c9b70f0b3", 0x64}, {&(0x7f0000003d40)="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", 0x1000}, {&(0x7f0000004d40)="58f9d7e3eda91c7e79c7df2970a8528edc24ba3bb4f0e85dc4596ff402c3de73603a135d5072571e6e74459876838f2cceb0c469ae1330af722d1d0e2c53615146d92f7ff75092763418105badedf59ad37c903f7149dc9e4bdab5f0fa701f73b114d3e3f335464d38bee53f367c1e3bd2cc91", 0x73}, {&(0x7f0000004dc0)="f3c1984bd99f8ca1dc571c847e05215cf3a29671a260b56a6f0a463277aa80099219552c8e9c7785b543f93971c34b4f1efd0be30cfeda1f30f6f35b411d7cd3fb11d81337278592a13742c534aed1f3c1d37e7769b0b0cd3dfc480581b7a6fc4484fe4836b27968ec739857e6d524e4b78358cb909adeba89bd0d533ffe217e00f205e9d02de35d", 0x88}], 0x5, &(0x7f0000005040)=[@rights={0x20, 0x1, 0x1, [r0, r2, r2, r3]}, @cred={0x20, 0x1, 0x2, r14, r15, r16}, @rights={0x18, 0x1, 0x1, [r0]}], 0x58, 0x8081}], 0x8, 0x11) 11:43:37 executing program 3 (fault-call:0 fault-nth:42): syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:43:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x800455ca, 0x0) 11:43:37 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, &(0x7f00000000c0)={0xfffffffffffffec4, 0x0, 0x0, 0x21c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)="fc"}) 11:43:37 executing program 0: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xc00) mkdir(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000000c0)={0xfffffffffffffec4, 0x0, 0x0, 0x21c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)="fc"}) 11:43:37 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, &(0x7f00000000c0)={0xfffffffffffffec4, 0x0, 0x0, 0x21c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)="fc"}) [ 1056.718880][T17937] binder: 17935:17937 ioctl c0306201 20000040 returned -11 [ 1056.741414][T17946] FAULT_INJECTION: forcing a failure. [ 1056.741414][T17946] name failslab, interval 1, probability 0, space 0, times 0 11:43:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x800455ca, 0x0) 11:43:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) [ 1056.804220][T17946] CPU: 1 PID: 17946 Comm: syz-executor3 Not tainted 5.0.0-rc1-next-20190114 #11 [ 1056.813294][T17946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1056.823362][T17946] Call Trace: [ 1056.826785][T17946] dump_stack+0x1db/0x2d0 [ 1056.831134][T17946] ? dump_stack_print_info.cold+0x20/0x20 [ 1056.836879][T17946] should_fail.cold+0xa/0x14 [ 1056.841498][T17946] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1056.847327][T17946] ? ___might_sleep+0x1e7/0x310 [ 1056.852192][T17946] ? arch_local_save_flags+0x50/0x50 [ 1056.857503][T17946] __should_failslab+0x121/0x190 [ 1056.862460][T17946] should_failslab+0x9/0x14 [ 1056.866981][T17946] kmem_cache_alloc_trace+0x2d1/0x760 [ 1056.872394][T17946] alloc_fs_context+0x5a/0x640 [ 1056.877183][T17946] fs_context_for_mount+0x25/0x30 [ 1056.882222][T17946] do_mount+0x15bb/0x2fa0 [ 1056.886579][T17946] ? copy_mount_string+0x40/0x40 [ 1056.891534][T17946] ? kmem_cache_alloc_trace+0x354/0x760 [ 1056.897106][T17946] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1056.903359][T17946] ? copy_mount_options+0x30e/0x440 [ 1056.908594][T17946] ksys_mount+0xdb/0x150 [ 1056.912854][T17946] __x64_sys_mount+0xbe/0x150 [ 1056.917558][T17946] do_syscall_64+0x1a3/0x800 [ 1056.922167][T17946] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1056.927814][T17946] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1056.934074][T17946] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1056.939636][T17946] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1056.945540][T17946] RIP: 0033:0x45a93a 11:43:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x6, 0x1000, 0xffffffff, 0x100020, 0x17, 0xfffffffffffffeff, 0x8, 0xfb6, 0x5, 0x10, 0xfffffffffffffffb, 0x2}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) 11:43:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x800455ca, 0x0) [ 1056.949442][T17946] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ed 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ca 8c fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 1056.969052][T17946] RSP: 002b:00007fd92d4aaa88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1056.977473][T17946] RAX: ffffffffffffffda RBX: 00007fd92d4aab30 RCX: 000000000045a93a [ 1056.985451][T17946] RDX: 00007fd92d4aaad0 RSI: 0000000020000300 RDI: 00007fd92d4aaaf0 [ 1056.993449][T17946] RBP: 0000000020000300 R08: 00007fd92d4aab30 R09: 00007fd92d4aaad0 11:43:38 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, &(0x7f00000000c0)={0xfffffffffffffec4, 0x0, 0x0, 0x21c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)="fc"}) [ 1057.001440][T17946] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 1057.009421][T17946] R13: 0000000000000000 R14: 00000000004db6c8 R15: 0000000000000003 [ 1058.846819][T14847] Bluetooth: hci0: command 0x1003 tx timeout [ 1058.852933][T10209] Bluetooth: hci0: sending frame failed (-49) [ 1060.926865][T14847] Bluetooth: hci0: command 0x1001 tx timeout [ 1060.933007][T10209] Bluetooth: hci0: sending frame failed (-49) [ 1063.006791][T16517] Bluetooth: hci0: command 0x1009 tx timeout 11:43:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) 11:43:48 executing program 0: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xc00) mkdir(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000000c0)={0xfffffffffffffec4, 0x0, 0x0, 0x21c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)="fc"}) 11:43:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xc00) mkdir(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000000c0)={0xfffffffffffffec4, 0x0, 0x0, 0x21c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)="fc"}) 11:43:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x800455ca, 0x0) 11:43:48 executing program 3 (fault-call:0 fault-nth:43): syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:43:48 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='net/rt_acct\x00') setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x4e23, 0x10000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}, {0xa, 0x4e21, 0x0, @remote, 0x100000001}, 0x7, [0x5, 0x8001, 0xf71a, 0x8, 0x242f7e06, 0x8, 0x0, 0xfffffffffffff001]}, 0x5c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x80) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r2, 0x400455c8, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x400c00, 0x0) ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f0000000040)=0x2) 11:43:48 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xc00) mkdir(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000000c0)={0xfffffffffffffec4, 0x0, 0x0, 0x21c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)="fc"}) [ 1066.920656][T17987] binder: 17985:17987 ioctl c0306201 20000040 returned -11 [ 1066.932965][T17983] binder: 17982:17983 ioctl c0306201 20000040 returned -11 [ 1066.955346][T17984] FAULT_INJECTION: forcing a failure. [ 1066.955346][T17984] name failslab, interval 1, probability 0, space 0, times 0 11:43:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x800455ca, 0x0) 11:43:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) prctl$PR_SET_FPEXC(0xc, 0x60080) socket$isdn(0x22, 0x3, 0x27) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x101000) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000040)=0x1, &(0x7f00000000c0)=0x4) [ 1067.031487][T17984] CPU: 1 PID: 17984 Comm: syz-executor3 Not tainted 5.0.0-rc1-next-20190114 #11 [ 1067.040528][T17984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1067.050566][T17984] Call Trace: [ 1067.053843][T17984] dump_stack+0x1db/0x2d0 [ 1067.058157][T17984] ? dump_stack_print_info.cold+0x20/0x20 [ 1067.063863][T17984] ? save_stack+0x45/0xd0 [ 1067.068282][T17984] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1067.070263][T18003] binder: 18000:18003 ioctl c0306201 20000040 returned -11 [ 1067.074067][T17984] ? kasan_kmalloc+0x9/0x10 [ 1067.074081][T17984] ? legacy_init_fs_context+0x48/0xe0 [ 1067.074101][T17984] should_fail.cold+0xa/0x14 [ 1067.095705][T17984] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1067.101635][T17984] ? ___might_sleep+0x1e7/0x310 [ 1067.106479][T17984] ? arch_local_save_flags+0x50/0x50 [ 1067.111756][T17984] ? check_preemption_disabled+0x48/0x290 [ 1067.117473][T17984] __should_failslab+0x121/0x190 [ 1067.117490][T17984] should_failslab+0x9/0x14 11:43:48 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0xc00) mkdir(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000000c0)={0xfffffffffffffec4, 0x0, 0x0, 0x21c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)="fc"}) 11:43:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x800455ca, 0x0) 11:43:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) dup2(r2, r1) syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") ioctl$TCSBRK(r1, 0x5409, 0x0) 11:43:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket(0xb, 0x6, 0x0) accept4$tipc(r1, 0x0, &(0x7f0000000000), 0x80000) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r2, 0x400455cb, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000040)='ip6tnl0\x00') [ 1067.117502][T17984] __kmalloc_track_caller+0x2d8/0x740 [ 1067.117519][T17984] ? legacy_init_fs_context+0x48/0xe0 [ 1067.126932][T17984] ? vfs_parse_fs_string+0x226/0x2b0 [ 1067.126948][T17984] kmemdup_nul+0x31/0xa0 [ 1067.126960][T17984] vfs_parse_fs_string+0x226/0x2b0 [ 1067.126974][T17984] ? vfs_parse_fs_param+0x4b0/0x4b0 [ 1067.137687][T17984] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1067.137697][T17984] ? alloc_fs_context+0x3bb/0x640 [ 1067.137714][T17984] do_mount+0x710/0x2fa0 [ 1067.137731][T17984] ? trace_hardirqs_on_thunk+0x1a/0x1c 11:43:48 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0xc00) mkdir(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000000c0)={0xfffffffffffffec4, 0x0, 0x0, 0x21c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)="fc"}) 11:43:48 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigprocmask(0x0, &(0x7f0000037ff8)={0xfffffffffffffffe}, 0x0, 0x8) r2 = dup2(r0, r1) write$FUSE_NOTIFY_INVAL_ENTRY(r2, 0x0, 0x0) [ 1067.147243][T17984] ? copy_mount_string+0x40/0x40 [ 1067.147261][T17984] ? copy_mount_options+0x234/0x440 [ 1067.188451][T17984] ? __sanitizer_cov_trace_pc+0x44/0x50 [ 1067.194001][T17984] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1067.200229][T17984] ? copy_mount_options+0x30e/0x440 [ 1067.205428][T17984] ksys_mount+0xdb/0x150 [ 1067.209667][T17984] __x64_sys_mount+0xbe/0x150 [ 1067.214340][T17984] do_syscall_64+0x1a3/0x800 [ 1067.218921][T17984] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1067.224537][T17984] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1067.230240][T17984] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1067.230259][T17984] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1067.230267][T17984] RIP: 0033:0x45a93a [ 1067.230279][T17984] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ed 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ca 8c fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 1067.230290][T17984] RSP: 002b:00007fd92d4aaa88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1067.241744][T17984] RAX: ffffffffffffffda RBX: 00007fd92d4aab30 RCX: 000000000045a93a 11:43:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x800455ca, 0x0) [ 1067.241752][T17984] RDX: 00007fd92d4aaad0 RSI: 0000000020000300 RDI: 00007fd92d4aaaf0 [ 1067.241757][T17984] RBP: 0000000020000300 R08: 00007fd92d4aab30 R09: 00007fd92d4aaad0 [ 1067.241763][T17984] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 1067.241768][T17984] R13: 0000000000000000 R14: 00000000004db6c8 R15: 0000000000000003 11:43:48 executing program 3 (fault-call:0 fault-nth:44): syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1067.455916][T18042] FAULT_INJECTION: forcing a failure. [ 1067.455916][T18042] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1067.469698][T18042] CPU: 1 PID: 18042 Comm: syz-executor3 Not tainted 5.0.0-rc1-next-20190114 #11 [ 1067.478701][T18042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1067.488734][T18042] Call Trace: [ 1067.492012][T18042] dump_stack+0x1db/0x2d0 [ 1067.496328][T18042] ? dump_stack_print_info.cold+0x20/0x20 [ 1067.502057][T18042] ? __lock_is_held+0xb6/0x140 [ 1067.506823][T18042] should_fail.cold+0xa/0x14 [ 1067.511420][T18042] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1067.517211][T18042] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1067.523448][T18042] ? check_preemption_disabled+0x48/0x290 [ 1067.529156][T18042] ? add_lock_to_list.isra.0+0x450/0x450 [ 1067.534772][T18042] ? debug_smp_processor_id+0x1c/0x20 [ 1067.540123][T18042] ? perf_trace_lock+0x12f/0x750 [ 1067.545170][T18042] should_fail_alloc_page+0x50/0x60 [ 1067.550355][T18042] __alloc_pages_nodemask+0x323/0xdc0 [ 1067.555719][T18042] ? __alloc_pages_slowpath+0x2c60/0x2c60 [ 1067.561442][T18042] ? ___might_sleep+0x1e7/0x310 [ 1067.566281][T18042] ? trace_hardirqs_off+0xb8/0x310 [ 1067.571378][T18042] cache_grow_begin+0x9c/0x8c0 [ 1067.576142][T18042] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1067.582495][T18042] ? check_preemption_disabled+0x48/0x290 [ 1067.588205][T18042] kmem_cache_alloc_trace+0x67f/0x760 [ 1067.593564][T18042] ? sget_userns+0x14d/0x6c0 [ 1067.598142][T18042] alloc_super+0xca/0xa10 [ 1067.602465][T18042] ? destroy_unused_super.part.0+0x110/0x110 [ 1067.608454][T18042] ? kasan_check_read+0x11/0x20 [ 1067.613288][T18042] ? do_raw_spin_unlock+0xa0/0x330 [ 1067.618386][T18042] ? do_raw_spin_trylock+0x270/0x270 [ 1067.623728][T18042] ? fallocate_chunk.isra.0.cold+0x89/0x89 [ 1067.629528][T18042] ? fallocate_chunk.isra.0.cold+0x89/0x89 [ 1067.635321][T18042] sget_userns+0x164/0x6c0 [ 1067.639723][T18042] ? gfs2_kill_sb+0x1a0/0x1a0 [ 1067.644402][T18042] ? vfs_get_super+0x260/0x260 [ 1067.649163][T18042] ? security_capable+0x9b/0xd0 [ 1067.653998][T18042] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1067.660219][T18042] ? ns_capable_common+0x93/0x100 [ 1067.665241][T18042] ? fallocate_chunk.isra.0.cold+0x89/0x89 [ 1067.671023][T18042] ? gfs2_kill_sb+0x1a0/0x1a0 [ 1067.675694][T18042] sget+0x10c/0x150 [ 1067.679490][T18042] gfs2_mount+0x179/0x6ee [ 1067.683800][T18042] ? fill_super+0x1990/0x1990 [ 1067.688465][T18042] ? rcu_lockdep_current_cpu_online+0x1aa/0x220 [ 1067.694701][T18042] ? rcu_pm_notify+0xd0/0xd0 [ 1067.699291][T18042] ? vfs_parse_fs_string+0x1c0/0x2b0 [ 1067.704563][T18042] ? rcu_read_lock_sched_held+0x110/0x130 [ 1067.710285][T18042] ? kfree+0x1fa/0x230 [ 1067.714340][T18042] ? vfs_parse_fs_string+0x1c5/0x2b0 [ 1067.719620][T18042] ? vfs_parse_fs_param+0x4b0/0x4b0 [ 1067.724807][T18042] ? fill_super+0x1990/0x1990 [ 1067.729473][T18042] legacy_get_tree+0xf2/0x200 [ 1067.734139][T18042] vfs_get_tree+0x123/0x450 [ 1067.738630][T18042] do_mount+0x1622/0x2fa0 [ 1067.742955][T18042] ? copy_mount_string+0x40/0x40 [ 1067.747896][T18042] ? kmem_cache_alloc_trace+0x354/0x760 [ 1067.753428][T18042] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1067.759654][T18042] ? _copy_from_user+0xdd/0x150 [ 1067.764497][T18042] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1067.770734][T18042] ? copy_mount_options+0x30e/0x440 [ 1067.775916][T18042] ksys_mount+0xdb/0x150 [ 1067.780328][T18042] __x64_sys_mount+0xbe/0x150 [ 1067.785010][T18042] do_syscall_64+0x1a3/0x800 [ 1067.789600][T18042] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1067.795215][T18042] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1067.800929][T18042] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1067.806467][T18042] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1067.812340][T18042] RIP: 0033:0x45a93a [ 1067.816297][T18042] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ed 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ca 8c fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 1067.836102][T18042] RSP: 002b:00007fd92d4aaa88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1067.844502][T18042] RAX: ffffffffffffffda RBX: 00007fd92d4aab30 RCX: 000000000045a93a [ 1067.852576][T18042] RDX: 00007fd92d4aaad0 RSI: 0000000020000300 RDI: 00007fd92d4aaaf0 [ 1067.860532][T18042] RBP: 0000000020000300 R08: 00007fd92d4aab30 R09: 00007fd92d4aaad0 [ 1067.868503][T18042] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 1067.876457][T18042] R13: 0000000000000000 R14: 00000000004db6c8 R15: 0000000000000003 [ 1067.891349][T18042] gfs2: not a GFS2 filesystem [ 1069.006696][T14847] Bluetooth: hci0: command 0x1003 tx timeout [ 1069.012773][T10209] Bluetooth: hci0: sending frame failed (-49) [ 1071.086725][T16517] Bluetooth: hci0: command 0x1001 tx timeout [ 1071.092823][T10209] Bluetooth: hci0: sending frame failed (-49) [ 1073.166796][T14847] Bluetooth: hci0: command 0x1009 tx timeout 11:43:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000010}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa0, r2, 0xf00, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}]}, 0xa0}}, 0x4008050) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x139a000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, r1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x200000000000003) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) write$P9_RCREATE(r1, &(0x7f00000001c0)={0x18, 0x73, 0x2, {{}, 0x5}}, 0x18) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000080)={0xd, {0x7, 0x1, 0x100, 0x7fffffff}, {0x8000, 0x4, 0x2, 0x4}, {0x0, 0x7fff}}) ioctl$VIDIOC_CROPCAP(r3, 0x400455c8, 0x0) 11:43:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) 11:43:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x800455ca, 0x0) 11:43:58 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0xc00) mkdir(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000000c0)={0xfffffffffffffec4, 0x0, 0x0, 0x21c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)="fc"}) 11:43:58 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigprocmask(0x0, &(0x7f0000037ff8)={0xfffffffffffffffe}, 0x0, 0x8) r2 = dup2(r0, r1) write$FUSE_NOTIFY_INVAL_ENTRY(r2, 0x0, 0x0) 11:43:58 executing program 3 (fault-call:0 fault-nth:45): syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:43:58 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000000c0)={0xfffffffffffffec4, 0x0, 0x0, 0x21c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)="fc"}) [ 1077.229820][T18059] FAULT_INJECTION: forcing a failure. [ 1077.229820][T18059] name failslab, interval 1, probability 0, space 0, times 0 11:43:58 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigprocmask(0x0, &(0x7f0000037ff8)={0xfffffffffffffffe}, 0x0, 0x8) r2 = dup2(r0, r1) write$FUSE_NOTIFY_INVAL_ENTRY(r2, 0x0, 0x0) [ 1077.303616][T18061] sp0: Synchronizing with TNC 11:43:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0x800455ca, 0x0) [ 1077.385236][T18069] sp1: Synchronizing with TNC [ 1077.405678][T18059] CPU: 1 PID: 18059 Comm: syz-executor3 Not tainted 5.0.0-rc1-next-20190114 #11 [ 1077.414727][T18059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1077.424794][T18059] Call Trace: [ 1077.428111][T18059] dump_stack+0x1db/0x2d0 [ 1077.432472][T18059] ? dump_stack_print_info.cold+0x20/0x20 [ 1077.438224][T18059] should_fail.cold+0xa/0x14 [ 1077.442844][T18059] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1077.448674][T18059] ? ___might_sleep+0x1e7/0x310 [ 1077.453548][T18059] ? arch_local_save_flags+0x50/0x50 [ 1077.458857][T18059] ? check_preemption_disabled+0x48/0x290 [ 1077.464602][T18059] __should_failslab+0x121/0x190 [ 1077.469565][T18059] should_failslab+0x9/0x14 [ 1077.474091][T18059] kmem_cache_alloc_trace+0x2d1/0x760 [ 1077.479485][T18059] ? rcu_read_lock_sched_held+0x110/0x130 [ 1077.485227][T18059] __memcg_init_list_lru_node+0xef/0x2e0 [ 1077.490881][T18059] ? kvfree_rcu+0x20/0x20 [ 1077.495236][T18059] ? kasan_kmalloc+0x9/0x10 [ 1077.499758][T18059] ? __kmalloc_node+0x4e/0x70 [ 1077.504468][T18059] __list_lru_init+0x4d9/0x850 [ 1077.509258][T18059] ? list_lru_destroy+0x520/0x520 [ 1077.514304][T18059] ? down_read+0x120/0x120 [ 1077.518808][T18059] ? init_wait_entry+0x1c0/0x1c0 [ 1077.523767][T18059] ? prealloc_shrinker+0xdf/0x340 [ 1077.528821][T18059] alloc_super+0x8c3/0xa10 [ 1077.533257][T18059] ? destroy_unused_super.part.0+0x110/0x110 [ 1077.539268][T18059] ? fallocate_chunk.isra.0.cold+0x89/0x89 [ 1077.545093][T18059] ? fallocate_chunk.isra.0.cold+0x89/0x89 [ 1077.550924][T18059] sget_userns+0x164/0x6c0 [ 1077.555367][T18059] ? gfs2_kill_sb+0x1a0/0x1a0 [ 1077.560091][T18059] ? vfs_get_super+0x260/0x260 [ 1077.564870][T18059] ? security_capable+0x9b/0xd0 [ 1077.569752][T18059] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1077.576010][T18059] ? ns_capable_common+0x93/0x100 [ 1077.581068][T18059] ? fallocate_chunk.isra.0.cold+0x89/0x89 [ 1077.586893][T18059] ? gfs2_kill_sb+0x1a0/0x1a0 [ 1077.591597][T18059] sget+0x10c/0x150 [ 1077.595453][T18059] gfs2_mount+0x179/0x6ee [ 1077.599805][T18059] ? fill_super+0x1990/0x1990 [ 1077.604509][T18059] ? rcu_lockdep_current_cpu_online+0x1aa/0x220 [ 1077.610770][T18059] ? rcu_pm_notify+0xd0/0xd0 [ 1077.615388][T18059] ? vfs_parse_fs_string+0x1c0/0x2b0 [ 1077.620716][T18059] ? rcu_read_lock_sched_held+0x110/0x130 [ 1077.626456][T18059] ? kfree+0x1fa/0x230 [ 1077.630543][T18059] ? vfs_parse_fs_string+0x1c5/0x2b0 [ 1077.635847][T18059] ? vfs_parse_fs_param+0x4b0/0x4b0 [ 1077.641060][T18059] ? fill_super+0x1990/0x1990 [ 1077.645780][T18059] legacy_get_tree+0xf2/0x200 [ 1077.650482][T18059] vfs_get_tree+0x123/0x450 [ 1077.655016][T18059] do_mount+0x1622/0x2fa0 [ 1077.659376][T18059] ? copy_mount_string+0x40/0x40 [ 1077.664362][T18059] ? kmem_cache_alloc_trace+0x354/0x760 [ 1077.669959][T18059] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1077.676217][T18059] ? _copy_from_user+0xdd/0x150 [ 1077.681085][T18059] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1077.687342][T18059] ? copy_mount_options+0x30e/0x440 [ 1077.692570][T18059] ksys_mount+0xdb/0x150 [ 1077.696839][T18059] __x64_sys_mount+0xbe/0x150 [ 1077.701541][T18059] do_syscall_64+0x1a3/0x800 [ 1077.706159][T18059] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1077.711809][T18059] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1077.717555][T18059] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1077.723131][T18059] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1077.729036][T18059] RIP: 0033:0x45a93a [ 1077.732949][T18059] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ed 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ca 8c fb ff c3 66 0f 1f 84 00 00 00 00 00 11:43:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000040)) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r2, 0x400455c8, 0x0) [ 1077.752563][T18059] RSP: 002b:00007fd92d4aaa88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1077.760987][T18059] RAX: ffffffffffffffda RBX: 00007fd92d4aab30 RCX: 000000000045a93a [ 1077.768970][T18059] RDX: 00007fd92d4aaad0 RSI: 0000000020000300 RDI: 00007fd92d4aaaf0 [ 1077.777040][T18059] RBP: 0000000020000300 R08: 00007fd92d4aab30 R09: 00007fd92d4aaad0 [ 1077.785024][T18059] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 1077.795626][T18059] R13: 0000000000000000 R14: 00000000004db6c8 R15: 0000000000000003 11:43:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x0, 0x80ffff}) 11:43:59 executing program 3 (fault-call:0 fault-nth:46): syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:43:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0x800455ca, 0x0) 11:43:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x10000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000000)={0x5, 0x7ff, 0x400, 0x2, 0x1000}) 11:43:59 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="db000000000000005c0000ff000000009500000000000000"], 0x0}, 0x48) 11:43:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0x800455ca, 0x0) [ 1078.304060][T18114] FAULT_INJECTION: forcing a failure. [ 1078.304060][T18114] name failslab, interval 1, probability 0, space 0, times 0 [ 1078.383837][T18114] CPU: 0 PID: 18114 Comm: syz-executor3 Not tainted 5.0.0-rc1-next-20190114 #11 [ 1078.392916][T18114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1078.402994][T18114] Call Trace: [ 1078.406310][T18114] dump_stack+0x1db/0x2d0 [ 1078.410670][T18114] ? dump_stack_print_info.cold+0x20/0x20 [ 1078.416443][T18114] ? do_syscall_64+0x1a3/0x800 [ 1078.421231][T18114] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1078.427326][T18114] ? print_usage_bug+0xd0/0xd0 [ 1078.432118][T18114] should_fail.cold+0xa/0x14 [ 1078.436735][T18114] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1078.442576][T18114] ? ___might_sleep+0x1e7/0x310 [ 1078.447466][T18114] ? arch_local_save_flags+0x50/0x50 [ 1078.452778][T18114] __should_failslab+0x121/0x190 [ 1078.457743][T18114] should_failslab+0x9/0x14 [ 1078.462268][T18114] kmem_cache_alloc_trace+0x2d1/0x760 [ 1078.467680][T18114] __memcg_init_list_lru_node+0xef/0x2e0 [ 1078.473335][T18114] ? kvfree_rcu+0x20/0x20 [ 1078.477689][T18114] ? __kmalloc_node+0x4e/0x70 [ 1078.482395][T18114] __list_lru_init+0x4d9/0x850 [ 1078.487214][T18114] ? list_lru_destroy+0x520/0x520 [ 1078.492261][T18114] ? down_read+0x120/0x120 [ 1078.496702][T18114] ? prealloc_shrinker+0xdf/0x340 [ 1078.501753][T18114] alloc_super+0x8c3/0xa10 [ 1078.506194][T18114] ? destroy_unused_super.part.0+0x110/0x110 [ 1078.512211][T18114] ? fallocate_chunk.isra.0.cold+0x89/0x89 [ 1078.518038][T18114] ? fallocate_chunk.isra.0.cold+0x89/0x89 [ 1078.523863][T18114] sget_userns+0x164/0x6c0 [ 1078.528300][T18114] ? gfs2_kill_sb+0x1a0/0x1a0 [ 1078.532999][T18114] ? vfs_get_super+0x260/0x260 [ 1078.537774][T18114] ? security_capable+0x9b/0xd0 [ 1078.537797][T18114] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1078.537812][T18114] ? ns_capable_common+0x93/0x100 [ 1078.537832][T18114] ? fallocate_chunk.isra.0.cold+0x89/0x89 [ 1078.537845][T18114] ? gfs2_kill_sb+0x1a0/0x1a0 [ 1078.537860][T18114] sget+0x10c/0x150 [ 1078.537882][T18114] gfs2_mount+0x179/0x6ee [ 1078.537902][T18114] ? fill_super+0x1990/0x1990 [ 1078.577319][T18114] ? rcu_lockdep_current_cpu_online+0x1aa/0x220 [ 1078.583583][T18114] ? rcu_pm_notify+0xd0/0xd0 [ 1078.588210][T18114] ? vfs_parse_fs_string+0x1c0/0x2b0 [ 1078.593579][T18114] ? rcu_read_lock_sched_held+0x110/0x130 [ 1078.599320][T18114] ? kfree+0x1fa/0x230 [ 1078.603440][T18114] ? vfs_parse_fs_string+0x1c5/0x2b0 [ 1078.608753][T18114] ? vfs_parse_fs_param+0x4b0/0x4b0 [ 1078.613979][T18114] ? fill_super+0x1990/0x1990 [ 1078.618681][T18114] legacy_get_tree+0xf2/0x200 [ 1078.623392][T18114] vfs_get_tree+0x123/0x450 [ 1078.627958][T18114] do_mount+0x1622/0x2fa0 [ 1078.632322][T18114] ? copy_mount_string+0x40/0x40 [ 1078.637289][T18114] ? kmem_cache_alloc_trace+0x354/0x760 [ 1078.642875][T18114] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1078.649133][T18114] ? copy_mount_options+0x30e/0x440 [ 1078.654363][T18114] ksys_mount+0xdb/0x150 [ 1078.658660][T18114] __x64_sys_mount+0xbe/0x150 [ 1078.663367][T18114] do_syscall_64+0x1a3/0x800 [ 1078.668019][T18114] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1078.673694][T18114] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1078.679466][T18114] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1078.685046][T18114] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1078.690953][T18114] RIP: 0033:0x45a93a [ 1078.694866][T18114] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ed 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ca 8c fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 1078.714495][T18114] RSP: 002b:00007fd92d4aaa88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1078.722921][T18114] RAX: ffffffffffffffda RBX: 00007fd92d4aab30 RCX: 000000000045a93a 11:43:59 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xc00) mkdir(0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, &(0x7f00000000c0)={0xfffffffffffffec4, 0x0, 0x0, 0x21c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)="fc"}) 11:43:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000040)=0x800, 0x4) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r2, 0x400455cb, 0x0) [ 1078.730913][T18114] RDX: 00007fd92d4aaad0 RSI: 0000000020000300 RDI: 00007fd92d4aaaf0 [ 1078.738900][T18114] RBP: 0000000020000300 R08: 00007fd92d4aab30 R09: 00007fd92d4aaad0 [ 1078.746889][T18114] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 1078.754893][T18114] R13: 0000000000000000 R14: 00000000004db6c8 R15: 0000000000000003 11:44:00 executing program 0: r0 = socket(0x200000000000011, 0x4000000000080002, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = creat(0x0, 0x4) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x0, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, &(0x7f0000000440)) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000640)=0x10, 0x4) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) getgroups(0x0, &(0x7f0000001cc0)) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000280)={@local, 0x57}) r7 = open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x64) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000400)=@req3={0x200, 0x3, 0x9, 0x2, 0xfff, 0x14, 0x4}, 0x1c) ioctl$LOOP_SET_CAPACITY(r7, 0x4c07) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8004700d, 0x0) geteuid() ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'team0\x00', r1}) r8 = request_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='\x00', 0xfffffffffffffffb) ioctl$PIO_SCRNMAP(r7, 0x4b41, &(0x7f0000000480)="a75e73c4050d36d1aca561232e6ee7b2b34685f0e164f30f3e12e0fe06a13acd26e1d503ebda5e324f899688ed59150b3f03a1f2ba5bec9e66d315bb590979f20037b9760a9433ff25642e0d5b3577517b3b5077f466013817229f666e45a0fbb9d06fc5ec95299b3aa57b0af699a97a9e2127e10e5de33ae9897fb47837688529b80fd7072edb2e72f029dd0eb5472560222b0eb12cffdde5c03e97bdd309ea1a5866") setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, 0x0, 0x0) keyctl$describe(0x6, r8, &(0x7f00000002c0)=""/85, 0x55) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000380)=0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) close(r4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 11:44:00 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xc00) mkdir(0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, &(0x7f00000000c0)={0xfffffffffffffec4, 0x0, 0x0, 0x21c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)="fc"}) 11:44:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)) ioctl$VIDIOC_CROPCAP(r1, 0x800455ca, 0x0) [ 1079.166877][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1079.172743][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1079.178688][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1079.184517][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1079.246755][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1079.252560][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1079.258491][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1079.264275][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1079.966724][T18102] Bluetooth: hci0: command 0x1003 tx timeout [ 1079.972829][ T1170] Bluetooth: hci0: sending frame failed (-49) [ 1080.046736][T18102] Bluetooth: hci1: command 0x1003 tx timeout [ 1082.046737][T16517] Bluetooth: hci0: command 0x1001 tx timeout [ 1082.052825][ T1170] Bluetooth: hci0: sending frame failed (-49) [ 1082.126751][T16517] Bluetooth: hci1: command 0x1001 tx timeout [ 1084.126799][T18102] Bluetooth: hci0: command 0x1009 tx timeout [ 1084.206740][T18102] Bluetooth: hci1: command 0x1009 tx timeout 11:44:09 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xc00) mkdir(0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, &(0x7f00000000c0)={0xfffffffffffffec4, 0x0, 0x0, 0x21c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)="fc"}) 11:44:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000040)='security.evm\x00', &(0x7f00000000c0)=@sha1={0x1, "569875ed5e3bc507ecba9d16bceebda4745dee89"}, 0x15, 0x2) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x60000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) 11:44:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)) ioctl$VIDIOC_CROPCAP(r1, 0x800455ca, 0x0) 11:44:09 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:44:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) ioctl$VIDIOC_CROPCAP(r2, 0x400455c8, 0x0) 11:44:09 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x805, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @empty}}, 0x101}, 0x90) [ 1088.694751][T18165] gfs2: not a GFS2 filesystem 11:44:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)) ioctl$VIDIOC_CROPCAP(r1, 0x800455ca, 0x0) 11:44:09 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xc00) mkdir(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)="fc"}) 11:44:10 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xc00) mkdir(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)="fc"}) 11:44:10 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='\nfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1088.852175][T18187] binder: 18182:18187 ioctl 40046205 0 returned -22 11:44:10 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xc00) mkdir(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)="fc"}) 11:44:10 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000340)=""/205, 0xcd}, {&(0x7f0000000440)=""/238, 0xee}], 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x2000, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000002c0)) getresuid(&(0x7f0000000700), &(0x7f0000000740)=0x0, &(0x7f0000000780)) ioprio_set$uid(0x3, r2, 0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000140)) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) r4 = syz_open_pts(r3, 0x0) fsetxattr(r3, &(0x7f0000000040)=@known='trusted.overlay.nlink\x00', &(0x7f00000000c0)='trusted.overlay.metacopy\x00', 0x19, 0x2) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000240)={'L+', 0x5637026b}, 0x28, 0x3d7eb52b13a8d170) ioctl$KDSKBLED(r3, 0x4b65, 0x9) fremovexattr(r4, &(0x7f0000000000)=@known='trusted.overlay.metacopy\x00') lsetxattr$security_evm(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='security.evm\x00', &(0x7f0000000600)=@v2={0x3, 0x0, 0x6, 0x2, 0xdc, "b6bbcb3dc2b35e98d1b266fc5ea7e593f1f32ada304930358685148be492b4dd77d8b9a0fb21d6ef76a08a908b9589ceae1c297122282e0dd34603d4e1ec47465960a4701683a571e296eff0b910b993604e66408e84b1d4158a8c96601dc5df9d33a629d490cd68d590ef67c84e960889fc1f876756fc67d8314afc480266d22e13e2aa73b504580dad50b6bbc26797346c2a51c5023cdcf4c97d8c6960c590c01cea29017407ee0c151a2a8ac6af7f2be941e943ae6bc79152f6fc90effde12f7ad876d055e4b8b2a397c165868c1e283ffdc2e872fbfaf1f95185"}, 0xe6, 0x2) ioctl$TIOCLINUX4(r3, 0x541c, &(0x7f00000001c0)) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x10) ioctl$VIDIOC_CROPCAP(r4, 0x400455cb, 0x0) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000180)={0x9, 0x21, 0x3, 0x16, 0x2, 0x3, 0x1, 0x15b, 0x1}) 11:44:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0x800455ca, 0x0) [ 1088.955880][T18194] binder: 18192:18194 ioctl 40046205 0 returned -22 11:44:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x20004, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) dup3(r1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4000, 0x8) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x44200, 0x0) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x0, 0x2) r4 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x80) getsockopt$inet_tcp_buf(r3, 0x6, 0xe, &(0x7f0000000280)=""/193, &(0x7f0000000100)=0xc1) ioctl$VIDIOC_CROPCAP(r4, 0x400455c8, 0x0) 11:44:10 executing program 0: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000100)={0xffffffffffffff9c}) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f0000000140)=""/163, 0x1000, 0x800, 0x80000001}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1010, r1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in, @in6=@empty}}, {{@in=@multicast1}}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x3}, 0x2c) ioctl$TIOCCONS(r1, 0x541d) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x1000000}, [@map={0x18, 0x3, 0x1, 0x0, r2}], {0x95, 0xffffffff00000000}}, &(0x7f0000000440)='syzkaller\x00', 0x6, 0x21a, &(0x7f00000000c0)=""/144}, 0x48) getgid() [ 1089.105294][T18209] binder: 18208:18209 ioctl 40046205 0 returned -22 11:44:10 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xc00) mkdir(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000000c0)={0xfffffffffffffec4, 0x0, 0x0, 0x21c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)="fc"}) 11:44:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0x800455ca, 0x0) 11:44:10 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='%fs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:44:10 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'nr0\x00', {0x2, 0x4e24, @rand_addr=0x8}}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r2, 0x400455cb, 0x0) 11:44:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0x800455ca, 0x0) 11:44:10 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xc00) mkdir(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000000c0)={0xfffffffffffffec4, 0x0, 0x0, 0x21c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 11:44:10 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x5, 0x9, 0x2f, 0xf6, 0x7}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000040)={0x0, @speck128, 0x3, "532cdc215b539d22"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x200000, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000240)=0x6, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r2, 0x400455c8, 0x0) [ 1089.504542][T18251] binder: 18249:18251 ioctl c0306201 0 returned -14 11:44:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x14000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) 11:44:10 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xc00) mkdir(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000000c0)={0xfffffffffffffec4, 0x0, 0x0, 0x21c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 11:44:10 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='Bfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:44:10 executing program 2: [ 1089.734898][T18270] binder: 18263:18270 ioctl c0306201 0 returned -14 11:44:11 executing program 0: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000100)={0xffffffffffffff9c}) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f0000000140)=""/163, 0x1000, 0x800, 0x80000001}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1010, r1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in, @in6=@empty}}, {{@in=@multicast1}}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x3}, 0x2c) ioctl$TIOCCONS(r1, 0x541d) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x1000000}, [@map={0x18, 0x3, 0x1, 0x0, r2}], {0x95, 0xffffffff00000000}}, &(0x7f0000000440)='syzkaller\x00', 0x6, 0x21a, &(0x7f00000000c0)=""/144}, 0x48) getgid() 11:44:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@acl='acl'}, {@user_xattr='user_xattr'}], [{@uid_eq={'uid', 0x3d, r2}}, {@appraise_type='appraise_type=imasig'}, {@uid_gt={'uid>', r3}}, {@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/ptmx\x00'}}]}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r5 = syz_open_pts(r0, 0x0) syslog(0x5, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r5, 0x400455c8, 0x0) 11:44:11 executing program 2: 11:44:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x16) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x2) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000002c0)) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000140)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000300)) 11:44:11 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xc00) mkdir(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000000c0)={0xfffffffffffffec4, 0x0, 0x0, 0x21c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11:44:11 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='Cfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1090.020260][T18289] erofs: read_super, device -> /dev/loop1 [ 1090.026034][T18289] erofs: options -> acl,user_xattr,uid=00000000000000000000,appraise_type=imasig,uid>00000000000000000000,fowner=00000000000000000000,smackfsdef=/dev/ptmx 11:44:11 executing program 2: 11:44:11 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xc00) mkdir(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000000c0)={0xfffffffffffffec4, 0x0, 0x0, 0x21c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11:44:11 executing program 2: [ 1090.194367][T18289] erofs: cannot find valid erofs superblock 11:44:11 executing program 0: 11:44:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x4000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x80000001, 0x27e380000, 0x100, 0x5, 0xd, 0x5, 0xd0, 0x0, 0x3, 0x5, 0x8, 0x689}) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x5, 0x40000) ioctl$VIDIOC_CROPCAP(r2, 0x400455cb, 0x0) 11:44:11 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='Dfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:44:11 executing program 2: [ 1090.484188][T18289] erofs: read_super, device -> /dev/loop1 [ 1090.494282][T18289] erofs: options -> acl,user_xattr,uid=00000000000000000000,appraise_type=imasig,uid>00000000000000000000,fowner=00000000000000000000,smackfsdef=/dev/ptmx [ 1090.567260][T18289] erofs: cannot find valid erofs superblock [ 1092.366908][T18102] Bluetooth: hci0: command 0x1003 tx timeout [ 1092.373042][T10211] Bluetooth: hci0: sending frame failed (-49) [ 1094.446988][T18102] Bluetooth: hci0: command 0x1001 tx timeout [ 1094.453095][T10211] Bluetooth: hci0: sending frame failed (-49) [ 1096.526913][T18102] Bluetooth: hci0: command 0x1009 tx timeout 11:44:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x4000000000000) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x200) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) 11:44:21 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='Efs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:44:21 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xc00) mkdir(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000000c0)={0xfffffffffffffec4, 0x0, 0x0, 0x21c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11:44:21 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f023c123f3188a070") r2 = socket$inet6_sctp(0xa, 0x805, 0x84) r3 = accept4(r0, 0x0, 0x0, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @empty}}, 0x101}, 0x90) 11:44:21 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x200, 0xbbf7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000340)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="040300006600000000000000c52cf7c21975e697b02f08066b2b2ff0dac8897c6b11876d886b6621d8d207ccf73f681e55e86eb29406136fcfff050000000115000000005de87eae9082108b3d00759d0634ae6ef7f6154fa721899374c567ca65fbd3b6e72731ec2f123d9ea8d9c1f7c4ea5a91b64e41a0b69a84ef6438864b9acf633dece3c9f968fdd86af07d1984a1631d6e8304f1882cd6064f494334d7e1673e8e246f350b7c7b64", 0xab, 0x0, 0x0, 0x0) 11:44:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) syz_mount_image$nfs(&(0x7f0000000140)='nfs\x00', &(0x7f0000000180)='./file0\x00', 0xff, 0x4, &(0x7f0000000400)=[{&(0x7f00000001c0)="da30858943ae7aa055175e6ef1a83636ce8326cb58", 0x15, 0x7fffffff}, {&(0x7f0000000200)="c3e0d9acb8989789b24984a57555c42b283cd14e7ffb6ccdfdf1a43bbd61495ec6abfaac3c942e15a0054d551b733629a61b0aaefdfec657bead3c89723c78b0d704e22a21cdccc99bbf60f200b9f2dc48fb100a22c0361d8c0aa335168629a9527d2ae6e69d", 0x66}, {&(0x7f0000000280)="56bab540492a0a0e8ca8480d8027e6ec2c4cc28df3362506bc6a9ed454eb4c8c365622674e7668d9a27c566610a732af4bfc7411539f43e44d2024a069a5e6fc646128f829da76f526dce49e4372ff03ee2a92af046715b112a7e1c748ff887ee7d799987204566728370c504acab9ed04d7543987b7b0d12246b80a7d4700bafc7e80a27a397e3cfa6b4ca17334b2f6db1453707f59748889a01d8e5b8a9968659240de152a36d78d77d308f4b8b6eaae1916b5692b729677da6aff3f", 0xbd, 0x3d}, {&(0x7f0000000340)="003e16f943de22049f82e30c3952006d453a91afccbb46f1e603d0765b6afc5523c543a7e40244ecb3505ab31bcbec07557297b07a72110c4318dd186779adf5bcd81f4a2bd83668085e563cb9d4c445b4ca783e40696d699eae1dd76663ced1558708c6d808cac4b541864fd659fba0e0ba3e7ce362dbc2a7cf3a753ba03551cb36f2c9ddc908efd6a178925c50041fa365889e427982219056c91c956615d4c18d", 0xa2, 0x7}], 0x80000, &(0x7f0000000480)='!\x00') ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x80, 0x0, 0x3, 0xb9, 0x8, 0x1, 0x2, 0x401, 0x2, 0x5}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000000c0)) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 11:44:22 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xc00) mkdir(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000000c0)={0xfffffffffffffec4, 0x0, 0x0, 0x21c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}) 11:44:22 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xc00) mkdir(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000000c0)={0xfffffffffffffec4, 0x0, 0x0, 0x21c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}) 11:44:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$TIOCLINUX4(r2, 0x541c, &(0x7f0000000040)) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) 11:44:22 executing program 0: ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x3}, 0x2c) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x1000000}, [@map={0x18, 0x3, 0x1, 0x0, r0}], {0x95, 0xffffffff00000000}}, &(0x7f0000000440)='syzkaller\x00', 0x6, 0x21a, &(0x7f00000000c0)=""/144}, 0x48) 11:44:22 executing program 2: 11:44:22 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='Ffs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1102.926781][T18102] Bluetooth: hci0: command 0x1003 tx timeout [ 1102.932878][T10211] Bluetooth: hci0: sending frame failed (-49) [ 1105.006793][T18102] Bluetooth: hci0: command 0x1001 tx timeout [ 1105.012920][T10211] Bluetooth: hci0: sending frame failed (-49) [ 1107.086719][T16517] Bluetooth: hci0: command 0x1009 tx timeout 11:44:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @remote}}, 0xffffffffa03ca92e, 0x8000}, &(0x7f00000003c0)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000400)={r2, 0x200}, 0x8) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x400, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f00000002c0)={0x9, 0x8, 0x9, 0x2, 0x1d, 0x8000}) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6, @in=@broadcast}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000000040)=0xe8) 11:44:32 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xc00) mkdir(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000000c0)={0xfffffffffffffec4, 0x0, 0x0, 0x21c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}) 11:44:32 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200, 0x0) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, 0x7, {0x0, 0x1}}, 0x20) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x14000, 0x0) bind$rxrpc(r3, &(0x7f0000000200)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @remote}}, 0x24) ioctl$VIDIOC_CROPCAP(r2, 0x400455cb, 0x0) 11:44:32 executing program 0: 11:44:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@acl='acl'}, {@user_xattr='user_xattr'}], [{@uid_eq={'uid', 0x3d, r2}}, {@appraise_type='appraise_type=imasig'}, {@uid_gt={'uid>', r3}}, {@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/ptmx\x00'}}]}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r5 = syz_open_pts(r0, 0x0) syslog(0x5, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r5, 0x400455c8, 0x0) 11:44:32 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='Gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:44:32 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xc00) mkdir(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000000c0)={0xfffffffffffffec4, 0x0, 0x0, 0x21c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 11:44:32 executing program 0: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xc00) mkdir(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)="fc"}) [ 1111.143807][T18425] erofs: read_super, device -> /dev/loop2 [ 1111.200805][T18425] erofs: options -> acl,user_xattr,uid=00000000000000000000,appraise_type=imasig,uid>00000000000000000000,fowner=00000000000000000000,smackfsdef=/dev/ptmx 11:44:32 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='Ifs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:44:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) [ 1111.250986][T18446] binder: 18444:18446 ioctl 40046205 0 returned -22 11:44:32 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xc00) mkdir(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000000c0)={0xfffffffffffffec4, 0x0, 0x0, 0x21c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 11:44:32 executing program 0: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xc00) mkdir(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)="fc"}) [ 1111.329945][T18425] erofs: cannot find valid erofs superblock [ 1111.424832][T18466] binder: 18462:18466 ioctl c0306201 0 returned -14 [ 1111.436110][T18468] binder: 18465:18468 ioctl 40046205 0 returned -22 [ 1111.478384][T18468] binder: 18465:18468 ioctl c0306201 20000040 returned -11 [ 1113.246784][T18102] Bluetooth: hci0: command 0x1003 tx timeout [ 1113.252907][T17641] Bluetooth: hci0: sending frame failed (-49) [ 1113.326763][T16517] Bluetooth: hci2: command 0x1003 tx timeout [ 1113.332839][T17641] Bluetooth: hci2: sending frame failed (-49) [ 1113.336699][T18102] Bluetooth: hci1: command 0x1003 tx timeout [ 1115.326796][T16517] Bluetooth: hci0: command 0x1001 tx timeout [ 1115.332911][T17641] Bluetooth: hci0: sending frame failed (-49) [ 1115.406788][T16517] Bluetooth: hci1: command 0x1001 tx timeout [ 1115.412908][T16517] Bluetooth: hci2: command 0x1001 tx timeout [ 1115.419017][T17641] Bluetooth: hci2: sending frame failed (-49) [ 1117.406810][T16517] Bluetooth: hci0: command 0x1009 tx timeout [ 1117.486832][T16517] Bluetooth: hci2: command 0x1009 tx timeout [ 1117.492910][T16517] Bluetooth: hci1: command 0x1009 tx timeout 11:44:43 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xc00) mkdir(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000000c0)={0xfffffffffffffec4, 0x0, 0x0, 0x21c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 11:44:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) futex(&(0x7f0000000040)=0x2, 0x1, 0x2, &(0x7f00000000c0), &(0x7f0000000140)=0x1, 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x6, 0x2}) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x7fff, 0x2000) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f00000001c0)=0x9) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x105481, 0x0) ioctl$VIDIOC_CROPCAP(r3, 0x400455cb, 0x0) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000200)) 11:44:43 executing program 0: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xc00) mkdir(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)="fc"}) 11:44:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x100, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000040)={0x1, 0x3}, 0x2) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f00000000c0)={0x1f, 0xfffffffffffffffa, 0x8001, 0x9, 0x400, 0xd, 0x1c, "f8d3de246c5f4a3f12561f173af6aa70ec51f28d", "1d929e4a10d7754113d9ffb0530353aef7dfe7fc"}) ioctl$VIDIOC_CROPCAP(r2, 0x400455c8, 0x0) 11:44:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x304, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x200000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@ipv4={[], [], @remote}, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f00000000c0)={@local, 0x38, r3}) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) 11:44:43 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='Kfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:44:43 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xc00) mkdir(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 11:44:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x4}) r1 = fcntl$dupfd(r0, 0x0, r0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r2, 0x7}}, 0x10) r3 = syz_open_pts(r1, 0x401fd) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r3, 0x400455cb, 0x0) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f0000000140)={0x1a5, 0x7}) [ 1121.938184][T18483] binder: 18482:18483 ioctl 40046205 0 returned -22 [ 1121.956255][T18488] binder: 18487:18488 ioctl c0306201 0 returned -14 [ 1121.971944][T18483] binder: 18482:18483 ioctl c0306201 20000040 returned -11 11:44:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x540e, 0x0) 11:44:43 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xc00) mkdir(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 1122.092922][T18503] binder: 18501:18503 ioctl c0306201 0 returned -14 11:44:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x1ffffffffffffc, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) 11:44:43 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='Mfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:44:43 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xc00) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000000c0)={0xfffffffffffffec4, 0x0, 0x0, 0x21c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 11:44:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x540e, 0x0) [ 1122.240913][T18523] binder: 18521:18523 ioctl c0306201 0 returned -14 11:44:43 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, &(0x7f00000000c0)={0xfffffffffffffec4, 0x0, 0x0, 0x21c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) [ 1122.408805][T18536] binder: 18530:18536 ioctl c0306201 0 returned -14 [ 1122.511307][T18545] cgroup: fork rejected by pids controller in /syz5 [ 1124.126766][T16517] Bluetooth: hci0: command 0x1003 tx timeout [ 1124.132928][T10209] Bluetooth: hci0: sending frame failed (-49) [ 1124.206788][T16517] Bluetooth: hci1: command 0x1003 tx timeout [ 1124.212955][T10209] Bluetooth: hci1: sending frame failed (-49) [ 1126.206761][T16517] Bluetooth: hci0: command 0x1001 tx timeout [ 1126.212896][T10209] Bluetooth: hci0: sending frame failed (-49) [ 1126.286786][T16517] Bluetooth: hci1: command 0x1001 tx timeout [ 1126.292876][T10209] Bluetooth: hci1: sending frame failed (-49) [ 1128.287113][T18102] Bluetooth: hci0: command 0x1009 tx timeout [ 1128.366756][T18102] Bluetooth: hci1: command 0x1009 tx timeout 11:44:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r0, 0x804) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='/dev/ptmx\x00') ioctl$VIDIOC_CROPCAP(r2, 0x400455c8, 0x0) 11:44:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x540e, 0x0) 11:44:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r0}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f00000001c0)={'crc32c-generic\x00\x00\x00\x8d\xff\xff\xff\x00\x00\x00\x00\xff\xff\xff\xff\xa0\x00\x80\x00'}, &(0x7f0000000700)}) add_key(&(0x7f0000000440)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) 11:44:53 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='Nfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:44:53 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, &(0x7f00000000c0)={0xfffffffffffffec4, 0x0, 0x0, 0x21c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 11:44:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) fcntl$setflags(r0, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/audio\x00', 0x101000, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r2, 0x808c563d, &(0x7f0000001e00)) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000001cc0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x4bdcb93, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x200, @dev={0xfe, 0x80, [], 0xa}, 0x6}, @ib={0x1b, 0x2, 0x3, {"f2a226edfe793b2b1972fe4f9fa954f2"}, 0x6, 0x40, 0x3}}}, 0x118) r3 = getpgrp(0xffffffffffffffff) process_vm_writev(r3, &(0x7f00000014c0)=[{&(0x7f0000000140)=""/132, 0x84}, {&(0x7f0000000000)=""/120, 0x78}, {&(0x7f0000000200)=""/108, 0x6c}, {&(0x7f0000000280)=""/250, 0xfa}, {&(0x7f0000000380)=""/182, 0xb6}, {&(0x7f0000000440)=""/94, 0x5e}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x7, &(0x7f0000001b40)=[{&(0x7f0000001540)=""/212, 0xd4}, {&(0x7f0000001640)=""/200, 0xc8}, {&(0x7f0000001740)=""/105, 0x69}, {&(0x7f00000017c0)=""/151, 0x97}, {&(0x7f0000001880)=""/217, 0xd9}, {&(0x7f0000001980)=""/79, 0x4f}, {&(0x7f00000000c0)=""/44, 0x2c}, {&(0x7f0000001a00)=""/43, 0x2b}, {&(0x7f0000001a40)=""/239, 0xef}], 0x9, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) 11:44:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0x540e, 0x0) 11:44:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r0}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f00000001c0)={'crc32c-generic\x00\x00\x00\x8d\xff\xff\xff\x00\x00\x00\x00\xff\xff\xff\xff\xa0\x00\x80\x00'}, &(0x7f0000000700)}) add_key(&(0x7f0000000440)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) 11:44:54 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, &(0x7f00000000c0)={0xfffffffffffffec4, 0x0, 0x0, 0x21c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 11:44:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) r2 = dup(r1) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) 11:44:54 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='Ofs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:44:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0x540e, 0x0) [ 1134.296708][T16517] Bluetooth: hci0: command 0x1003 tx timeout [ 1134.302829][ T1170] Bluetooth: hci0: sending frame failed (-49) [ 1136.366739][T16517] Bluetooth: hci0: command 0x1001 tx timeout [ 1136.372851][ T1170] Bluetooth: hci0: sending frame failed (-49) [ 1138.446801][T18102] Bluetooth: hci0: command 0x1009 tx timeout 11:45:03 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000001440)='/dev/adsp#\x00', 0xfffffffffffffff8, 0x20000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000001480)={0x0, 0x1000, "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"}, &(0x7f00000024c0)=0x1008) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000002500)={r2, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x5, 0x9}, &(0x7f00000025c0)=0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r3 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) writev(r0, &(0x7f00000013c0)=[{&(0x7f0000000000)="0d48e09dd10839b68b9b4818e3696513254555e009b3eba3d7a0c410d62cfe0b486f0f52b74cf5433954fa1b09c61717e93b17186a4149ee85c7d306099dbb63e24db8e9f3eff38e7bf6f2276b6bbef0fc8262b2b77dc1331e632f2c03ce486ad7f79fc251e4f8", 0x67}, {&(0x7f00000001c0)="fab7db343d99c56107dab9b8f47a0d5e4956bf28748b3c4eb8bdcddbb5e637ffaf0a745b914017c2780a66f1665bb2e600d01592d6170ff19df63ac0430fa561383a3eb1ee46789d2db2762cfe12cb38fa3a8c6e3a9f8155c5f1375dbecc2b74ba37ac0af9b2c228c83e6206681d22e48454828095af959dd85c97", 0x7b}, {&(0x7f00000000c0)="ee5d555e595a0616b47696eb417c75cdea80694007956fa18b63c642eb096351f46db636eb8c972335e3e3dc4734ba", 0x2f}, {&(0x7f0000000240)="a33abb78ef3e2d80c740864ad72337d210ff8ce469ee1c4a0e1e24565c1e20bb86e60bbcfc9bbe2453f9c0b3040b2c78e15bc82fa91ac6c5f74f9f82a368d41248106bf74acf86a76772dbc35ba562afb469c88b89b7fe3707988bb8fcf1118a62a857c0f4ef892b149986c485f21f4d8bc04e02055974d22e06fbe4d3d55c1988bec367ba8836c0f68b42893a371494bebc046f19997de903a8cf123ebb77ff93cc075d9bf6ebdf361860fc2c81d3740ed016b377aa3221b64511e0db24faf1d1413dd5fea34f5efba24bd9d9750cbfab45f986b824567cab57e34637aca88dd6", 0xe1}, {&(0x7f0000000340)="902f0f8754bb57a0c6b5e040a0807afe40df8ddc56538d136381e492b7c60e60cdabfd349437e09be2", 0x29}, {&(0x7f0000000380)="de91f49c1e7db8b653d6c2bb68c8a262ef7c41ff5f0f46dc916cb19dcecabc63c6a37efd3073499ccec95bae4c3fa8d44370197a", 0x34}, {&(0x7f00000003c0)="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", 0x1000}], 0x7) ioctl$VIDIOC_CROPCAP(r3, 0x400455c8, 0x0) 11:45:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xc00) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000000c0)={0xfffffffffffffec4, 0x0, 0x0, 0x21c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 11:45:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) socket$inet(0x2, 0x3, 0x7ff) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x8) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000040)) r2 = dup(r1) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f0000000140)={0xb, @raw_data="d8e467c4ef8af12672d2cedfd7fb8c9e82fafb7f44e8844ceae00b2ee26a766c3ee010081b3ffa437534704d1415b3a768c6e4f7ea264fab2272a10e9e068e41d8040f819b055d3cabcdf722ab5d02cc76fc7741def5d921eb1b66b21cedf8fe4d7830469ba14f62ec1e35e3358d256c67e6b974d2ce79cb54c8705c6667209eaf1e0743d3b846498c192600ca7eafa4be4cf7825c91a54518c42410a1dff80bdff7b6d86258d559894bf543cab5b49ed1b4fa91e7690e1899706b6abb28edccd3a9a74ffbbf19a8"}) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) 11:45:03 executing program 2: syz_execute_func(&(0x7f0000002540)="3666440f50f56664400f9f3241c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, 0x0) 11:45:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0x540e, 0x0) 11:45:03 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='Rfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1142.443342][T18620] binder: 18619:18620 ioctl c0306201 0 returned -14 11:45:03 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xc00) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000000c0)={0xfffffffffffffec4, 0x0, 0x0, 0x21c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 11:45:03 executing program 2: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2009ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r1, &(0x7f00000000c0), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0xfdf2) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, 0x0, 0x0) 11:45:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0x540e, 0x0) 11:45:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x6, 0x383c9fc8, 0xcd8, 0x2, 0x14, 0xe36, 0x40, 0x3, 0x5, 0x100000001, 0x1, 0x99}) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) 11:45:03 executing program 2: fcntl$getownex(0xffffffffffffff9c, 0x10, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000540)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) getsockopt$inet_mreqn(r1, 0x0, 0x24, 0x0, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@ipv4, 0x0, 0x0, 0x0, 0x5}, 0x16d) recvfrom$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0) 11:45:03 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='Sfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1142.963213][T18672] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1144.526736][T18102] Bluetooth: hci0: command 0x1003 tx timeout [ 1144.532844][T10209] Bluetooth: hci0: sending frame failed (-49) [ 1144.606680][T16517] Bluetooth: hci1: command 0x1003 tx timeout [ 1146.606817][T16517] Bluetooth: hci0: command 0x1001 tx timeout [ 1146.612985][T10209] Bluetooth: hci0: sending frame failed (-49) [ 1146.686711][T16517] Bluetooth: hci1: command 0x1001 tx timeout [ 1148.686794][T18102] Bluetooth: hci0: command 0x1009 tx timeout [ 1148.766778][T18102] Bluetooth: hci1: command 0x1009 tx timeout 11:45:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) 11:45:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0x540e, 0x0) 11:45:13 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xc00) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000000c0)={0xfffffffffffffec4, 0x0, 0x0, 0x21c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 11:45:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x4000, 0x0) bind$rxrpc(r2, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x71, @ipv4={[], [], @empty}, 0xffffffff}}, 0x24) ptrace$pokeuser(0x6, r1, 0x3ff, 0x0) syz_execute_func(&(0x7f0000000140)="0fa4cec767430f381cac4200088041f042fe07c4c279db3f66410f38229700000100c4617164a600000000c4e15d5cbe00000000c482fd34c9c44211979003000000c44241026b00") ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r2, 0x400455cb, 0x0) 11:45:13 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='Ufs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:45:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r0, r1) execve(&(0x7f00000002c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) write(r0, 0x0, 0x0) 11:45:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0x540e, 0x0) 11:45:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x3}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) ioctl$VIDIOC_CROPCAP(r2, 0x400455cb, 0x0) 11:45:14 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xc00) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000000c0)={0xfffffffffffffec4, 0x0, 0x0, 0x21c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 11:45:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000004c0)) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) r2 = dup2(r0, r1) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, 0x0) 11:45:14 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='Vfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:45:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0x540e, 0x0) [ 1154.926747][T16517] Bluetooth: hci0: command 0x1003 tx timeout [ 1154.932843][ T1170] Bluetooth: hci0: sending frame failed (-49) [ 1157.006772][T16517] Bluetooth: hci0: command 0x1001 tx timeout [ 1157.012879][ T1170] Bluetooth: hci0: sending frame failed (-49) [ 1159.086798][T16517] Bluetooth: hci0: command 0x1009 tx timeout 11:45:24 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x7, 0xa4000) ioctl$TIOCCONS(r0, 0x541d) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r2, 0x400455cb, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000040), &(0x7f00000000c0)=0x40) 11:45:24 executing program 0: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0x540e, 0x0) 11:45:24 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0xc00) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000000c0)={0xfffffffffffffec4, 0x0, 0x0, 0x21c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 11:45:24 executing program 2: syz_execute_func(&(0x7f0000002540)="3666440f50f56664400f9f3241c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) 11:45:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x30549116, 0x7, 0x2, 0xfff, 0x1, 0x4, 0x3, 0x0, 0x8000, 0x6, 0x6, 0xfffffffffffffff7}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400000, 0x0) bind$netrom(r2, &(0x7f00000001c0)={{0x3, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast]}, 0x48) 11:45:24 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='afs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:45:24 executing program 0: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0x540e, 0x0) 11:45:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x0, 0x10001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x81, 0x20, 0x5}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) 11:45:24 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0xc00) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000000c0)={0xfffffffffffffec4, 0x0, 0x0, 0x21c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 11:45:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) 11:45:25 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='bfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:45:25 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0xc00) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000000c0)={0xfffffffffffffec4, 0x0, 0x0, 0x21c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 11:45:25 executing program 0: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0x540e, 0x0) 11:45:25 executing program 4: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000140)={0xa, @capture={0x1000, 0x1, {0x5, 0x6}, 0xe8c, 0x7ff}}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xf) ioctl$VIDIOC_CROPCAP(r2, 0x400455cb, 0x0) 11:45:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0x540e, 0x0) 11:45:25 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @netrom, 0x1}, [@null, @netrom, @bcast, @null, @bcast, @default, @rose, @bcast]}, 0x48) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$TIOCMBIS(r1, 0x5416, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000580)={'hsr0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9a\x00', 0x80042, 0xfffffffffff7fffd}) [ 1165.075079][ T8549] device bridge_slave_1 left promiscuous mode [ 1165.082118][ T8549] bridge0: port 2(bridge_slave_1) entered disabled state [ 1165.143040][ T8549] device bridge_slave_0 left promiscuous mode [ 1165.149591][ T8549] bridge0: port 1(bridge_slave_0) entered disabled state [ 1165.611572][ T8549] device hsr_slave_1 left promiscuous mode [ 1165.700179][ T8549] device hsr_slave_0 left promiscuous mode [ 1165.726793][ T12] Bluetooth: hci0: command 0x1003 tx timeout [ 1165.732875][ T1170] Bluetooth: hci0: sending frame failed (-49) [ 1165.762348][ T8549] team0 (unregistering): Port device team_slave_1 removed [ 1165.774381][ T8549] team0 (unregistering): Port device team_slave_0 removed [ 1165.788251][ T8549] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1165.861269][ T8549] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1165.944425][ T8549] bond0 (unregistering): Released all slaves [ 1167.806761][T16517] Bluetooth: hci0: command 0x1001 tx timeout [ 1167.812869][ T1170] Bluetooth: hci0: sending frame failed (-49) [ 1169.887074][T18102] Bluetooth: hci0: command 0x1009 tx timeout 11:45:34 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x8000) mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x4, 0x32, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r4, 0x400455c8, 0x0) 11:45:34 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x200000, 0x0) ioctl$KDENABIO(r0, 0x4b36) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f00000000c0)={0x7, 0x3}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r2, 0x400455cb, 0x0) 11:45:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0x540e, 0x0) 11:45:34 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='dfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:45:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r0}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f00000001c0)={'crc32c-generic\x00\x00\x00\x8d\xff\xff\xff\x00\x00\x00\x00\xff\xff\xff\xff\xa0\x00\x80\x00'}, &(0x7f0000000700)}) 11:45:34 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000000c0)={0xfffffffffffffec4, 0x0, 0x0, 0x21c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 11:45:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0x540e, 0x0) 11:45:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x400, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f000000a640)=0xf) dup(r1) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8080, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x410800, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x4000, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmmsg(r2, &(0x7f000000a4c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="27ffd707f724eae60630df453fba7995d6a6a7196f1d976477ff7b45cd4b669d4f45237fbb81144adcf9847ebefac029c3ffd6e8624e2ca7a9ea9040d8d76b21c321c17d097372d1a9998232384349a06256117b19035b006fb52b69a75a492dc13d25221855fd7b3cfe72e412087ed636b16b0815656cdf684aaf6ada2491e38698ab41a9592d650a31014acfa2022b58ef86803db276bddab01e0eb67a3c5744084a24ed20853072faf0b3d7980bc30eb730530c9f0e24fcb25050e138b9ccdc3cdce69b79c5fe", 0xc8}, {&(0x7f0000000240)="edf68acc5ef866f05c10eec269353799906899dced7bc6ccc7611546badb62fc8c4fd41d88aeba30e57713a880ce14aea1ba24f5ef6108721b08c9f5fe2d06cacf9974d37ca5e04834e8e6aa0d2d80d0406973e7ba25dcc9d3a0e6d56ca2433827", 0x61}, {&(0x7f00000002c0)="ac9ff221a666f78601f22818201a4ed056e3f8041c69982da28f9b3a24cfb270616d5824fd787050f96ed5965d4ad23dca50a55bd5c5a2070fe34e8a307f64656576af9a6993404448bcff96b1a63c115664b7ea98ef1b639eb09e3cb91fa4b9879f4a9ed8ec7951a87932b4d7d23b16239fa484aa8eb6d43e0651406be1660b7d4a4db8afb00c01b1541ed416ccf11c63da2b52361015cce60e9b472dd7e9057b2cdf8daad6cc6b7d46a610d344e20874d481dd29744a36da25968b2eaf3e7644701b244dfa72eae8207a7c4deccabc5c5ea3bf7093aee907d28dc73b844065951a446af876379b9189", 0xea}], 0x3, &(0x7f0000000400)=[{0x58, 0x108, 0x5, "7d7401e46e8c580a9bc0ac6c214ca828142a60ea875e6e92c6e6a06856e203afe1fe6b7f4101418fa1f186e481c90756d443b160a60463adaa7a976044601b21625757294e1b"}, {0x1010, 0x105, 0x7f, "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"}, {0xe0, 0x11f, 0x8, "6a838894055475d91c3a6d05fc01414c4ccfd110639c6e2fdebf943ce947fa753849d087ea3ce981da3fb86143941ae623cbe819adad4125a0e5587fb962973224be364b17c7b1bba7701e8354f898a8ba38e907f2a41548574b5382c4714f7da873742141f22caa3302bd2c67f4a54364224817de385647e9d416727d48ccec31e9a58a633c3e95b5995a5ea9e791758c042a7d384819af59239c632d8b2ab74c9be90b51adb0e2b7d6a8d152f149a3932714287c709ba7fca1ee7677236f7aa180389a8c421f5edc183fb308"}, {0xc0, 0x115, 0x3, "92a849d9d0d117daa0cd0e2b5165855ae03f4a666c746bcc696aa7b52d0fb7f68fce83e4d5ed906f7f8fc264a2663d36d0887ac091cacd9ea1ff4cd051e00acd013375f2bc7dd14285cc22ff65f06ef84c709dc7e5d9ff24274adaa6425db35c23873fb28d02a9dfbcd92ad865ca62a1da579b86527d9cb8fe571a7e812dbf546776ca4011bd4247df54f2a44ef0cfde90a6800d009074700715e2f53548846a6107aaa8acd54fb8207d36"}, {0x78, 0x11a, 0xab98, "5c073cfab637f0587ef62d3c58f6df9b3f1b412a279c4051d54d495ce45e992dfcd351344b13ae029ba01e3c0a8449ef3d684ad8c2414df2224ffb9ee0d6f135ef7c6ea3f1c78e1bc1335331d397d02aed4092351f4822acf43dba37e6f066c68c"}, {0xd8, 0xbb8e2fb5d950e0a3, 0xbe9, "db67c1f48c2d4f298514e9a3efc9b58b6390d73d53b35dacc8ba9097a5940fd96e5282ab809b7ac5cd49da3a31c3f24e61e8e5b477f9aea80093e12d2efba6c65c36d55e6faf32eaf1871d39079746b349fd457dd8f3a2eda8f14793854a073b87ec20d3f606dc8ed47cc74152098f17b0655541bd20ae9e25e36a55fb05adbad89dcc311fca5ea91969ee3cc7bb73840997e37a87907b8187486912a418002210ac73ceeeb65ea70edcd3eec5e5132ec9a331bf56727ee794d39abf99da8dd10d4f"}], 0x1358}, 0x7}, {{&(0x7f0000001780)=@pppoe={0x18, 0x0, {0x4, @dev={[], 0x1c}, 'veth1\x00'}}, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001800)="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", 0x1000}, {&(0x7f0000002800)="010bcac7829ebfe108038e6e25c450d35ac7cba53ed903d946a4d5e6592b50b9ba97e148c88a8ccbebbe5d9a61736dc29eb3e1486d5e14bb8b031c203e53266c6445daac84bae08dce98ebcc34e9dd12be3ce08db94e86eb1bd77ee14680861b491d8c4cfb9a68ef8da4155e4aefbe955cf8f898b9dfbd347fde4149f499b5857bac08d2c8aa060dc9adfff5a2048dd38d12cec1bcd83cac1f48c003ef216486561800607471d3375819d567aa99dd826a7eb6aa86041ce941a1f4742d99c08b6ec2b6e318fb9757648b4d5106f3d8b481b4ee00f49d2549a5fde8c85f1c564fb051", 0xe2}, {&(0x7f0000002900)="256d4a560c6357af7df77f87cdfb779699905f7714349ff0b1d8547fb16989596ea8ebf3f502aa1bf3f420064846027a4cd617bde879cb2b3d361a57a24168af146b7a03c004f57d28eddb1c3ff5e08d8c4d61f8a13fb6c948d7711aabaa91811ba75498d5509c3bf53bc27e2a099fb707a837ec1354c663944ce17f20c7af3aab54a3cefbf1ffb42a9c26db87eb8cb835b2bc2e52ee398f62ce4d2df7071c2ef694ca3030", 0xa5}, {&(0x7f00000029c0)="a5f3292d0cffa08f029557aa0d0cd5cefb97098622ba1a0eac2b3b83f14d2749a48c0b09958c3ba9890f4278b26bc456c133998ac3b67c9aae3ac356b911fae300c5224e4373e32e3f3164e02ea22c61ff01f05c00ca3c919c5c1f4e7e471c5b250e66cba0f43129788638264c11e5de90b100dc384eb526cc2861688529e8c42405736eaeddbbf123de4f0e868435d29b42d0440ca430f478d2e85fe88f26a6cf93eb507a5c8de5996be383316065379bd6c3e73c5f409ef2a30dc35efa5de2bd45a712124f2ec3c5c01db1caa74bc91fd83dce49f28b3d76e9b13b7b827a8ab367a7a84bc605893e859a48a4e24b2a05", 0xf1}, {&(0x7f0000002ac0)="bccfb31745019e7b8bec50adfd246d000e40747a42b11fce4c51a8b81811586f08b8845a6f8f63ef96d941beac0e564666af73699597461302d393a8cfc0d52996e287d611799de68e10b5b315578f92835b705c58e2baa298030593988540ce57163c8e354cfa11df244530eed28f032ac28714ce487c680f81363ec0ab657ecc0069a3fdafde51fcb3bc7ebb121c7e93e3d5b943b669035cf9578185b074352591f6b6887a42db5cd78a28aa4fc485330d99ce1ac178e548b1ef42fd", 0xbd}, {&(0x7f0000002b80)="136a02b252e4c2efe78810e22e1b5d91e2b4f5da2f511b21f8feea0ebb11c5587b9ca99d6bb0b312b474c23ebe40de86154b6dd7138ea699b546adb8", 0x3c}, {&(0x7f0000002bc0)="49eab3751af4b8895b4c99607318e00096b39c5c4065a6fa3fba41b698846e3e18aba0c29021974af41ee98c9ef3db908278a7708b03a77c77445c3dd50b8d8d760d16ea1fbd396641040187be44f69b5d14239abd88cea7efd5c7a017826284879a9f8966f02213ea0bfdf4ab87c2b34dcef8a53f238cf7081eb5f241c8f858b1bd45d0333f09cb6db537cbdbcacbb5fa0b07aaf2b3402891bcc00a7db2559de035107d83f4070c231556dd5746a7ffb7a908c035e7ec5b707e88398a2a9b", 0xbf}, {&(0x7f0000002c80)="6f9f352b390ff62c650d145163eae43145947b398b0a0e00cd67a0942ff796df98dbc10291b9a14be0c30f142e7f7436368dcd7bbbbe3996e9475e818f84eb2a4640e5a9fcee8f29dced7d4bac1d3aa6", 0x50}], 0x8, &(0x7f0000002d80)=[{0xd8, 0x117, 0x1, "3df5f33b4ee3726a583a172473de2c815068da6487503f49149b69b3ac7631aada7504e4e774b4e3f7f9bee6f03db236d83d139f28a558810a24502c8da29bb4572cc83ae0be274932dc25749d3bef6393c80f1acc1810f0603cb4b50dbddf31bb06525215ce877b8de25f739e4f1e3ebf6131ae66ca861cce4049df9b9ba0f44bdc93ddbc6c5026b6a271741fd441e7203ba56cd565aea9a5261bea76dc877557cde596f582e2fe3b94c3b9285cba9ed787d7846d7ea7a11f7763a3cdbfb6e2b6e59ae9912a18dc"}, {0x30, 0x10e, 0x86b4, "776b94169ba26148c08863a4062ded1648be961a112112f1ad4514b8f8c4"}, {0xb8, 0x1ff, 0x100000000, "a92aecf348c72343cb94fe17a86cabf2eacd6ba0ff9362572526e084a485fdec1277cf380451fd895ea872ec54b7bf26e2dbf8751b4e983ea776a7befcfc208cb22d94e12eb3cea384c3456da33167f488089f86b867037492bef90b7a080e338b9f3c6462040e4ac952a9e94d61aa6276de55bc4bfebfe91f357f2cdc944cd54b516b9f30c821d0c807239137fd096e7750668a1340fc7d4288f68259c982bfc50c5df7"}], 0x1c0}, 0xcc66}, {{0x0, 0x0, &(0x7f0000006480)=[{&(0x7f0000002f40)="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", 0x1000}, {&(0x7f0000003f40)="36d3e03443e62cf9e0f12124103e8100fde781110fdc2796b16d8040149c469fece513f559cc6c1e486b9c0db8ffc3685b328d1c877b46e7664d8f1f52ab99c510d50e06595863bd69f2e45d23883ba905ecc4f9d0c5c8f1853e3b276c901474d5bff13f4c2b523c7276908cc703792f14a8b5b81eb58d22b190c2c6959d6b6ecd5391deb7d0d0019a9d98fd3a2de74658c8f742ba7bb401b1f77bc3cd6599832ef54ecb722e3ee43d77d7e5889a49fa785db6a9bff61faf4b3d64a8817fc327f7", 0xc1}, {&(0x7f0000004040)="caaf5211533c4a6617512d1e080fcfb4c640f4f541b3131e88f41c733e025d5847c6af40d433eb718415a68f78d62f903f532bf7e6efd90e2e4d3e3ce631208379e295e9df30a08d97137be604db68b0fc73115121f840ceeeecb2a5cbc8d01c87fd69617a4ae37b162b520d4d25b592793d384352adfc0c7a39e77f445b944ef8c4db83366c04f7c42d1101409ec24a6717dc930876fde54527f4bb59369c11e6441bd6c102b0496641884356323a060d87bbf3030a2747e08337651f966ebcb3a265a7ace149a13fda7d68bcc3937064e9f9a0", 0xd4}, {&(0x7f0000004140)="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", 0x1000}, {&(0x7f0000005140)="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", 0x1000}, {&(0x7f0000006140)="c5f3e0cbed3b7d3b2199572fe0f767c9f3d885c0bbf8cd4d0243c61c7c4a4876054cac70d480e5302c60157780776c214775d92aba5d6f1e59980c88ede6a58db4a5", 0x42}, {&(0x7f00000061c0)="b977e100b44675672323d211de0d01c47c60a0a5862960a18541c79d19993416037a6b38a4037fba3e695079fcc5e936e73526f368fe600736", 0x39}, {&(0x7f0000006200)="31fa15ef18bebd48b0cb3182628803268f6a3a38cb763886fa5632646db81ec448b7cc348ef04372df14ad0beed8d303d108b58c8c10757ce7c5bfce151042f5bf3ba348698f1fdc742c4479d10e53609a0a013c80817d964204b8cd57b4f4c0faadbada2541f0adb5080ea147b912b44ac90d200c9f6f49dc5f48b99338bc504320e1913731dccdc4dcf69067321387c75e27488bd4fa88890a9f9afa83e17168c1789884c184d9d6ed1eb4575c84120f164159891ae9dd14a5e0b152060503f977780f695a8770693a5e9aa2902c44cff00f5dcccac580a4c628cca01c550427828f4a9c8b129e48e4", 0xea}, {&(0x7f0000006300)="3cf70317b5b64b60283dde93155ab872ed443caa5a703d19bf9e0fa3ef327cc3726ca30931b1a8607c6dd64ea0c9885100ee54cd5f3c397affa486dec66f61a513f48fe646643073c327c3553c3a845da33f94cf85899a57fc1bc1196221f3fe0bc8244d9f0d4f5184629c3a4e1ae2ce172c32390f96a119b20e547e83f13f1f37e2d0da2dc8f5743c59f08b0fb9abe669d0fc69822c0eeee43505b70d6134ea9b224d035ca594a0b320869edbc05c93c14cb950fa55a39b25433976041800e573ab19ba", 0xc4}, {&(0x7f0000006400)="4dbee8e458342616b6ad01426e0494b55cfe3e0ea4b9a15a9330422fd41d2372d39ca2f9af27e6d7fae55520259add4bda07eb5fd7d4a720346a102e8ae73d8717ea8d556564609f223b4143b0878a363191549df4", 0x55}], 0xa}, 0x5}, {{&(0x7f0000006540)=@nfc={0x27, 0x1, 0x2, 0x7}, 0x80, &(0x7f0000006600)=[{&(0x7f00000065c0)="edac2312cc62cf23", 0x8}], 0x1, &(0x7f0000006640)=[{0xc0, 0x0, 0x9, "0e281b5c68abdffcccc7d5f679edae1c3c59b9bb71cf7eef84bf7a6a58db3cf6fa1f638f260d0fcc13676cd07d6ad13ebb9c74486117523908abb0e75ff73dfc2b88a66156e6b8ae3905381aa883ba6da2041e0eb91f64601dcb76dc77442c90e189a6a40e24c09095b3e255916ae621e6c45237d52418bc853e2fd270b5da34a6c7745ff6963e6c9eec67d56ed0c8614c0c7c24a155cc481b6eed7335934f80854fb6af5aa4b06a66d5a6b84d090e6c"}, {0x28, 0x13f, 0x1, "db79ef027fc2489cc364438318b8fca74e515af2e1"}], 0xe8}, 0x5}, {{&(0x7f0000006740)=@l2={0x1f, 0xfffffffffffffff9, {0x0, 0xfffffffffffffffe, 0x7, 0x8, 0x1, 0x2}, 0x2235}, 0x80, &(0x7f0000006a80)=[{&(0x7f00000067c0)="05192c309b70c7c4df67bd90e8be8f", 0xf}, {&(0x7f0000006800)="696631ebc696caf7d4306d8e9374f2f62eca47dfff2bd10bf0a27be51bb331f4227d59260b1bd9adc361bbd917cf1a128d72ebcde272edd7d5190d7b04753fbd784bc34e3c278eb966b53b257a80ed69da820d51de8096f5f692865ccae3cdc424a997195bf65bf35188326d3a09306ef1a898ab0ed38f6ad433f02ff8ada612bbd7a0c4cace388a13858bd20028", 0x8e}, {&(0x7f00000068c0)="d0b59d83e1f54b4f0dc436084295034b0f55c7bd17d4f07e8e630e0679827754144f2f96fec158cd8030801c986a9ace65fde9bc56efa83d1290291322e42f4f181a5a6c4c5401b71acb2d59aa5851c065ff6fbb90df67293f204599f5", 0x5d}, {&(0x7f0000006940)="141a30b3208c7831aad1021f5070a53c6872df214f4f15984ee485b29977f2b3fd9ceb019bab98a40d49a5aabe510b197ff058ecf0973c2c321f9d02dfbc1fa0468f2688db3e9247de05e58956370eb5fb22faf6fecf5583b516da42da6cb8aa2767ffa7f6e2ff88e4a5bfe5f4eb4545167807704110bd03055f99c437b44a2ff5e852b5cf3ebc0aa3c13b18eaf18f652fa4c433b535e6508ce2293430c84e96754442c9e8dcf1aa78e6a89d770546668a6196272a86036f0f9e59eaea98276e31313c8c10", 0xc5}, {&(0x7f0000006a40)="964ae84c364bf32d2f48f5f60b5db8ef0bedcf6d83", 0x15}], 0x5, &(0x7f0000006b00)=[{0x30, 0x19f, 0x7f, "c39f999fa922fcafa567853203ff62a65aced21cee08734887fe"}, {0x30, 0x115, 0x1, "b6a04ec1ce6e3646a26828a1e3b6c33913306367b3bd4dc887555fcadd95cb1c"}, {0xf8, 0x13f, 0x100, "5a083ece7112f4408647706629a26fc87579f5ffd6f498f2f48e70643f516ceabfd5658de66b73a5bb6368d61fdc122e9672edb730f6723833d7eb19108cf57833414d005f7eeb7a4df52bd6c8891bf46e8f7d011ec67cd90a33fd7f0251fc8736218d0a005e08e79f74ed419959c4816958a143a7e59d60298ae1dfc973dc3f17be207c96f66c683db7afbcd1054a8c32e704a033480485f17ca43d9bc5da57c8857532ebdf3be57c139629b00a5b91172ec48e1688dc5cd46722f3ea783d1d819f6d4bbc6a9e8d749803aeb5b0969034c3f9f1d7ea0dd60e3288b945580a8692e10e6dcff2"}, {0x30, 0x10c, 0xff, "29bb6e75f7ddd070adb7a578e4370118709135448d070f776f"}], 0x188}, 0x85a7}, {{&(0x7f0000006cc0)=@caif=@rfm={0x25, 0x401, "22e901f226aaa8f7b7426434acccb130"}, 0x80, &(0x7f0000009280)=[{&(0x7f0000006d40)="dbcbf1263f33561bd3bcc713c9420b92c4799b1df785e2059801e4e268ca7e7a327f1bee5a0a14cb1d57afa3cfad21c5e023ab06304242b27a254bf385057710c016394ac10b2d986801586c774c582a274ca5825514d026f6427b4c81287b2382f590309ff102deb1b958005c71a40e44f4831c70e30c096d40890e0dfd6cc6bece096f1644612c9ff44d247af41f6e06fc317ad4d9ae897e4b0f644708a3dd5b5ac488780cbf71e0e7ed23a0836e0e8822d25a0c5a25b5e88e4d0191f09afe79bcc1bc0e3c89a7cd55e8c2ac94b9b978d1a375d206c77a441184e123141f369dc9bf0a0eda15d0140ad0c6daea83f666de27089e9b48b6126ad8f4d9", 0xfd}, {&(0x7f0000006e40)="f518de3d5aab8dd68f83746aa1697152b19919baae959221f96888e4a3486ccd6b7a46b2417c57966daee73feaa799ef8c26bfa235cb703e6e8c1f241dc4acf7b97815a095a0a68104e6100ac8eb925d7c33bbf5ae2ae14c747a2fefde650388219a85d95a402de0b2ecbaae8ecf28daa16e6fdd26cbc8ca67cdadc690da73c2d5c0ce8e506d620f5a69c8c02f9a086c25c6b6a8e30485fb856375b77d1c37c754a45d5a05b5b877fc5a8b2722678539d4c7c301", 0xb4}, {&(0x7f0000006f00)="91762b73200ba524a1568da7c4d7b098c17ac3e61587072285ddb5a23ecfa46539b128e700f07023d041552e77ddf5fab2f3812e06819160dca03b5734a21188cb81ab9a0489d3dc5ae073b4363a27548e0e1df06bd6e8f71fa644a3acee96e21c755cf78e935cd8e74a8e6a8968663a0b063169a055347eb15a728abe21b7c28f4a46805f79590ea882e5b5f6b9e201ea8241af082610eb56a0b12f5805c94d733234744919b4e96e296e5afa280446b5093c8ef931e9f7c802bcb77d5f3c45c6e197ce23790c495a", 0xc9}, {&(0x7f0000007000)="c9e73b97e52217717d73b1a053e681c7fed09220dc35a65d4dc6a6abc8825e1177b3109ceefcdecfed03d5465f14f927b26ed5dcafb978a70c4f9d8a072f64f863f342067b4acf2cd092b0b36896daaa18a7e3ba050104d1f313f3ce", 0x5c}, {&(0x7f0000007080)="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", 0x1000}, {&(0x7f0000008080)="7e3461a7ec1e94cef62167b80d513c1661de8d1a823843bcd9333cf21efb35e87ab0a184b0086ce37841cab082c9bb4a417b0412e830e4268dbb8952c347bc605434577f9309ba28f6ef164446fee9ed1cba4d4647ad09e4afe97b995b754c92375c49307f5adfa9e9f994cbf1f70b87f53423739a5cb829157fc1", 0x7b}, {&(0x7f0000008100)="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", 0xfb}, {&(0x7f0000008200)="723b489ec1af193b83d55d6558", 0xd}, {&(0x7f0000008240)="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", 0x1000}, {&(0x7f0000009240)="6ea48a010c75b4a7cc8298242b6f7b73312452801714758f056cc830fea2baf68c1cf81f33e6cae0d2594ade188e", 0x2e}], 0xa, &(0x7f0000009340)=[{0x98, 0x0, 0x0, "541292ad415d37024a3cba0c253ee1b3c53ac9cfdb2f50a921d743d31f1b4959d59c137d0d7d38fe4294c2f1bcf61e23eadf7bad06a86cd1c4b2534efdee427aefc336c520709ed1c3c0cd6eb9681fcc6d6ac8b9ec22c3eaf362d06a11f1f9fa6fad58dc04b99cbb19ec6e73a44f4a146473bcade9a250516a04892b8a33e58e93"}, {0x28, 0x115, 0x7, "b938b71affeb92347a18ba9796d0bd9cc0fce250954a"}, {0x1010, 0x10a, 0x6, "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"}, {0x80, 0x119, 0x7fffffff, "41a1f5ed1b6fa37390f9caa6cde74741d31c09132067bd88fc6039b509cb6cab85100d154b601d0893b5f67ecda4d3ba0f71fef0f09092da0a467487412f1c9494684f687e0fd20aa80e3bdd61fb1df205c48b2656573ad4bd7ddd402ef282ecaaf7db7996247467205e1a3497ca66dc"}], 0x1150}, 0x7f}], 0x6, 0x40000) ioctl$VIDIOC_CROPCAP(r0, 0x400455cb, 0x0) 11:45:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0x540e, 0x0) 11:45:35 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='ffs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:45:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r0}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f00000001c0)={'crc32c-generic\x00\x00\x00\x8d\xff\xff\xff\x00\x00\x00\x00\xff\xff\xff\xff\xa0\x00\x80\x00'}, &(0x7f0000000700)}) 11:45:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x540b, 0x8) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) r2 = dup2(r0, r0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000000)={0x0, 0xb6, 0x1}) [ 1174.273398][T18869] IPVS: ftp: loaded support on port[0] = 21 [ 1174.433633][T18869] chnl_net:caif_netlink_parms(): no params data found [ 1174.487407][T18869] bridge0: port 1(bridge_slave_0) entered blocking state [ 1174.494627][T18869] bridge0: port 1(bridge_slave_0) entered disabled state [ 1174.503274][T18869] device bridge_slave_0 entered promiscuous mode [ 1174.512094][T18869] bridge0: port 2(bridge_slave_1) entered blocking state [ 1174.519355][T18869] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.528092][T18869] device bridge_slave_1 entered promiscuous mode [ 1174.545438][T18869] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1174.556124][T18869] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1174.577921][T18869] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1174.585859][T18869] team0: Port device team_slave_0 added [ 1174.592256][T18869] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1174.600446][T18869] team0: Port device team_slave_1 added [ 1174.607809][T18869] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1174.615917][T18869] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1174.668762][T18869] device hsr_slave_0 entered promiscuous mode [ 1174.716984][T18869] device hsr_slave_1 entered promiscuous mode [ 1174.757151][T18869] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1174.764795][T18869] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1174.781644][T18869] bridge0: port 2(bridge_slave_1) entered blocking state [ 1174.788706][T18869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1174.795982][T18869] bridge0: port 1(bridge_slave_0) entered blocking state [ 1174.803082][T18869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1174.839070][T18869] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1174.845842][T18869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1174.855368][T18869] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1174.864877][ T7843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1174.873770][ T7843] bridge0: port 1(bridge_slave_0) entered disabled state [ 1174.891905][ T7843] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.900328][ T7843] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1174.915591][T18869] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1174.922613][T18869] 8021q: adding VLAN 0 to HW filter on device team0 [ 1174.934891][T16517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1174.943160][T16517] bridge0: port 1(bridge_slave_0) entered blocking state [ 1174.950270][T16517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1174.968405][ T7843] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1174.977148][ T7843] bridge0: port 2(bridge_slave_1) entered blocking state [ 1174.984170][ T7843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1174.992676][ T7843] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1175.001809][T18094] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1175.017585][T16517] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1175.025950][T16517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1175.034297][T16517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1175.046258][T18869] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1175.053266][T18869] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1175.066394][T18869] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1175.082093][T18869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1175.119293][T18885] binder: 18884:18885 ioctl c0306201 0 returned -14 [ 1176.047153][T16517] Bluetooth: hci0: command 0x1003 tx timeout [ 1176.053233][ T1170] Bluetooth: hci0: sending frame failed (-49) [ 1178.126805][T18094] Bluetooth: hci0: command 0x1001 tx timeout [ 1178.132905][ T1170] Bluetooth: hci0: sending frame failed (-49) [ 1180.207231][T16517] Bluetooth: hci0: command 0x1009 tx timeout 11:45:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x3f, 0x0) write$P9_RWSTAT(r1, &(0x7f00000000c0)={0x7, 0x7f, 0x1}, 0x7) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f00000001c0)="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") ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x2}) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r2, 0x400455c8, 0x0) 11:45:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0x540e, 0x0) 11:45:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) r2 = getpgid(0x0) syz_open_procfs(r2, &(0x7f0000000000)='attr/keycreate\x00') ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) 11:45:45 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='hfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:45:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x5, 0x80000000}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$video4linux(0x0, 0x1, 0x0) 11:45:45 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, &(0x7f00000000c0)={0xfffffffffffffec4, 0x0, 0x0, 0x21c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 1184.651363][T18896] binder: 18891:18896 ioctl c0306201 0 returned -14 11:45:45 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 11:45:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0x540e, 0x0) 11:45:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) creat(&(0x7f0000000000)='./file0\x00', 0x100) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x2000, 0x0) ioctl$VIDIOC_CROPCAP(r2, 0x400455cb, 0x0) [ 1184.816076][T18918] binder: 18914:18918 ioctl c0306201 0 returned -14 11:45:46 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='ifs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:45:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0x540e, 0x0) 11:45:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92, 0x0, 0xfffffffffffffff8, 0x81, 0x20}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) [ 1186.766823][T18094] Bluetooth: hci0: command 0x1003 tx timeout [ 1186.772909][ T1170] Bluetooth: hci0: sending frame failed (-49) [ 1188.846716][T18094] Bluetooth: hci0: command 0x1001 tx timeout [ 1188.852826][ T1170] Bluetooth: hci0: sending frame failed (-49) [ 1190.926802][T16517] Bluetooth: hci0: command 0x1009 tx timeout 11:45:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ip_vs_stats\x00') ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000400)={[0x8, 0x4, 0x1b05cd7e, 0xf11, 0x9, 0xc8, 0xb1, 0x1ff, 0x9, 0xa9d9, 0x8, 0x7ff, 0xf6c, 0x3, 0x6], 0x10004, 0x14000}) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x80000001, 0x40000) getsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8200000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc0000000100000000000000d105003068e783bd3a2501cee50dd6c9147b14b0c3de9283ae1c3dcac85efcf1c210fc9b2deeb9f9759f41472359e5f24b8ce6fe0c106bc28ff7e939b94de5316877d1cfdc1150e5b43f305ad3d1e3ba555dae47ff654bb7b50177f02ad45870d4be00000000000000080900f6f56b1b66c54230f2543a3e82068b3d", @ANYRES16=r4, @ANYBLOB="000225bd7000fbdbdf25070000000800050002000000080004000000010040000300080005007f0000010800080007000000080003000100000008000100030000001400020073797a6b616c6c657230000000000000080004007f0000002000030008000500e000000214000600fe8000000000000000000000000000210c00020008000800030000003c000200080005000300000008000600ff0300000800040000000000080009000900000008000800ce0b0000080002004e24000008000900050000003000030008000500ac1414bb080008000700000014000600fe8000000000000000000000000000bb0800010001000000"], 0xfc}, 0x1, 0x0, 0x0, 0x80}, 0x801) ioctl$VIDIOC_CROPCAP(r2, 0x400455c8, 0x0) 11:45:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x9, 0x100000001, 0x0, 0x1, 0x16, 0x6, 0x100, 0xfffffffffffff52d, 0x6, 0xc5a, 0x9, 0x101}) ioctl$KIOCSOUND(r1, 0x4b2f, 0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r2 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x3, 0x4000) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000400)={0xbee3, 0x8, 0x2, 0x800, 0x1, 0x80000001}) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000140)={0xa, @vbi={0xa0, 0x2, 0x4, 0x76327153, [0x0, 0x7f], [0x4, 0x5]}}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000240)={0x0, 0xfffffffffffffffc}, &(0x7f0000000280)=0x8) setsockopt$sock_int(r4, 0x1, 0x22, &(0x7f0000000480)=0x7fff, 0x4) setsockopt$inet6_int(r5, 0x29, 0x33, &(0x7f0000000440)=0x9, 0x4) 11:45:56 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 11:45:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0x540e, 0x0) 11:45:56 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='mfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:45:56 executing program 2: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, &(0x7f00000000c0)={0xfffffffffffffec4, 0x0, 0x0, 0x21c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 11:45:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x540e, 0x0) 11:45:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0x540e, 0x0) 11:45:56 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 11:45:56 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 11:45:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x14000000, 0xd6, 0x2a}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/userio\x00', 0x20000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r2, 0x400455cb, 0x0) 11:45:56 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='rfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1197.086767][T18094] Bluetooth: hci0: command 0x1003 tx timeout [ 1197.092859][ T1170] Bluetooth: hci0: sending frame failed (-49) [ 1199.166786][T18094] Bluetooth: hci0: command 0x1001 tx timeout [ 1199.172888][ T1170] Bluetooth: hci0: sending frame failed (-49) [ 1201.246824][T16517] Bluetooth: hci0: command 0x1009 tx timeout 11:46:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)="ba41dae2c28c", 0x6, 0x0) r2 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="3adbf23ac042bd3dfc40e8edb8c34d9cc3bd300333985caa6f4f8910ab1c65880aa46903246734b554f428ce2efbbbe747e0f92fa9975562c9", 0x39, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='/dev/ptmx\x00', 0xfffffffffffffff8) keyctl$dh_compute(0x17, &(0x7f0000000340)={r1, r2, r3}, &(0x7f0000000380)=""/78, 0x4e, &(0x7f0000000540)={&(0x7f0000000400)={'sha512\x00'}, &(0x7f0000000440)="9640873e6e7851039c015b0ca46b1f2f8158f0482ab23a194796bf08fc82ad9dde2030d098fa6b8531405d4b240470f13d8fdc12163d4c80d634f2bca9059e024337069b38dff8c6a75a0697b2af253e0230b562d522cd0b447b6360b183c0f39e9e1b3147eda7c756c1b81a642d4eb4fc77636741ee4a77dbfa29d44a3461c89c8b9d9c92ee3d7352e515e8934241abc9a7e8043aa0d4381a8ef1d1c47d931973c2945eb575eea65d4f09be7b32830282869302da23e8a97f202941828ac26acbe0b841cd90e6c0d78bd13c90d1cdae7234a97382cba7f7ec87428b06bbff3696ad75820cc35eea1b13748c498d801216656e9f31d3ea54", 0xf8}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r4 = syz_open_pts(r0, 0x10242) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r4, 0x400455c8, 0x0) 11:46:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0x540e, 0x0) 11:46:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x540e, 0x0) 11:46:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x80404) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x1) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) 11:46:06 executing program 5 (fault-call:3 fault-nth:0): clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 11:46:06 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='sfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1205.194902][T19015] FAULT_INJECTION: forcing a failure. [ 1205.194902][T19015] name failslab, interval 1, probability 0, space 0, times 0 [ 1205.257118][T19015] CPU: 1 PID: 19015 Comm: syz-executor5 Not tainted 5.0.0-rc1-next-20190114 #11 [ 1205.266154][T19015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1205.266162][T19015] Call Trace: [ 1205.266188][T19015] dump_stack+0x1db/0x2d0 [ 1205.266212][T19015] ? dump_stack_print_info.cold+0x20/0x20 [ 1205.266237][T19015] ? __lock_acquire+0x572/0x4a10 [ 1205.266271][T19015] should_fail.cold+0xa/0x14 [ 1205.299375][T19015] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1205.305201][T19015] ? ___might_sleep+0x1e7/0x310 [ 1205.310057][T19015] ? arch_local_save_flags+0x50/0x50 [ 1205.315363][T19015] __should_failslab+0x121/0x190 [ 1205.320308][T19015] should_failslab+0x9/0x14 [ 1205.324832][T19015] kmem_cache_alloc_trace+0x2d1/0x760 [ 1205.330212][T19015] ? _raw_spin_unlock+0x2d/0x50 [ 1205.335168][T19015] binder_get_thread+0x287/0x980 [ 1205.340128][T19015] ? ___might_sleep+0x1e7/0x310 [ 1205.344982][T19015] ? binder_thread_release+0x680/0x680 [ 1205.350443][T19015] ? rcu_lockdep_current_cpu_online+0x1aa/0x220 [ 1205.356706][T19015] ? rcu_pm_notify+0xd0/0xd0 [ 1205.361311][T19015] ? __might_sleep+0x95/0x190 [ 1205.365992][T19015] binder_ioctl+0x24e/0x1917 [ 1205.370624][T19015] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1205.376913][T19015] ? binder_ioctl_write_read.isra.0+0xb60/0xb60 [ 1205.383154][T19015] ? find_held_lock+0x35/0x120 [ 1205.387923][T19015] ? __fget+0x473/0x710 [ 1205.392083][T19015] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1205.398329][T19015] ? lock_downgrade+0xbe0/0xbe0 [ 1205.403180][T19015] ? kasan_check_read+0x11/0x20 [ 1205.408040][T19015] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1205.414027][T19015] ? rcu_read_unlock_special+0x380/0x380 [ 1205.419690][T19015] ? ksys_dup3+0x660/0x660 [ 1205.424111][T19015] ? binder_ioctl_write_read.isra.0+0xb60/0xb60 [ 1205.430349][T19015] do_vfs_ioctl+0x107b/0x17d0 [ 1205.435034][T19015] ? wait_for_completion+0x810/0x810 [ 1205.440328][T19015] ? ioctl_preallocate+0x2f0/0x2f0 [ 1205.445445][T19015] ? __fget_light+0x2db/0x420 [ 1205.450124][T19015] ? fget_raw+0x20/0x20 [ 1205.454282][T19015] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1205.460552][T19015] ? fput+0x128/0x1a0 [ 1205.464572][T19015] ? do_syscall_64+0x8c/0x800 [ 1205.469253][T19015] ? do_syscall_64+0x8c/0x800 [ 1205.473943][T19015] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1205.479233][T19015] ? security_file_ioctl+0x93/0xc0 [ 1205.484350][T19015] ksys_ioctl+0xab/0xd0 [ 1205.488517][T19015] __x64_sys_ioctl+0x73/0xb0 [ 1205.493123][T19015] do_syscall_64+0x1a3/0x800 [ 1205.497720][T19015] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1205.503357][T19015] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1205.509085][T19015] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1205.514650][T19015] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1205.520558][T19015] RIP: 0033:0x457ec9 [ 1205.524453][T19015] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1205.544049][T19015] RSP: 002b:00007efce419dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 11:46:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0x540e, 0x0) [ 1205.552453][T19015] RAX: ffffffffffffffda RBX: 00007efce419dc90 RCX: 0000000000457ec9 [ 1205.560417][T19015] RDX: 0000000000000000 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1205.568381][T19015] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1205.576350][T19015] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efce419e6d4 [ 1205.584319][T19015] R13: 00000000004bf216 R14: 00000000004d0808 R15: 0000000000000004 11:46:06 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000018c0)=""/4096, 0x1000}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff37}, 0x0) sendmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="160000001a0081aee4050c00000f00fe078bc36f1600", 0x16}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) 11:46:06 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='tfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:46:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000000)) 11:46:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0x540e, 0x0) 11:46:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001200)='/dev/hwrng\x00', 0x8202, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000001440)={0x3, [0x0, 0xf98a, 0x7000000]}, &(0x7f0000001480)=0xa) getsockopt$inet6_buf(r0, 0x29, 0x2c, &(0x7f00000012c0)=""/60, &(0x7f0000001280)=0xfffffffffffffe60) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000014c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="920000003331f1053ec754c304792b04ca2e3d2f0b3a88ceb9c45f2da65b47cf8f5c96f35d01f8f0c2aedbfcdbc0dea9f8ad12ce3de94f3d46635408c1760ed983fa70e2f53131d10350a680b6890a45c8e63ca4f57a9c3028e30ee755546d66001595aafb63936e722c5af960998adb93a6b7cbc0dac27f1fd9794e5ab162960b4b53dce1c23c8d30854e9d19a83c24de6dd6b914aa866085bbe1c58b37da9832ef54d44b877105e84eaa7acf878b84f3d6bd97497ac45cc93a3b9eba83"], &(0x7f0000001240)=0x9a) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000013c0)={r3, 0x4}, &(0x7f0000001400)=0x8) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x7fff, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="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", 0x1000, 0x4}], 0x280021, &(0x7f0000001140)=ANY=[@ANYBLOB="737562766f6c3d2e5b302c6e6f646973636172642c7265665f7665726966792c6e6f6163f625c812ec848b79737562766f6c69643d3078303030303030303030303030303130312c736b69705f62616c616e636543646973636172642c6461746173756d2c666f776e65723d000000", @ANYRESDEC=0x0, @ANYBLOB=',dont_hash,\x00']) [ 1205.989593][T19015] binder: 19013:19015 ioctl c0306201 0 returned -12 11:46:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r0, 0x0) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0x540e, 0x0) 11:46:07 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 11:46:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x100000000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_UIE_OFF(r2, 0x7004) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) 11:46:07 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='xfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:46:07 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000018c0)=""/4096, 0x1000}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff37}, 0x0) sendmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="160000001a0081aee4050c00000f00fe078bc36f1600", 0x16}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) 11:46:07 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0) [ 1206.193940][T19081] binder: 19079:19081 ioctl c0306201 0 returned -14 11:46:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r0, 0x0) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0x540e, 0x0) 11:46:07 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x10, 0x0) 11:46:07 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000018c0)=""/4096, 0x1000}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff37}, 0x0) sendmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="160000001a0081aee4050c00000f00fe078bc36f1600", 0x16}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) 11:46:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r0, 0x0) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0x540e, 0x0) 11:46:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) fcntl$dupfd(r0, 0x0, r0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x10000, 0x0) fcntl$dupfd(r1, 0x406, r0) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x6, 0x101000) dup2(r0, r0) dup3(r1, r0, 0x80000) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x400, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x0, 0x0) syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x100000000, 0x101000) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video1\x00', 0x2, 0x0) syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0x3, 0x2) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x900, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r2, 0x400455cb, 0x0) 11:46:07 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='g\ns2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:46:07 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000018c0)=""/4096, 0x1000}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff37}, 0x0) sendmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="160000001a0081aee4050c00000f00fe078bc36f1600", 0x16}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) [ 1206.788981][T19133] binder: 19130:19133 ioctl 10 0 returned -22 11:46:08 executing program 2: [ 1208.366708][T18094] Bluetooth: hci0: command 0x1003 tx timeout [ 1208.372783][ T1170] Bluetooth: hci0: sending frame failed (-49) [ 1210.446775][T16517] Bluetooth: hci0: command 0x1001 tx timeout [ 1210.453837][ T1170] Bluetooth: hci0: sending frame failed (-49) [ 1212.526747][T18094] Bluetooth: hci0: command 0x1009 tx timeout 11:46:17 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, 0x0) 11:46:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x242801) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) 11:46:17 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='g%s2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:46:17 executing program 2: 11:46:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) 11:46:17 executing program 0: 11:46:17 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5450, 0x0) 11:46:17 executing program 0: 11:46:17 executing program 2: 11:46:18 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5451, 0x0) 11:46:18 executing program 4: setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="00fb970478e9b31a872cb4317aa7bb12aec9d5e324d965d8627a69c655a509a42f29ef84890ffc423f726d6a4932d00466b8afb7eefb7810b50726d00c09ffd95e7d5a555ecfcc84d7dbaa3935fc1eea0d29e53ec7484bd136013099ca3f00ec58dd44b46ef31e564e9f697e4f3e329c649d421fd1274aede7fad1cc1e573a33619285f5ecc0add5531ca24c413a413522338dae371d4b318bcff849f8316de0f50920cdfd590766aa5e6b08ca1a2bc23ee1678be4d6f4182d6a1efcf97d85235e7919d25d71597dc45ee659e0084b9a88b8ea840c94"], 0x97, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x5ffc, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x200000, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000025bd7000ffdbdf25010000000000000008410000004c00180000000973797a31000000000000000000000000000000000000e2ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000974c3a558e09bb946c27ae2da60ec2c82cad91f6d7f03e8a8692e1cc8be2218223dd9dcbb98e34bef13e4f8034f17a925eaba53cee2e33c8e2c763b71b2f52aa31c5baf0f5a8a57360022412860cd5bcb38235e751645f3e4e36e8a20285fd18fe124dbd15d1ab3701615c1bc50f6c0f18d649"], 0x68}}, 0x10) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000140)=0x8, 0x1f, 0x0) 11:46:18 executing program 2: 11:46:18 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x40000000000002, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000280)="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", 0xcfa}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000100)=@un=@abs, 0x80, &(0x7f0000000080)=[{0x0}], 0x1, &(0x7f00000031c0)=""/4096, 0x1000}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000002780)={&(0x7f00000011c0)=@nl=@unspec, 0x80, &(0x7f00000026c0), 0x0, &(0x7f0000001580)=""/55, 0x37, 0x3}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000200)=@sco, 0x26c, &(0x7f0000002b80), 0x218, &(0x7f00000076c0)=""/156, 0xfffffffffffffe11, 0xfffffffffffffffa}, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x1ff, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3ff}, 0x2c) recvmsg$kcm(r0, &(0x7f0000001400)={&(0x7f0000001000)=@ipx, 0x80, &(0x7f00000012c0)=[{&(0x7f00000010c0)=""/26, 0x1a}, {&(0x7f0000001100)=""/180, 0xb4}, {&(0x7f0000001240)=""/127, 0x7f}], 0x3, &(0x7f0000001300)=""/254, 0xfe}, 0x40) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff80, 0x81100000000, 0x7, 0x0, 0x1f, 0xfffffffffffffffa, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x7fff, 0x0, 0x0, 0xfff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9}, 0x400, 0x0, 0x3f, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:46:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x600, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x200000, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f00000001c0)="0f300f2225260f30baf80c66b8ff25ec8a66efbafc0cec0f019ecf90baf80c66b8198e9c8066efbafc0cec0f00800d0066b9c902000066b8b437c62066ba68ddd5240f30670f30360f2316", 0x4b}], 0x1, 0x40, &(0x7f0000000240)=[@cr0={0x0, 0x10008}, @dstype0={0x6, 0xb}], 0x2) r3 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r3, 0x400455c8, 0x0) 11:46:18 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='g.s2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:46:18 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, 0x0) [ 1217.021187][T19203] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor0'. [ 1217.108371][T19203] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor0'. 11:46:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x40, 0x0) ioctl$VIDIOC_CROPCAP(r3, 0x400455cb, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000011c0)={'broute\x00', 0x0, 0x3, 0x1000, [], 0x6, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], &(0x7f00000001c0)=""/4096}, &(0x7f0000001240)=0x78) connect$netlink(r3, &(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbff, 0x1480080}, 0xc) prctl$PR_GET_FP_MODE(0x2e) 11:46:18 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b2b, &(0x7f0000000680)='&@[\x00') setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4) socket$kcm(0x2, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) gettid() bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r2) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001d40)={0x0, 0x0, 0x0}, 0x0) [ 1217.184061][T19203] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor0'. [ 1217.211570][T19203] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor0'. [ 1217.247214][T19221] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor0'. 11:46:18 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5460, 0x0) [ 1217.303324][T19221] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor0'. [ 1217.307739][T19236] Unknown ioctl 1074025931 [ 1217.339882][T19240] Unknown ioctl 1074025931 11:46:18 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='g/s2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:46:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) r2 = msgget(0x3, 0x80) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000000)=""/49) [ 1217.381567][T19229] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor0'. 11:46:18 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) 11:46:18 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x40000000000002, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000280)="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", 0xcfa}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000100)=@un=@abs, 0x80, &(0x7f0000000080)=[{0x0}], 0x1, &(0x7f00000031c0)=""/4096, 0x1000}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000002780)={&(0x7f00000011c0)=@nl=@unspec, 0x80, &(0x7f00000026c0), 0x0, &(0x7f0000001580)=""/55, 0x37, 0x3}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000200)=@sco, 0x26c, &(0x7f0000002b80), 0x218, &(0x7f00000076c0)=""/156, 0xfffffffffffffe11, 0xfffffffffffffffa}, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x1ff, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3ff}, 0x2c) recvmsg$kcm(r0, &(0x7f0000001400)={&(0x7f0000001000)=@ipx, 0x80, &(0x7f00000012c0)=[{&(0x7f00000010c0)=""/26, 0x1a}, {&(0x7f0000001100)=""/180, 0xb4}, {&(0x7f0000001240)=""/127, 0x7f}], 0x3, &(0x7f0000001300)=""/254, 0xfe}, 0x40) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff80, 0x81100000000, 0x7, 0x0, 0x1f, 0xfffffffffffffffa, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x7fff, 0x0, 0x0, 0xfff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9}, 0x400, 0x0, 0x3f, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:46:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x400000, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x101002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000240)={0xffffffffffffffff}, 0x111, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f00000002c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000180), r3, 0x8f4}}, 0x18) ioctl$VIDIOC_CROPCAP(r2, 0x400455cb, 0x0) 11:46:18 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) [ 1217.523024][T19266] binder: 19263:19266 ioctl 40046205 0 returned -22 [ 1217.675816][T19270] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor0'. [ 1217.718318][T19270] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor0'. [ 1217.759881][T19286] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor0'. [ 1219.166857][T16517] Bluetooth: hci0: command 0x1003 tx timeout [ 1219.172981][T10209] Bluetooth: hci0: sending frame failed (-49) [ 1219.256782][T16517] Bluetooth: hci1: command 0x1003 tx timeout [ 1221.246971][T16517] Bluetooth: hci0: command 0x1001 tx timeout [ 1221.253076][T10209] Bluetooth: hci0: sending frame failed (-49) [ 1221.336933][T16517] Bluetooth: hci1: command 0x1001 tx timeout [ 1223.326868][T16517] Bluetooth: hci0: command 0x1009 tx timeout [ 1223.406896][T18094] Bluetooth: hci1: command 0x1009 tx timeout 11:46:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x2, 0x40) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) r2 = syz_open_pts(r0, 0x200) ioctl$TCSBRKP(r0, 0x5425, 0xbc) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000040), 0x4) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000000)={0x1, 0x80, 0x401}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r2, 0x400455c8, 0x0) 11:46:28 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gf\n2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:46:28 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) 11:46:28 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[@ANYRESDEC], 0x14) 11:46:28 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfb1b5f6c8ab7d203) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x33a) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa0200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r0}, 0x10) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77f7fb, 0x0, 0x820000, 0x0}, 0x2c) 11:46:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) 11:46:28 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @multicast2}, 0xa4, 0x0, 0x0, 0x0, 0x4}) 11:46:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x7) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000240)={0x0, 0x3, 0x7, 0x5}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0xa002, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x100000000, 0x20001) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x200101, 0x0) syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x3ff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='syscall\x00') openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x4001, 0x0) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000280)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x288040, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) 11:46:28 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40049409, 0x0) 11:46:29 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gf#2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:46:29 executing program 0: syz_mount_image$gfs2(&(0x7f0000000000)='tfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:46:29 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4020940d, 0x0) [ 1229.816732][T16517] Bluetooth: hci0: command 0x1003 tx timeout [ 1229.822869][T10209] Bluetooth: hci0: sending frame failed (-49) [ 1229.886705][T16517] Bluetooth: hci1: command 0x1003 tx timeout [ 1231.886730][T16517] Bluetooth: hci0: command 0x1001 tx timeout [ 1231.892820][T10209] Bluetooth: hci0: sending frame failed (-49) [ 1231.966718][T16517] Bluetooth: hci1: command 0x1001 tx timeout [ 1233.966704][T18094] Bluetooth: hci0: command 0x1009 tx timeout [ 1234.046728][T18094] Bluetooth: hci1: command 0x1009 tx timeout 11:46:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$VT_RELDISP(r0, 0x5605) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) 11:46:39 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfb1b5f6c8ab7d203) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x33a) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa0200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r0}, 0x10) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77f7fb, 0x0, 0x820000, 0x0}, 0x2c) 11:46:39 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, 0x0) 11:46:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) 11:46:39 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gf%2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:46:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)="ba41dae2c28c", 0x6, 0x0) r2 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="3adbf23ac042bd3dfc40e8edb8c34d9cc3bd300333985caa6f4f8910ab1c65880aa46903246734b554f428ce2efbbbe747e0f92fa9975562c9", 0x39, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='/dev/ptmx\x00', 0xfffffffffffffff8) keyctl$dh_compute(0x17, &(0x7f0000000340)={r1, r2, r3}, &(0x7f0000000380)=""/78, 0x4e, &(0x7f0000000540)={&(0x7f0000000400)={'sha512\x00'}, &(0x7f0000000440)="9640873e6e7851039c015b0ca46b1f2f8158f0482ab23a194796bf08fc82ad9dde2030d098fa6b8531405d4b240470f13d8fdc12163d4c80d634f2bca9059e024337069b38dff8c6a75a0697b2af253e0230b562d522cd0b447b6360b183c0f39e9e1b3147eda7c756c1b81a642d4eb4fc77636741ee4a77dbfa29d44a3461c89c8b9d9c92ee3d7352e515e8934241abc9a7e8043aa0d4381a8ef1d1c47d931973c2945eb575eea65d4f09be7b32830282869302da23e8a97f202941828ac26acbe0b841cd90e6c0d78bd13c90d1cdae7234a97382cba7f7ec87428b06bbff3696ad75820cc35eea1b13748c498d801216656e9f31d3ea54", 0xf8}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r4 = syz_open_pts(r0, 0x10242) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r4, 0x400455c8, 0x0) 11:46:39 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, 0x0) 11:46:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x800, 0x110) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000140)=0x5, 0x4) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r2, 0x400455cb, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xfffffffffffffc01, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x2d, 0x18, 0xa, 0xb, 0x0, 0x3, 0x4, 0x111, 0xffffffffffffffff}}) 11:46:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)="ba41dae2c28c", 0x6, 0x0) r2 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="3adbf23ac042bd3dfc40e8edb8c34d9cc3bd300333985caa6f4f8910ab1c65880aa46903246734b554f428ce2efbbbe747e0f92fa9975562c9", 0x39, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='/dev/ptmx\x00', 0xfffffffffffffff8) keyctl$dh_compute(0x17, &(0x7f0000000340)={r1, r2, r3}, &(0x7f0000000380)=""/78, 0x4e, &(0x7f0000000540)={&(0x7f0000000400)={'sha512\x00'}, &(0x7f0000000440)="9640873e6e7851039c015b0ca46b1f2f8158f0482ab23a194796bf08fc82ad9dde2030d098fa6b8531405d4b240470f13d8fdc12163d4c80d634f2bca9059e024337069b38dff8c6a75a0697b2af253e0230b562d522cd0b447b6360b183c0f39e9e1b3147eda7c756c1b81a642d4eb4fc77636741ee4a77dbfa29d44a3461c89c8b9d9c92ee3d7352e515e8934241abc9a7e8043aa0d4381a8ef1d1c47d931973c2945eb575eea65d4f09be7b32830282869302da23e8a97f202941828ac26acbe0b841cd90e6c0d78bd13c90d1cdae7234a97382cba7f7ec87428b06bbff3696ad75820cc35eea1b13748c498d801216656e9f31d3ea54", 0xf8}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r4 = syz_open_pts(r0, 0x10242) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r4, 0x400455c8, 0x0) 11:46:39 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, 0x0) 11:46:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)="ba41dae2c28c", 0x6, 0x0) r2 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="3adbf23ac042bd3dfc40e8edb8c34d9cc3bd300333985caa6f4f8910ab1c65880aa46903246734b554f428ce2efbbbe747e0f92fa9975562c9", 0x39, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='/dev/ptmx\x00', 0xfffffffffffffff8) keyctl$dh_compute(0x17, &(0x7f0000000340)={r1, r2, r3}, &(0x7f0000000380)=""/78, 0x4e, &(0x7f0000000540)={&(0x7f0000000400)={'sha512\x00'}, &(0x7f0000000440)="9640873e6e7851039c015b0ca46b1f2f8158f0482ab23a194796bf08fc82ad9dde2030d098fa6b8531405d4b240470f13d8fdc12163d4c80d634f2bca9059e024337069b38dff8c6a75a0697b2af253e0230b562d522cd0b447b6360b183c0f39e9e1b3147eda7c756c1b81a642d4eb4fc77636741ee4a77dbfa29d44a3461c89c8b9d9c92ee3d7352e515e8934241abc9a7e8043aa0d4381a8ef1d1c47d931973c2945eb575eea65d4f09be7b32830282869302da23e8a97f202941828ac26acbe0b841cd90e6c0d78bd13c90d1cdae7234a97382cba7f7ec87428b06bbff3696ad75820cc35eea1b13748c498d801216656e9f31d3ea54", 0xf8}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r4 = syz_open_pts(r0, 0x10242) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r4, 0x400455c8, 0x0) 11:46:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x80404) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x1) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) [ 1238.741288][T19404] binder: 19403:19404 ioctl c0046209 0 returned -22 [ 1240.616689][T16517] Bluetooth: hci0: command 0x1003 tx timeout [ 1240.622961][T10209] Bluetooth: hci0: sending frame failed (-49) [ 1240.696714][T16517] Bluetooth: hci1: command 0x1003 tx timeout [ 1242.686770][T16517] Bluetooth: hci0: command 0x1001 tx timeout [ 1242.692920][T10209] Bluetooth: hci0: sending frame failed (-49) [ 1242.766870][T16517] Bluetooth: hci1: command 0x1001 tx timeout [ 1244.767287][T18094] Bluetooth: hci0: command 0x1009 tx timeout [ 1244.846813][T18094] Bluetooth: hci1: command 0x1009 tx timeout 11:46:50 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 11:46:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x24180, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) 11:46:50 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gf*2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:46:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)="ba41dae2c28c", 0x6, 0x0) r2 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="3adbf23ac042bd3dfc40e8edb8c34d9cc3bd300333985caa6f4f8910ab1c65880aa46903246734b554f428ce2efbbbe747e0f92fa9975562c9", 0x39, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='/dev/ptmx\x00', 0xfffffffffffffff8) keyctl$dh_compute(0x17, &(0x7f0000000340)={r1, r2, r3}, &(0x7f0000000380)=""/78, 0x4e, &(0x7f0000000540)={&(0x7f0000000400)={'sha512\x00'}, &(0x7f0000000440)="9640873e6e7851039c015b0ca46b1f2f8158f0482ab23a194796bf08fc82ad9dde2030d098fa6b8531405d4b240470f13d8fdc12163d4c80d634f2bca9059e024337069b38dff8c6a75a0697b2af253e0230b562d522cd0b447b6360b183c0f39e9e1b3147eda7c756c1b81a642d4eb4fc77636741ee4a77dbfa29d44a3461c89c8b9d9c92ee3d7352e515e8934241abc9a7e8043aa0d4381a8ef1d1c47d931973c2945eb575eea65d4f09be7b32830282869302da23e8a97f202941828ac26acbe0b841cd90e6c0d78bd13c90d1cdae7234a97382cba7f7ec87428b06bbff3696ad75820cc35eea1b13748c498d801216656e9f31d3ea54", 0xf8}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r4 = syz_open_pts(r0, 0x10242) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) 11:46:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x8000, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0xd2, 0x24000) r2 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x3, 0x2000) renameat(r1, &(0x7f0000000340)='./file0\x00', r2, &(0x7f00000003c0)='./file0\x00') r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r4 = syz_open_pts(r0, 0x0) setitimer(0x0, &(0x7f0000000000)={{0x100000000000}, {0x77359400}}, &(0x7f0000000080)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x6, 0x4) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) r5 = accept$unix(0xffffffffffffff9c, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e) recvfrom$unix(r5, &(0x7f00000001c0)=""/188, 0xbc, 0x40010100, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e24}, 0x6e) ioctl$VIDIOC_CROPCAP(r4, 0x400455c8, 0x0) ioctl$VT_ACTIVATE(r3, 0x5606, 0x5) 11:46:50 executing program 2: syz_mount_image$gfs2(&(0x7f0000000000)='sfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1249.330212][T19440] binder: 19437:19440 ioctl c018620b 0 returned -14 11:46:50 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) 11:46:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)="ba41dae2c28c", 0x6, 0x0) r2 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="3adbf23ac042bd3dfc40e8edb8c34d9cc3bd300333985caa6f4f8910ab1c65880aa46903246734b554f428ce2efbbbe747e0f92fa9975562c9", 0x39, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='/dev/ptmx\x00', 0xfffffffffffffff8) keyctl$dh_compute(0x17, &(0x7f0000000340)={r1, r2, r3}, &(0x7f0000000380)=""/78, 0x4e, &(0x7f0000000540)={&(0x7f0000000400)={'sha512\x00'}, &(0x7f0000000440)="9640873e6e7851039c015b0ca46b1f2f8158f0482ab23a194796bf08fc82ad9dde2030d098fa6b8531405d4b240470f13d8fdc12163d4c80d634f2bca9059e024337069b38dff8c6a75a0697b2af253e0230b562d522cd0b447b6360b183c0f39e9e1b3147eda7c756c1b81a642d4eb4fc77636741ee4a77dbfa29d44a3461c89c8b9d9c92ee3d7352e515e8934241abc9a7e8043aa0d4381a8ef1d1c47d931973c2945eb575eea65d4f09be7b32830282869302da23e8a97f202941828ac26acbe0b841cd90e6c0d78bd13c90d1cdae7234a97382cba7f7ec87428b06bbff3696ad75820cc35eea1b13748c498d801216656e9f31d3ea54", 0xf8}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r0, 0x10242) 11:46:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x3f, 0x400) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f00000001c0)=""/128) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r2, 0x400455cb, 0x0) 11:46:50 executing program 2: bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') writev(r0, &(0x7f00000000c0), 0x20000000000003fa) 11:46:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)="ba41dae2c28c", 0x6, 0x0) r2 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="3adbf23ac042bd3dfc40e8edb8c34d9cc3bd300333985caa6f4f8910ab1c65880aa46903246734b554f428ce2efbbbe747e0f92fa9975562c9", 0x39, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='/dev/ptmx\x00', 0xfffffffffffffff8) keyctl$dh_compute(0x17, &(0x7f0000000340)={r1, r2, r3}, &(0x7f0000000380)=""/78, 0x4e, &(0x7f0000000540)={&(0x7f0000000400)={'sha512\x00'}, &(0x7f0000000440)="9640873e6e7851039c015b0ca46b1f2f8158f0482ab23a194796bf08fc82ad9dde2030d098fa6b8531405d4b240470f13d8fdc12163d4c80d634f2bca9059e024337069b38dff8c6a75a0697b2af253e0230b562d522cd0b447b6360b183c0f39e9e1b3147eda7c756c1b81a642d4eb4fc77636741ee4a77dbfa29d44a3461c89c8b9d9c92ee3d7352e515e8934241abc9a7e8043aa0d4381a8ef1d1c47d931973c2945eb575eea65d4f09be7b32830282869302da23e8a97f202941828ac26acbe0b841cd90e6c0d78bd13c90d1cdae7234a97382cba7f7ec87428b06bbff3696ad75820cc35eea1b13748c498d801216656e9f31d3ea54", 0xf8}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) 11:46:50 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0189436, 0x0) [ 1249.575029][T19465] binder: 19464:19465 ioctl c018620c 0 returned -14 [ 1249.607135][T19465] binder: 19464:19465 ioctl c018620c 0 returned -14 11:46:50 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gf+2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:46:50 executing program 2: syz_mount_image$msdos(&(0x7f0000000540)='msdos\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:46:50 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc020660b, 0x0) 11:46:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x2000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x4400, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000040)={'sit0\x00', {0x2, 0x4e20, @empty}}) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) [ 1249.795972][T19491] FAT-fs (loop2): bogus number of reserved sectors [ 1249.833495][T19491] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1250.003205][T19491] FAT-fs (loop2): bogus number of reserved sectors [ 1250.018172][T19491] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1251.486931][T16517] Bluetooth: hci0: command 0x1003 tx timeout [ 1251.493042][ T1170] Bluetooth: hci0: sending frame failed (-49) [ 1253.566819][T16517] Bluetooth: hci0: command 0x1001 tx timeout [ 1253.574454][ T1170] Bluetooth: hci0: sending frame failed (-49) [ 1255.646900][T16517] Bluetooth: hci0: command 0x1009 tx timeout 11:47:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000001c0)="169e511e8ab189484d917985503a016bbc665d777162911a676bd4f4064b4e89c5b6255e008ea2330a7c1d387ea77e6ce79d0a0804ad0662288cde69b628911b92bdf26966c9fd0c35285bb96c2a282054cbfecf492e05227d66b3be22200e6b93f4d856420f4fd11965f6ab37305133eeeb9e3ae0da716921a12bbabcce104bb3e74104de60f2b0099c8f440ebde465", 0x90, 0xffffffffffffffff) r3 = request_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)='/dev/ptmx\x00', 0xfffffffffffffff8) keyctl$unlink(0x9, r2, r3) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000300)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) 11:47:00 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)="ba41dae2c28c", 0x6, 0x0) r1 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="3adbf23ac042bd3dfc40e8edb8c34d9cc3bd300333985caa6f4f8910ab1c65880aa46903246734b554f428ce2efbbbe747e0f92fa9975562c9", 0x39, 0xfffffffffffffffd) r2 = request_key(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='/dev/ptmx\x00', 0xfffffffffffffff8) keyctl$dh_compute(0x17, &(0x7f0000000340)={r0, r1, r2}, &(0x7f0000000380)=""/78, 0x4e, &(0x7f0000000540)={&(0x7f0000000400)={'sha512\x00'}, &(0x7f0000000440)="9640873e6e7851039c015b0ca46b1f2f8158f0482ab23a194796bf08fc82ad9dde2030d098fa6b8531405d4b240470f13d8fdc12163d4c80d634f2bca9059e024337069b38dff8c6a75a0697b2af253e0230b562d522cd0b447b6360b183c0f39e9e1b3147eda7c756c1b81a642d4eb4fc77636741ee4a77dbfa29d44a3461c89c8b9d9c92ee3d7352e515e8934241abc9a7e8043aa0d4381a8ef1d1c47d931973c2945eb575eea65d4f09be7b32830282869302da23e8a97f202941828ac26acbe0b841cd90e6c0d78bd13c90d1cdae7234a97382cba7f7ec87428b06bbff3696ad75820cc35eea1b13748c498d801216656e9f31d3ea54", 0xf8}) 11:47:00 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306202, 0x0) 11:47:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000040)={0x1000, "bfe2be72554664837cd208d154c9c4a9e9944cb04d84bec14b722e20a3cf8b7b", 0x1, 0x1}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f00000000c0)) ioctl$VIDIOC_CROPCAP(r2, 0x400455cb, 0x0) 11:47:00 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gf-2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:47:00 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x80000000000003, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x127c, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "25ec54ab463fcf6108eb4cc83b1f11d3893e17c0bccf6881d5eebc917ede7331993fc311391d39c807d88f944c0b32cee4e40325f83517dc606adf46822cc415", "abce6c7fb3547df586244ccbbb63ecea535b0a0400850985faf2d9c023dc5017ba5881dfbc70a4ee3309337f3e394f4800", "adfd75ae0caa391b94911db035b76d52abe5762ae886a0199851990000060a87"}) 11:47:00 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306204, 0x0) 11:47:00 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0a85322, &(0x7f0000000180)) 11:47:00 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x40080, 0x0) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000140)=""/220) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r2, 0x400455cb, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 1259.617248][T19530] binder: 19529:19530 ioctl c0306202 0 returned -22 11:47:00 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)="ba41dae2c28c", 0x6, 0x0) r1 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="3adbf23ac042bd3dfc40e8edb8c34d9cc3bd300333985caa6f4f8910ab1c65880aa46903246734b554f428ce2efbbbe747e0f92fa9975562c9", 0x39, 0xfffffffffffffffd) r2 = request_key(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='/dev/ptmx\x00', 0xfffffffffffffff8) keyctl$dh_compute(0x17, &(0x7f0000000340)={r0, r1, r2}, &(0x7f0000000380)=""/78, 0x4e, &(0x7f0000000540)={&(0x7f0000000400)={'sha512\x00'}, &(0x7f0000000440)="9640873e6e7851039c015b0ca46b1f2f8158f0482ab23a194796bf08fc82ad9dde2030d098fa6b8531405d4b240470f13d8fdc12163d4c80d634f2bca9059e024337069b38dff8c6a75a0697b2af253e0230b562d522cd0b447b6360b183c0f39e9e1b3147eda7c756c1b81a642d4eb4fc77636741ee4a77dbfa29d44a3461c89c8b9d9c92ee3d7352e515e8934241abc9a7e8043aa0d4381a8ef1d1c47d931973c2945eb575eea65d4f09be7b32830282869302da23e8a97f202941828ac26acbe0b841cd90e6c0d78bd13c90d1cdae7234a97382cba7f7ec87428b06bbff3696ad75820cc35eea1b13748c498d801216656e9f31d3ea54", 0xf8}) [ 1259.747103][T19552] binder: 19551:19552 ioctl c0306204 0 returned -22 11:47:00 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306209, 0x0) 11:47:00 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gf.2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1259.997828][T19571] binder: 19567:19571 ioctl c0306209 0 returned -22 [ 1261.736731][T16517] Bluetooth: hci1: command 0x1003 tx timeout [ 1261.742830][T16517] Bluetooth: hci0: command 0x1003 tx timeout [ 1261.748888][T10209] Bluetooth: hci0: sending frame failed (-49) [ 1263.806843][T16517] Bluetooth: hci0: command 0x1001 tx timeout [ 1263.813031][T16517] Bluetooth: hci1: command 0x1001 tx timeout [ 1263.813112][T10209] Bluetooth: hci0: sending frame failed (-49) [ 1265.886856][T18094] Bluetooth: hci0: command 0x1009 tx timeout [ 1265.886879][T16517] Bluetooth: hci1: command 0x1009 tx timeout 11:47:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x81, 0x4000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x2000000000f) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000200)=""/135, 0x0, 0x800}, 0x18) 11:47:11 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0a85322, &(0x7f0000000180)) 11:47:11 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)="ba41dae2c28c", 0x6, 0x0) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="3adbf23ac042bd3dfc40e8edb8c34d9cc3bd300333985caa6f4f8910ab1c65880aa46903246734b554f428ce2efbbbe747e0f92fa9975562c9", 0x39, 0xfffffffffffffffd) request_key(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='/dev/ptmx\x00', 0xfffffffffffffff8) 11:47:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8, 0xc040) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, &(0x7f0000000040)) 11:47:11 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306225, 0x0) 11:47:11 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gf02\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:47:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000200)) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000440)={0x0, 0x0, 0x7da}, 0x10) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000240)=0x1e1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x8000, 0x10001, 0x8, 0x2, 0x6, 0x7, 0x5, 0x92, 0x8, 0xfffffffffffffff8, 0x81, 0x20, 0x5, 0x80000000, 0x8f, 0x13e}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) setpgid(0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x1, 0x200) [ 1269.958703][T19594] binder: 19592:19594 ioctl c0306225 0 returned -22 11:47:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfd0, 0x509000) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) 11:47:11 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306249, 0x0) 11:47:11 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)="ba41dae2c28c", 0x6, 0x0) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="3adbf23ac042bd3dfc40e8edb8c34d9cc3bd300333985caa6f4f8910ab1c65880aa46903246734b554f428ce2efbbbe747e0f92fa9975562c9", 0x39, 0xfffffffffffffffd) 11:47:11 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfX2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1270.210036][T19618] binder: 19617:19618 ioctl c0306249 0 returned -22 11:47:11 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="3adbf23ac042bd3dfc40e8edb8c34d9cc3bd300333985caa6f4f8910ab1c65880aa46903246734b554f428ce2efbbbe747e0f92fa9975562c9", 0x39, 0xfffffffffffffffd) [ 1272.126724][T18094] Bluetooth: hci0: command 0x1003 tx timeout [ 1272.132807][T10209] Bluetooth: hci0: sending frame failed (-49) [ 1272.206719][T17385] Bluetooth: hci1: command 0x1003 tx timeout [ 1274.207073][T17385] Bluetooth: hci0: command 0x1001 tx timeout [ 1274.213164][T10209] Bluetooth: hci0: sending frame failed (-49) [ 1274.286746][T17385] Bluetooth: hci1: command 0x1001 tx timeout [ 1276.286751][T18094] Bluetooth: hci0: command 0x1009 tx timeout [ 1276.366777][T18094] Bluetooth: hci1: command 0x1009 tx timeout 11:47:21 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306263, 0x0) 11:47:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x80000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) 11:47:21 executing program 2: r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0) fallocate(r0, 0x8, 0x0, 0x8000) 11:47:21 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="3adbf23ac042bd3dfc40e8edb8c34d9cc3bd300333985caa6f4f8910ab1c65880aa46903246734b554f428ce2efbbbe747e0f92fa9975562c9", 0x39, 0xfffffffffffffffd) 11:47:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 11:47:21 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfc2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:47:21 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000a, 0x10, r0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x3, 0x40000) r2 = getpgid(0x0) r3 = syz_open_procfs(r2, &(0x7f0000000140)='net/connector\x00') ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x10001, 0x7, 0x2, "091540494f1a8b241909bfb7d7297fa488fd4d7e9223611985eb1ea284733047", 0x59455247}) clock_getres(0x7, &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000100)=0x3f, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000180)={{0x8, 0x6}, {0xfff, 0x8001}, 0x4, 0x5, 0x10001}) [ 1280.743278][T19662] binder: 19656:19662 ioctl c0306263 0 returned -22 [ 1280.754942][T19662] binder: 19656:19662 ioctl c0306263 0 returned -22 11:47:21 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x2, 0x4, 0x1, 0x4}, 0x2c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bc070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r0, &(0x7f0000000340), 0x0}, 0x18) 11:47:22 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="3adbf23ac042bd3dfc40e8edb8c34d9cc3bd300333985caa6f4f8910ab1c65880aa46903246734b554f428ce2efbbbe747e0f92fa9975562c9", 0x39, 0xfffffffffffffffd) 11:47:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x4000, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x363, 0x0, 0x1000}]}) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r2, 0x400455cb, 0x0) [ 1280.915946][T19678] binder: 19675:19678 ioctl c0306201 0 returned -14 11:47:22 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) pipe(&(0x7f0000000400)) fcntl$getownex(r1, 0x10, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x2, 0x4, 0x8, 0x10000}, {0x0, 0x8, 0x4, 0x3}, {0x3ff, 0x8, 0x3, 0x337}]}, 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, 0x0) fallocate(r2, 0x0, 0x0, 0x10000101) fsetxattr$security_smack_entry(0xffffffffffffffff, &(0x7f0000000380)='security.SMACK64MMAP\x00', &(0x7f00000003c0)='vmnet0!H-\x00', 0xa, 0x3) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30) getpgid(0xffffffffffffffff) 11:47:22 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) r1 = dup2(r0, r0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x5cb) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40080, 0x52) ioctl$VT_WAITACTIVE(r2, 0x5607) 11:47:22 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfd2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1280.995355][T19678] binder: 19675:19678 ioctl c0306201 0 returned -14 11:47:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0xf200000000000000}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) io_setup(0xffffffffffffff80, &(0x7f0000000000)=0x0) io_pgetevents(r2, 0x8, 0x6, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1}, 0x8}) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) chroot(&(0x7f0000000200)='./file0\x00') 11:47:22 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)="ba41dae2c28c", 0x6, 0x0) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="3adbf23ac042bd3dfc40e8edb8c34d9cc3bd300333985caa6f4f8910ab1c65880aa46903246734b554f428ce2efbbbe747e0f92fa9975562c9", 0x39, 0xfffffffffffffffd) [ 1281.139493][T19705] binder: 19704:19705 ioctl 40046205 0 returned -22 [ 1281.154269][T19707] binder: 19704:19707 ioctl 4008700e 5cb returned -22 [ 1281.163380][T19705] binder: 19704:19705 ioctl c0306201 0 returned -14 11:47:22 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8040, 0x0) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x110011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xc0, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x38, &(0x7f00000000c0), &(0x7f0000000100)=[0x0, 0x40, 0x30, 0x40, 0x78, 0x58, 0x38]}, 0x6}}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x60, 0x48, &(0x7f0000000180)=[@flat={0x73682a85, 0xa, r2}, @fda={0x66646185, 0x1, 0x0, 0x1b}, @ptr={0x70742a85, 0x1, &(0x7f0000000140), 0x1, 0x1, 0x5}], &(0x7f0000000200)=[0x0, 0x0, 0x68, 0x38, 0x0, 0x48, 0x48, 0x28, 0x38]}, 0x8}}, @decrefs={0x40046307, 0x2}, @clear_death={0x400c630f, 0x3, 0x4}, @clear_death={0x400c630f, 0x1, 0x1}], 0x96, 0x0, &(0x7f0000000340)="ce040432ffe10919abb3ae488e486f8b4f05d60c70ae39c753b46e9c97e4ac7a5b1678d774347a25a289a035c09e1ae8c8ba9a63a4a8f87e8c1c9ab78063e9b5c75bb154a4a4bc8f8c8aee80f833ee0b7ca16eb9ec1dd1180e8d2b0fd40ede0c9405166054ba83d230e7091cfaa989a146641921133162faeaeedde551582e2c606e6b126dcbd3dd3803b37bc618d4d56bf1ff91fea8"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 1281.336836][T19724] binder: 19723:19724 transaction failed 29189/-22, size 0-56 line 2896 [ 1281.345907][T19725] binder: 19723:19725 ioctl c0306201 0 returned -14 [ 1281.378231][T19730] binder: 19723:19730 transaction failed 29189/-22, size 0-56 line 2896 [ 1282.926730][T17385] Bluetooth: hci0: command 0x1003 tx timeout [ 1282.932839][T10211] Bluetooth: hci0: sending frame failed (-49) [ 1285.006778][T18094] Bluetooth: hci0: command 0x1001 tx timeout [ 1285.012869][T10211] Bluetooth: hci0: sending frame failed (-49) [ 1287.086819][T18094] Bluetooth: hci0: command 0x1009 tx timeout 11:47:32 executing program 1: socket$inet(0x10, 0x3, 0x0) open(0x0, 0x0, 0x0) pipe2(&(0x7f0000000300), 0x80800) r0 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000440)=0x80, 0x0) sendmmsg(r0, 0x0, 0x379, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x182) getrlimit(0x0, 0x0) r2 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) memfd_create(&(0x7f00000004c0)='/dev/loop#\x00', 0x4) fcntl$setlease(r2, 0x400, 0x0) fsetxattr$security_smack_entry(r2, 0x0, &(0x7f0000000200)='syz', 0x3, 0x1) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) io_destroy(0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, &(0x7f0000000000)=0xc03, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00') ioctl$LOOP_SET_FD(r1, 0x4c00, r2) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') 11:47:32 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = fcntl$getown(r0, 0x5) fcntl$setown(r1, 0x6, r2) 11:47:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x200000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) accept4$x25(r2, &(0x7f00000000c0), &(0x7f0000000140)=0x12, 0x80000) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x400000) fcntl$setstatus(r1, 0x4, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r3, 0x770a, 0x0) 11:47:32 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)="ba41dae2c28c", 0x6, 0x0) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="3adbf23ac042bd3dfc40e8edb8c34d9cc3bd300333985caa6f4f8910ab1c65880aa46903246734b554f428ce2efbbbe747e0f92fa9975562c9", 0x39, 0xfffffffffffffffd) 11:47:32 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfi2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:47:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 1291.606113][T19749] binder: 19748:19749 ioctl c0306201 0 returned -14 11:47:32 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)="ba41dae2c28c", 0x6, 0x0) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="3adbf23ac042bd3dfc40e8edb8c34d9cc3bd300333985caa6f4f8910ab1c65880aa46903246734b554f428ce2efbbbe747e0f92fa9975562c9", 0x39, 0xfffffffffffffffd) 11:47:32 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x42) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000200)=0x5) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000040)={0x8001002, 0xffff, 0xc5dc924be0407ac}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.redirect\x00', &(0x7f00000001c0)='./file0\x00', 0x8, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r2, 0x400455cb, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000100)) 11:47:32 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) [ 1291.673521][T19757] binder: 19748:19757 ioctl c0306201 0 returned -14 11:47:32 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x200040, 0x0) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000140)) dup(r0) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000100)={r2, 0x12}) r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) 11:47:33 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)="ba41dae2c28c", 0x6, 0x0) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="3adbf23ac042bd3dfc40e8edb8c34d9cc3bd300333985caa6f4f8910ab1c65880aa46903246734b554f428ce2efbbbe747e0f92fa9975562c9", 0x39, 0xfffffffffffffffd) 11:47:33 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfl2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1291.877127][T19774] skbuff: bad partial csum: csum=0/65534 headroom=2 headlen=22 [ 1291.918467][T19752] print_req_error: 550 callbacks suppressed [ 1291.918570][T19752] print_req_error: I/O error, dev loop0, sector 512 flags 80700 [ 1291.929545][T19780] skbuff: bad partial csum: csum=0/65534 headroom=2 headlen=22 [ 1291.952954][ T2479] print_req_error: I/O error, dev loop0, sector 0 flags 801 [ 1291.960351][ T2479] buffer_io_error: 546 callbacks suppressed [ 1291.960360][ T2479] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 1291.975293][ T2479] print_req_error: I/O error, dev loop0, sector 8 flags 801 [ 1291.982668][ T2479] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 1291.991053][ T2479] print_req_error: I/O error, dev loop0, sector 16 flags 801 [ 1291.998468][ T2479] Buffer I/O error on dev loop0, logical block 2, lost async page write [ 1292.006881][ T2479] print_req_error: I/O error, dev loop0, sector 24 flags 801 [ 1292.014249][ T2479] Buffer I/O error on dev loop0, logical block 3, lost async page write [ 1292.022707][ T2479] print_req_error: I/O error, dev loop0, sector 32 flags 801 [ 1292.030163][ T2479] Buffer I/O error on dev loop0, logical block 4, lost async page write [ 1292.038573][ T2479] print_req_error: I/O error, dev loop0, sector 40 flags 801 [ 1292.045977][ T2479] Buffer I/O error on dev loop0, logical block 5, lost async page write [ 1292.054440][ T2479] print_req_error: I/O error, dev loop0, sector 48 flags 801 [ 1292.061973][ T2479] Buffer I/O error on dev loop0, logical block 6, lost async page write [ 1292.067762][T19771] print_req_error: I/O error, dev loop0, sector 56 flags 801 [ 1292.070427][ T2479] print_req_error: I/O error, dev loop0, sector 64 flags 801 [ 1292.078058][T19771] Buffer I/O error on dev loop0, logical block 7, lost async page write [ 1292.085294][ T2479] Buffer I/O error on dev loop0, logical block 8, lost async page write [ 1292.093767][T19771] Buffer I/O error on dev loop0, logical block 9, lost async page write [ 1292.154637][T19788] binder: 19787:19788 ioctl c0306201 0 returned -14 [ 1292.166250][T19791] binder: 19787:19791 ioctl c0306201 0 returned -14 11:47:33 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)="ba41dae2c28c", 0x6, 0x0) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="3adbf23ac042bd3dfc40e8edb8c34d9cc3bd300333985caa6f4f8910ab1c65880aa46903246734b554f428ce2efbbbe747e0f92fa9975562c9", 0x39, 0xfffffffffffffffd) 11:47:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x6, 0x0, 0x8, 0x81, 0x9, 0xd89, 0x533, 0x1, 0x3, 0x40}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) 11:47:33 executing program 5: clone(0x4000802182001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)="76d512b3069da5b10343214226c559", 0xf, 0xfffffffffffffff8) r2 = add_key(&(0x7f0000000280)='syzkaller\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)="5555cdb67e2e51ed3c3602561b8f7b0b4b65b759758c3892b0705c21ada7695843aa94e944f79c5d1d040ecb7fd663eacff21a9e4d7771c48ea87e10777543e5338f03d914df3635b201d4b5e3e3fc47a1d8eb363f42ae09e18907c1d48467618946311c15e728765edc6805af8b9a17839cbf11d8744df64230387203edad9beef63021196b03f76c9113d82c4213cdf86450eb7fb39132f6779c48ca", 0x9d, 0xfffffffffffffffe) keyctl$link(0x8, r1, r2) r3 = request_key(&(0x7f0000000100)='rxrpc_s\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='eth0\\keyring[mime_typewlan0nodev\x00', 0xfffffffffffffffd) add_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="98f0507b8d0b62e9e5725adb6b3a6421307a60ca9032f5bb4ff434b77979fc4c4946caf38c38a15225bcfd3c11821ccad3e4dbcfe0c7f75fc4ddefbdab12", 0x3e, r3) socket$netlink(0x10, 0x3, 0xc) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 11:47:33 executing program 1: socket$inet(0x10, 0x3, 0x0) open(0x0, 0x0, 0x0) pipe2(&(0x7f0000000300), 0x80800) r0 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000440)=0x80, 0x0) sendmmsg(r0, 0x0, 0x379, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x182) getrlimit(0x0, 0x0) r2 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) memfd_create(&(0x7f00000004c0)='/dev/loop#\x00', 0x4) fcntl$setlease(r2, 0x400, 0x0) fsetxattr$security_smack_entry(r2, 0x0, &(0x7f0000000200)='syz', 0x3, 0x1) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) io_destroy(0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, &(0x7f0000000000)=0xc03, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00') ioctl$LOOP_SET_FD(r1, 0x4c00, r2) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') 11:47:33 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) 11:47:33 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)="ba41dae2c28c", 0x6, 0x0) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="3adbf23ac042bd3dfc40e8edb8c34d9cc3bd300333985caa6f4f8910ab1c65880aa46903246734b554f428ce2efbbbe747e0f92fa9975562c9", 0x39, 0xfffffffffffffffd) 11:47:33 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x30000000, 0x100) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000000c0)={0x379, 0x0, 0x10001}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000100)={r2, 0x4}) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000140)=0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) sendfile(r0, r0, &(0x7f0000000040), 0x3) 11:47:33 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfo2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1292.371409][T19812] binder: 19806:19812 ioctl c0306201 0 returned -14 [ 1292.393143][T19807] skbuff: bad partial csum: csum=0/65534 headroom=2 headlen=22 11:47:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x204a00) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) 11:47:33 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) 11:47:33 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)="ba41dae2c28c", 0x6, 0x0) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="3adbf23ac042bd3dfc40e8edb8c34d9cc3bd300333985caa6f4f8910ab1c65880aa46903246734b554f428ce2efbbbe747e0f92fa9975562c9", 0x39, 0xfffffffffffffffd) [ 1292.565052][T19831] binder: 19826:19831 ioctl c0306201 0 returned -14 11:47:33 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$ax25(0x3, 0x7, 0xcb) accept$ax25(r0, &(0x7f0000000040)={{0x3, @rose}, [@null, @null, @default, @remote, @remote, @default, @null, @rose]}, &(0x7f00000000c0)=0x3) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x400000, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000140)={{0x5, @addr=0x1}, 0x8, 0xd2, 0x4}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 11:47:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x4, 0x400) ioctl$RTC_WIE_ON(r1, 0x700f) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r2, 0x400455cb, 0x0) [ 1292.693375][T19842] skbuff: bad partial csum: csum=0/65534 headroom=2 headlen=22 11:47:33 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x4b4441, 0x0) r1 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000180)={0xffffffffffffff9c}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000240)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xa0, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x30, 0x30, &(0x7f00000001c0)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}, @fd={0x66642a85, 0x0, r2, 0x0, 0x3}], &(0x7f0000000200)=[0x48, 0x60, 0x38, 0x20, 0x38, 0x20]}, 0x3}}, @acquire={0x40046305, 0x4}, @increfs={0x40046304, 0x1}, @dead_binder_done={0x40086310, 0x2}, @clear_death, @acquire_done={0x40106309, r3}, @increfs={0x40046304, 0x2}, @dead_binder_done={0x40086310, 0x4}], 0xb6, 0x0, &(0x7f0000000340)="0e68770a54f1deeb6b3f6835a2085597e3d3254aa30c1c1cdd687077d83b225e3e202ff8d18e7f5d2ac422eb520e0d970494e60c699819769c00daacad2f35bcd59f3a9cd1b39d57ff4989dd98a4914d5ca0f8a1becfda1123eb50ca1a72e0e3d8a87e7a85180db63d31dde257ad24cdd80fd078145aa066a2221636cf7edb2dc7490cf326fd441a544c05a6b7fe48a40cd6f3935dbccf73e70535841c91b2e1a7dcf9c30f6d8f15e1140a17a87bd34730b7d14d8b20"}) r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0x40046205, 0x0) r5 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x1, 0x511c00) ioctl$ION_IOC_HEAP_QUERY(r5, 0xc0184908, &(0x7f00000000c0)={0x34, 0x0, &(0x7f0000000080)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) 11:47:33 executing program 0: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)="ba41dae2c28c", 0x6, 0x0) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="3adbf23ac042bd3dfc40e8edb8c34d9cc3bd300333985caa6f4f8910ab1c65880aa46903246734b554f428ce2efbbbe747e0f92fa9975562c9", 0x39, 0xfffffffffffffffd) [ 1292.761239][T19850] binder: 19848:19850 ioctl c0306201 0 returned -14 11:47:34 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)) 11:47:34 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) 11:47:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x100000, 0x0, 0xffffffffffffffff}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x200, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000040)={0x200, 0x0, 0x1, 0x5}) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) 11:47:34 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfp2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:47:34 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = socket(0x3, 0x4, 0x4) recvfrom(r1, &(0x7f0000000040)=""/4096, 0x1000, 0x40000141, 0x0, 0x0) 11:47:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="94000000", @ANYRES16=r3, @ANYBLOB="00002cbd7000fbdbdf25120000002400020004000400080001000200000004000400040004000400040008000100020000005c00070008000200ff0700000800020000fcffff0c00040009000000000000000c0004000000010000000000080002000100000008000200000004000c000400ff146fb8f8f8fb9d8d8cc26bc1521aff000000000000080002000200"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x40084) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) [ 1292.917008][T19869] binder: 19868:19869 ioctl 40046205 0 returned -22 [ 1292.926467][T19871] binder: 19868:19871 ioctl c0306201 0 returned -14 [ 1292.949751][T19866] skbuff: bad partial csum: csum=0/65534 headroom=2 headlen=22 11:47:34 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) 11:47:34 executing program 0: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)="ba41dae2c28c", 0x6, 0x0) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="3adbf23ac042bd3dfc40e8edb8c34d9cc3bd300333985caa6f4f8910ab1c65880aa46903246734b554f428ce2efbbbe747e0f92fa9975562c9", 0x39, 0xfffffffffffffffd) [ 1293.079180][T19892] binder: 19885:19892 ioctl c0306201 0 returned -14 11:47:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 11:47:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x88000, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000040)={0x6}, 0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) 11:47:34 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x8300, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080)) clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x5, 0x2644, 0x204, 0x1, 0x80000000, 0x7fff, 0x7ff, 0x7, 0x0}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000140)={r2, 0x200, 0x80000000, 0xe91, 0xa5a3, 0x32}, 0x14) [ 1293.164537][T19892] binder: 19885:19892 ioctl c0306201 0 returned -14 [ 1293.198226][T19900] skbuff: bad partial csum: csum=0/65534 headroom=2 headlen=22 11:47:34 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfu2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:47:34 executing program 0: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)="ba41dae2c28c", 0x6, 0x0) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="3adbf23ac042bd3dfc40e8edb8c34d9cc3bd300333985caa6f4f8910ab1c65880aa46903246734b554f428ce2efbbbe747e0f92fa9975562c9", 0x39, 0xfffffffffffffffd) 11:47:34 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) [ 1293.305346][T19916] binder: 19915:19916 ioctl c0306201 0 returned -14 [ 1293.375182][T19916] binder: 19915:19916 ioctl c0306201 0 returned -14 11:47:34 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000040)=0x401) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x40081, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f00000000c0)={0x3, 0x101}, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 11:47:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x8000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14, 0x69, 0x2, {0x80, 0x4, 0x2}}, 0x14) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x5) connect$netrom(r3, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @default, @rose, @rose, @null]}, 0x48) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000240)=0xf2a, 0x4) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000400)={0x7ff, 0xb0b9, 0x4, {0x3, @win={{0x5, 0x5, 0x8, 0xffffffff}, 0x7, 0x8, &(0x7f0000000300)={{0x9dc, 0x4, 0x3, 0x401}, &(0x7f00000002c0)={{0x2, 0x1, 0x8, 0x400}, &(0x7f0000000280)={{0x2, 0x1, 0xf, 0xffff}}}}, 0xaea, &(0x7f0000000340)="0dee00304638ab3db1de9d7c37b07edab51ffdb9257fe116d30a5601d12da55bb8bb2f3f4246d8b8ab70b2c7e51067b5616f6652a2bb831745e3c3c484af0e54e84c59fc9267c214e15bb33f05f2ec63b0653c49e03877bf37e88543db7bd0cd6d4339bc0d32ff34d39c573b85d51a190e397ed8c04e954947b505bb5e7b9ce7b3a13b6490188012d6cbbb0e1f6fc5bda134", 0x9}}}) listen(r3, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) r4 = accept(r3, 0x0, 0x0) clock_gettime(0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r6 = socket$inet6(0xa, 0x80003, 0xfc) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, 0x1c) sendmmsg(r6, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x240, &(0x7f00000011c0)}}], 0x249, 0x0) syz_genetlink_get_family_id$tipc(0x0) ppoll(&(0x7f00000000c0)=[{r4, 0x2}], 0x1, 0x0, 0x0, 0x0) write$binfmt_elf32(r4, &(0x7f0000000c40)=ANY=[@ANYBLOB="7f454c46000008000080000000000000020007000000000000000000380000007f0100000000000000002000010000000000000000000000010000000000000006000000000000000900000035f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000476baeee404f4c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000c5000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x458) syz_genetlink_get_family_id$tipc2(0x0) writev(r4, &(0x7f0000000200)=[{&(0x7f00000001c0)="f1223ab3a8", 0x5}], 0x1) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x181300, 0x0) ioctl$VIDIOC_QUERYCTRL(r7, 0xc0445624, &(0x7f0000000140)={0x2, 0x102, "f6c7031b447489b5253b51cce4ff13bd091c4977cf1bb9b9fce6f5d54fd7d1d4", 0x9, 0x7ff, 0x736c, 0x3f, 0x80}) [ 1293.486769][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1293.492630][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:47:34 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)="ba41dae2c28c", 0x6, 0x0) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="3adbf23ac042bd3dfc40e8edb8c34d9cc3bd300333985caa6f4f8910ab1c65880aa46903246734b554f428ce2efbbbe747e0f92fa9975562c9", 0x39, 0xfffffffffffffffd) 11:47:34 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001780)='/dev/ubi_ctrl\x00', 0x401, 0x0) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f00000017c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 1293.551552][T19940] binder: 19937:19940 ioctl c0306201 0 returned -14 11:47:34 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) 11:47:34 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)="ba41dae2c28c", 0x6, 0x0) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="3adbf23ac042bd3dfc40e8edb8c34d9cc3bd300333985caa6f4f8910ab1c65880aa46903246734b554f428ce2efbbbe747e0f92fa9975562c9", 0x39, 0xfffffffffffffffd) [ 1293.683560][T19955] binder: 19952:19955 ioctl c0306201 0 returned -14 [ 1295.326773][T18094] Bluetooth: hci0: command 0x1003 tx timeout [ 1295.332875][T10211] Bluetooth: hci0: sending frame failed (-49) [ 1297.406784][T18094] Bluetooth: hci0: command 0x1001 tx timeout [ 1297.412885][T10211] Bluetooth: hci0: sending frame failed (-49) [ 1299.486919][T17385] Bluetooth: hci0: command 0x1009 tx timeout 11:47:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 11:47:44 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfx2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:47:44 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) r1 = add_key(&(0x7f0000000100)='rxrpc\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)="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", 0x1000, 0xfffffffffffffffc) r2 = add_key(&(0x7f0000001200)='logon\x00', &(0x7f0000001240)={'syz', 0x2}, &(0x7f0000001280)="d9af613d82a97c7fa3a2722ba02218bb9b4c36006b2d7133e3ebafac3aee29696a7a62db78fc487a36817b924ba629cbf63f5e", 0x33, 0xfffffffffffffffb) keyctl$search(0xa, r1, &(0x7f0000001180)='rxrpc\x00', &(0x7f00000011c0)={'syz', 0x3}, r2) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4000, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x140b, 0xb, 0x2}) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000002300)={0x27, 0x4, 0x3f, 0x4, 0xb1}) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) listxattr(&(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)=""/4096, 0x1000) 11:47:44 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)="ba41dae2c28c", 0x6, 0x0) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="3adbf23ac042bd3dfc40e8edb8c34d9cc3bd300333985caa6f4f8910ab1c65880aa46903246734b554f428ce2efbbbe747e0f92fa9975562c9", 0x39, 0xfffffffffffffffd) 11:47:44 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) 11:47:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x40002) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x5eea, 0x40) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, 0x0, &(0x7f0000000480)) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x0, 0x0) write$P9_RLINK(r3, &(0x7f00000001c0)={0x7}, 0x7) close(0xffffffffffffffff) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f00005befdc)) r8 = syz_open_pts(r7, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r8, 0x400455cb, 0x0) 11:47:44 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(0x0, &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)="ba41dae2c28c", 0x6, 0x0) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="3adbf23ac042bd3dfc40e8edb8c34d9cc3bd300333985caa6f4f8910ab1c65880aa46903246734b554f428ce2efbbbe747e0f92fa9975562c9", 0x39, 0xfffffffffffffffd) 11:47:44 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x8000, 0x80) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x0, 0x10001, 0x92ff, 0x0, 0x9, 0x8, 0x0, {0x0, @in={{0x2, 0x4e22, @loopback}}, 0x1ff, 0xc66, 0x0, 0x0, 0x7ff}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000180)={r1, @in6={{0xa, 0x4e21, 0x2, @mcast2, 0x8}}, [0x3, 0x9, 0x7, 0x2, 0x200, 0x40000000, 0x3, 0x20, 0x6, 0x80000001, 0x3, 0x1ff, 0x5, 0x8, 0x6]}, &(0x7f0000000280)=0x100) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) [ 1303.777494][T19986] binder: 19985:19986 ioctl c0306201 0 returned -14 11:47:45 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) 11:47:45 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfs\n\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:47:45 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, &(0x7f00000000c0)="ba41dae2c28c", 0x6, 0x0) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="3adbf23ac042bd3dfc40e8edb8c34d9cc3bd300333985caa6f4f8910ab1c65880aa46903246734b554f428ce2efbbbe747e0f92fa9975562c9", 0x39, 0xfffffffffffffffd) [ 1304.056367][T20015] binder: 20014:20015 ioctl c0306201 0 returned -14 11:47:45 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)=ANY=[@ANYBLOB="030000000000000005000000000000000900000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="00000000020000000000000000000000000000000000000000000000", @ANYRES32=r0, @ANYBLOB="00000000f20000000000000000000000000000000000000000000000", @ANYRES32=r0, @ANYBLOB="00000000050000000000000000000000000000000000000000000000", @ANYRES32=r0, @ANYBLOB="00000000a394801b0000000000000000000000000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000036f6ffffffffffff00000000000000000000000000000000", @ANYRES32=r0, @ANYBLOB="000000007f0000000000000000000000000000000000000000000000", @ANYRES32=r0, @ANYBLOB="00000000fef2ffff19af50ff0000000001000000000000ffff000000", @ANYRES32=r0, @ANYBLOB="000000001f0000000000000000000000000000000000000000000000"]) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000180)=0x7) [ 1304.203672][T20028] binder: 20027:20028 ioctl 40046205 0 returned -22 [ 1305.966888][T18102] Bluetooth: hci0: command 0x1003 tx timeout [ 1305.973003][T10211] Bluetooth: hci0: sending frame failed (-49) [ 1308.046898][T18102] Bluetooth: hci0: command 0x1001 tx timeout [ 1308.053042][T10211] Bluetooth: hci0: sending frame failed (-49) [ 1310.126779][T17385] Bluetooth: hci0: command 0x1009 tx timeout 11:47:55 executing program 1: socket$inet(0x10, 0x0, 0x0) open(0x0, 0x0, 0x0) pipe2(&(0x7f0000000300), 0x80800) r0 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000440)=0x80, 0x0) sendmmsg(r0, 0x0, 0x379, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x182) getrlimit(0x0, 0x0) r2 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) memfd_create(&(0x7f00000004c0)='/dev/loop#\x00', 0x4) fcntl$setlease(r2, 0x400, 0x0) fsetxattr$security_smack_entry(r2, 0x0, &(0x7f0000000200)='syz', 0x3, 0x1) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) io_destroy(0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, &(0x7f0000000000)=0x3b, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00') ioctl$LOOP_SET_FD(r1, 0x4c00, r2) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') 11:47:55 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) 11:47:55 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x62bd078fc57f7e9a, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x128, r1, 0xb10, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x69}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffffffffff80}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x21}}}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x2b}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x32}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5f}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x38}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x20}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2f}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x85}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x128}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x22740, 0x0) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000080)={'team_slave_1\x00'}) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f0000000340)={0x6, [0xfffffffffffffff7, 0x6, 0x4, 0xfdb, 0x3ff, 0x0]}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000009c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @ib={0x1b, 0x0, 0x9, {"8aa70fe0aa0ede7c09c210101caa3dec"}, 0x1, 0x1af88dd4}, @ib={0x1b, 0xee, 0xfffffffffffffc00, {"85fd0808d02c405658db20b07f8916da"}, 0xfff, 0x3}}}, 0x118) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt(r3, 0x0, 0x0, &(0x7f00000003c0)="3b58a920bf133167868ac62068fc4e462d4a07411fd71b0caed0cd834ee0dda2d8c7f84350d0f0417e40a74997367f288a17271e00d8d4b8dda68c21108edb69527a3c370d4e0f54ad77", 0x4a) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in, [0x5, 0x3, 0x10000, 0x1ff, 0x4, 0x0, 0x2, 0x0, 0x4, 0x100000000, 0x555, 0x100, 0x9, 0x8]}, &(0x7f0000000080)=0x100) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3}) syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000740)={r4, 0xfffffffffffffff7}, 0x8) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000340)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xfff, 0x5, 0x3, 0xffffffffffffffff}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_mr_vif\x00') ioctl$EVIOCGMTSLOTS(r7, 0x8040450a, &(0x7f00000001c0)=""/170) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f00000004c0)={0xb, {0x3, 0x1, 0x1, 0x2800000}}) 11:47:55 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="3adbf23ac042bd3dfc40e8edb8c34d9cc3bd300333985caa6f4f8910ab1c65880aa46903246734b554f428ce2efbbbe747e0f92fa9975562c9", 0x39, 0xfffffffffffffffd) 11:47:55 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfs%\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:47:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000000)={0xc025, 0x3}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x101000, 0x0) fsetxattr(r0, &(0x7f0000000140)=@random={'security.', '/dev/ashmem\x00'}, &(0x7f0000000180)='/dev/ashmem\x00', 0xc, 0x3) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0x5807}) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) 11:47:55 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) add_key(0x0, &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="3adbf23ac042bd3dfc40e8edb8c34d9cc3bd300333985caa6f4f8910ab1c65880aa46903246734b554f428ce2efbbbe747e0f92fa9975562c9", 0x39, 0xfffffffffffffffd) 11:47:55 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x9, 0x200) connect$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f00000000c0)={0x3, 0x8000}) 11:47:55 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) 11:47:55 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x8000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xf, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000a4f51eb8dc1596310277e12098790000fd0000000000000000080020809500000000000062aec3bf87bff8ed084c27c637ea843fb011565a94284dee85433e17e0415de726bbb2ca1950fc480e247a9d2c24d9edf97d2f652fd72020b860188401835ea9cd73d35b5b27d0e6968a89cacf1c7648bbbc68f4ec099c75ed6c214ffd1f799cf5a389719b83fd6fcd844df4abd9245e327b9f0468c351de11a4363bee0d61804e43ac1c9d69228f1a52f0f25bd94b723c90ef3e4719347bc9c23f7694961948332db82daf7e17599f72e72abf3d302fa51d1905c925e99a6e191c9f97ca93dfad"], &(0x7f0000000280)='GPL\x00', 0x3ca, 0x1000, &(0x7f0000001100)=""/4096}, 0x48) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f00000000c0)={0x0, 0x1, 0x2, [], &(0x7f0000000040)=0xb}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r2, 0x400455cb, 0x0) 11:47:56 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfs3\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:47:56 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) add_key(0x0, &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="3adbf23ac042bd3dfc40e8edb8c34d9cc3bd300333985caa6f4f8910ab1c65880aa46903246734b554f428ce2efbbbe747e0f92fa9975562c9", 0x39, 0xfffffffffffffffd) 11:47:56 executing program 1: socket$inet(0x10, 0x0, 0x0) open(0x0, 0x0, 0x0) pipe2(&(0x7f0000000300), 0x80800) r0 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000440)=0x80, 0x0) sendmmsg(r0, 0x0, 0x379, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x182) getrlimit(0x0, 0x0) r2 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) memfd_create(&(0x7f00000004c0)='/dev/loop#\x00', 0x4) fcntl$setlease(r2, 0x400, 0x0) fsetxattr$security_smack_entry(r2, 0x0, &(0x7f0000000200)='syz', 0x3, 0x1) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) io_destroy(0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, &(0x7f0000000000)=0x3b, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00') ioctl$LOOP_SET_FD(r1, 0x4c00, r2) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') 11:47:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7, 0xa0000) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x3e) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r2, 0x400455cb, 0x0) 11:47:56 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) 11:47:56 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) add_key(0x0, &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="3adbf23ac042bd3dfc40e8edb8c34d9cc3bd300333985caa6f4f8910ab1c65880aa46903246734b554f428ce2efbbbe747e0f92fa9975562c9", 0x39, 0xfffffffffffffffd) 11:47:56 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) 11:47:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) 11:47:56 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='user\x00', 0x0, &(0x7f0000000240)="3adbf23ac042bd3dfc40e8edb8c34d9cc3bd300333985caa6f4f8910ab1c65880aa46903246734b554f428ce2efbbbe747e0f92fa9975562c9", 0x39, 0xfffffffffffffffd) 11:47:56 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) 11:47:56 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x02', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:47:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) write$cgroup_pid(r2, &(0x7f00000000c0)=r3, 0x12) 11:47:56 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="3adbf23ac042bd3dfc40e8edb8c34d9cc3bd300333985caa6f4f8910ab1c65880aa46903246734b554f428ce2efbbbe747e0f92fa9975562c9", 0x39, 0xfffffffffffffffd) 11:47:56 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000100)) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f00000002c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x802, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040), &(0x7f0000000080)=0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)={0x21c, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffffffffc01}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}]}, @TIPC_NLA_LINK={0x138, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x76}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x491a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa9b}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xda28}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8b1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8000000000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_NET={0x28, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffdebb}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x4000091}, 0x4801) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000240)={0x21, @time, 0x3f, {0x0, 0x400}, 0x5, 0x1, 0xf5}) 11:47:56 executing program 1: socket$inet(0x10, 0x0, 0x0) open(0x0, 0x0, 0x0) pipe2(&(0x7f0000000300), 0x80800) r0 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000440)=0x80, 0x0) sendmmsg(r0, 0x0, 0x379, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x182) getrlimit(0x0, 0x0) r2 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) memfd_create(&(0x7f00000004c0)='/dev/loop#\x00', 0x4) fcntl$setlease(r2, 0x400, 0x0) fsetxattr$security_smack_entry(r2, 0x0, &(0x7f0000000200)='syz', 0x3, 0x1) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) io_destroy(0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, &(0x7f0000000000)=0x3b, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00') ioctl$LOOP_SET_FD(r1, 0x4c00, r2) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') 11:47:57 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) 11:47:57 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x03', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:47:57 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="3adbf23ac042bd3dfc40e8edb8c34d9cc3bd300333985caa6f4f8910ab1c65880aa46903246734b554f428ce2efbbbe747e0f92fa9975562c9", 0x39, 0xfffffffffffffffd) 11:47:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="cc9a12bb67572cc1cea9a641737d5927191693966e7aaf2ab7b1a97e8acc40e8a8f133dc41f4e9dfe6750904b914166845728a282613614d143397fcc6d2aa0893357fa441abcf68da69e230a5de5d2f1eae7091fac5f6709d167d070325b5f96e6da5e8815a63e45f3891b2e09acb068d735619ffbb3b0c2fe0304f8656826b540022e8114aec7cb754fa060e506a95023fe5987616961ba597f257adb06951ee1ffb763799f05d74876519ddf8d6cdfa8ed8755d88bc", 0xb7}, {&(0x7f0000000000)="c06c03040a4f883b246afe9d66693cd1d83a024c64947e56736cbe7c0598d750e87c779972bf50f193e1de2fcd51c6f331fb2537107539ab07d0e3d9c33fa0a6ef96d9666d9008c94950ebcebb42a6c5c9a2be16b6ccf0a998dc", 0x5a}], 0x2, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) 11:47:57 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) 11:47:57 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="3adbf23ac042bd3dfc40e8edb8c34d9cc3bd300333985caa6f4f8910ab1c65880aa46903246734b554f428ce2efbbbe747e0f92fa9975562c9", 0x39, 0xfffffffffffffffd) [ 1316.120266][T20146] print_req_error: 40 callbacks suppressed [ 1316.120277][T20146] print_req_error: I/O error, dev loop0, sector 72 flags 80700 [ 1316.187285][ T8558] device bridge_slave_1 left promiscuous mode [ 1316.193513][ T8558] bridge0: port 2(bridge_slave_1) entered disabled state 11:47:57 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) 11:47:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455cb, 0x0) [ 1316.288463][ T8558] device bridge_slave_0 left promiscuous mode [ 1316.299205][ T8558] bridge0: port 1(bridge_slave_0) entered disabled state 11:47:57 executing program 2: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) 11:47:57 executing program 1: r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x1ff) [ 1316.739805][ T8558] device hsr_slave_1 left promiscuous mode [ 1316.784753][ T8558] device hsr_slave_0 left promiscuous mode [ 1316.843030][ T8558] team0 (unregistering): Port device team_slave_1 removed [ 1316.873632][ T8558] team0 (unregistering): Port device team_slave_0 removed [ 1316.899918][ T8558] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1316.963486][ T8558] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1317.054771][ T8558] bond0 (unregistering): Released all slaves [ 1317.146103][T20162] IPVS: ftp: loaded support on port[0] = 21 [ 1317.217151][T20162] chnl_net:caif_netlink_parms(): no params data found [ 1317.253485][T20162] bridge0: port 1(bridge_slave_0) entered blocking state [ 1317.260645][T20162] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.268810][T20162] device bridge_slave_0 entered promiscuous mode [ 1317.276342][T20162] bridge0: port 2(bridge_slave_1) entered blocking state [ 1317.283525][T20162] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.291274][T20162] device bridge_slave_1 entered promiscuous mode [ 1317.313194][T20162] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1317.323430][T20162] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1317.351064][T20162] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1317.361778][T20162] team0: Port device team_slave_0 added [ 1317.368566][T20162] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1317.376395][T20162] team0: Port device team_slave_1 added [ 1317.382446][T20162] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1317.390584][T20162] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1317.469748][T20162] device hsr_slave_0 entered promiscuous mode [ 1317.536895][T20162] device hsr_slave_1 entered promiscuous mode [ 1317.587584][T20162] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1317.595281][T20162] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1317.655516][T20162] bridge0: port 2(bridge_slave_1) entered blocking state [ 1317.662568][T20162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1317.669977][T20162] bridge0: port 1(bridge_slave_0) entered blocking state [ 1317.677035][T20162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1317.711759][T20162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1317.722502][T20162] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1317.734018][T18094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1317.742683][T18094] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.757307][T18094] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.772097][T20162] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1317.779639][T20162] 8021q: adding VLAN 0 to HW filter on device team0 [ 1317.790633][T18094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1317.800276][T18094] bridge0: port 1(bridge_slave_0) entered blocking state [ 1317.807390][T18094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1317.828424][T18102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1317.837269][T18102] bridge0: port 2(bridge_slave_1) entered blocking state [ 1317.844327][T18102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1317.853570][T18102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1317.873112][T20162] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1317.883942][T20162] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1317.895155][T20162] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1317.903340][T18094] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1317.911834][T18094] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1317.920620][T18094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1317.929750][T18094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1317.944526][T20162] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1317.952696][T18102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1317.965359][T20162] 8021q: adding VLAN 0 to HW filter on device batadv0 11:47:59 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) kexec_load(0x1, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="b4c3bdc99982b13e96c17fadc830472306b6c50f905e74b71d7ac58201eb51f2173317ecf7258b070b903651714ac089eaaafd3bf4dbd364f008ff95ee67814aebbe92dfae8150a62adb49db4aa1000c847802d6f24ed3061bed830fa24ddbd599fb476ad9ef9ccd33ab3c94b085665e", 0x70, 0x9, 0x1}], 0x280000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 11:47:59 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) 11:47:59 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x04', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:47:59 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x4000000000000000, &(0x7f0000000380)={&(0x7f0000000300)={0x2, 0x2, 0x0, 0x9, 0x9, 0x0, 0x0, 0x0, [@sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1={0x11e, 0x17, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x17}}}]}, 0x48}}, 0x0) 11:47:59 executing program 2: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) 11:47:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x400200007fd, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20013a5a}], 0x1, &(0x7f0000000200)=""/20, 0x8034}, 0x100) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000c40)) [ 1318.017334][T20202] binder: 20201:20202 ioctl c0306201 0 returned -14 [ 1318.028098][T20205] binder: 20201:20205 ioctl c0306201 0 returned -14 11:47:59 executing program 2: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) 11:47:59 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240), 0x0, 0xfffffffffffffffd) [ 1318.192911][T20221] binder: 20220:20221 ioctl c0306201 0 returned -14 11:47:59 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000000)={0x0, 0xa, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "99c43724"}, 0x0, 0x0, @userptr, 0x4}) 11:47:59 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) 11:47:59 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x05', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:47:59 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x1, 0x371080) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x200, 0x4, 0x6, 0x3, 0x6, 0x5, 0x5f37, {0x0, @in={{0x2, 0x4e20, @rand_addr=0x5812}}, 0x235f, 0xe2aa, 0x7, 0xca, 0x3ff}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000180)={r2, 0x68, "15d51b7fc16a1e4ae823903903bfd1f47c139ccf46be6182cc4ecb16f745aa7d9b885212de0e54c1b0cd1fccd5500cc04b8958ddfb7461e720ff7d7279389fe4c71249869c1ae9c128e08a9b6640570a02ff0a9dadbda34a66f9f266cfe6ef0afe451b0eaafac485"}, &(0x7f0000000200)=0x70) 11:47:59 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080), 0x0) 11:47:59 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="3adbf23ac042bd3dfc40e8edb8c34d9cc3bd300333985caa6f4f8910ab", 0x1d, 0xfffffffffffffffd) [ 1318.447032][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1318.452842][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:47:59 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) [ 1318.582869][T20255] binder: 20252:20255 ioctl c0306201 0 returned -14 11:47:59 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x40000000000002, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000280)="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", 0xcfa}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003180)={&(0x7f0000003040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000003100)}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000100)=@un=@abs, 0x80, &(0x7f0000000080)=[{0x0}], 0x1, &(0x7f00000031c0)=""/4096, 0x1000}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000002780)={&(0x7f00000011c0)=@nl=@unspec, 0x80, &(0x7f00000026c0), 0x0, &(0x7f0000001580)=""/55, 0x37, 0x3}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000200)=@sco, 0x26c, &(0x7f0000002b80), 0x218, &(0x7f00000076c0)=""/156, 0xfffffffffffffe11, 0xfffffffffffffffa}, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x1ff, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000001400)={&(0x7f0000001000)=@ipx, 0x80, &(0x7f00000012c0)=[{&(0x7f00000010c0)=""/26, 0x1a}, {&(0x7f0000001100)=""/180, 0xb4}, {&(0x7f0000001240)=""/127, 0x7f}], 0x3, &(0x7f0000001300)=""/254, 0xfe, 0x65580000}, 0x40) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff80, 0x81100000000, 0x7, 0x0, 0x1f, 0xfffffffffffffffa, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x7fff, 0x0, 0x0, 0xfff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1318.635528][T20255] binder: 20252:20255 ioctl c0306201 0 returned -14 11:47:59 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="3adbf23ac042bd3dfc40e8edb8c34d9cc3bd300333985caa6f4f8910ab", 0x1d, 0xfffffffffffffffd) 11:47:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x400200007fd, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20013a5a}], 0x1, &(0x7f0000000200)=""/20, 0x8034}, 0x100) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000c40)) 11:47:59 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$audion(&(0x7f0000000780)='/dev/audio#\x00', 0x7ff, 0x410000) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f00000007c0)=""/11) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) symlink(0x0, &(0x7f0000000140)='.//ile0\x00') syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400)) lsetxattr$security_ima(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='security.ima\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="02b9017868a3a9fd95d400f2e66975cf03b0353cdaac30c479f360"], 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000640)={0xbc, 0xffff, 0x100, 0x0, 0x0, [], [], [], 0x2, 0x2}) socket$l2tp(0x18, 0x1, 0x1) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x8000, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) close(0xffffffffffffffff) write(r3, &(0x7f0000000400)="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", 0x200) lsetxattr$trusted_overlay_redirect(&(0x7f00000002c0)='.//ile0\x00', &(0x7f00000003c0)='trusted.overlay.redirect\x00', &(0x7f0000000600)='./bus\x00', 0x6, 0x1) sendfile(r3, r4, 0x0, 0x10000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0) [ 1318.753202][T20269] __nla_parse: 1 callbacks suppressed [ 1318.753253][T20269] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor4'. [ 1318.770819][T20269] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor4'. 11:47:59 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) 11:47:59 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x06', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1318.817751][T20269] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor4'. [ 1318.843710][T20269] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor4'. [ 1318.916970][T20270] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor4'. [ 1319.000339][T20270] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor4'. 11:48:00 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="3adbf23ac042bd3dfc40e8edb8c34d9cc3bd300333985caa6f4f8910ab", 0x1d, 0xfffffffffffffffd) 11:48:00 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) [ 1319.085762][ T27] audit: type=1800 audit(1547466480.224:76): pid=20281 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor5" name="file0" dev="sda1" ino=17035 res=0 11:48:00 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\a', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:48:00 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x40000000000002, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000280)="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", 0xcfa}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003180)={&(0x7f0000003040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000003100)}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000100)=@un=@abs, 0x80, &(0x7f0000000080)=[{0x0}], 0x1, &(0x7f00000031c0)=""/4096, 0x1000}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000002780)={&(0x7f00000011c0)=@nl=@unspec, 0x80, &(0x7f00000026c0), 0x0, &(0x7f0000001580)=""/55, 0x37, 0x3}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000200)=@sco, 0x26c, &(0x7f0000002b80), 0x218, &(0x7f00000076c0)=""/156, 0xfffffffffffffe11, 0xfffffffffffffffa}, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x1ff, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000001400)={&(0x7f0000001000)=@ipx, 0x80, &(0x7f00000012c0)=[{&(0x7f00000010c0)=""/26, 0x1a}, {&(0x7f0000001100)=""/180, 0xb4}, {&(0x7f0000001240)=""/127, 0x7f}], 0x3, &(0x7f0000001300)=""/254, 0xfe, 0x65580000}, 0x40) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff80, 0x81100000000, 0x7, 0x0, 0x1f, 0xfffffffffffffffa, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x7fff, 0x0, 0x0, 0xfff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1319.245065][ T27] audit: type=1804 audit(1547466480.244:77): pid=20281 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir205324380/syzkaller.NnIbwF/3/file0" dev="sda1" ino=17035 res=1 11:48:00 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) 11:48:00 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="3adbf23ac042bd3dfc40e8edb8c34d9cc3bd300333985caa6f4f8910ab1c65880aa46903246734b554f428", 0x2b, 0xfffffffffffffffd) [ 1319.593305][T20311] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor4'. [ 1319.635952][T20311] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor4'. [ 1319.718447][T20320] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor4'. [ 1319.732184][ T27] audit: type=1804 audit(1547466480.874:78): pid=20324 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir205324380/syzkaller.NnIbwF/3/file0" dev="sda1" ino=17035 res=1 11:48:00 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) 11:48:00 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl(r0, 0x4, &(0x7f0000000040)="f1c1e427073eb1c173483f69aa032ee6e8a813c67a6a2ec84ec66076beecb1b824b604d17f85f2520b834d77bb3066cd7ba7c19538846f4a475c955ae504e6ed209ad1c23a4af47a42be3357bd2009f733cee33fc8df58c3ee3bc3ca8a3e8fdc2c") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x801, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x480}, 0xc, &(0x7f0000000400)={&(0x7f0000000140)=@deltaction={0x2a4, 0x31, 0x302, 0x70bd2c, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x84, 0x1, [{0x10, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x19, @TCA_ACT_KIND={0x8, 0x1, 'xt\x00'}}, {0x18, 0x1b, @TCA_ACT_KIND={0x10, 0x1, 'tunnel_key\x00'}}, {0x18, 0x4, @TCA_ACT_KIND={0x10, 0x1, 'tunnel_key\x00'}}, {0x10, 0x1, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x20, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x19, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0x18, 0x1a, @TCA_ACT_KIND={0x10, 0x1, 'tunnel_key\x00'}}, {0x14, 0x14, @TCA_ACT_KIND={0xc, 0x1, 'vlan\x00'}}, {0x14, 0x15, @TCA_ACT_KIND={0xc, 0x1, 'skbmod\x00'}}, {0x10, 0x19, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0x14, 0x1b, @TCA_ACT_KIND={0xc, 0x1, 'skbmod\x00'}}, {0x10, 0x6, @TCA_ACT_INDEX={0x8}}, {0x10, 0xf, @TCA_ACT_INDEX={0x8, 0x3, 0x62e}}, {0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}]}, @TCA_ACT_TAB={0x94, 0x1, [{0x10, 0x9, @TCA_ACT_INDEX={0x8}}, {0x10, 0xb, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x18, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x1, @TCA_ACT_KIND={0xc, 0x1, 'pedit\x00'}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'police\x00'}}, {0x14, 0x8, @TCA_ACT_KIND={0xc, 0x1, 'skbmod\x00'}}, {0x14, 0x13, @TCA_ACT_KIND={0xc, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0xb4, 0x1, [{0x14, 0x5, @TCA_ACT_KIND={0xc, 0x1, 'csum\x00'}}, {0x10, 0x17, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x18, @TCA_ACT_INDEX={0x8, 0x3, 0xeb}}, {0x10, 0xd, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x12, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x17, @TCA_ACT_INDEX={0x8}}, {0x18, 0x1, @TCA_ACT_KIND={0x10, 0x1, 'connmark\x00'}}, {0x10, 0x4, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x14, 0x19, @TCA_ACT_KIND={0xc, 0x1, 'skbmod\x00'}}, {0x10, 0x3, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0x14, 0x7, @TCA_ACT_KIND={0xc, 0x1, 'pedit\x00'}}, {0x10, 0x11, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x1}, 0xcdaab6f2b85d8173) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000480)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x30, 0x0, &(0x7f00000004c0)=[@increfs_done={0x40106308, r2, 0x1}, @request_death={0x400c630e, 0x2, 0x4}, @dead_binder_done], 0x48, 0x0, &(0x7f0000000500)="60978de021afa6981a5439dcedf48b011c0137bbb911448b104d7bb184d462f79ca2447e45c96400ec7e71e1e5809affa34b78d78d220622b573b9eedf250aca33cc7b636e62df95"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 1319.854123][ T27] audit: type=1804 audit(1547466480.904:79): pid=20325 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir205324380/syzkaller.NnIbwF/3/file0" dev="sda1" ino=17035 res=1 [ 1319.976788][T20335] binder: 20332:20335 ioctl 4 20000040 returned -22 [ 1320.004385][T20335] binder: 20332:20335 ioctl c0306201 0 returned -14 [ 1320.019285][T20338] binder: 20332:20338 ioctl 4 20000040 returned -22 11:48:01 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x40000000000002, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000280)="fa0c000012008152915a655267d7d137ab2ff96e27bf28b285fe3903a44a6017edcaa3a2b4dade3baee72569b51366463fedf5e787c05b0cb5927a3a7edfb4d078e9ae1504d489e058be9fafaa633705b6d4bf6a01f2cd9ebf19724a1b0b9760612582bccd3983ce4474844c065e914dab8bbd52a45f431678bfe28633bf7c8dc83df809238ed87f1e393883ef750ce79c6f84e5e5de176e2f26024e4e3a3d8fbdaf3254022f265d8ccc5fd7205d9d9c2c407ec58162523082d81a39c43f782332ba8e82b4107a049cb82bba8b5edd80473844291437b8d22edca68047582e6be601e9df5e60a32c7cd202c5a30b8b606e43362739551cbb013b65e238f41cc00d7900140cf06b7bc9030f2563bcf9d4f4b7f48c79ec1a323d06276a0a3f8846b7c62b66f9709cabcaad234c53f3bc9b11165a6321f1db1057f076cfaebf8fbfa033fdc1dc2c3e314b36b3b3dd50425447da8bc5938ff7a17361100ab0b1ffeab7ac487411824224781eb9cdd4edef57ae91cd61f56a56c0599cfc3a491447207610f242da6cd6b030ae5f35e3181c44ae68665a023759b9ef4358db46107edc49194aed72b62600ec0ae4fc9065be059fc010cd6e6c9ea77c666b5e25693fbcf595e3e57113ff3a0e0c63d0604a16ea5adb8b7b54d47d4d8804612fde571863064528a49bf684d8a880a11afd819f186c177c49cac3ba1e9d1aa7ad0ff36b9e36d73c05b8abcaf96df0bacd2c9653f30ec29e1284af8749a9b2803c2727e992a6e65df192e1875c3e6d3553ffb7cb34ffee8f8ac0123c390454b42a0316952cbc9949376d9320ec207f77c2d5eb9e86d720cf8e9008a9a51932b45cd4cab21414c92d1c20f9e15e3fc16c7ce181e9ab19b01b70343934c823b1215e173405dd225233823cd4a604a77f06b14eb05b860e6cf8790335788c43abe9de1598e9952e5c7e6b2f8b17b1788ff3033e7d1635b008834bdf4054e6195e55000827c6202b227dde06f23ae21c00b371bdb6b7ea47b2e78844b52a77f9f0929790dcd7df2752e4af092d539c87c18751a5eb3eb4d38a2a0e070064b4ffaacff0543b115cc89f6c7e78f12147ebfcf1c80bac8f98deb59cbe670adb4cd1882a7e0ca4ba85ae9d445223ffb32301d46c0c9b05a830cbea0f72294ab3b539e4ed7cac2e22b235e8ceedeb643fb90b061a58368e76036ff3c1828d8a4e21288662afb6f2acab00d734db7ffc8373a928571819ce9ea6cb0956a6093b2b1f65662b76bc6ac8a171451714e1d0e4ff7647fe7551d3cf16f37cb5547317e4fef51e4fb471de6ffbb90c2dd4a64266c4c2f75fc62e58ec306fb92212fb262d8b138899a3b53e67cde2f97d94cd2265cc04d32b29edf77e75b1f88372495cb2937f183bfc8604d72efb3af5c1f41b665b25592676b0ad2185478eade7e663e743e0e09cce6224c787ce1d789dc4a9b350bfe3a75f551341b11dd96cdaea17989dad565b16324a69842dc29a0ed16744ea5935598ac8238e146139189927a14d3b2863044b63b468ae75f48fab68ad235c36daffebfe4b468fc9b13198b1a683dcd3b3b4294ba22caddbacf8792d5783bc12e2538e4609e6bb6e9eeab98a06452c252a657f400260458c29fae8879097698c9aba2b2d889fc78f00d0d8271e09e8542b71018be6ff8cb03cb423e79303047d6ce124a00f64461b899bbddc4fe87ff677533391e16c01fa9cd6420bdc856c4c7f057b249ee9817efd6ab2cd02eb887d2631435ef2d5a1c7e57ac046ef615a1285ca89ade18ae69af3b3f8f76ca8aa060e373c0f99424fe1c5fadc72fe145fd2d4e4da4b78597890516857de188fcdaf15e3b0871b346cd39ab772cc25fab49e60c818cde934b137144adfc4fbde3ddbeccce9679f02b66746e822c67b3ed5fdafb4a936a2683b39a002115ecd62220605ca542610a80f2e3530aa89d3ed6ed9c57bbfd5db3a0b62786a608309a355443c616032008f9458b2f10db93e29470192370084e9322c309c9b23333b46d04e79176659503ad4b05deebb3c67d715ee6e84a89002ea6f7f71bf41ad36b42c8ae01c97174dbb641e50641aba60c291a84e906c013087370a5043e07d36fcead378f6c1e6ed3f5ac695124b82b20261cf7c9b82172e09c81d7d39eed72aee5678613a3c671ddd44f2c7c75a3b5d316aa165d56594fccab20903d7f503a08928e76c779918b2463b720ee6367a43e494a1db3ed1a80690e665570c01ce7eb979cdd95d4e1ca51730eb2cd63ffb2a56049601627c9788254945142dce85adbe1eb5997d16cdfe2a3758b13dc6bb121e2206ae64206868c1c5e89a101bc121719ac435dcad093f5f67cefd863cc7c8f3fc8a9dc62a83c115f1ce714b18af067951aa06dd9bb4ed98a820bf4704d156977caa4e6415b2a0df0386e2f6a061bf44abc8a397cf4abdafc51b78ebec9831f3c60fde6e62a1fd082903080aef20ff8de8bc0dced06f627514600539ca7114a088848da4244a85b4cf5b976d3a698c9a568d417e276917baba05d1a02181db2e6cc35986da4ccc63f8cd8e85a4a923dd27e2f499664601fdc44fdf46e2d2880cd5a7ece89c370234c438dcc0b43865cc62bad21e9dc37da758cbe01752f02fd9cbfe98630a30a78bb1239e25cdaba3d45d13cd3e7216d9d8070f3ff1a0cd9a0c91f29974c98f2677ba88c1091bde4be0cd37ea5eeb3b9cd59560a00ddd40bbd60ffb8d4daa973ef0977c18dd4b38a605cee957872dca85787c37b6931293eddb77015faf143d1d28d24822d1a5d134799e8175a38b255aaf0e39b68c7f734e2e1e7044626daa84c9113e86d86ef63c863703703ea163319261dcf516c32d49478f7af30d52baa18ea6b0fc286c06b7e4ee019bf3fe74845a652d4a52aaa241a189c411e90e2953863a2bc4124e573607b94cdff19e280731824931a83f056cb5857672619b97ce38081592c0c319ce72e04e9eadce89775cfb5a4b2842663bc79bde565435cbcd46c4d505ceef7dde86512d39d4cb270deb7e79ebf8602bdc0d76c3e833d36ee08be10be634f44056c2f3fd6a328c7cd562e9c96ff7845fc3df81a876bb07f1cc833bed6ca1dc5cf935a4e959db6a4fae6edbc45357d8758faa9cd04cd41eb6efcfbd91658519bf520b90107f767d126854818485e98cb7ef56804de6950bf4e72098a949d14ea0e4e9f2534cf16cac0aeb970fc5c39f37e93910d5c99ac163792260d2280ec5c9a79bf295588ec23f524aae65f800f9c39e338f3d66b1a69e5488e04823eab36ae6ec6a2c5ce133ccd819a2b217b1ab7f4afd1697bb42929b3131358b5421c83f925571934442d0fd0ce3990d4e5d31d8b956f76df3c2f8533e46b892c88692ce009155dd5c7dbe4c86874b95762650f63e4b4aabb41320978b05b80cfe8fa2830904ef6b5c4f7ad46ca5dac151c9077c4d2c6adfe5066a8eb09a9bc6892330ea2b259a53c7137f8498254e1b04bf920c35c5333c4d640b11da60917ae921037b4aedbd6a0fbeeaf88ef6defc830552b4cbe3fe2a844806a48923dd428ea1c8d797bd8e6aabd1d1a8c97c8038b627120a77f4e47fa1f788aa9da268b0ec10fc453cb722685df76547dbf55a16663aa2b2a51e9c52456cccdf682592d1369dd12e3d3cb504e0f2d7004e62c297d5a25d0298045dae8fca8cb795ea57288b85a7e705820087d55ca6c42e920e2aa1174e128622cf64a197fd728cb2949536ba63e8bda8589261f1377caea37302e47228d3708a5666c66ba711d3c0b310a8c47e86d26597299d523c28c90e4feab43e950f398f7b61ccf7e6490d75ba6d8214e2d5ef2d7a088db490e1ebacf4e6eecc896cb1c704f0a8fcdf4ccb5dfa53eaf43d709287f36c10188c19fd59da7d73494de089c1b0a69ee22dcb847001c5317846a876bee1685d11c4db0673ec4c3a12008bb719650525b3c39e2b0469edda93830b3f1bde3e5b0b4637197866bb08c5858cf0d9876e3c7cad54169887bf9c80f9f4be362e1bc8c27f3434e9a918bac355c184bd899b9aebe6be20e70c0c69234342eb8b57aa9ffb7797a32df91cec2bbc90201658ca2297bf1fe68e65363867e1f6ad79b827f363d64fbd3b188d95307d011c4ce5bf4407908c058eeb97ec98dd0ebfdab6b348fa387f2a7573cac25344c983e8fd526c30ee6d59fe99a30c7d7e2864aa22bfa49df5f32da68309cab3ed9c2ce69b6ecb8508ce28a43ebd6c809b8afd07a4606e664965d316f3707a3abee9bcdc32a78031b0171fb565d90c16cd56e5792c0cf618b799715f32538e38f493d4e19ec76fc8a07576a13975706bfc2bb1516c2d18a4385cc37a206eac6c9fb8d073572ba2671d2198abf24fdd0c40d079ae44962c26743b4bf5950ac5ee34c5d7bd60b364ce670958112c37b9829bed7e1327356d6b94af3ba020c2337b2dba37d00af8a128a614390cdde62ce871f948427fb5c187df9a1540a5cc71da1a86144acbfd94bf433f744f0c4f2a675eba3ed251c5b11b08dfefc726c0394a9b75121d88467ed4b2cd69819dfe50693a4a4c8370d3af12f41c0067283bbb5a90044a340fc357a11081a6c13bb9c32d9caa448479fd5f0302b6729ca7233094540b14546d6bcc15771c2686279b34f9c0914f5306d0fabd5979266ea01a17a22507e560dbf904dd62c40e2bccb468710ee4c1caf4e786", 0xcfa}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003180)={&(0x7f0000003040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000003100)}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000100)=@un=@abs, 0x80, &(0x7f0000000080)=[{0x0}], 0x1, &(0x7f00000031c0)=""/4096, 0x1000}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000002780)={&(0x7f00000011c0)=@nl=@unspec, 0x80, &(0x7f00000026c0), 0x0, &(0x7f0000001580)=""/55, 0x37, 0x3}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000200)=@sco, 0x26c, &(0x7f0000002b80), 0x218, &(0x7f00000076c0)=""/156, 0xfffffffffffffe11, 0xfffffffffffffffa}, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x1ff, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000001400)={&(0x7f0000001000)=@ipx, 0x80, &(0x7f00000012c0)=[{&(0x7f00000010c0)=""/26, 0x1a}, {&(0x7f0000001100)=""/180, 0xb4}, {&(0x7f0000001240)=""/127, 0x7f}], 0x3, &(0x7f0000001300)=""/254, 0xfe, 0x65580000}, 0x40) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff80, 0x81100000000, 0x7, 0x0, 0x1f, 0xfffffffffffffffa, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x7fff, 0x0, 0x0, 0xfff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:48:01 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="3adbf23ac042bd3dfc40e8edb8c34d9cc3bd300333985caa6f4f8910ab", 0x1d, 0xfffffffffffffffd) 11:48:01 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\t', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:48:01 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) [ 1320.032591][T20338] binder: 20332:20338 ioctl c0306201 0 returned -14 [ 1320.039915][T20311] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor4'. 11:48:01 executing program 5: clone(0x402, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 11:48:01 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) 11:48:01 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000040)={0x9f0000, 0x7, 0x0, [], 0x0}) 11:48:01 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="3adbf23ac042bd3dfc40e8edb8c34d", 0xf, 0xfffffffffffffffd) 11:48:01 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\n', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1320.338977][T20359] binder: 20356:20359 ioctl c0306201 0 returned -14 11:48:01 executing program 1: socket$kcm(0xa, 0x0, 0x11) r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x1b, &(0x7f0000000040)=r0, 0x52d) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) close(r0) 11:48:01 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) 11:48:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000040)="000000000000000000000000000000000010000000000000ed793afe0000000002008201260001000000640000000001270005000000000000006400000000030d0085043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:48:01 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="3adbf23ac042bd3dfc40e8edb8c34d", 0xf, 0xfffffffffffffffd) 11:48:01 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_sys\x00', 0x0, 0x0) getsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000140), &(0x7f0000000380)=0x4) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="ac010000", @ANYRES16=r1, @ANYBLOB="100d2abd7000fddbdf2505000000640001002c0004001400010002004e20ac14141a00000000000000001400020002004e20ffffffff00000000000000010800030000000000140001006574683a73797a6b616c6c6572300000100001006574683a64756d6d793000a144858c002c3f0000340009000800010002000000080001000000000008000200ba00000008000200d0000000080002003f9d00000800020062000000"], 0xac}, 0x1, 0x0, 0x0, 0x5}, 0x44) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r2) r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x7, 0x101180) ioctl$PPPIOCSMRU1(r4, 0x40047452, &(0x7f0000000080)=0x4) 11:48:01 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) bind$packet(r0, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) 11:48:02 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="230000001a000700e4050c00e69be20180a0d6f5c00fea0c73dd4a33a0a2aa0a223bdc", 0x23}], 0x1}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0xfffffffffffffdd1) 11:48:02 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)=':', 0x1, 0xfffffffffffffffd) 11:48:02 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x0e', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1320.822682][T20407] binder: 20405:20407 ioctl 40046205 0 returned -22 [ 1320.854938][T20407] binder: 20405:20407 ioctl c0306201 0 returned -14 [ 1320.892894][ T3867] loop4: p1 p2 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p2 [ 1320.916568][T20411] binder: 20405:20411 ioctl 40046205 0 returned -22 11:48:02 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) bind$packet(r0, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) [ 1320.997360][T20390] loop4: partition table partially beyond EOD, truncated [ 1321.030245][T20390] loop4: p1 start 1 is beyond EOD, truncated [ 1321.037560][T20390] loop4: p2 size 2 extends beyond EOD, truncated 11:48:02 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="230000001a000700e4050c00e69be20180a0d6f5c00fea0c73dd4a33a0a2aa0a223bdc", 0x23}], 0x1}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0xfffffffffffffdd1) 11:48:02 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) bind$packet(r0, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) [ 1321.169449][T20390] loop4: p3 start 201 is beyond EOD, truncated [ 1321.205944][T20390] loop4: p4 start 301 is beyond EOD, truncated [ 1321.217330][T20390] loop4: p5 start 1 is beyond EOD, truncated 11:48:02 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)=':', 0x1, 0xfffffffffffffffd) [ 1321.255191][T20390] loop4: p6 start 1 is beyond EOD, truncated [ 1321.291362][T20390] loop4: p7 start 1 is beyond EOD, truncated [ 1321.311882][T20390] loop4: p8 start 1 is beyond EOD, truncated [ 1321.325455][T20390] loop4: p9 start 1 is beyond EOD, truncated [ 1321.339936][T20390] loop4: p10 start 1 is beyond EOD, truncated [ 1321.353224][T20390] loop4: p11 start 1 is beyond EOD, truncated 11:48:02 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) [ 1321.397215][T20390] loop4: p12 start 1 is beyond EOD, truncated [ 1321.403897][T20390] loop4: p13 start 1 is beyond EOD, truncated [ 1321.436753][T20390] loop4: p14 start 1 is beyond EOD, truncated [ 1321.442912][T20390] loop4: p15 start 1 is beyond EOD, truncated [ 1321.464216][T20390] loop4: p16 start 1 is beyond EOD, truncated [ 1321.502205][T20390] loop4: p17 start 1 is beyond EOD, truncated [ 1321.545878][T20390] loop4: p18 start 1 is beyond EOD, truncated [ 1321.581582][T20390] loop4: p19 start 1 is beyond EOD, truncated [ 1321.596505][T20390] loop4: p20 start 1 is beyond EOD, truncated [ 1321.632554][T20390] loop4: p21 start 1 is beyond EOD, truncated [ 1321.639401][T20390] loop4: p22 start 1 is beyond EOD, truncated [ 1321.663716][T20390] loop4: p23 start 1 is beyond EOD, truncated [ 1321.676840][T20390] loop4: p24 start 1 is beyond EOD, truncated [ 1321.692253][T20390] loop4: p25 start 1 is beyond EOD, truncated [ 1321.716724][T20390] loop4: p26 start 1 is beyond EOD, truncated [ 1321.725452][T20390] loop4: p27 start 1 is beyond EOD, truncated [ 1321.746541][T20390] loop4: p28 start 1 is beyond EOD, truncated [ 1321.766730][T20390] loop4: p29 start 1 is beyond EOD, truncated [ 1321.772880][T20390] loop4: p30 start 1 is beyond EOD, truncated [ 1321.786795][T20390] loop4: p31 start 1 is beyond EOD, truncated [ 1321.792880][T20390] loop4: p32 start 1 is beyond EOD, truncated [ 1321.821253][T20390] loop4: p33 start 1 is beyond EOD, truncated [ 1321.836700][T20390] loop4: p34 start 1 is beyond EOD, truncated [ 1321.848930][T20390] loop4: p35 start 1 is beyond EOD, truncated [ 1321.855091][T20390] loop4: p36 start 1 is beyond EOD, truncated [ 1321.862415][T20390] loop4: p37 start 1 is beyond EOD, truncated [ 1321.868932][T20390] loop4: p38 start 1 is beyond EOD, truncated [ 1321.875028][T20390] loop4: p39 start 1 is beyond EOD, truncated [ 1321.882597][T20390] loop4: p40 start 1 is beyond EOD, truncated [ 1321.889104][T20390] loop4: p41 start 1 is beyond EOD, truncated [ 1321.895182][T20390] loop4: p42 start 1 is beyond EOD, truncated [ 1321.901375][T20390] loop4: p43 start 1 is beyond EOD, truncated [ 1321.908784][T20390] loop4: p44 start 1 is beyond EOD, truncated [ 1321.914857][T20390] loop4: p45 start 1 is beyond EOD, truncated [ 1321.921015][T20390] loop4: p46 start 1 is beyond EOD, truncated [ 1321.927413][T20390] loop4: p47 start 1 is beyond EOD, truncated [ 1321.933488][T20390] loop4: p48 start 1 is beyond EOD, truncated [ 1321.939663][T20390] loop4: p49 start 1 is beyond EOD, truncated [ 1321.945936][T20390] loop4: p50 start 1 is beyond EOD, truncated [ 1321.952110][T20390] loop4: p51 start 1 is beyond EOD, truncated [ 1321.958631][T20390] loop4: p52 start 1 is beyond EOD, truncated [ 1321.964725][T20390] loop4: p53 start 1 is beyond EOD, truncated [ 1321.970869][T20390] loop4: p54 start 1 is beyond EOD, truncated [ 1321.977184][T20390] loop4: p55 start 1 is beyond EOD, truncated [ 1321.983255][T20390] loop4: p56 start 1 is beyond EOD, truncated [ 1321.989393][T20390] loop4: p57 start 1 is beyond EOD, truncated [ 1321.995747][T20390] loop4: p58 start 1 is beyond EOD, truncated [ 1322.001923][T20390] loop4: p59 start 1 is beyond EOD, truncated [ 1322.008253][T20390] loop4: p60 start 1 is beyond EOD, truncated [ 1322.014496][T20390] loop4: p61 start 1 is beyond EOD, truncated [ 1322.020678][T20390] loop4: p62 start 1 is beyond EOD, truncated [ 1322.026985][T20390] loop4: p63 start 1 is beyond EOD, truncated [ 1322.033072][T20390] loop4: p64 start 1 is beyond EOD, truncated [ 1322.040415][T20390] loop4: p65 start 1 is beyond EOD, truncated [ 1322.046493][T20390] loop4: p66 start 1 is beyond EOD, truncated [ 1322.052876][T20390] loop4: p67 start 1 is beyond EOD, truncated [ 1322.059051][T20390] loop4: p68 start 1 is beyond EOD, truncated [ 1322.065136][T20390] loop4: p69 start 1 is beyond EOD, truncated [ 1322.071238][T20390] loop4: p70 start 1 is beyond EOD, truncated [ 1322.077383][T20390] loop4: p71 start 1 is beyond EOD, truncated [ 1322.083442][T20390] loop4: p72 start 1 is beyond EOD, truncated [ 1322.089568][T20390] loop4: p73 start 1 is beyond EOD, truncated [ 1322.096085][T20390] loop4: p74 start 1 is beyond EOD, truncated [ 1322.102200][T20390] loop4: p75 start 1 is beyond EOD, truncated [ 1322.108335][T20390] loop4: p76 start 1 is beyond EOD, truncated [ 1322.114396][T20390] loop4: p77 start 1 is beyond EOD, truncated [ 1322.120501][T20390] loop4: p78 start 1 is beyond EOD, truncated [ 1322.126576][T20390] loop4: p79 start 1 is beyond EOD, truncated [ 1322.132704][T20390] loop4: p80 start 1 is beyond EOD, truncated [ 1322.138865][T20390] loop4: p81 start 1 is beyond EOD, truncated [ 1322.144926][T20390] loop4: p82 start 1 is beyond EOD, truncated [ 1322.151041][T20390] loop4: p83 start 1 is beyond EOD, truncated [ 1322.157189][T20390] loop4: p84 start 1 is beyond EOD, truncated [ 1322.163247][T20390] loop4: p85 start 1 is beyond EOD, truncated [ 1322.170247][T20390] loop4: p86 start 1 is beyond EOD, truncated [ 1322.176427][T20390] loop4: p87 start 1 is beyond EOD, truncated [ 1322.182539][T20390] loop4: p88 start 1 is beyond EOD, truncated [ 1322.188682][T20390] loop4: p89 start 1 is beyond EOD, truncated [ 1322.194746][T20390] loop4: p90 start 1 is beyond EOD, truncated [ 1322.200859][T20390] loop4: p91 start 1 is beyond EOD, truncated [ 1322.207166][T20390] loop4: p92 start 1 is beyond EOD, truncated [ 1322.213227][T20390] loop4: p93 start 1 is beyond EOD, truncated [ 1322.219356][T20390] loop4: p94 start 1 is beyond EOD, truncated [ 1322.225430][T20390] loop4: p95 start 1 is beyond EOD, truncated [ 1322.231553][T20390] loop4: p96 start 1 is beyond EOD, truncated [ 1322.237768][T20390] loop4: p97 start 1 is beyond EOD, truncated [ 1322.243875][T20390] loop4: p98 start 1 is beyond EOD, truncated [ 1322.250015][T20390] loop4: p99 start 1 is beyond EOD, truncated [ 1322.256100][T20390] loop4: p100 start 1 is beyond EOD, truncated [ 1322.262329][T20390] loop4: p101 start 1 is beyond EOD, truncated [ 1322.268532][T20390] loop4: p102 start 1 is beyond EOD, truncated [ 1322.274702][T20390] loop4: p103 start 1 is beyond EOD, truncated [ 1322.280941][T20390] loop4: p104 start 1 is beyond EOD, truncated [ 1322.287193][T20390] loop4: p105 start 1 is beyond EOD, truncated [ 1322.293344][T20390] loop4: p106 start 1 is beyond EOD, truncated [ 1322.300418][T20390] loop4: p107 start 1 is beyond EOD, truncated [ 1322.306578][T20390] loop4: p108 start 1 is beyond EOD, truncated [ 1322.312869][T20390] loop4: p109 start 1 is beyond EOD, truncated [ 1322.319101][T20390] loop4: p110 start 1 is beyond EOD, truncated [ 1322.325252][T20390] loop4: p111 start 1 is beyond EOD, truncated [ 1322.331510][T20390] loop4: p112 start 1 is beyond EOD, truncated [ 1322.337773][T20390] loop4: p113 start 1 is beyond EOD, truncated [ 1322.343941][T20390] loop4: p114 start 1 is beyond EOD, truncated [ 1322.350191][T20390] loop4: p115 start 1 is beyond EOD, truncated [ 1322.356340][T20390] loop4: p116 start 1 is beyond EOD, truncated [ 1322.362540][T20390] loop4: p117 start 1 is beyond EOD, truncated [ 1322.368846][T20390] loop4: p118 start 1 is beyond EOD, truncated [ 1322.374999][T20390] loop4: p119 start 1 is beyond EOD, truncated [ 1322.381234][T20390] loop4: p120 start 1 is beyond EOD, truncated [ 1322.387470][T20390] loop4: p121 start 1 is beyond EOD, truncated [ 1322.393638][T20390] loop4: p122 start 1 is beyond EOD, truncated [ 1322.399875][T20390] loop4: p123 start 1 is beyond EOD, truncated [ 1322.406040][T20390] loop4: p124 start 1 is beyond EOD, truncated [ 1322.412287][T20390] loop4: p125 start 1 is beyond EOD, truncated [ 1322.418500][T20390] loop4: p126 start 1 is beyond EOD, truncated [ 1322.424666][T20390] loop4: p127 start 1 is beyond EOD, truncated [ 1322.431498][T20390] loop4: p128 start 1 is beyond EOD, truncated [ 1322.437762][T20390] loop4: p129 start 1 is beyond EOD, truncated [ 1322.443958][T20390] loop4: p130 start 1 is beyond EOD, truncated [ 1322.450207][T20390] loop4: p131 start 1 is beyond EOD, truncated [ 1322.456371][T20390] loop4: p132 start 1 is beyond EOD, truncated [ 1322.462575][T20390] loop4: p133 start 1 is beyond EOD, truncated [ 1322.468846][T20390] loop4: p134 start 1 is beyond EOD, truncated [ 1322.474998][T20390] loop4: p135 start 1 is beyond EOD, truncated [ 1322.481189][T20390] loop4: p136 start 1 is beyond EOD, truncated [ 1322.487392][T20390] loop4: p137 start 1 is beyond EOD, truncated [ 1322.493537][T20390] loop4: p138 start 1 is beyond EOD, truncated [ 1322.499748][T20390] loop4: p139 start 1 is beyond EOD, truncated [ 1322.505939][T20390] loop4: p140 start 1 is beyond EOD, truncated [ 1322.512138][T20390] loop4: p141 start 1 is beyond EOD, truncated [ 1322.518344][T20390] loop4: p142 start 1 is beyond EOD, truncated [ 1322.524491][T20390] loop4: p143 start 1 is beyond EOD, truncated [ 1322.531170][T20390] loop4: p144 start 1 is beyond EOD, truncated [ 1322.537428][T20390] loop4: p145 start 1 is beyond EOD, truncated [ 1322.543589][T20390] loop4: p146 start 1 is beyond EOD, truncated [ 1322.549830][T20390] loop4: p147 start 1 is beyond EOD, truncated [ 1322.555979][T20390] loop4: p148 start 1 is beyond EOD, truncated [ 1322.562830][T20390] loop4: p149 start 1 is beyond EOD, truncated [ 1322.569062][T20390] loop4: p150 start 1 is beyond EOD, truncated [ 1322.575225][T20390] loop4: p151 start 1 is beyond EOD, truncated [ 1322.581406][T20390] loop4: p152 start 1 is beyond EOD, truncated [ 1322.587646][T20390] loop4: p153 start 1 is beyond EOD, truncated [ 1322.593809][T20390] loop4: p154 start 1 is beyond EOD, truncated [ 1322.600026][T20390] loop4: p155 start 1 is beyond EOD, truncated [ 1322.606172][T20390] loop4: p156 start 1 is beyond EOD, truncated [ 1322.612421][T20390] loop4: p157 start 1 is beyond EOD, truncated [ 1322.618639][T20390] loop4: p158 start 1 is beyond EOD, truncated [ 1322.624785][T20390] loop4: p159 start 1 is beyond EOD, truncated [ 1322.630996][T20390] loop4: p160 start 1 is beyond EOD, truncated [ 1322.637203][T20390] loop4: p161 start 1 is beyond EOD, truncated [ 1322.643351][T20390] loop4: p162 start 1 is beyond EOD, truncated [ 1322.649591][T20390] loop4: p163 start 1 is beyond EOD, truncated [ 1322.655782][T20390] loop4: p164 start 1 is beyond EOD, truncated [ 1322.661974][T20390] loop4: p165 start 1 is beyond EOD, truncated [ 1322.668229][T20390] loop4: p166 start 1 is beyond EOD, truncated [ 1322.674374][T20390] loop4: p167 start 1 is beyond EOD, truncated [ 1322.680554][T20390] loop4: p168 start 1 is beyond EOD, truncated [ 1322.687717][T20390] loop4: p169 start 1 is beyond EOD, truncated [ 1322.693871][T20390] loop4: p170 start 1 is beyond EOD, truncated [ 1322.700101][T20390] loop4: p171 start 1 is beyond EOD, truncated [ 1322.706250][T20390] loop4: p172 start 1 is beyond EOD, truncated [ 1322.712543][T20390] loop4: p173 start 1 is beyond EOD, truncated [ 1322.718776][T20390] loop4: p174 start 1 is beyond EOD, truncated [ 1322.725045][T20390] loop4: p175 start 1 is beyond EOD, truncated [ 1322.731228][T20390] loop4: p176 start 1 is beyond EOD, truncated [ 1322.737447][T20390] loop4: p177 start 1 is beyond EOD, truncated [ 1322.743591][T20390] loop4: p178 start 1 is beyond EOD, truncated [ 1322.749839][T20390] loop4: p179 start 1 is beyond EOD, truncated [ 1322.756040][T20390] loop4: p180 start 1 is beyond EOD, truncated [ 1322.762244][T20390] loop4: p181 start 1 is beyond EOD, truncated [ 1322.768472][T20390] loop4: p182 start 1 is beyond EOD, truncated [ 1322.774635][T20390] loop4: p183 start 1 is beyond EOD, truncated [ 1322.780841][T20390] loop4: p184 start 1 is beyond EOD, truncated [ 1322.787060][T20390] loop4: p185 start 1 is beyond EOD, truncated [ 1322.793207][T20390] loop4: p186 start 1 is beyond EOD, truncated [ 1322.799423][T20390] loop4: p187 start 1 is beyond EOD, truncated [ 1322.805572][T20390] loop4: p188 start 1 is beyond EOD, truncated [ 1322.811762][T20390] loop4: p189 start 1 is beyond EOD, truncated [ 1322.818880][T20390] loop4: p190 start 1 is beyond EOD, truncated [ 1322.825047][T20390] loop4: p191 start 1 is beyond EOD, truncated [ 1322.831256][T20390] loop4: p192 start 1 is beyond EOD, truncated [ 1322.837458][T20390] loop4: p193 start 1 is beyond EOD, truncated [ 1322.843643][T20390] loop4: p194 start 1 is beyond EOD, truncated [ 1322.849871][T20390] loop4: p195 start 1 is beyond EOD, truncated [ 1322.856024][T20390] loop4: p196 start 1 is beyond EOD, truncated [ 1322.862212][T20390] loop4: p197 start 1 is beyond EOD, truncated [ 1322.868451][T20390] loop4: p198 start 1 is beyond EOD, truncated [ 1322.874597][T20390] loop4: p199 start 1 is beyond EOD, truncated [ 1322.880812][T20390] loop4: p200 start 1 is beyond EOD, truncated [ 1322.887040][T20390] loop4: p201 start 1 is beyond EOD, truncated [ 1322.893188][T20390] loop4: p202 start 1 is beyond EOD, truncated [ 1322.899420][T20390] loop4: p203 start 1 is beyond EOD, truncated [ 1322.905571][T20390] loop4: p204 start 1 is beyond EOD, truncated [ 1322.911774][T20390] loop4: p205 start 1 is beyond EOD, truncated [ 1322.918084][T20390] loop4: p206 start 1 is beyond EOD, truncated [ 1322.924232][T20390] loop4: p207 start 1 is beyond EOD, truncated [ 1322.930456][T20390] loop4: p208 start 1 is beyond EOD, truncated [ 1322.936805][T20390] loop4: p209 start 1 is beyond EOD, truncated [ 1322.942954][T20390] loop4: p210 start 1 is beyond EOD, truncated [ 1322.950052][T20390] loop4: p211 start 1 is beyond EOD, truncated [ 1322.956232][T20390] loop4: p212 start 1 is beyond EOD, truncated [ 1322.962448][T20390] loop4: p213 start 1 is beyond EOD, truncated [ 1322.968675][T20390] loop4: p214 start 1 is beyond EOD, truncated [ 1322.974838][T20390] loop4: p215 start 1 is beyond EOD, truncated [ 1322.981046][T20390] loop4: p216 start 1 is beyond EOD, truncated [ 1322.987272][T20390] loop4: p217 start 1 is beyond EOD, truncated [ 1322.993419][T20390] loop4: p218 start 1 is beyond EOD, truncated [ 1322.999662][T20390] loop4: p219 start 1 is beyond EOD, truncated [ 1323.005817][T20390] loop4: p220 start 1 is beyond EOD, truncated [ 1323.012040][T20390] loop4: p221 start 1 is beyond EOD, truncated [ 1323.018247][T20390] loop4: p222 start 1 is beyond EOD, truncated [ 1323.024404][T20390] loop4: p223 start 1 is beyond EOD, truncated [ 1323.030670][T20390] loop4: p224 start 1 is beyond EOD, truncated [ 1323.036863][T20390] loop4: p225 start 1 is beyond EOD, truncated [ 1323.042998][T20390] loop4: p226 start 1 is beyond EOD, truncated [ 1323.049211][T20390] loop4: p227 start 1 is beyond EOD, truncated [ 1323.055360][T20390] loop4: p228 start 1 is beyond EOD, truncated [ 1323.061561][T20390] loop4: p229 start 1 is beyond EOD, truncated [ 1323.067768][T20390] loop4: p230 start 1 is beyond EOD, truncated [ 1323.073935][T20390] loop4: p231 start 1 is beyond EOD, truncated [ 1323.081091][T20390] loop4: p232 start 1 is beyond EOD, truncated [ 1323.087322][T20390] loop4: p233 start 1 is beyond EOD, truncated [ 1323.093473][T20390] loop4: p234 start 1 is beyond EOD, truncated [ 1323.099698][T20390] loop4: p235 start 1 is beyond EOD, truncated [ 1323.105846][T20390] loop4: p236 start 1 is beyond EOD, truncated [ 1323.112031][T20390] loop4: p237 start 1 is beyond EOD, truncated [ 1323.118246][T20390] loop4: p238 start 1 is beyond EOD, truncated [ 1323.124394][T20390] loop4: p239 start 1 is beyond EOD, truncated [ 1323.130632][T20390] loop4: p240 start 1 is beyond EOD, truncated [ 1323.136838][T20390] loop4: p241 start 1 is beyond EOD, truncated [ 1323.142980][T20390] loop4: p242 start 1 is beyond EOD, truncated [ 1323.149206][T20390] loop4: p243 start 1 is beyond EOD, truncated [ 1323.155377][T20390] loop4: p244 start 1 is beyond EOD, truncated [ 1323.161566][T20390] loop4: p245 start 1 is beyond EOD, truncated [ 1323.167835][T20390] loop4: p246 start 1 is beyond EOD, truncated [ 1323.173987][T20390] loop4: p247 start 1 is beyond EOD, truncated [ 1323.180177][T20390] loop4: p248 start 1 is beyond EOD, truncated [ 1323.186343][T20390] loop4: p249 start 1 is beyond EOD, truncated [ 1323.192559][T20390] loop4: p250 start 1 is beyond EOD, truncated [ 1323.198783][T20390] loop4: p251 start 1 is beyond EOD, truncated [ 1323.204932][T20390] loop4: p252 start 1 is beyond EOD, truncated [ 1323.211866][T20390] loop4: p253 start 1 is beyond EOD, truncated [ 1323.218455][T20390] loop4: p254 start 1 is beyond EOD, truncated [ 1323.224620][T20390] loop4: p255 start 1 is beyond EOD, truncated 11:48:04 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xff, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001240)={r0, 0x0, 0xc4, 0x1000, &(0x7f0000000140)="727b8057d5483825f85111f1d2492e9b56d02e546da0eea65b0fa160f15d41de88b2bc81ed70070ec95c69946715e0ea19a3f731a2f70a39cd1815141f80abb565837d11527a5a7f9cb15e6d1665f31d2e10825f545b3be8cad453510f2a80da0a83859bf94be064f02820a78912be23c59cb5a52fae6fafa05f2beff2474911c2e5791f93f002c1c90b3853898b3b0d0dd256f14e8c9074eb832e274e9294d3caffc6f6029942b77e60c951002d7fc1407b806286a45a7fdc51cc216e046cf6749da49f", &(0x7f0000000240)=""/4096, 0x100}, 0x28) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000001340)=0x3) ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f0000000100)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r2}) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000001280), &(0x7f00000012c0)=0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 11:48:04 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="230000001a000700e4050c00e69be20180a0d6f5c00fea0c73dd4a33a0a2aa0a223bdc", 0x23}], 0x1}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0xfffffffffffffdd1) 11:48:04 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)=':', 0x1, 0xfffffffffffffffd) 11:48:04 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) prctl$PR_GET_PDEATHSIG(0x2, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) listen(r0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r0) pwritev(r0, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) 11:48:04 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x10', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:48:04 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) 11:48:04 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000040)={0x2, 0xb3, "73da0ec65aba7b0076f4e11d5dd64f7afddd2a11fecc57da4e5aff84a48b983db0cdabe72a8e28504bf86f53539bd2ed2265557e4bee7ae5222c6ae6e04c32c1729305d7f87bd3b683353b2adca287777a4b49e1be376053391067067485b189de7d46f39a6fad09817abb1cc2c1aa36a345bac07f8ef779fc38c060ebd2311d96cc7c20ecc2550949375b8847ba1bd661327421b9f33302f1e3c11a893a795c151b8730f87d2ac7c35b8f96c4fb883a1cf080"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 1323.368008][T20470] binder: 20467:20470 ioctl c0306201 0 returned -14 11:48:04 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) 11:48:04 executing program 1: r0 = socket$kcm(0x11, 0x2, 0x300) sendmsg(r0, &(0x7f0000000200)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001540)=[{0x68, 0x6, 0x0, "b247fa783e4ae65d5ed93e4315cad065ba80b5f58b4f762c92aaa2312348d212aa281a25eef8ddc49e8c13b55b22c428722611cc04d5aac193b4dbd4e949ce87e6d7217566e46e9a180a71d31de20e88ce17d4f5"}], 0x68}, 0x20000000) [ 1323.461125][T20480] binder: 20478:20480 ioctl c0046686 20000040 returned -22 [ 1323.469175][T20481] binder: 20478:20481 ioctl c0306201 0 returned -14 [ 1323.480853][ T7841] __loop_clr_fd: partition scan of loop4 failed (rc=-22) [ 1323.515194][T20488] binder: 20478:20488 ioctl c0046686 20000040 returned -22 11:48:04 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="3adbf23ac042bd3d", 0x8, 0xfffffffffffffffd) [ 1323.561384][T20495] binder: 20478:20495 ioctl c0306201 0 returned -14 11:48:04 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2#', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:48:04 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) 11:48:04 executing program 1: 11:48:04 executing program 4: 11:48:04 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 11:48:04 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)=':', 0x1, 0xfffffffffffffffd) 11:48:05 executing program 1: 11:48:05 executing program 4: [ 1323.838800][T20517] binder: 20516:20517 ioctl 40046205 0 returned -22 [ 1323.873078][T20518] binder: 20516:20518 ioctl c0306201 0 returned -14 11:48:05 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) 11:48:05 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2H', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1323.896035][T20524] binder: 20516:20524 ioctl 40046205 0 returned -22 11:48:05 executing program 4: 11:48:05 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 11:48:05 executing program 1: 11:48:05 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240), 0x0, 0xfffffffffffffffd) 11:48:05 executing program 4: 11:48:05 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) [ 1324.254919][T20553] binder: 20545:20553 ioctl 40046205 0 returned -22 [ 1324.285035][T20554] binder: 20545:20554 ioctl c0306201 0 returned -14 11:48:05 executing program 1: 11:48:05 executing program 4: 11:48:05 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='limits\x00') ioctl$BLKRRPART(r0, 0x125f, 0x0) clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) [ 1324.322706][T20561] binder: 20545:20561 ioctl 40046205 0 returned -22 11:48:05 executing program 0: 11:48:05 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) 11:48:05 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2L', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:48:05 executing program 4: 11:48:05 executing program 1: 11:48:05 executing program 5: clone(0x40000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x60400, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000080)={0x15, "8ac2a52a66ac4c3e8dce9d2aa589578fe6e69ab138"}) 11:48:05 executing program 0: 11:48:05 executing program 4: [ 1324.567847][T20572] binder: 20570:20572 ioctl c0306201 0 returned -14 11:48:05 executing program 1: 11:48:05 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) [ 1324.745661][T20594] IPVS: ftp: loaded support on port[0] = 21 [ 1324.795106][T20599] binder: 20592:20599 ioctl c0306201 0 returned -14 11:48:06 executing program 0: 11:48:06 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2`', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:48:06 executing program 1: 11:48:06 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) 11:48:06 executing program 4: 11:48:06 executing program 0: 11:48:06 executing program 1: [ 1325.057049][T20594] IPVS: ftp: loaded support on port[0] = 21 [ 1325.075606][T20599] binder: 20592:20599 ioctl c0306201 0 returned -14 11:48:06 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x111203, 0x0) 11:48:06 executing program 4: 11:48:06 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) 11:48:06 executing program 0: 11:48:06 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2h', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:48:06 executing program 1: 11:48:06 executing program 0: 11:48:06 executing program 5: clone(0xa00001fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 11:48:06 executing program 4: 11:48:06 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) 11:48:06 executing program 0: 11:48:06 executing program 1: 11:48:06 executing program 4: [ 1325.479888][T20653] binder: 20652:20653 ioctl c0306201 0 returned -14 11:48:06 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 11:48:06 executing program 1: 11:48:06 executing program 0: 11:48:06 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2l', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:48:06 executing program 4: 11:48:06 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) [ 1325.683599][T20672] binder: 20670:20672 ioctl 40046205 0 returned -22 [ 1325.684525][T20673] binder: 20670:20673 ioctl c0306201 0 returned -14 [ 1325.700579][T20675] binder: 20670:20675 ioctl 40046205 0 returned -22 11:48:06 executing program 4: 11:48:07 executing program 1: 11:48:07 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x88) bind$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @reserved}, 0x333) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@remote}}, &(0x7f00000001c0)=0xe8) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000200)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r2}) 11:48:07 executing program 0: 11:48:07 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140), 0x4) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) 11:48:07 executing program 4: [ 1325.994356][T20699] binder: 20698:20699 ioctl c0306201 0 returned -14 11:48:07 executing program 0: 11:48:07 executing program 1: 11:48:07 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) r1 = dup3(r0, r0, 0x2000000000000000) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f0000000040)={"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"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) 11:48:07 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2t', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1326.059203][T20699] binder: 20698:20699 ioctl 89e2 20000200 returned -22 11:48:07 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140), 0x4) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) 11:48:07 executing program 4: 11:48:07 executing program 0: 11:48:07 executing program 1: [ 1326.323039][T20725] binder: 20724:20725 ioctl c0306201 0 returned -14 11:48:07 executing program 4: 11:48:07 executing program 0: 11:48:07 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000140)=0xfffffffffffffffa) getsockopt$inet_dccp_buf(r1, 0x21, 0x8d, &(0x7f0000000080)=""/92, &(0x7f0000000100)=0x5c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 1326.423314][T20725] binder: 20724:20725 ioctl c0306201 0 returned -14 11:48:07 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140), 0x4) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) 11:48:07 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2z', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:48:07 executing program 4: 11:48:07 executing program 1: [ 1326.632283][T20750] binder: 20749:20750 ioctl c0306201 0 returned -14 11:48:07 executing program 0: 11:48:07 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) [ 1326.714238][T20762] binder: 20749:20762 ioctl c0306201 0 returned -14 11:48:07 executing program 4: 11:48:08 executing program 1: 11:48:08 executing program 0: 11:48:08 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\xa0', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:48:08 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x2, 0x80000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="eed21e698b001be7b517a7b3a75e5cd934070719bae6a0c2e69b926b06bb46889c2ac9658e585e00a5228f3cb35176357a31ee70fdd79c8dcee6274f7532ed1f155c51851e951ae3eac7a98e9748713abb94", 0x52) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 11:48:08 executing program 4: 11:48:08 executing program 1: 11:48:08 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) [ 1327.011916][T20781] binder: 20780:20781 ioctl c0306201 0 returned -14 11:48:08 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) dup3(r0, r0, 0x80000) 11:48:08 executing program 4: 11:48:08 executing program 1: 11:48:08 executing program 0: 11:48:08 executing program 4: 11:48:08 executing program 1: 11:48:08 executing program 0: [ 1327.263535][T20810] binder: 20805:20810 ioctl c0306201 0 returned -14 11:48:08 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2x', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:48:08 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) 11:48:08 executing program 5: clone(0x10000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 11:48:08 executing program 4: 11:48:08 executing program 1: 11:48:08 executing program 0: 11:48:08 executing program 4: 11:48:08 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(r0, 0x0, 0x0) [ 1327.567894][T20830] binder: 20829:20830 ioctl c0306201 0 returned -14 11:48:08 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:48:08 executing program 1: 11:48:08 executing program 4: 11:48:08 executing program 0: 11:48:08 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 11:48:08 executing program 1: 11:48:09 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(r0, 0x0, 0x0) 11:48:09 executing program 4: [ 1327.930055][T20858] gfs2: not a GFS2 filesystem [ 1327.933686][T20864] binder: 20862:20864 ioctl 40046205 0 returned -22 11:48:09 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 11:48:09 executing program 1: 11:48:09 executing program 0: 11:48:09 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2A', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:48:09 executing program 1: 11:48:09 executing program 4: 11:48:09 executing program 0: [ 1328.153609][T20881] binder: 20879:20881 ioctl c0306201 0 returned -14 11:48:09 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x40, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000080)=0x2000, &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x8, 0xb52}, &(0x7f0000000040)=0x8) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x8, 0x2, 0x2, "261537571eb70f64cd07946ce062fe797bb178eb5e9214b7d87c84510847a557", 0x767b5f5f}) r2 = openat(r0, &(0x7f0000000240)='./file0\x00', 0x90000, 0xd) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) write$P9_RAUTH(r1, &(0x7f0000000200)={0x14, 0x67, 0x2, {0x10, 0x3, 0x1}}, 0x14) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) open_by_handle_at(r1, &(0x7f0000000280)={0x101, 0x26a, "83dd723e1093e9abc91a94541246e234c493e03c675c4713e9a0554202df7a7fd063568103a89c3175f7a4af104200baf3e0b315539a57f172684266601eb44594e77a999dbb3903979996e38663ff637aec5dda1483e9eea89b6609ef3f60140a21c36d378516dc79aef3c2b6433c0e9eced3fc50183f47d186e289e9c69b99ad5accc3edf8147c9ca5db449ee1fa9f4abd776063c32a47f809901cd167a0e48f5c1e6ebcfc2b7253f5f79a0c532c3c42e06262c56e2928babffcb4809cbb65af5f5407cc8f9260ec91280b9d90446a2d85d70d0c0cfaa98dd84353ac4a045746d272795e00307a4ed49735ca307c84c443f918754917ea04"}, 0x484100) ioctl$SG_GET_SG_TABLESIZE(r2, 0x227f, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) 11:48:09 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(r0, 0x0, 0x0) 11:48:09 executing program 4: 11:48:09 executing program 1: 11:48:09 executing program 0: 11:48:09 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\xea', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:48:09 executing program 4: [ 1328.467954][T20907] binder: 20905:20907 ioctl c0306201 0 returned -14 11:48:09 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)={{0x0, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) 11:48:09 executing program 0: 11:48:09 executing program 1: 11:48:09 executing program 5: r0 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x84) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000140)) clone(0x6000000018000005, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x20000000000002) r2 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x200, 0xa000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000300)={@rand_addr="a0c00d9f4059de143d5a88bbcf76d530", 0x64, r3}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) r4 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x3ff, 0x80) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000000340)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000008000000000000000000000000000000000000000000000000092b5ca86d9ff9422dbd8c2830000000000000000000000b885000036401dfb73d2fdfe2c48e8d27e16dc8ce694351bd478d46fb55e1f2b51b91f1af7702be7"], 0x78) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r4, 0x408c5333, &(0x7f0000000180)={0x9, 0x5, 0x1f, 'queue1\x00', 0x8000}) getsockopt$inet6_mreq(r1, 0x29, 0x1d, &(0x7f0000000000)={@remote}, &(0x7f0000000080)=0x14) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 11:48:09 executing program 4: 11:48:09 executing program 0: 11:48:09 executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") connect$x25(r0, &(0x7f0000000000)={0x9, @remote}, 0x12) 11:48:09 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)={{0x0, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) 11:48:10 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:48:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, 0x0) 11:48:10 executing program 0: clone(0x20001fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000180)="a94f67685485961028ca39f193791feac91ae330a90b373b") ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1f) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0x9c}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1328.881259][T20933] binder: 20932:20933 ioctl c0306201 0 returned -14 11:48:10 executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") connect$x25(r0, &(0x7f0000000000)={0x9, @remote}, 0x12) 11:48:10 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)={{0x0, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) [ 1329.065490][T20956] gfs2: not a GFS2 filesystem [ 1329.082768][T20960] binder: 20932:20960 ioctl c0306201 0 returned -14 11:48:10 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000040)) 11:48:10 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000001c0)=""/187, &(0x7f0000000280)=0xbb) 11:48:10 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x1, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000800)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000840)={{{@in6=@ipv4={[], [], @local}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f0000000940)=0xe8) lstat(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r0, &(0x7f0000000a80)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000180)="5fd89f861b4b255494294f3f0f9ff5bb54456830d0cb4146ffde6f5879cea7052cc9545d521906dc72c99ad0cef71d251007deaf5edb723daaf654842b0e9d59609bcb9e9b1f7919a42b4bd901328add867ac62091c0e61e512bc4215ef463ae873226bd8ff0404994bfafeff03930537e8a6d593d54355fc39b71108c3d13900d83509aca33cddb3b45f08018e2e22ab787b596156ae9a00ac7d372f790707e0bafd1c31873df67f0df4304812588f091c91a02642489a07400c780ad7ea87d1beebd93716fd831296b5ec62d260709f17528440bbe28b02ba309774a9f79083fc1", 0xe2}, {&(0x7f0000000280)="2c8eff8871c7c7cc2f7f210aa2bd500e29920488e1da30d9e186efcda3ea512e2929014bc6586a13c993cd0bd4199647def131d4bd5e60645a4b5c446a999e5ada8aef27b0dd10bfc02948a66da3d5a4176ffed03982b47e559c99c548b8f7993ef4f8de5f054a15a70c5744a1232f495716e72fe0a35239d9006c4653d0a605fdac41a5bbfcf7", 0x87}, {&(0x7f0000000340)="eda2d1791e01fe2b85cd8813f9195393f4f51e4a7af97ead147401f5facc5bb4e8c0117015471feaff1399aa7e2eb1ca7af6", 0x32}, {&(0x7f0000000380)="06d358513ae42cbf458a463a04e4af66e5f44ba1eb6e7c863d3a97bf30aec48dd56122b5e85cd24697890a8e125009920c45df8e904996af804c41fe791d5c0d569dbbe289f30dc2a475fedfd5ab93985975be6d1212a318b886f618bf88429ee0962749b41e8a527bbd44ff5d43bbe470031dc8344892d5d966849bb61b43dd6b7bdfa8d13d925d8b1dfa090ab0b6b1686321b0fa4f75c4517b4a86c8c22e4db8425ec99e6132b0c6d18b525766395ef038326019d70686", 0xb8}, {&(0x7f0000000440)="6c2fe3283f7b6eacaa107f1fb3f12f9554b2af84a0714644ab20141475c60a5e5eb7f72ecb3807db9d4f6758e1f03778a4fcd3cda9556bbb580bc886210869b414848cb00c35c0388f2b5f73abb1b88e51f5bd596079edf2aa7dfe068ab4a939ce6d2ba23e56263ee0619b5e6dbf6e8e15499e0802e10bc1e6515a6d5f83ab19171262ebd4c5d9211ad3", 0x8a}, {&(0x7f0000000500)="926276f8862eb47178403ec6aa5d65055314f4098ea76eab0b38ddae4c5517253e407688e1d98ba6c36a369b497b9f37d0233a5fee1bd72c5449344733920fc0fce06f7611de5f4e9c932c0a4bdbb5ddfc042639ca029d3eddf663a921c21641f4d19d542985133c764b46e7aa79910c924dc058f641b8688719397e277242194f3bb59540487a701d6ca080686fdf830d3c8bdabf4b4ede7afb366b5cfd25d335ef5305cc5accd3e3a705acd7d21c", 0xaf}, {&(0x7f00000005c0)="d03eecb4ca67e74a649ab810139bc915c0f9b6a7bcf9634ba7686fceb1ac85b124d5a4c5635e5d252e976679f569e4e697db9fe64aa33c82ac0b68759477c053628334931901818f2035e8465439ba3893da29837832f4afd935b47dfff7605cdd6d3154e7ba45d19278abd61dab8f9a4ff8ee3d0d54a056dac91cc9dc555fd500a736a6676108e5201ef81bc1", 0x8d}, {&(0x7f0000000680)="b14cb0f8ade37133d7c490ca41900c3ddfe9946decb6ec5876b5fe599d5952fae3fbe45e9af6b39b6475bcc5dacec7ebea5cdd6c24f4d29e94fb0635cb0cc9d64c1e9bb126286ba5e26ec6ba481b80d4d76bb18426e6ecfc1472bdfacc6aa10746968a75fcb7429bab30bbd1c2764e80751bc7faa885164270a40d0983e3a8c2e028a42513bba01aab7e72be97bb835382f0dcdee637680ff5b8e78f82a3db1a05d7852965d5a5a1d14fac7aefbb7443444ed3ceb282ab1720fb73c05785af39f75e57013c6f6d3de72bfe6f685da26f4d1866d98fadf32d3e0494", 0xdb}], 0x8, &(0x7f0000000a40)=[@cred={0x20, 0x1, 0x2, r1, r2, r3}], 0x20, 0x20004884}, 0x20000010) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000080)=0xbb423c0aa5d71f78, 0x4) r5 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) 11:48:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x40002) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x5eea, 0x40) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, 0x0, &(0x7f0000000480)) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x0, 0x0) write$P9_RLINK(r3, &(0x7f00000001c0)={0x7}, 0x7) close(0xffffffffffffffff) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f00005befdc)) r8 = syz_open_pts(r7, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r8, 0x400455cb, 0x0) [ 1329.167015][T20956] gfs2: not a GFS2 filesystem 11:48:10 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:48:10 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0x20) 11:48:10 executing program 1: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000040)=0x401) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x40081, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f00000000c0)={0x3, 0x101}, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 1329.355562][T20988] binder: 20982:20988 ioctl c0306201 0 returned -14 [ 1329.442894][T20998] binder: 20982:20998 ioctl c0306201 0 returned -14 [ 1329.463180][T20993] gfs2: not a GFS2 filesystem 11:48:10 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x1, 0x200000) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f0000000080)={0x3, 0x1000, 0x5}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r1, 0x10, &(0x7f0000000100)={&(0x7f00000000c0)=""/9, 0x9}}, 0x10) 11:48:10 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0x20) [ 1329.543471][T21005] binder: 21003:21005 ioctl c0306201 0 returned -14 [ 1329.572163][T20993] gfs2: not a GFS2 filesystem 11:48:10 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:48:10 executing program 1: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000040)=0x401) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x40081, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f00000000c0)={0x3, 0x101}, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 1329.687171][T21014] binder: 21012:21014 ioctl c0306201 0 returned -14 11:48:11 executing program 1: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000040)=0x401) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x40081, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f00000000c0)={0x3, 0x101}, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 1329.795197][T21014] binder: 21012:21014 ioctl c0306201 0 returned -14 [ 1329.808755][T21026] gfs2: not a GFS2 filesystem [ 1329.815556][T21028] binder: 21023:21028 ioctl c0306201 0 returned -14 [ 1329.916262][T21026] gfs2: not a GFS2 filesystem [ 1329.938404][T21033] binder: 21032:21033 ioctl c0306201 0 returned -14 11:48:11 executing program 0 (fault-call:3 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0x540e, 0x0) 11:48:11 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0x20) 11:48:11 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x67c, 0x40000) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) getsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f00000000c0)=""/4096, &(0x7f00000010c0)=0x1000) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) syz_open_dev$admmidi(&(0x7f0000001100)='/dev/admmidi#\x00', 0xfffffffffffffbff, 0x141400) 11:48:11 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:48:11 executing program 1: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000040)=0x401) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x40081, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000000c0)={0x3, 0x101}, 0x2) 11:48:11 executing program 4 (fault-call:2 fault-nth:0): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)=':', 0x1, 0xfffffffffffffffd) 11:48:11 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x7, 0x20000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 1330.757978][T21050] gfs2: not a GFS2 filesystem [ 1330.762882][T21052] binder: 21048:21052 ioctl c0306201 0 returned -14 [ 1330.784015][T21062] FAULT_INJECTION: forcing a failure. [ 1330.784015][T21062] name failslab, interval 1, probability 0, space 0, times 0 11:48:11 executing program 1: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000040)=0x401) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x40081, 0x0) 11:48:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0x540e, 0x0) [ 1330.814554][T21062] CPU: 1 PID: 21062 Comm: syz-executor4 Not tainted 5.0.0-rc1-next-20190114 #11 [ 1330.823590][T21062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1330.833673][T21062] Call Trace: [ 1330.836985][T21062] dump_stack+0x1db/0x2d0 [ 1330.841334][T21062] ? dump_stack_print_info.cold+0x20/0x20 [ 1330.847055][T21062] ? find_held_lock+0x35/0x120 [ 1330.851835][T21062] should_fail.cold+0xa/0x14 [ 1330.851858][T21062] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1330.851882][T21062] ? ___might_sleep+0x1e7/0x310 [ 1330.867099][T21062] ? arch_local_save_flags+0x50/0x50 [ 1330.872436][T21062] ? __mutex_unlock_slowpath+0x195/0x870 [ 1330.878052][T21062] __should_failslab+0x121/0x190 [ 1330.882974][T21062] should_failslab+0x9/0x14 [ 1330.887462][T21062] __kmalloc_track_caller+0x2d8/0x740 [ 1330.892840][T21062] ? strncpy_from_user+0x4e0/0x4e0 [ 1330.897946][T21062] ? digsig_verify.cold+0x32/0x32 [ 1330.902981][T21062] ? strndup_user+0x77/0xd0 [ 1330.907483][T21062] memdup_user+0x26/0xb0 [ 1330.911711][T21062] strndup_user+0x77/0xd0 [ 1330.916100][T21062] __x64_sys_add_key+0x19d/0x4f0 [ 1330.921061][T21062] ? key_get_type_from_user.constprop.0+0x110/0x110 [ 1330.927648][T21062] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1330.933921][T21062] ? trace_hardirqs_off_caller+0x300/0x300 [ 1330.939723][T21062] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1330.945199][T21062] do_syscall_64+0x1a3/0x800 [ 1330.949803][T21062] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1330.955436][T21062] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1330.961170][T21062] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1330.966731][T21062] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1330.972667][T21062] RIP: 0033:0x457ec9 [ 1330.976567][T21062] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1330.996157][T21062] RSP: 002b:00007fdfd21dac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1331.004551][T21062] RAX: ffffffffffffffda RBX: 00007fdfd21dac90 RCX: 0000000000457ec9 [ 1331.012528][T21062] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 00000000200001c0 [ 1331.020483][T21062] RBP: 000000000073bf00 R08: fffffffffffffffd R09: 0000000000000000 [ 1331.028442][T21062] R10: 0000000000000001 R11: 0000000000000246 R12: 00007fdfd21db6d4 [ 1331.036408][T21062] R13: 00000000004bde11 R14: 00000000004cdec8 R15: 0000000000000004 11:48:12 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6}}, 0x20) 11:48:12 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:48:12 executing program 5: clone(0x802182001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x141000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)={0x3, 0x2, 0x200}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r1, 0x6) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x1e, &(0x7f0000000100)=[@in={0x2, 0x0, @broadcast}], 0x10) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040), 0x102e2) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x3) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x7fffffff, @loopback, 0xea}, 0x1c) 11:48:12 executing program 4 (fault-call:2 fault-nth:1): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)=':', 0x1, 0xfffffffffffffffd) [ 1331.140680][T21077] binder: 21076:21077 ioctl c0306201 0 returned -14 [ 1331.164500][T21080] binder: 21078:21080 ioctl c0306201 0 returned -14 11:48:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0x2, 0x0) 11:48:12 executing program 1: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000040)=0x401) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) [ 1331.332674][T21099] Unknown ioctl 1078743882 [ 1331.349478][T21096] gfs2: not a GFS2 filesystem [ 1331.369766][T21103] FAULT_INJECTION: forcing a failure. [ 1331.369766][T21103] name failslab, interval 1, probability 0, space 0, times 0 11:48:12 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6}}, 0x20) 11:48:12 executing program 1: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000040)=0x401) [ 1331.382627][T21105] Unknown ioctl 1078743882 [ 1331.413223][T21103] CPU: 1 PID: 21103 Comm: syz-executor4 Not tainted 5.0.0-rc1-next-20190114 #11 [ 1331.422261][T21103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1331.432318][T21103] Call Trace: [ 1331.435635][T21103] dump_stack+0x1db/0x2d0 [ 1331.439992][T21103] ? dump_stack_print_info.cold+0x20/0x20 [ 1331.440015][T21103] ? add_lock_to_list.isra.0+0x450/0x450 [ 1331.440046][T21103] should_fail.cold+0xa/0x14 [ 1331.455961][T21103] ? fault_create_debugfs_attr+0x1e0/0x1e0 11:48:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0x5409, 0x0) [ 1331.461801][T21103] ? ___might_sleep+0x1e7/0x310 [ 1331.466663][T21103] ? arch_local_save_flags+0x50/0x50 [ 1331.471978][T21103] ? lock_release+0xc40/0xc40 [ 1331.476671][T21103] __should_failslab+0x121/0x190 [ 1331.481631][T21103] should_failslab+0x9/0x14 [ 1331.486146][T21103] kmem_cache_alloc_node_trace+0x270/0x720 [ 1331.491989][T21103] __kmalloc_node+0x3d/0x70 [ 1331.496504][T21103] kvmalloc_node+0x68/0x100 [ 1331.501012][T21103] __x64_sys_add_key+0x3cd/0x4f0 [ 1331.501031][T21103] ? key_get_type_from_user.constprop.0+0x110/0x110 [ 1331.501047][T21103] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1331.501067][T21103] ? trace_hardirqs_off_caller+0x300/0x300 [ 1331.524436][T21103] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1331.529925][T21103] do_syscall_64+0x1a3/0x800 [ 1331.534536][T21103] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1331.540186][T21103] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1331.545936][T21103] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1331.551526][T21103] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1331.557422][T21103] RIP: 0033:0x457ec9 [ 1331.561322][T21103] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1331.580931][T21103] RSP: 002b:00007fdfd21dac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1331.589349][T21103] RAX: ffffffffffffffda RBX: 00007fdfd21dac90 RCX: 0000000000457ec9 [ 1331.597324][T21103] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 00000000200001c0 [ 1331.605300][T21103] RBP: 000000000073bf00 R08: fffffffffffffffd R09: 0000000000000000 11:48:12 executing program 5: accept$alg(0xffffffffffffff9c, 0x0, 0x0) clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 11:48:12 executing program 1: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$SIOCRSSCAUSE(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)=0x401) [ 1331.613280][T21103] R10: 0000000000000001 R11: 0000000000000246 R12: 00007fdfd21db6d4 [ 1331.621261][T21103] R13: 00000000004bde11 R14: 00000000004cdec8 R15: 0000000000000004 [ 1331.630146][T21096] gfs2: not a GFS2 filesystem 11:48:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0x540b, 0x0) 11:48:12 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1331.702156][T21125] binder: 21123:21125 ioctl 40046205 0 returned -22 [ 1331.732197][T21126] binder: 21123:21126 ioctl c0306201 0 returned -14 11:48:12 executing program 4 (fault-call:2 fault-nth:2): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)=':', 0x1, 0xfffffffffffffffd) 11:48:12 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6}}, 0x20) 11:48:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0x540c, 0x0) 11:48:12 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 1331.780089][T21125] binder: 21123:21125 ioctl 40046205 0 returned -22 [ 1331.801808][T21134] binder: 21123:21134 ioctl c0306201 0 returned -14 11:48:13 executing program 1: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000040)=0x401) [ 1331.891871][T21146] FAULT_INJECTION: forcing a failure. [ 1331.891871][T21146] name failslab, interval 1, probability 0, space 0, times 0 [ 1331.935535][T21148] gfs2: not a GFS2 filesystem 11:48:13 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000040)=0x401) [ 1331.963414][T21153] binder: 21150:21153 ioctl c0306201 0 returned -14 [ 1331.996221][T21148] gfs2: not a GFS2 filesystem [ 1332.005229][T21153] binder: 21150:21153 ioctl c0306201 0 returned -14 11:48:13 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x400, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000080)) clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) [ 1332.011699][T21146] CPU: 1 PID: 21146 Comm: syz-executor4 Not tainted 5.0.0-rc1-next-20190114 #11 [ 1332.020867][T21146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1332.030960][T21146] Call Trace: [ 1332.034275][T21146] dump_stack+0x1db/0x2d0 [ 1332.038721][T21146] ? dump_stack_print_info.cold+0x20/0x20 [ 1332.044465][T21146] should_fail.cold+0xa/0x14 [ 1332.049103][T21146] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1332.054932][T21146] ? ___might_sleep+0x1e7/0x310 [ 1332.059796][T21146] ? arch_local_save_flags+0x50/0x50 [ 1332.065178][T21146] ? map_id_up+0x19c/0x3e0 [ 1332.069629][T21146] __should_failslab+0x121/0x190 [ 1332.074593][T21146] should_failslab+0x9/0x14 [ 1332.074610][T21146] kmem_cache_alloc+0x2be/0x710 [ 1332.074672][T21146] ? from_kuid+0x85/0xc0 [ 1332.084024][T21146] ? map_id_up+0x3e0/0x3e0 [ 1332.092663][T21146] ? debug_smp_processor_id+0x1c/0x20 [ 1332.098064][T21146] prepare_creds+0xa4/0x510 [ 1332.102595][T21146] ? abort_creds+0x2c0/0x2c0 [ 1332.107206][T21146] ? install_process_keyring_to_cred.part.0+0x100/0x100 [ 1332.114166][T21146] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1332.120436][T21146] join_session_keyring+0x19/0x340 [ 1332.125557][T21146] lookup_user_key+0xf19/0x14f0 [ 1332.130431][T21146] ? join_session_keyring+0x340/0x340 [ 1332.135816][T21146] ? key_validate+0x240/0x240 [ 1332.140520][T21146] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1332.146767][T21146] ? _copy_from_user+0xdd/0x150 [ 1332.151637][T21146] __x64_sys_add_key+0x272/0x4f0 [ 1332.156600][T21146] ? key_get_type_from_user.constprop.0+0x110/0x110 [ 1332.163215][T21146] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1332.169300][T21146] ? trace_hardirqs_off_caller+0x300/0x300 [ 1332.175111][T21146] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1332.180610][T21146] do_syscall_64+0x1a3/0x800 [ 1332.185232][T21146] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1332.190873][T21146] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1332.196601][T21146] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1332.202177][T21146] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1332.208095][T21146] RIP: 0033:0x457ec9 [ 1332.212013][T21146] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1332.231643][T21146] RSP: 002b:00007fdfd21dac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1332.240063][T21146] RAX: ffffffffffffffda RBX: 00007fdfd21dac90 RCX: 0000000000457ec9 [ 1332.248038][T21146] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 00000000200001c0 [ 1332.256013][T21146] RBP: 000000000073bf00 R08: fffffffffffffffd R09: 0000000000000000 11:48:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0x540d, 0x0) 11:48:13 executing program 2 (fault-call:4 fault-nth:0): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) [ 1332.263991][T21146] R10: 0000000000000001 R11: 0000000000000246 R12: 00007fdfd21db6d4 [ 1332.271970][T21146] R13: 00000000004bde11 R14: 00000000004cdec8 R15: 0000000000000004 11:48:13 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x1a', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:48:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0x540f, 0x0) 11:48:13 executing program 1: syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)=0x401) [ 1332.517477][T21177] FAULT_INJECTION: forcing a failure. [ 1332.517477][T21177] name failslab, interval 1, probability 0, space 0, times 0 [ 1332.575601][T21177] CPU: 0 PID: 21177 Comm: syz-executor2 Not tainted 5.0.0-rc1-next-20190114 #11 [ 1332.584699][T21177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1332.594757][T21177] Call Trace: [ 1332.598055][T21177] dump_stack+0x1db/0x2d0 [ 1332.602393][T21177] ? dump_stack_print_info.cold+0x20/0x20 [ 1332.608126][T21177] should_fail.cold+0xa/0x14 [ 1332.612725][T21177] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1332.618566][T21177] ? ___might_sleep+0x1e7/0x310 [ 1332.623423][T21177] ? arch_local_save_flags+0x50/0x50 [ 1332.628718][T21177] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1332.634531][T21177] ? ima_match_policy+0xac3/0x1550 [ 1332.639663][T21177] __should_failslab+0x121/0x190 [ 1332.644612][T21177] should_failslab+0x9/0x14 [ 1332.649142][T21177] kmem_cache_alloc_node+0x265/0x710 [ 1332.654430][T21177] ? __lock_acquire+0x572/0x4a10 [ 1332.659370][T21177] ? lock_downgrade+0xbe0/0xbe0 [ 1332.664221][T21177] ? kasan_check_read+0x11/0x20 [ 1332.669087][T21177] __alloc_skb+0xf4/0x730 [ 1332.673421][T21177] ? skb_trim+0x190/0x190 [ 1332.677754][T21177] ? add_lock_to_list.isra.0+0x450/0x450 [ 1332.683384][T21177] ? __lock_acquire+0x572/0x4a10 [ 1332.688341][T21177] alloc_skb_with_frags+0xef/0x720 [ 1332.693466][T21177] ? __might_fault+0x12b/0x1e0 [ 1332.698301][T21177] ? iov_iter_advance+0x354/0x1490 [ 1332.703425][T21177] ? skb_complete_wifi_ack+0x1b0/0x1b0 [ 1332.708914][T21177] sock_alloc_send_pskb+0x8c9/0xad0 [ 1332.714141][T21177] ? kasan_check_write+0x14/0x20 [ 1332.719089][T21177] ? sock_wmalloc+0x1f0/0x1f0 [ 1332.723791][T21177] ? rcu_read_unlock_special+0x380/0x380 [ 1332.729445][T21177] ? iov_iter_advance+0x1490/0x1490 [ 1332.734697][T21177] ? packet_cached_dev_get+0x205/0x340 [ 1332.740167][T21177] ? packet_seq_start+0x160/0x160 [ 1332.745183][T21177] ? mark_held_locks+0x100/0x100 [ 1332.750100][T21177] ? aa_label_sk_perm+0x103/0xa10 [ 1332.755105][T21177] packet_sendmsg+0x1afa/0x6860 [ 1332.759958][T21177] ? aa_profile_af_perm+0x420/0x420 [ 1332.765158][T21177] ? __might_fault+0xe1/0x1e0 [ 1332.769845][T21177] ? packet_getname_spkt+0x2b0/0x2b0 [ 1332.775127][T21177] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 1332.780750][T21177] ? aa_sk_perm+0x2f4/0x990 [ 1332.785244][T21177] ? aa_af_perm+0x5d0/0x5d0 [ 1332.789727][T21177] ? rcu_read_unlock_special+0x380/0x380 [ 1332.795343][T21177] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 1332.800883][T21177] ? apparmor_socket_sendmsg+0x2a/0x30 [ 1332.806329][T21177] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1332.812981][T21177] ? security_socket_sendmsg+0x93/0xc0 [ 1332.818431][T21177] ? packet_getname_spkt+0x2b0/0x2b0 [ 1332.823713][T21177] sock_sendmsg+0xdd/0x130 [ 1332.828234][T21177] sock_write_iter+0x379/0x5e0 [ 1332.832993][T21177] ? sock_sendmsg+0x130/0x130 [ 1332.837674][T21177] ? lock_downgrade+0xbe0/0xbe0 [ 1332.842520][T21177] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1332.848773][T21177] ? iov_iter_init+0xea/0x220 [ 1332.853455][T21177] __vfs_write+0x764/0xb40 [ 1332.857870][T21177] ? kernel_read+0x120/0x120 [ 1332.862466][T21177] ? __mutex_unlock_slowpath+0x195/0x870 [ 1332.868103][T21177] ? apparmor_file_permission+0x25/0x30 [ 1332.873679][T21177] ? rw_verify_area+0x118/0x360 [ 1332.878554][T21177] vfs_write+0x20c/0x580 [ 1332.882862][T21177] ksys_write+0x105/0x260 [ 1332.887205][T21177] ? __ia32_sys_read+0xb0/0xb0 [ 1332.891971][T21177] ? trace_hardirqs_off_caller+0x300/0x300 [ 1332.897784][T21177] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1332.903236][T21177] __x64_sys_write+0x73/0xb0 [ 1332.907819][T21177] do_syscall_64+0x1a3/0x800 [ 1332.912407][T21177] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1332.918030][T21177] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1332.923746][T21177] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1332.929279][T21177] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1332.935270][T21177] RIP: 0033:0x457ec9 [ 1332.939172][T21177] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1332.958777][T21177] RSP: 002b:00007f31ae2bac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1332.967190][T21177] RAX: ffffffffffffffda RBX: 00007f31ae2bac90 RCX: 0000000000457ec9 11:48:14 executing program 4 (fault-call:2 fault-nth:3): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)=':', 0x1, 0xfffffffffffffffd) 11:48:14 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r0, 0x89e1, 0x0) 11:48:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0x5410, 0x0) [ 1332.975154][T21177] RDX: 0000000000000020 RSI: 0000000020000280 RDI: 0000000000000003 [ 1332.983113][T21177] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1332.991077][T21177] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f31ae2bb6d4 [ 1332.999034][T21177] R13: 00000000004c70b6 R14: 00000000004dc7c0 R15: 0000000000000004 11:48:14 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000040)) 11:48:14 executing program 2 (fault-call:4 fault-nth:1): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) 11:48:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0x5412, 0x0) [ 1333.138607][T21202] FAULT_INJECTION: forcing a failure. [ 1333.138607][T21202] name failslab, interval 1, probability 0, space 0, times 0 [ 1333.206876][T21202] CPU: 0 PID: 21202 Comm: syz-executor4 Not tainted 5.0.0-rc1-next-20190114 #11 [ 1333.215955][T21202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1333.226038][T21202] Call Trace: [ 1333.229364][T21202] dump_stack+0x1db/0x2d0 [ 1333.233728][T21202] ? dump_stack_print_info.cold+0x20/0x20 [ 1333.239579][T21202] ? prepare_creds+0xa4/0x510 [ 1333.244297][T21202] ? join_session_keyring+0x19/0x340 [ 1333.249596][T21202] ? lookup_user_key+0xf19/0x14f0 [ 1333.254677][T21202] ? __x64_sys_add_key+0x272/0x4f0 [ 1333.259811][T21202] ? do_syscall_64+0x1a3/0x800 [ 1333.264605][T21202] should_fail.cold+0xa/0x14 [ 1333.269261][T21202] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1333.275115][T21202] ? ___might_sleep+0x1e7/0x310 [ 1333.280030][T21202] ? arch_local_save_flags+0x50/0x50 [ 1333.285366][T21202] __should_failslab+0x121/0x190 [ 1333.290325][T21202] should_failslab+0x9/0x14 [ 1333.294840][T21202] __kmalloc+0x2dc/0x740 [ 1333.294862][T21202] ? refcount_dec_and_mutex_lock+0x90/0x90 [ 1333.294882][T21202] ? prepare_creds+0xa4/0x510 [ 1333.294901][T21202] ? prepare_creds+0xa4/0x510 [ 1333.294937][T21202] ? security_prepare_creds+0x123/0x190 [ 1333.314336][T21202] security_prepare_creds+0x123/0x190 [ 1333.314370][T21202] prepare_creds+0x3c4/0x510 [ 1333.314398][T21202] ? abort_creds+0x2c0/0x2c0 [ 1333.334488][T21202] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1333.340779][T21202] join_session_keyring+0x19/0x340 [ 1333.345957][T21202] lookup_user_key+0xf19/0x14f0 [ 1333.350857][T21202] ? join_session_keyring+0x340/0x340 11:48:14 executing program 5: clone(0x10004, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x2, 0x8}, 0xc) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000540)={0x0, 0x2, 0x3, 0x8c7}) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000140)=@raw=[@alu={0x7, 0x5, 0x1, 0x2, 0x4, 0xfffffffffffffffe, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000180)='syzkaller\x00', 0x80000001, 0x7e, &(0x7f00000001c0)=""/126, 0x41100, 0x1, [], 0x0, 0x4}, 0x48) write$capi20(r1, &(0x7f0000000380)={0x10, 0x9, 0xff, 0x81, 0x4, 0x100000000}, 0x10) poll(&(0x7f00000002c0)=[{r0, 0x20}, {r1, 0x2080}, {r2, 0x9212}], 0x3, 0x3) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(r0, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) ioctl$SIOCRSSL2CALL(r4, 0x89e2, &(0x7f0000000300)=@null) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000100)={0x0, 0xffff}, 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) r5 = fcntl$getown(r1, 0x9) sched_getaffinity(r5, 0x8, &(0x7f0000000340)) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000003c0)={0x0, 0xe4f5}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000440)={r6, @in6={{0xa, 0x4e24, 0x4, @loopback}}, 0x73, 0x3}, &(0x7f0000000500)=0x90) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) 11:48:14 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2 ', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:48:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0x5413, 0x0) [ 1333.356245][T21202] ? key_validate+0x240/0x240 [ 1333.363782][T21202] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1333.370061][T21202] ? _copy_from_user+0xdd/0x150 [ 1333.374966][T21202] __x64_sys_add_key+0x272/0x4f0 [ 1333.379953][T21202] ? key_get_type_from_user.constprop.0+0x110/0x110 [ 1333.386561][T21202] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1333.392666][T21202] ? trace_hardirqs_off_caller+0x300/0x300 [ 1333.398507][T21202] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1333.404010][T21202] do_syscall_64+0x1a3/0x800 [ 1333.408640][T21202] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1333.414299][T21202] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1333.420067][T21202] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1333.425668][T21202] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1333.431580][T21202] RIP: 0033:0x457ec9 [ 1333.435511][T21202] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 11:48:14 executing program 1: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1333.455131][T21202] RSP: 002b:00007fdfd21dac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1333.463561][T21202] RAX: ffffffffffffffda RBX: 00007fdfd21dac90 RCX: 0000000000457ec9 [ 1333.471577][T21202] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 00000000200001c0 [ 1333.479576][T21202] RBP: 000000000073bf00 R08: fffffffffffffffd R09: 0000000000000000 [ 1333.487580][T21202] R10: 0000000000000001 R11: 0000000000000246 R12: 00007fdfd21db6d4 [ 1333.495590][T21202] R13: 00000000004bde11 R14: 00000000004cdec8 R15: 0000000000000004 [ 1333.586736][ C0] ------------[ cut here ]------------ [ 1333.592533][ C0] AppArmor WARN cred_label: ((!blob)): [ 1333.592832][ C0] WARNING: CPU: 0 PID: 12 at security/apparmor/include/cred.h:30 apparmor_cred_free+0x12f/0x1a0 [ 1333.608776][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 1333.615366][ C0] CPU: 0 PID: 12 Comm: kworker/0:1 Not tainted 5.0.0-rc1-next-20190114 #11 [ 1333.623960][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 11:48:14 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x0, 0x0, 0x2d6, 0xfffffffffffffffe}}, 0x20) [ 1333.634027][ C0] Workqueue: (null) (events) [ 1333.639569][ C0] Call Trace: [ 1333.642854][ C0] [ 1333.645719][ C0] dump_stack+0x1db/0x2d0 [ 1333.650058][ C0] ? dump_stack_print_info.cold+0x20/0x20 [ 1333.655795][ C0] ? apparmor_cred_free+0xc0/0x1a0 [ 1333.660982][ C0] panic+0x2cb/0x65c [ 1333.664893][ C0] ? add_taint.cold+0x16/0x16 [ 1333.669583][ C0] ? apparmor_cred_free+0x12f/0x1a0 [ 1333.674793][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1333.681032][ C0] ? __probe_kernel_read+0x1f4/0x250 [ 1333.686316][ C0] ? __warn.cold+0x5/0x48 [ 1333.690660][ C0] ? __warn+0xe8/0x1d0 [ 1333.694727][ C0] ? apparmor_cred_free+0x12f/0x1a0 [ 1333.699923][ C0] __warn.cold+0x20/0x48 [ 1333.704167][ C0] ? apparmor_cred_free+0x12f/0x1a0 [ 1333.709365][ C0] report_bug+0x263/0x2b0 [ 1333.713737][ C0] do_error_trap+0x11b/0x200 [ 1333.718332][ C0] do_invalid_op+0x37/0x50 [ 1333.722740][ C0] ? apparmor_cred_free+0x12f/0x1a0 [ 1333.727940][ C0] invalid_op+0x14/0x20 [ 1333.732091][ C0] RIP: 0010:apparmor_cred_free+0x12f/0x1a0 [ 1333.737892][ C0] Code: 7c 88 48 c7 c7 c0 d1 7c 88 e8 ed 6f f2 fd 0f 0b eb a9 e8 14 46 29 fe 48 c7 c6 80 e1 7c 88 48 c7 c7 c0 d1 7c 88 e8 d1 6f f2 fd <0f> 0b 48 b8 00 00 00 00 00 fc ff df 80 38 00 75 4a 4c 8b 2c 25 00 [ 1333.757494][ C0] RSP: 0018:ffff8880ae6079f8 EFLAGS: 00010286 [ 1333.763565][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1333.771533][ C0] RDX: 0000000000000100 RSI: ffffffff81688726 RDI: 0000000000000006 [ 1333.779501][ C0] RBP: ffff8880ae607a18 R08: ffff8880a9498300 R09: 0000000000000000 [ 1333.787473][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88809f768b00 [ 1333.795455][ C0] R13: ffff88809f768b00 R14: ffff88809f768b88 R15: dffffc0000000000 [ 1333.803437][ C0] ? vprintk_func+0x86/0x189 [ 1333.808061][ C0] ? apparmor_cred_free+0x12f/0x1a0 [ 1333.813256][ C0] security_cred_free+0x4b/0xf0 [ 1333.818103][ C0] put_cred_rcu+0x21f/0x6e0 [ 1333.822610][ C0] ? get_task_cred+0x5e0/0x5e0 [ 1333.827922][ C0] ? lock_release+0xc40/0xc40 [ 1333.832601][ C0] ? file_free_rcu+0x98/0xe0 [ 1333.837218][ C0] ? kmem_cache_free+0x225/0x260 [ 1333.842156][ C0] rcu_core+0xc4a/0x1680 [ 1333.846994][ C0] ? rcu_fwd_progress_check+0xd0/0xd0 [ 1333.852407][ C0] ? clockevents_program_event+0x15f/0x380 [ 1333.858216][ C0] ? pvclock_read_flags+0x160/0x160 [ 1333.863423][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1333.869667][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1333.875911][ C0] ? check_preemption_disabled+0x48/0x290 [ 1333.881639][ C0] ? rcu_lockdep_current_cpu_online+0x1aa/0x220 [ 1333.887895][ C0] ? rcu_pm_notify+0xd0/0xd0 [ 1333.892490][ C0] __do_softirq+0x30b/0xb11 [ 1333.896997][ C0] ? __irqentry_text_end+0x1f96d2/0x1f96d2 [ 1333.902836][ C0] ? kvm_clock_read+0x18/0x30 [ 1333.907515][ C0] ? kvm_sched_clock_read+0x9/0x20 [ 1333.912636][ C0] ? sched_clock+0x2e/0x50 [ 1333.917061][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1333.923297][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1333.929536][ C0] ? check_preemption_disabled+0x48/0x290 [ 1333.935260][ C0] irq_exit+0x180/0x1d0 [ 1333.939430][ C0] smp_apic_timer_interrupt+0x1b7/0x760 [ 1333.944981][ C0] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1333.950521][ C0] ? smp_call_function_single_interrupt+0x640/0x640 [ 1333.957099][ C0] ? trace_hardirqs_off+0x310/0x310 [ 1333.962292][ C0] ? task_prio+0x50/0x50 [ 1333.966535][ C0] ? check_preemption_disabled+0x48/0x290 [ 1333.972253][ C0] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1333.977797][ C0] apic_timer_interrupt+0xf/0x20 [ 1333.982722][ C0] [ 1333.985663][ C0] RIP: 0010:_raw_spin_unlock_irq+0x54/0x90 [ 1333.991462][ C0] Code: c0 c0 83 92 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 33 48 83 3d c5 5c 9c 01 00 74 20 fb 66 0f 1f 44 00 00 01 00 00 00 e8 52 1f 62 f9 65 8b 05 bb c6 0b 78 85 c0 74 06 41 [ 1334.011072][ C0] RSP: 0018:ffff8880a94a7998 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 [ 1334.019493][ C0] RAX: 1ffffffff1325078 RBX: 1ffff11015294f3c RCX: 0000000000000000 [ 1334.027460][ C0] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffff8880a9498b7c [ 1334.035423][ C0] RBP: ffff8880a94a79a0 R08: ffff8880a9498300 R09: 0000000000000000 [ 1334.043386][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880ae62ce00 [ 1334.051363][ C0] R13: ffff888091016700 R14: ffff888098d586c0 R15: ffff8880a94a7a60 [ 1334.059348][ C0] ? _raw_spin_unlock_irq+0x28/0x90 [ 1334.064552][ C0] finish_task_switch+0x1e9/0xac0 [ 1334.069571][ C0] ? finish_task_switch+0x1a8/0xac0 [ 1334.074776][ C0] ? __switch_to_asm+0x34/0x70 [ 1334.079560][ C0] ? __switch_to_asm+0x40/0x70 [ 1334.084319][ C0] ? __switch_to_asm+0x34/0x70 [ 1334.089097][ C0] ? __bpf_trace_sched_wake_idle_without_ipi+0x10/0x10 [ 1334.095935][ C0] ? __switch_to_asm+0x34/0x70 [ 1334.100695][ C0] ? __switch_to_asm+0x40/0x70 [ 1334.105456][ C0] ? __switch_to_asm+0x34/0x70 [ 1334.110212][ C0] ? __switch_to_asm+0x34/0x70 [ 1334.114969][ C0] ? __switch_to_asm+0x40/0x70 [ 1334.119742][ C0] ? __switch_to_asm+0x34/0x70 [ 1334.124516][ C0] ? __switch_to_asm+0x40/0x70 [ 1334.129276][ C0] ? __switch_to_asm+0x34/0x70 [ 1334.134050][ C0] ? __switch_to_asm+0x40/0x70 [ 1334.138830][ C0] ? __switch_to_asm+0x34/0x70 [ 1334.143585][ C0] ? __switch_to_asm+0x40/0x70 [ 1334.148408][ C0] __schedule+0x89f/0x1e60 [ 1334.152827][ C0] ? pci_mmcfg_check_reserved+0x170/0x170 [ 1334.158549][ C0] ? worker_thread+0x3b7/0x14a0 [ 1334.163391][ C0] ? find_held_lock+0x35/0x120 [ 1334.168154][ C0] ? worker_thread+0x3b7/0x14a0 [ 1334.173021][ C0] ? _raw_spin_unlock_irq+0x28/0x90 [ 1334.178220][ C0] schedule+0xfe/0x350 [ 1334.182284][ C0] ? kasan_check_read+0x11/0x20 [ 1334.187158][ C0] ? __schedule+0x1e60/0x1e60 [ 1334.191839][ C0] ? trace_hardirqs_off_caller+0x300/0x300 [ 1334.197654][ C0] ? do_raw_spin_trylock+0x270/0x270 [ 1334.202950][ C0] worker_thread+0x3bc/0x14a0 [ 1334.207666][ C0] ? process_one_work+0x1ce0/0x1ce0 [ 1334.212867][ C0] ? __kthread_parkme+0xc3/0x1b0 [ 1334.217803][ C0] ? lock_acquire+0x1db/0x570 [ 1334.222504][ C0] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1334.228321][ C0] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1334.233599][ C0] ? trace_hardirqs_on+0xbd/0x310 [ 1334.238644][ C0] ? __kthread_parkme+0xc3/0x1b0 [ 1334.243579][ C0] ? trace_hardirqs_off_caller+0x300/0x300 [ 1334.249377][ C0] ? do_raw_spin_trylock+0x270/0x270 [ 1334.254691][ C0] ? schedule+0x108/0x350 [ 1334.259028][ C0] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1334.264848][ C0] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1334.271099][ C0] ? __kthread_parkme+0xfb/0x1b0 [ 1334.276059][ C0] kthread+0x357/0x430 [ 1334.280125][ C0] ? process_one_work+0x1ce0/0x1ce0 [ 1334.285315][ C0] ? kthread_stop+0x920/0x920 [ 1334.290003][ C0] ret_from_fork+0x3a/0x50 [ 1334.295448][ C0] Kernel Offset: disabled [ 1334.299903][ C0] Rebooting in 86400 seconds..