}, {&(0x7f0000000400)=""/66, 0x42}, {&(0x7f0000000540)=""/85, 0x55}, {&(0x7f0000000280)=""/50, 0x32}, {&(0x7f00000005c0)=""/236, 0xec}, {&(0x7f00000004c0)=""/60, 0x3c}, {&(0x7f00000006c0)=""/106, 0x6a}], 0x7, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x80, 0x0) ioctl$VT_DISALLOCATE(r2, 0x5608) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000100)=""/87) rt_sigaction(0x4, &(0x7f00000002c0)={&(0x7f0000000000)="c4e17a707a6593c6c70066450f73ddbd0f607d32c40139164c9a000f478e0c000000c4837d19e400c4a2c0f79500000020410f01ef44e000", {}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000480)) syz_execute_func(&(0x7f0000000500)="8fe97881834a32ffb3c48215a88700000081f01033c40105d1df0f414068c4a2199db500f8ffff670f5c62ffc481fa6fa406840000006766460f7cc4c4a17c77") ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000800)={'yam0\x00', {0x2, 0xa486, @loopback}}) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x1ff) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x1) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f00000007c0), 0x4) write$uinput_user_dev(r2, &(0x7f0000000880)={'syz1\x00', {0x5c, 0x9, 0x6ed, 0x80000}, 0x2, [0xffffffffffff7fff, 0x7, 0xe5, 0x5c, 0x81e, 0x1000, 0x1, 0x350, 0x7fffffff, 0x3, 0x7, 0x1, 0x8, 0x3, 0x3, 0xfff, 0xf, 0x2, 0x4, 0xe3ef, 0x9, 0x9, 0x400, 0x0, 0x3, 0x200, 0x4a, 0x2, 0x7810, 0x6, 0xffcb, 0x20, 0x2, 0xfff, 0x2, 0x4, 0x1000, 0x1, 0xffffffffffff3463, 0x800, 0x4, 0x8, 0x6, 0x1000, 0xff, 0xfffffffffffffffa, 0x6, 0x1f, 0x7f, 0x7, 0x1, 0x3, 0x1, 0x20, 0x0, 0x7, 0x4, 0x1, 0x1, 0x290, 0x0, 0x995, 0x291, 0x100], [0xfffffffffffffffc, 0x401, 0xff, 0x3, 0x9, 0xfffffffffffffffe, 0x4, 0x3f, 0x7, 0x400, 0x5, 0x1f, 0x7f, 0x101, 0x1, 0x3e4, 0x0, 0xe3a1, 0xf190, 0x8, 0x0, 0xffffffff, 0x4, 0x9, 0x100000001, 0x0, 0x0, 0x6, 0x5741, 0x40, 0x3, 0x2, 0x1, 0x1ff, 0xd8b, 0x4, 0x100, 0x8000, 0x1, 0xbcca, 0x20, 0x6fe3, 0x0, 0x7, 0x4, 0xff, 0x7, 0x1, 0x6, 0x100000001, 0xd2, 0x12, 0x0, 0x20, 0x1, 0x1, 0xb31, 0xd210, 0x8000, 0xfd, 0x10000, 0x0, 0x9c2, 0x5], [0x8, 0x8, 0x3, 0x2, 0xb1, 0x6, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffb, 0x6, 0x3ff, 0x1f, 0x800, 0x3, 0xb01, 0x20, 0x0, 0x5, 0x81, 0x3, 0x4, 0x456, 0x3, 0xdc5a, 0x947, 0xffffffffffffffff, 0x20, 0xffff, 0xfd0, 0x8, 0x0, 0x100000000, 0xffffffffffffe8a9, 0x101, 0x9, 0xe43, 0x8001, 0xffffffffffffffa8, 0x1df, 0x5, 0x101, 0x800, 0x4, 0x5, 0x1, 0xffffffff, 0x1000, 0x1, 0x5, 0x2, 0xfffffffffffffd44, 0x9, 0x5, 0xffffffff, 0x7fffffff, 0x3f6d, 0x7fff, 0x3, 0x4, 0xffff, 0x5b8, 0x4, 0x5, 0xfffffffffffff279], [0x4, 0x2, 0x8000, 0x0, 0x3ffc00, 0x0, 0x6, 0x1, 0x4b5d8296, 0x3f, 0x100000001, 0x7, 0x2, 0xfffffffffffffff9, 0x28b9, 0x8, 0xb7d1, 0x1000000, 0x9, 0x3, 0x4, 0x8, 0x8, 0x2, 0xffff, 0x8, 0x4, 0x87, 0x8, 0xca33, 0x2, 0x94d6, 0xfffffffffffffff9, 0x31df, 0xffffffffffffffc1, 0xffffffffffffff11, 0x7fff, 0x0, 0x7fffffff, 0x540, 0xffffffffffffd3b6, 0x4, 0x2, 0x3e, 0x533, 0x3, 0xfffffffffffffffb, 0x200, 0xa51, 0x8, 0x4, 0x4825943d, 0x7, 0x80, 0xc0, 0x8001, 0x200, 0x3f, 0x3, 0xffffffffffffff9a, 0x7, 0xffffffff, 0x7, 0x1]}, 0x45c) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000000c0), &(0x7f00000001c0)=0x8) write$P9_RRENAMEAT(r2, &(0x7f0000000840)={0x7, 0x4b, 0x1}, 0x7) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/create\x00', 0x2, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000d00)) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x0, 0xfffffffffffffffc, 0x0, 0x2}}) ioctl$UI_DEV_CREATE(r2, 0x5501) 15:07:59 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) 15:08:00 executing program 2: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) 15:08:00 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0xb, 0x3}, 0x14) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x100, 0x0) getsockname$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000100)=0x10) 15:08:00 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) 15:08:00 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x3) geteuid() write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="2321202e2f66696c6530543d72abc05e48a20e376456af7d5283eef1a52b0dd36f71ca93521003128bb3528240d513975d4ac8b1fd282d57ffa8abfc34a2a7458be25ec194742d2198c22e30687bfcc9325444638776047abe6294b9605a257f9d84820db50b5daffda70106bf03005c51e5516cd48e04c5c629634417a669a3e510d43f288a8d87094f245e6b3b8e35e86d2bfd08afcaf864582669c81e1336107d9c94b721a5cf3c55cc2dc5a7636578d4ee2b464e66799ad4edd46fa825285fafd616d02624fe470e1aa371ddda734c043b944b199ff3064c"], 0xda) close(r0) clone(0x10002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x7fffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 15:08:00 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x8001003, 0x8, 0x2}) 15:08:00 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x79) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) fchdir(r0) sched_setattr(0x0, &(0x7f00000002c0)={0x830}, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x31f, 0x6, 0x7, 0x1f, 0x7f}, 0x10) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000040)=""/148) socket(0x22, 0x2, 0x2) r2 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000180)=[@enter_looper, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000200)}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r2, 0xa, 0x1) r4 = socket$unix(0x1, 0x801, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r5, 0x0) r6 = accept4(r5, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r6, &(0x7f0000000340)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffe9c) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0xa655e68c17a90db3}}}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) getgid() setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x0, 0x200}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), 0x1, 0x0, &(0x7f00000000c0)="e1"}) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x2000000, 0x0) 15:08:00 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x30) 15:08:00 executing program 0: ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x34, @empty, 0x854f}}, 0x24) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x6000, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f00000000c0)={0x8, 0x0, 0x9}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x10001) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x802, 0x0) 15:08:00 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x3) geteuid() write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="2321202e2f66696c6530543d72abc05e48a20e376456af7d5283eef1a52b0dd36f71ca93521003128bb3528240d513975d4ac8b1fd282d57ffa8abfc34a2a7458be25ec194742d2198c22e30687bfcc9325444638776047abe6294b9605a257f9d84820db50b5daffda70106bf03005c51e5516cd48e04c5c629634417a669a3e510d43f288a8d87094f245e6b3b8e35e86d2bfd08afcaf864582669c81e1336107d9c94b721a5cf3c55cc2dc5a7636578d4ee2b464e66799ad4edd46fa825285fafd616d02624fe470e1aa371ddda734c043b944b199ff3064c"], 0xda) close(r0) clone(0x10002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x7fffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 15:08:00 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x1, 0x100) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f00000000c0)={0x4, 0x1ff, 0x3}) r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000040)) 15:08:00 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) fsetxattr$security_evm(r0, &(0x7f0000000140)='security.evm\x00', &(0x7f0000000180)=@md5={0x1, "e312ce89722fca7531c990ee81678d2c"}, 0x11, 0x3) 15:08:00 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x30) 15:08:01 executing program 2: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) 15:08:01 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000440)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/85, 0x55}, {&(0x7f0000000100)=""/144, 0x90}, {&(0x7f00000001c0)=""/216, 0xd8}, {&(0x7f00000002c0)=""/201, 0xc9}], 0x4, &(0x7f0000000400)=""/60, 0x3c}, 0x20) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f00000006c0)={'sit0\x00', {0x2, 0x4e22, @multicast1}}) fsetxattr$trusted_overlay_origin(r0, &(0x7f00000005c0)='trusted.overlay.origin\x00', &(0x7f0000000600)='y\x00', 0x2, 0x2) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/enforce\x00', 0x400200, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f0000000540)={0x4, 0x7, 0x8001, 0x4, 'syz1\x00', 0xe4}) read$alg(r1, &(0x7f0000000480)=""/119, 0x77) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000640)={0x5, 0x7, 0x1}) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000580)) 15:08:01 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f00000000c0)={0x0, 0x101, 0x1, [], &(0x7f0000000080)=0xfffffffffffffffa}) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)) 15:08:01 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x30) 15:08:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x103) dup2(r1, r2) clone(0x3102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_crypto(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 15:08:01 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x79) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) fchdir(r0) sched_setattr(0x0, &(0x7f00000002c0)={0x830}, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x31f, 0x6, 0x7, 0x1f, 0x7f}, 0x10) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000040)=""/148) socket(0x22, 0x2, 0x2) r2 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0063404004000000000000000300000000000000000000000100"/52, @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="852a747000000000", @ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="000000000000002000000000000000005c00000000000000d5bd5ebc6039afa76561cbe066b03a58c2c815c93e3d1ccd0016bfa3ef432aecd046cd1d393e3f93f4f585f1df6d79a1d6407ef80594d022c100e3ac2c1e77a2075bd2fc3059edf32e21462207df4025c06f81841611fed5aa690b494717d624540f6616870b1c7f4386779a"], @ANYPTR=&(0x7f0000000500)=ANY=[@ANYBLOB='@\x00\x00\x00\x00\x00\x00\x008\x00\x00\x00\x00\x00\x00\x00x\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00h\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="1163484000"/52, @ANYPTR=&(0x7f0000000100)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x6, 0x0, &(0x7f0000000200)="3ce5dc04a3c10000000000000038a3cb1d47d1ceac8dab01ab209319abcdc8ac08368d7ac98389c3c4ac5c98640eef7611b34d38726bfd7a41db383655f57a97080a496b46a52f1997e58d14612a01d14ee80737a026b301d0cf77c7582003364ea493c009e237f198555cc7b11a77b5820c314afff1443b6dc4296689e91e13688dc8f96dcb4db948eb74b527e6f8ceb5f5d88f619843e1a9ba602f7ecb3da7e89947"}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r2, 0xa, 0x1) r4 = socket$unix(0x1, 0x801, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r5, 0x0) r6 = accept4(r5, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r6, &(0x7f0000000340)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffe9c) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0xa655e68c17a90db3}}}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) getgid() setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x0, 0x200}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), 0x1, 0x0, &(0x7f00000000c0)="e1"}) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="e91f71894b000001000000"], 0x0, 0x0, 0x2000000, 0x0) 15:08:01 executing program 0: getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x380000000000000, 0x30, 0x200}, &(0x7f00000000c0)=0x18) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xfffffffffffffffa, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) ioctl$int_in(r0, 0x5473, &(0x7f0000000040)=0x5) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)=0x200) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) 15:08:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000840)={0x0, 0x200000000001d, 0x1, {0xb, @pix_mp={0x0, 0x9, 0x0, 0x0, 0x0, [{0x0, 0x0, [0x0, 0x4000]}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffe7]}, {}, {}, {0x0, 0x0, [0x1000000]}]}}}) 15:08:01 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x10102, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000200)={@mcast1, r2}, 0x14) 15:08:01 executing program 1: futex(&(0x7f0000000040)=0x4, 0x9, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) 15:08:01 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x208d43, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c}) 15:08:01 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x2, 0x0) accept4$unix(r1, 0x0, &(0x7f0000000040), 0x80000) 15:08:02 executing program 2: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) 15:08:02 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x400200, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000140)={0x20, 0x0, [], {0x0, @reserved}}) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000100)={0x2}) r3 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x1}) 15:08:02 executing program 1: ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) socketpair$unix(0x1, 0x2000000000000003, 0x0, &(0x7f0000000240)) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000380), &(0x7f00000003c0)=0x14) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000280)=0x2, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) ioctl$TIOCNXCL(r2, 0x540d) mlock2(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x0) r3 = open(&(0x7f0000001b40)='./bus\x00', 0x2, 0x118) accept4$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev}, 0x0, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000200)=0x1) pread64(r4, 0x0, 0x3db, 0x0) ftruncate(r4, 0x7fff) sendfile(r2, r4, 0x0, 0x8000fffffffe) 15:08:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000840)={0x0, 0x200000000001d, 0x1, {0xb, @pix_mp={0x0, 0x9, 0x0, 0x0, 0x0, [{0x0, 0x0, [0x0, 0x4000]}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffe7]}, {}, {}, {0x0, 0x0, [0x1000000]}]}}}) 15:08:02 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x40000, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)) 15:08:02 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x79) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) fchdir(r0) sched_setattr(0x0, &(0x7f00000002c0)={0x830}, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x31f, 0x6, 0x7, 0x1f, 0x7f}, 0x10) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000040)=""/148) socket(0x22, 0x2, 0x2) r2 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000180)=[@enter_looper, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000200)}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r2, 0xa, 0x1) r4 = socket$unix(0x1, 0x801, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r5, 0x0) r6 = accept4(r5, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r6, &(0x7f0000000340)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffe9c) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0xa655e68c17a90db3}}}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) getgid() setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x0, 0x200}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), 0x1, 0x0, &(0x7f00000000c0)="e1"}) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="e91f710700000001000000"], 0x0, 0x0, 0x2000000, 0x0) 15:08:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000840)={0x0, 0x200000000001d, 0x1, {0xb, @pix_mp={0x0, 0x9, 0x0, 0x0, 0x0, [{0x0, 0x0, [0x0, 0x4000]}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffe7]}, {}, {}, {0x0, 0x0, [0x1000000]}]}}}) 15:08:02 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x40) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x0, 0x4}}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x9}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={r2, 0x3}, 0x8) 15:08:02 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$capi20(r1, &(0x7f0000000080)={0x10, 0xff6, 0x41, 0x0, 0x1, 0x1}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r0}) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) 15:08:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) r1 = gettid() setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x7, &(0x7f00000001c0)=[{0x6, 0x68, 0x3ff, 0x10001}, {0x6, 0x0, 0x81, 0x9e60}, {0x0, 0x7bab, 0x5, 0x8}, {0xa3c, 0x8000, 0x10000, 0x7}, {0x9, 0x4, 0x1, 0x7ff}, {0x3, 0x4, 0x9, 0xf112}, {0x1, 0x6}]}, 0x10) timer_create(0x0, &(0x7f0000001540)={0x0, 0x12}, &(0x7f0000001500)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$TIOCLINUX3(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r1) tkill(r1, 0x2001000000000016) 15:08:02 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x8, 0x400) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000001c0)={0x2f, @empty, 0x4e22, 0x0, 'sed\x00', 0x2, 0x0, 0x1f}, 0x2c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000140)={r2, 0x800000, 0x742}, &(0x7f0000000180)=0x8) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)) 15:08:02 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x40, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000080)={{0x7, 0x7, 0xffffffffffffffff, 0xff, '\x00', 0x1}, 0x1, [0x80000000, 0x6, 0x43a6, 0x9, 0x34, 0x9, 0x5, 0x3, 0x7, 0x61a, 0x1ca000000000, 0x4, 0x8000, 0xffffffffffffffff, 0x2, 0x4, 0x9, 0x6, 0x7ff, 0x6, 0x80, 0x8001, 0x3, 0x80000001, 0x10001, 0x3, 0x4, 0x0, 0x6, 0x7, 0x3, 0x6, 0x1, 0x3f, 0xffffffff, 0x7ff, 0x81, 0x0, 0x5, 0x2, 0x1000, 0x9, 0x9, 0x100000000, 0x3f, 0x59259833, 0x0, 0x9, 0x7fffffff, 0x1, 0x8176, 0x9, 0x9002, 0x2e6, 0x400, 0x401, 0x1, 0x1, 0x7, 0x6, 0x7, 0xfffffffffffffeff, 0x8cb, 0x7fff, 0x34d9, 0x100, 0x16400000000, 0x7, 0x4, 0x1, 0x1, 0x1, 0x3ff, 0x4, 0x5, 0x9, 0x100, 0x5e, 0x200, 0xc5c6, 0x1, 0x552, 0xcbb6, 0x6, 0x3ff, 0x80000001, 0x0, 0x0, 0x1, 0xffffffffffffff81, 0x9, 0x1, 0x6, 0x2, 0x40, 0x2, 0x7fffffff, 0x1, 0x3, 0x4, 0x81, 0x9, 0x7, 0x8, 0xfffffffffffffffa, 0x7, 0x6, 0x8, 0x101, 0x5, 0x8, 0x4, 0x946e, 0x5, 0x8, 0xffffffff, 0x6, 0x4, 0x3, 0x4, 0x3, 0x8001, 0x1f, 0x3f, 0xfe, 0x8, 0x8], {r2, r3+10000000}}) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, r1, 0x0, 0xe, &(0x7f0000000580)='\\Clo\xc3ppp0-[+#\x00', 0xffffffffffffffff}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000680)={{0x5, 0x6, 0x6c1, 0x1, '\x00', 0x2}, 0x6, 0x400, 0x5, r4, 0x8, 0x6, 'syz0\x00', &(0x7f0000000600)=['/selinux/checkreqprot\x00', '-GPL*\x00', '\xb9keyringeth1user\x00', '/selinux/checkreqprot\x00', '\x00', '\x00', '\x00', '\x00'], 0x47, [], [0x100000000, 0x2, 0x5, 0xfe0e]}) 15:08:02 executing program 2: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() clone(0x800101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) 15:08:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000840)={0x0, 0x200000000001d, 0x1, {0xb, @pix_mp={0x0, 0x9, 0x0, 0x0, 0x0, [{0x0, 0x0, [0x0, 0x4000]}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffe7]}, {}, {}, {0x0, 0x0, [0x1000000]}]}}}) 15:08:02 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x6c4, 0x0) getsockopt$inet_mreq(r1, 0x0, 0x27, &(0x7f0000000040)={@remote, @multicast1}, &(0x7f0000000080)=0x8) 15:08:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff77ffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 15:08:02 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200000, 0x0) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@null=' \x00', 0x9, 'veth1_to_bond\x00'}) r1 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000040)) 15:08:03 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x1e) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) fchdir(r0) sched_setattr(0x0, &(0x7f00000002c0)={0x830}, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x31f, 0x6, 0x7, 0x1f, 0x7f}, 0x10) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000040)=""/148) socket(0x22, 0x2, 0x2) r2 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000180)=[@enter_looper, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000200)}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r2, 0xa, 0x1) r4 = socket$unix(0x1, 0x801, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0xb9a) r6 = accept4(r5, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r6, &(0x7f0000000340)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffe9c) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0xa655e68c17a90db3}}}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) getgid() setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x0, 0x200}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), 0x1, 0x0, &(0x7f00000000c0)="e1"}) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="e91f718b4b001001000000"], 0x0, 0x0, 0x2000000, 0x0) 15:08:03 executing program 1: syz_emit_ethernet(0x4a, &(0x7f0000000600)={@broadcast, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "50d624", 0x14, 0x0, 0x0, @empty, @rand_addr="e6a394d58c502928e8f919c60b967157", {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 15:08:03 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x80) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)) 15:08:03 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000000)) 15:08:03 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = getpid() syz_open_procfs(r1, &(0x7f0000000000)='net/igmp\x00') ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) 15:08:03 executing program 2: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() clone(0x800101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) 15:08:03 executing program 2: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() clone(0x800101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) 15:08:03 executing program 4: r0 = msgget(0x3, 0x0) msgsnd(r0, &(0x7f0000001100)={0x1}, 0x8, 0x0) 15:08:03 executing program 1: creat(&(0x7f00000001c0)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x84003ff) write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0xfffffffffffffe41) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) inotify_init() stat(0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[], 0x0, 0x1) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x6, 0x5}, 0xa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000340)='./file0\x00', 0x7) fallocate(r0, 0x0, 0x0, 0x8200003) 15:08:03 executing program 5: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) 15:08:03 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) 15:08:03 executing program 2: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) clone(0x800101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) 15:08:03 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x79) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') bind$unix(r0, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) fchdir(r0) sched_setattr(0x0, &(0x7f00000002c0)={0x830}, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x31f, 0x6, 0x7, 0x1f, 0x7f}, 0x10) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000040)=""/148) socket(0x22, 0x2, 0x2) r2 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0c6300001163484000"/56, @ANYPTR=&(0x7f0000000100)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB="0200000000000000"], 0x0, 0x0, &(0x7f0000000200)}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r2, 0xa, 0x1) r4 = socket$unix(0x1, 0x801, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r5, 0x0) r6 = accept4(r5, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r6, &(0x7f0000000340)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffe9c) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0xa655e68c17a90db3}}}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) getgid() setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x0, 0x200}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), 0x1, 0x0, &(0x7f00000000c0)="e1"}) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="e91f71894b000001000000"], 0x0, 0x0, 0x2000000, 0x0) 15:08:03 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x400040000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x2720, 0x0, &(0x7f0000000000)=0xf0ff7f) 15:08:03 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000080)={0x3, 0x1, @stop_pts=0x7f}) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)) 15:08:03 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000140)=0x2) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x104) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000040)) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0xf000, 0x1000}) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x807d) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f00000000c0)={0x0, 0x5, 0x7ff, 0x58, 0x26}) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000100)={0xff}) 15:08:03 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge0\x00', 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x8000, 0x0) recvmsg$kcm(r1, &(0x7f0000001380)={&(0x7f0000000180)=@alg, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)=""/20, 0x14}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/112, 0x70}], 0x4, &(0x7f0000000380)=""/4096, 0x1000}, 0x120) getrlimit(0x7, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup.net/syz1\x02', 0x1ff) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffb000/0x1000)=nil) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) ioperm(0xb7, 0x0, 0x5) sendmmsg(r0, &(0x7f0000007fc0), 0x800000000000160, 0xfffffffffffffffe) 15:08:03 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000001c0)) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000000)={@remote}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) getegid() stat(0xfffffffffffffffe, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000440)) creat(&(0x7f00000002c0)='./bus\x00', 0x102) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r2, 0x8003f1) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, 0x6e) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000000c0)) openat$vcs(0xffffffffffffff9c, 0x0, 0x200, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) stat(0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000680)={{{@in=@initdev, @in6=@local}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@dev}}, 0x0) geteuid() write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="9f2a3d967119c6707ded1153d21cc284000000e0f8a5d01fc4bb13cd857a4e08a0ec5f096b8686d3fe32abfa25196a94e7cd99a0385ce8ac2cf0706e495fb1"], 0x3f) getdents(r1, &(0x7f00000004c0)=""/150, 0x96) ioctl$PPPIOCSACTIVE(r1, 0x40107446, 0x0) 15:08:03 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f00000008c0)='/dev/media#\x00', 0x5, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000900)=0x8d) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000080)) 15:08:03 executing program 0: r0 = semget$private(0x0, 0x5, 0x2) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x3, 0x800}, {0x3, 0x2af, 0x1800}, {0x5, 0xd0, 0x1800}], 0x3, &(0x7f0000000040)={0x77359400}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x400800, 0x0) connect$netrom(r1, &(0x7f0000000240)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x200900, 0x0) getsockopt$inet_buf(r3, 0x0, 0x28, &(0x7f00000002c0)=""/105, &(0x7f00000001c0)=0x69) ioctl$SIOCGSTAMPNS(r2, 0x8907, 0x0) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$VIDIOC_G_INPUT(r4, 0x80045626, &(0x7f00000000c0)) 15:08:03 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge0\x00', 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x8000, 0x0) recvmsg$kcm(r1, &(0x7f0000001380)={&(0x7f0000000180)=@alg, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)=""/20, 0x14}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/112, 0x70}], 0x4, &(0x7f0000000380)=""/4096, 0x1000}, 0x120) getrlimit(0x7, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup.net/syz1\x02', 0x1ff) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffb000/0x1000)=nil) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) ioperm(0xb7, 0x0, 0x5) sendmmsg(r0, &(0x7f0000007fc0), 0x800000000000160, 0xfffffffffffffffe) 15:08:03 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x4}}) [ 669.783784] audit: type=1804 audit(1555945683.703:104): pid=31457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir683713614/syzkaller.DTyAWV/921/bus" dev="sda1" ino=17273 res=1 15:08:03 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge0\x00', 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x8000, 0x0) recvmsg$kcm(r1, &(0x7f0000001380)={&(0x7f0000000180)=@alg, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)=""/20, 0x14}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/112, 0x70}], 0x4, &(0x7f0000000380)=""/4096, 0x1000}, 0x120) getrlimit(0x7, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup.net/syz1\x02', 0x1ff) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffb000/0x1000)=nil) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) ioperm(0xb7, 0x0, 0x5) sendmmsg(r0, &(0x7f0000007fc0), 0x800000000000160, 0xfffffffffffffffe) 15:08:04 executing program 2: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) clone(0x800101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) 15:08:04 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) 15:08:04 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0xfffffffffffffffc) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x9, 0x101001) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f00000000c0)) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000180)={0x7, @output={0x1000, 0x1, {0x9, 0xfffffffffffffffc}, 0x5, 0x101}}) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000040)) 15:08:04 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge0\x00', 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x8000, 0x0) recvmsg$kcm(r1, &(0x7f0000001380)={&(0x7f0000000180)=@alg, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)=""/20, 0x14}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/112, 0x70}], 0x4, &(0x7f0000000380)=""/4096, 0x1000}, 0x120) getrlimit(0x7, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup.net/syz1\x02', 0x1ff) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffb000/0x1000)=nil) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) ioperm(0xb7, 0x0, 0x5) sendmmsg(r0, &(0x7f0000007fc0), 0x800000000000160, 0xfffffffffffffffe) 15:08:04 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x2) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) fchdir(r0) sched_setattr(0x0, &(0x7f00000002c0)={0x830}, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x31f, 0x6, 0x7, 0x1f, 0x7f, @remote}, 0xffffffffffffffea) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f00000008c0)=""/148) socket(0x22, 0x2, 0x2) r1 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0c6300001163484000000000000000f8ffffff000000000000000000080000000000000000000000000000000000000000000007000000007248a5eddc055f6da6f709931d307cc278441f7143354cf761029223e6972118626a51b98619c8400085", @ANYPTR=&(0x7f0000000100)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB="81052672df000000"], 0x0, 0x0, &(0x7f0000000200)}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r1, 0xa, 0x1) r3 = socket$unix(0x1, 0x801, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) r5 = accept4(r4, &(0x7f0000000240)=@generic, &(0x7f0000000200)=0x80, 0x0) connect(r5, &(0x7f0000000340)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffe9c) write$P9_RLOPEN(r3, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0xa655e68c17a90db3}}}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) r6 = socket$inet6(0xa, 0xf, 0x6) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8923, &(0x7f00000001c0)={'team_slave_0\x00', 0x1400}) getgid() setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x0, 0x200}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), 0x1, 0x0, &(0x7f00000000c0)="e1"}) mount(&(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x2000000, 0x0) 15:08:04 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x10400, 0x0) getdents64(r0, &(0x7f00000000c0)=""/106, 0x6a) r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x9}}) 15:08:04 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge0\x00', 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x8000, 0x0) recvmsg$kcm(r1, &(0x7f0000001380)={&(0x7f0000000180)=@alg, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)=""/20, 0x14}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/112, 0x70}], 0x4, &(0x7f0000000380)=""/4096, 0x1000}, 0x120) getrlimit(0x7, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup.net/syz1\x02', 0x1ff) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffb000/0x1000)=nil) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) ioperm(0xb7, 0x0, 0x5) sendmmsg(r0, &(0x7f0000007fc0), 0x800000000000160, 0xfffffffffffffffe) 15:08:04 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x28000, 0x0) pipe2(&(0x7f0000000040), 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2200, 0x22) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x9c3) accept$packet(0xffffffffffffff9c, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) 15:08:04 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000001c0)) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000000)={@remote}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) getegid() stat(0xfffffffffffffffe, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000440)) creat(&(0x7f00000002c0)='./bus\x00', 0x102) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r2, 0x8003f1) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, 0x6e) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000000c0)) openat$vcs(0xffffffffffffff9c, 0x0, 0x200, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) stat(0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000680)={{{@in=@initdev, @in6=@local}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@dev}}, 0x0) geteuid() write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="9f2a3d967119c6707ded1153d21cc284000000e0f8a5d01fc4bb13cd857a4e08a0ec5f096b8686d3fe32abfa25196a94e7cd99a0385ce8ac2cf0706e495fb1"], 0x3f) getdents(r1, &(0x7f00000004c0)=""/150, 0x96) ioctl$PPPIOCSACTIVE(r1, 0x40107446, 0x0) 15:08:04 executing program 5: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x1000, 0x7, "35adf41f8f4577b27cb1fa06831c16bf3e8284d2192a26417ed90d0bf87a5e89", 0xb679, 0x3, 0x200, 0x7ff, 0x40}) r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) r2 = shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x6000) shmdt(r2) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000040)) [ 670.677981] audit: type=1804 audit(1555945684.603:105): pid=31465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir683713614/syzkaller.DTyAWV/921/bus" dev="sda1" ino=17273 res=1 15:08:04 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x152, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000200)='/dev/capi20\x00', 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x40000, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x4002, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) io_setup(0x5b3, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, 0x0) io_submit(0x0, 0x0, 0x0) 15:08:04 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x6, {0xd17, 0x100, 0xdae, 0x2b7}}) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)) [ 670.883549] audit: type=1804 audit(1555945684.803:106): pid=31518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir683713614/syzkaller.DTyAWV/922/bus" dev="sda1" ino=17286 res=1 15:08:04 executing program 2: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) clone(0x800101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) 15:08:04 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x424900, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r1, 0x1ff}, 0x8) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'ip_vti0\x00', 0x1100}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ba000000", @ANYRES16=r3, @ANYBLOB="100126bd7000fbdbdf25010000003000020008000b000a00000008000b000a00000014000100ff010000000000000000000000000001080007000100008008000400030000003c000100080009007b0000000800080036dd000008000b0073697000080004004e22000008000600646800000800050003000000080008000180000008000500f19400000800040009000000"], 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 15:08:04 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x40000, 0x402300) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000000)={0x9, 0x4c47504a, 0xffff, 0x2, 0x3, @discrete={0x8, 0x6599}}) 15:08:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") poll(0x0, 0x0, 0x5) 15:08:05 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x79) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) fchdir(r0) sched_setattr(0x0, &(0x7f00000002c0)={0x830}, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x31f, 0x6, 0x7, 0x1f, 0x7f}, 0x10) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000040)=""/148) socket(0x22, 0x2, 0x2) r2 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000180)=[@enter_looper, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000200)}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r2, 0xa, 0x1) r4 = socket$unix(0x1, 0x801, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r5, 0x0) r6 = accept4(r5, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r6, &(0x7f0000000340)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffe9c) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0xa655e68c17a90db3}}}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000280)={'team_slave_0\x00', 0x1000}) getgid() setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x0, 0x200}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), 0x1, 0x0, &(0x7f00000000c0)="e1"}) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="e91f71894b000001000000"], 0x0, 0x0, 0x2000000, 0x0) 15:08:05 executing program 0: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x36) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) 15:08:05 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000100)={0x3, 0x0, {0xbe, 0x7ffffffd, 0x0, 0xaf}}) 15:08:05 executing program 1: creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = creat(0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) write$P9_RCLUNK(r0, 0x0, 0xfffffffffffffe41) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x0, &(0x7f0000000340)) sendto(r0, &(0x7f0000000200), 0x0, 0x800, 0x0, 0x0) inotify_init() stat(0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[], 0x0, 0x1) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000140)={0xa, 0x8, 0x6, 0x5}, 0xa) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x7) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) fallocate(r1, 0x0, 0x0, 0x8200003) 15:08:05 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x4, 0x800000032, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000080), 0x4) 15:08:05 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) 15:08:05 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000100)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @irqchip={0x1}}]}) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/create\x00', 0x2, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x8000}, &(0x7f0000000100)=0x8) r5 = semget$private(0x0, 0x2, 0x210) semctl$GETVAL(r5, 0x1, 0xc, &(0x7f0000000180)=""/153) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r4, 0x2}, 0x8) 15:08:05 executing program 1: creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = creat(0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) write$P9_RCLUNK(r0, 0x0, 0xfffffffffffffe41) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x0, &(0x7f0000000340)) sendto(r0, &(0x7f0000000200), 0x0, 0x800, 0x0, 0x0) inotify_init() stat(0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[], 0x0, 0x1) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000140)={0xa, 0x8, 0x6, 0x5}, 0xa) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x7) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) fallocate(r1, 0x0, 0x0, 0x8200003) 15:08:05 executing program 2: r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) clone(0x800101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) 15:08:05 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000080)={0x6b3, "4ce2bc9d7447ba685c2281ed77393a06dc196cd6f7c7c7c59c1c1e769867d864", 0x3, 0x1cd2, 0x7, 0xe0, 0x4}) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)) 15:08:05 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x3320315e, 0x2, 0x0, 0xffffffffffffff9c}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) pipe2$9p(&(0x7f0000000000), 0x4000) 15:08:05 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000001040)='net/raw\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000001080), 0x1000) 15:08:06 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x79) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) fchdir(r0) sched_setattr(0x0, &(0x7f00000002c0)={0x830}, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x31f, 0x6, 0x7, 0x1f, 0x7f}, 0x10) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000040)=""/148) socket(0x22, 0x2, 0x2) r2 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000180)=[@enter_looper, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000200)}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$setsig(r2, 0xa, 0x1) r4 = socket$unix(0x1, 0x801, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r5, 0x0) r6 = accept4(r5, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r6, &(0x7f0000000340)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffe9c) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0xa655e68c17a90db3}}}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) getgid() setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x0, 0x200}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), 0x1, 0x0, &(0x7f00000000c0)="e1"}) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="e91f71894b000001000000"], 0x0, 0x0, 0x2000000, 0x0) 15:08:06 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 15:08:06 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}, &(0x7f0000000100)=0x10) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000001c0)={r2, 0x6, 0x10000, 0x7, 0x1, 0x5}, &(0x7f0000000200)=0x14) 15:08:06 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0) 15:08:06 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, 0x0, 0x0}) 15:08:06 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 15:08:06 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) get_mempolicy(&(0x7f0000000000), &(0x7f00000000c0), 0x5, &(0x7f0000ffc000/0x2000)=nil, 0x1) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) 15:08:06 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) 15:08:08 executing program 2: r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) clone(0x800101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) 15:08:08 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 15:08:08 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000200)={{&(0x7f00000000c0)=""/206, 0xce}, &(0x7f00000001c0)}, 0x20) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x2000, 0x0) write$P9_RLERROR(r1, &(0x7f0000000040)={0x13, 0x7, 0x1, {0xa, 'mime_typeb'}}, 0x13) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x8000, 0x0) 15:08:08 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x10000000, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)={0xfffffffffffffffc, 0x0, {0x0, 0x0, 0x1, 0x1}}) 15:08:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000006, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0x0, 0x2}}) 15:08:08 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x79) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) fchdir(r0) sched_setattr(0x0, &(0x7f00000002c0)={0x830}, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x31f, 0x6, 0x7, 0x1f, 0x7f}, 0x10) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000040)=""/148) socket(0x22, 0x2, 0x2) r2 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000180)=[@enter_looper, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000200)}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r2, 0xa, 0x1) r4 = socket$unix(0x1, 0x801, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r5, 0x0) r6 = accept4(r5, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r6, &(0x7f0000000340)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffe9c) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0xa655e68c17a90db3}}}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) getgid() setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x0, 0x200}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), 0x1, 0x0, &(0x7f00000000c0)="e1"}) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="0000000000ae8d4811000036480122c4dee1f9c5d62b40f560a3f441f19a0f4aa4da06d0691f6d1f8fcb8e09d6b6be7c0e270d5edcbd2a0b6655ec4758b32a002840121d31b24b5303e1a084be1e4176efc57603ed5d9ca1e585ee6ad55c65698e4afc0a047cc16d023b5894d0367b222d5a4bd3c8e3bc497b2b788fe91a3ce91a50495e7873880d962613a4bc0962950d2212df89bef4cec3ad67eb9e392fd32c1db9836d44cb11c20f1e8b51992e28512f981b4ed0808a"], 0x0, 0x0, 0x84000, 0x0) 15:08:08 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:08 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 15:08:08 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x404000) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x80000000, 0x3, 0x3}) fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x3) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) 15:08:09 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x80, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000180)={{0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x1, 'sed\x00', 0x0, 0x10001, 0x62}, {@local, 0x4e22, 0x3, 0x7, 0xffff, 0x400}}, 0x44) write$P9_RFLUSH(r1, &(0x7f0000000140)={0x7, 0x6d, 0x2}, 0x35f) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000200)) 15:08:09 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 15:08:09 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:11 executing program 2: r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) clone(0x800101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) 15:08:11 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x1b90, 0x400200) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f00000000c0)=0x4, 0x4) r2 = getegid() setfsgid(r2) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)) 15:08:11 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) 15:08:11 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:11 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 15:08:11 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000480)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f0000000200)='attr/fscreate\x00') ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x79) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') bind$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) fchdir(r1) sched_setattr(0x0, &(0x7f00000002c0)={0x830}, 0x0) bind$llc(r1, &(0x7f00000000c0)={0x1a, 0x31c, 0x6, 0x7, 0x1f, 0x7f}, 0x10) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000040)=""/148) socket(0x22, 0x2, 0x2) r3 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000180)=[@enter_looper, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000200)}) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r3, 0xa, 0x1) r5 = socket$unix(0x1, 0x801, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r6, 0x0) r7 = accept4(r6, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r7, &(0x7f0000000340)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffe9c) write$P9_RLOPEN(r5, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0xa655e68c17a90db3}}}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8923, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) getgid() setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x0, 0x200}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), 0x1, 0x0, &(0x7f00000000c0)="e1"}) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="e91f71894b000001000000"], 0x0, 0x0, 0x2000000, 0x0) 15:08:11 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 15:08:11 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x100) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @loopback}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000100)={r2, 0xa2, "85094d0e81aa5d07f404726b52f6a44d155c4bfb6e43d6ab07c53847765397f413a44760db0875736987fc060cd0d1fda52e2a37e12a55dd829d4e0b7871aa570b962f846e01a676b38c71b821a908a22dcfd16b8aa0e8ef87439a051cb772082c863d84129087c3482b432401c95d40348705a16055d0d7435ec3c63c799e0ba3ccd1d4003ddd4f2de996af4e825adac492281acea3f1b807c12f6a22358578a440"}, &(0x7f00000001c0)=0xaa) 15:08:11 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x79) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) fchdir(r0) sched_setattr(0x0, &(0x7f00000002c0)={0x830}, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x31f, 0x6, 0x7, 0x1f, 0x7f}, 0x10) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000040)=""/148) socket(0x22, 0x2, 0x2) r2 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000180)=[@enter_looper, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000200)}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r2, 0xa, 0x1) r4 = socket$unix(0x1, 0x801, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r5, 0x0) r6 = accept4(r5, &(0x7f0000000240)=@generic, &(0x7f0000000140)=0x80, 0x0) connect(r6, &(0x7f0000000340)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffe9c) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0xa655e68c17a90db3}}}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000004c0)={'teamW\xfelave_0\x00', 0x4102}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) getgid() setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x0, 0x200}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), 0x1, 0x0, &(0x7f00000000c0)="e1"}) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="e91f71894b000001000000"], 0x0, 0x0, 0x2000000, 0x0) 15:08:12 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x4040) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)) 15:08:12 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:12 executing program 4: bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{}], 0x1, 0x0) 15:08:14 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) clone(0x800101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) 15:08:14 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x4000000000000) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0xbf}) 15:08:14 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) io_setup(0x4bc0, &(0x7f0000000000)=0x0) r2 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x20000) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f0000000200)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x81, r3, &(0x7f0000000040)="ce21d6996cc23f13eeba7165590ee1de67865623adb9d5c734b243632cc92ac6231929030d89f142fc8ad85c04652e2b5d6d2e06c9ef9a35554259b0570ddfc6066fdb77056b3d6adaca5672e8ee332106c67fd984a9516e1edd234400f1d4df69a819077735c2896fce310c8e1ee834d08d755e6735292d69943b51b0bf23798ec7e73642b1f6a5e19422ae32fd474cc4517ca2", 0x94, 0x3, 0x0, 0x2, r3}]) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) epoll_create(0x9) 15:08:14 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:14 executing program 4: bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{}], 0x1, 0x0) 15:08:14 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x79) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x28c) fchdir(r0) sched_setattr(0x0, &(0x7f00000002c0)={0x830}, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x31f, 0x6, 0x7, 0x1f, 0x7f}, 0x10) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000040)=""/148) socket(0x22, 0x2, 0x2) r3 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYRES16, @ANYRES16=r1], 0xa7, 0x0, &(0x7f0000000700)="f39a8f5689055add8aa6367b0a1651adfe19a62fb2496848c202e57f04e4cb1ace7244085eceae2b3b1d4d5a08cab951d8a1e00e833b934d1541023d39dc29bdb5ace8bd7b1fc033424c330864be9e3ab49bca08affbe6bdd7eba6762cdf81c0d124e5b1f5c656ddb59666a1da460501ae022ce44db3d34bdcdf98fb299c105dcd68dcdd9963f846f9a02706a22e36486dcef00d823a17b3ef5b9ebb93a83065078584a82dbd6f"}) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000026bd7000fcdbdf2508007ca097e7f300000400010008000400080000000800050000040000000400000008000800030000000800050090540a4f9842c5629900000000080006"], 0x54}, 0x1, 0x0, 0x0, 0x84}, 0x2004c005) r6 = socket$inet6(0xa, 0x400000000001, 0x0) r7 = dup(r3) setsockopt$inet6_tcp_int(r4, 0x6, 0x14, &(0x7f0000000280)=0x4a3b, 0xfc82) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000005c0)={0xa, 0x4e1f, 0x0, @ipv4={[], [], @remote}}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/36, 0x3bfde9d00c37b4f0}, 0x2000) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x40000000000059b, 0x0) write$P9_RWRITE(r7, &(0x7f0000000480)={0xb}, 0xfd8d) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) 15:08:15 executing program 4: bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{}], 0x1, 0x0) 15:08:15 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, @bcast, @netrom={'nr', 0x0}, 0x401, 'syz1\x00', @bcast, 0x5, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) 15:08:15 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:15 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x101000, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8004802}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r2, 0x128, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x48, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffc00}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 15:08:15 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:15 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 15:08:18 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) clone(0x800101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) 15:08:18 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_cache\x00') ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000100)={0x4080000000000000, 0xd000, 0x7fffffff, 0x8, 0x7}) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0), 0x4) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)) 15:08:18 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x8fa, 0x111400) sendmsg$inet_sctp(r0, &(0x7f0000000440)={&(0x7f0000000040)=@in={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)="9c11a521aba9d51ff17cf9d92bc0f64a9652ad55beb4a05b0efbe43600f2ef16cd0b39f14cbf2fa3734680347d0f5b427d1ea2e8d274754fca3d1000b17918e5c187613fb563479ff6d937a0eb6707b9d72742426478d2094b2334b8ec346d61309c640e8df65c469325e555ffe01c565bea440b5132e83ff8dda1a1d3c69aed57c23527799d6eacba4ed72760361eeffc98398872", 0x95}, {&(0x7f0000000140)="279d72fe3870dfa277e54c28e20484737181365f065130fc0abc7dd5873dbe77fdde60ddf0d055844d9380fb66e90da78f8bf275f0f5c3280b1bc2659d8153714d1f55eb30864e7b3b8353956a6aecb186", 0x51}, {&(0x7f0000002e00)="547ffb16627eb6f1f98fa6ae610983fcc9bc10796efd2dee83c510aca12d0681ec82cd91990240d07f19d8dbe8e1172f2f6d19a6a1a331735c2e8f1861c1a45fcd397a4c9f887a394f10cb4961ffbb3f5bf8133e08281c97ee525a329f426ff381527b8e7dc600ff9a7080aa2474df6f960f43d9a6072c02640a80a25969974bbcd02c60084bfd1ad99981561c932de3b1d2de72fe78b146a9b5d21a644d3cf781392aaa8f5be5ebd359dd7facdc2cf09c680dc375e6b50b14f837e3f154bc5f644e022a812fd4f477e72b9fd490d2e5d2cc06eda0b698b1450fd10b32508fca15b8aa7e2910732aeaf2fd0ef5f4acd2f0450bbba673699700"/260, 0x104}, {&(0x7f00000002c0)="8a4f2e4ea7b22f52d8a78bf4f6d2c05778367bc2699059130d21a9270782e7c6dc3044c5454e58ff979ab8eba5134f1f040bcda12e5af50e4637b04139cc43d9c4aeec89633454fd8987eee006c501eaafa33f7b89744802d73fe0fed9c2d4b837114d49ab83c78eb65eb1a1bb689d66a26bce9f68fa0f329105f0f68ea41547361a011b40e463cb220105", 0x1ce}, {&(0x7f0000000540)}], 0x5}, 0x4) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000380)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000480)={r1, 0x3}) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000002a40)={{{@in6, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f0000002b40)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002b80)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000002c80)=0xe8) syz_mount_image$ntfs(&(0x7f00000004c0)='ntfs\x00', &(0x7f0000000500)='./file0\x00', 0x800, 0x7, &(0x7f0000002980)=[{&(0x7f0000000540), 0x0, 0x9}, {&(0x7f0000000580)="7b00f0bb1997fec4dd200c75a5648ce1ab548dd070f5e172c8284c80c59ceeb1262b28661c959b1c48a1ea7607b115fdb08cb9ee522c545b77b2be954c16a9c459126f9923c3d7a09eae0456f04ba6c364d575373cc55e5ec6ed04ca944480af78387ef2835905cb0304c656ddf878a8bbfb979cb38506348b3c01859939ada137fdf54ff58613890bb6a6a11cdf731f6654413c6d0338aae57526ce37d531357ed4d93736ee0246d952322997395b7a5ecce20c63d059526579a6b15f9787dd785c35af4976ea803518bf4bac3930359b3fa76cdcdd8a49370089e9e83d8044e615eb96df67291744ae0baa02dde7381debb057077771", 0xf7, 0x9}, {&(0x7f0000000680)="06561ef7963721a4d47be9da55b4e5518260781e5959526453cff03d295872bf3d2662017120fd54a6b4513b27c5320b46a484419075a31316d546f330455cf3846edb3039951a43c9bd693a28a54b582aa1fb3d03c456822826a3c930332ae4c38def03a9060a22972a65b48ebb63468a8f81846acf814d6fbe75812ed6c908e26a74528b8dc995604b47663a4006fd5ca020d4887f9f23d4ba3b3a097f49a7d369f227abba73e9c5a23b3e8834efe0fc39b8669ab5687ab348953151c9c45025008dadebe717317288ad", 0xcb, 0x9}, {&(0x7f0000000780)="aabc36fa5d35ff4eb58a1549d39b1a36fb9d2a560f1c5814be7f036029c93c5907bbcd22a82cb0d49a0b3dc108b37fa2a1bb5152c2d616da7054b6be4666c294fb343fcc5222c014604ca678b5eb7ea861425604703f6ec44078ac2d88a6db0ab0fa2599ee1c8416b7d3216dbe18cfffb499d91365c7dd0c84c068fdb14291d1e09e726ed386e9c96d16f476c3a24fa6a1ecf81c5b54470547af3ed597b7c56ee27cd319fbec946053b235545851f8b1bba9eb87651c6ab7605ff83587de0593f7", 0xc1, 0xdf4}, {&(0x7f0000000880)="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", 0xfc, 0x3f}, {&(0x7f0000000980)="c431c35b2182db5a1226ab48df8051bdf3b654c32e6b9d683c9a73bbde8e7d5b3ce86e680a17fcad3f1efa6c63030011fadc07d96b7e2cbb387a325137a4a66d3387b21434cd6aad63feefe61f8337d2e4461eaa4f552cfa450edb76dafcb0ada737f74d811fea017d12183e1c3394b820c8965a7fc3f308bb7896f9252064bc8b5b6adee795a4d6d7dc04ee272f8feef7272b41bd428b578042696beecc1d1cb8125ebe4f3a0f4726c92b8c5ea662f27cedbd3931b1ecced4028486d7c948f2a83cb7b4b7a1b0af76476f47448b4c94e3084428b6d3bb621e4a3b81c546ee640a1bffb78aef7464b0ee9d905870df8e2296ec8beef2b858babde837802f9eaa15cb5f845677887671138e5797badd2e7f369f97e20a4c4871069d6eea2e27f2aaecd2b0187670e5187b6f0b72a4fd60d710026a559f775060757352bd5cb4bbbae6646cf6d5368c1b30b0b9303c379e9c74656c3225a568b360854596e139ea6352f2622214c8953ad508a6664634ef15061f761ec9aa7a41862f91aeaca806ef79e6a5c8c57a406444a758351e0160e1d5fad7fd4d926885b7fe2a85d93f4d8d0352abb27c4d90b3ac7591b2a94da95892a9b8071579992b750461e75e6190d36ff2cde5a33b129b09d780ea05a6b8766ff2dbd0df1d04c67c5ec61588c63dc5c791876558c9e882b69ded67e661d66cb94ee1b214963a2f138308984431ff29b39beda322bb7d1b38e133ddd21d880f07acea5b9499192772f0570f3069a7a555cab23ee4ddf10b3ce165b4eef6ebedf03754603caeb256202d04e150cd6db375e2700cf58513cbd8dcd3f1b3d8a708da75ffe8e887e01ec185d9c67e1dfbcf5fcf87ef0e80b78f5ea864c6e79f2da0b81621cdc07c0530ae91e735e4a171d8836f2a8e1a77ea993bf29395afbda3e3f6525223f481b2ba9695defcdc8c34e794e92ea567fbf667749d1eadbcac2394acaea101de77929f8e234f8e6357f5e050df2bd7f117f6ab44b421957c16825969ca7191d8acf78b3203fda14fc23213e04ed97074b6f4e0ca6b85f5a476be64f1084ec9f0b04a2beb228cb9850319e8cb789d1cc25bbd035aa0e2affa36aeece6edcc9f8ff090809fbfb8fc26c4c5c5c7bb638c0b44106197b935e25cc44db0ea7e8085fa46fb3b46bea6aca2520107eda7c243d5a15fa1f4b08675c0deef04a001d063c44d3fd0b40f5d038f5eee73685ecb77715ef8f4ac181c94a4ac9c326ef7b1923c56f1be2ccc9393eeda491973692e973ea594809fb9038b32447981daedc4c9056bd75f0c8eafef496b78894862492859819ce36a50c61a337a28a84d011c534ad0ae57ecba34ffe7a60f75870ed0b5c974b168a7358995c2536cfb00c6fdf5826c587cdad663cd3e8306fb3f0e92360c19103b328a381ba3afa3070db84b2703dd3bacdef5f05f34f204c1b79cbacb178164f7a07cd535062e5cab928480b3955b873207bc8841108b0a1ddfb4d270dba28c995820a9bea3de3a35b7a28b43aa100a8dbf5dcebda9998a144171e3d94fe3c8b2d934258d0e79bfbb55ce5ad6da0fd07224fc49caa6c007a39f8ea5f31f426878b1e7ed2f20186df51f52b960108a866be504284cfe4b52f2fc2036966f2d622e9f9281818ad9c73951c7c96b46f0fcb4aea49a5358a0f8ef634bf9ba4f1937af3ce08063c7f17352fe474b31af3a9f5d68441644382e498878d4f02ad3015f0d0050811c9f1447c78ba8db9032cfa460f98f6a6e37342bf06b2a54186c6d05946e6e6b128be167fd4e923287b7bed3a7d1108614a7d89638f13b5eb322fa44b049fda3ad0b5786b070589e9942a921f31aef0b388cfc0eac8abd5c72ca8b06cbe62951045893e473e85046ab1cd32dbe9c55c2f880d5f11b83911300f99ff0d5f84553733467fe7b1c8f3bd489990eb4d565eeaa9028618b34f2eb1c3297122b1207ac440155adee916b2e34e4afc308376ae413f4e6dd34b083dfc5a421ec1e241ae784114bfb3c707da630dd6b69a9ec463e24d48be1b4e1140b9f0ca592f065341a5b3248a499f034aebe088fe9ebbf9ae310c1b664dbb1cabebc90a82e4c7685d8baf1d461b77f2a672c81c5c08cda93e46ff6e82eba30ba401936c74f4419fc1a9db3b1b506dd2ff45a8344cd12231e5db57d046baf6098ba8b0954a13ef8982bb98ed081e4390d8fa883d151316a7efd8b541bcd0ebf400e670df411c828a485ce8cf9f70f7288b3dfde2208e1a149f68f885e8f24827a8752c42d0f5f48d57165a824ddfed4cfb816dd354bcfcbe9a587653829b518d75b5256ee90ae31aa9bf5d9ecd3f40fb4a58178b9c91ae79b48bdcf0b738ca264db0ad770491c29e02888f12f1b95d63cc789d5afaeac7bf3d7901e9b603cad5456f514a61e42dd12d34d9d934736833beae5aedd17b6edaeffc11b39ec43289527ce0171079bd3acca04282fab832e6b2bcf47161313509fd1d70643c75dd8b5c1d65ae3f45f1e5b156e49be227f81fa26870a327cfee9b450733daba01852d7ea4373baf30af2a38225a6f0576af7abc96ac6a9b20a830edc63e8d858f9b9293863aae2df5182ec9a9c9f9be358b79ad14137b2540b589312bd02b8e9633ac7a01f4ce4b7764f0c5b8271f05cddb6b4023e1198d4e16fcfe9193d3f5ccf3a3283db1122e595cc6f97b0deece9990eb6709dfc77e1aa9e3ce328f1e7985eb26c26700c7f84b04338a0a050b37e5bdce810f8de042fe671ebd9a95de34a9e26ea3cc129c685a7f1ce670bf81c167ccce928e08e225af3a8cbbd6475ff1e7b296f581d7cc1082abe99f20016c8287eae57ca0b7dc4793e05b8bfbeea06635c070d30d0f03334382e3723e322027f37da7fe69e41c38de0a55d80e9fa2a7304938c9a332c9c23e133030f82bce145904c0196f2d35da6b3a4d6b343dc0acc0935b5675912f5f5298f5cc9cd384990d7242056b9296a6eb9e5665b9085ce551413f7b4070886f76e087230c56eb7bfc7932e2224631af6da95adc2d987dc9fbc7571400c93b3d7cd799b8878e9bf2395dccadb06ac62545013c9faebccabfaa8da1d1e7e920d3f094e240a6f21e9f70be7654b0593146026f93ac828ffdfd700d6633bd525ed6477bbe25181cd3be11f6edf001af6749550919756cc4421d22f54283b7ece1fd18b9d44c0965149f32e30cff0d1d646dcefc60656c20b8954cae38a62a17bc6e0a31f2e40b1ed059c3a99cf9706809fdfb02b05c7417e823f2d8b3074fa4460066af379aa1d7d4161f7407e7249104453109032c42bbca8246e2674cf9763daf97a606edadc72888efa746084af6f260946c86133d011ffa7688ce5f7b09d1dc98d15fad5a54fa74dd60f397ebf3a8485e02259e66d710ed0119e7d7296de5724e97e17d368c9de4696673fdb07b545bd5adb56fe715041b9dcbf152d85e98bb4d63dad669a86af04b143ac5e5530e619979d61e10c280b4c31d3878498e94a8bb03255bd39185bbd8eb5d9a24c6efaced446a5fb8fc0290a1c52f1ba113ddc0962bf284835b92dbbe1e5c4c637f5afc970c7816db27eeaa7a59b573ffd505bf7202866a7a7758ae531b3f38240a6aaac528ff9d89e9438a4c224d690c0cc0547d17f9211c05e95ff0b16b311031d9f53ae36b0de1f1c9cbd8a66999bef0b196f11aa8332dbf3e427d3c5f07f4c5cdd19fe321f2dc5e2d6e59508a53175e2a45e377deb4456d2903681e7738338742afd6fea95e4cfcfc2ace163a96cab5c5d65b8e432dca24fb79f1d12357045f4850bc8c0325aaf7295e77b4ccf98eefcab6f4cb7a52436bbe119ddfd16cf56f05845993d983eeb68dbc318a9f8b367dc2855210ace274fc4e7d2df5ff6ace8b3e025205ef52e4415b81732fff5e536ff45c7476fcf1ee54ee4bee7e62df86774912d1d2cb91414e1b3d595ff0442584535b91894d1f18e9b75f68f0ae75cd311b181f15bf08ea6864d8bbb95efc9a82d0a226835e07ba5d9765813a225f187356255d968d55f56e131c453335132df22ef2af1f3f7462f6810cbee5a566a7235e709351801453e6548af0a5e2792fa133c81392d73d11bca7f117e659fabb114c2548a3d452dc2d911bdc2b25c6dc8987a95f0e895b3611130baec60d5f27defb06df6eaa95d984b7425c591e2ccd320edff6b379a0ecd38018f5cdcd07e081406f137aeea7635356349a6c2f4c66d73bae55a94123d8e93b6b2d25128b7edeb6109777af03c985d94f9715cd28c8a40d7c9a337325df8235c4f7f72dbfd9b7bbda0a39e6d416f2607c17efc13b3e1f328686acb92549ac3e56518415e59733f5ecd567975de199ae7a6ca178f80461d9d62b446182aa70244db4094373b37a2fcde680e316f3ccfe492aa045c372e633ec41501b10a19849c13aa18f989278eeb5ff27260a9c51a10b566459a53bacd2d08319bbfa8bbc84a7963fde16738a5c08f1032051165546f413654f56077b75c94d31d4f058b58d81dd475c35f8b67ec29cba1c7b5cffdcebb2085fcc4fd965ec218791d84517d7247ebb6102f28b13aec328b6460f1a41d9797010e4661ac723d6f22f24048c56ce53119462d3b977129d0f078e20d513f98167bbed3144b511aeda956938b50fcb20ca6cc1780104ba08ad592e2d08e0ad89b4f0bc9f946ea0a5749c2a4fd503fe4be94cc6aa33938c2a5020a7ebc7687fd0f10f5c5359b9480d825a0c5a2016dc606c0c378332742bec0a9755c3f5f1a76da36796d3b7c6a444e382c16be208ecb78d7fcc3abc0905bf0cf16c5ebcd593212ae5a52cf5d4704f4c464ef443b10a0c04da26d656c4e1e632229662f0854050e52c7899543c728c4f0aeabebdbac82e45c457c95d90c35fda87ca6e7bd1c2c5126a8a3827b92dd1cc3e8f61de0c8bd1577ef6efae59f93db19bf5ce9992d7ca612480b4265327319a55c7f2b70b69bfc37acc05b2401fc7bb550b5195a832e978d870fc6b62d621265a3daf33e0b2bf8eb6e3bc3c4b947059707efdeff76c244ee73a0386d0fb6d725e4601ad11e66b56cce13deff3822b842bff7d9609ae5a7b25b39de5e1e9356b84098117329594f37c8e3b097a40bfbc861392336fade23d84c4eb80af1e6f5f3066d809caf99e9b63314e9f81d0ee2bb799b3dc5e10cc88c8bdeb6d429fa278323b189d13272747107ce912d2a9e7d6aa27d892ce1dab74fcde98a03ce03657b4cd16973e39499468efe2c92223036f560ea7bd06e5687409374e0d49e2237aeb3952a84d0c7454bafd0316dda84507d6cad112e952f02afcaaa3c27eed02e9ac27a253313907a877a81b002f442a61fb7c1d39ab2ecf0f1972377b7b8d419cbbbdb0df27758a45bed1276b2dff903d91b73d7c2f92bb1f4b06cd12187d1c1221b586d51476179551d9c52735941413b85d5053769b567c3b330c0503da745aa8208bd4545cbffeedf96d14f87ef83cf9a4ee9510b3fd50d0bdd2e01b192b5515cec8920e90685f0f0cd5e04aa7bbc88d5d7fc8a744be9f4802d5bd4037457a46076eb7caa9fa094f72e17ef96cefd3101e02810cf418369363d6925ae02c31e2f447ff6f3e89b7ac80110cdc18facdad88c3083eabecb13b4c97b96d77068630b1e0a099be72e84043f3471308ff14d739e6284b6e3759f9d7e2d7972cf49b56cb1e822ce567da51c30178a4551f35801f283793921e3411010c4772bb83354cba39d801c9649356e2dfd84ecb57d9671a2982a1fc87e4cff6f8e0990fcbcebd03953a07f0ea2a163ab5270b562eb807f05f29aceed", 0x1000, 0x8}, {&(0x7f0000001980)="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", 0x1000}], 0x8, &(0x7f0000002f40)=ANY=[@ANYBLOB="666d61736b3d30313737373737373737373737373737373737373737372c64693d8e04ab4b53e548617273653d6e6f2c6572726f72733d636f6e07a86e75652c636173655f73656e73697469767b3d7965732c64697361626c655f7370030073653d6e6f2c636173655f73656e7369746976653d6e6f2c636173655f73656e7369746976653d7965732c666f776e65723d", @ANYRESDEC=r3, @ANYBLOB="2c646566636f6e7465784d3f40af299e19ab43c3425eb58f4378743d73797361646d5f752c736d61636b66736465663d776c616e3126776c616e31266b657972696e6773656c696e75786b657972696e67657468302c0685456c7bed80657569643c", @ANYRESDEC=r4, @ANYBLOB=',\x00']) 15:08:18 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x79) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) fchdir(r0) sched_setattr(0x0, &(0x7f00000002c0)={0x830}, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x31f, 0x6, 0x7, 0x1f, 0x7f}, 0x10) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000040)=""/148) socket(0x22, 0x2, 0x2) r2 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x54, 0x0, &(0x7f0000000200)="398ec9d0a2e2753407ff0f3abad4d2d534a967d79b26157778226f6101e6b77ca60d214b524c30c6d4997f5701040000000000007058c4150742b5688656f02ff3d13da6bffba57cb30e90d84721595ed4d461c9"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000180)=[@enter_looper, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000200)}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x526c3420}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r2, 0xa, 0x1) r4 = socket$unix(0x1, 0x801, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r5, 0x0) r6 = accept4(r5, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r6, &(0x7f0000000340)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffe9c) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0xa655e68c17a90db3}}}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) getgid() setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x0, 0x200}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), 0x1, 0x0, &(0x7f00000000c0)="e1"}) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="e91f71894b000001000000"], 0x0, 0x0, 0x2000000, 0x0) 15:08:18 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 15:08:18 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:18 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:18 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) clock_gettime(0x7, &(0x7f0000000000)) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) 15:08:18 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 15:08:18 executing program 5: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x660c, 0x0) r1 = gettid() ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) tkill(r1, 0x3d) 15:08:18 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 15:08:18 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:21 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) clone(0x800101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) 15:08:21 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmsg(r0, &(0x7f0000001340)={&(0x7f0000001540)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)=""/90, 0x5a}, {&(0x7f00000015c0)=""/4096, 0xffffffc4}, {&(0x7f0000001440)=""/232, 0xe8}], 0x1, &(0x7f0000001240)=""/209, 0xd1}, 0x2001) lsetxattr$security_selinux(&(0x7f0000001380)='./file0\x00', &(0x7f00000013c0)='security.selinux\x00', &(0x7f0000001400)='system_u:object_r:system_dbusd_var_run_t:s0\x00', 0x2c, 0x2) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000100)={{{@in=@broadcast, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@local}}, &(0x7f00000003c0)=0x3f9) r4 = syz_open_dev$cec(&(0x7f0000000400)='/dev/cec#\x00', 0x0, 0x2) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r4, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4050900}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x188, r5, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0xd4, 0x5, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7667}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}]}, @TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x66}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xde18}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x47}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x40000}, 0x40) setresuid(r1, r2, r3) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCGSTAMPNS(r6, 0x8907, 0x0) 15:08:21 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 15:08:21 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x12) 15:08:21 executing program 5: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x660c, 0x0) r1 = gettid() ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) tkill(r1, 0x3d) 15:08:21 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x79) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') bind$unix(r0, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) fchdir(r0) sched_setattr(0x0, &(0x7f00000002c0)={0x830}, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x31f, 0x6, 0x7, 0x1f, 0x7f}, 0x10) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000040)=""/148) socket(0x22, 0x2, 0x2) r2 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000180)=[@enter_looper, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000200)}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r2, 0xa, 0x1) r4 = socket$unix(0x1, 0x801, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r5, 0x0) r6 = accept4(r5, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r6, &(0x7f0000000340)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffe9c) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0xa655e68c17a90db3}}}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) getgid() setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x0, 0x200}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), 0x1, 0x0, &(0x7f00000000c0)="e1"}) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x2000000, 0x0) 15:08:21 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x12) 15:08:21 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 15:08:21 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000000)) 15:08:21 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x12) 15:08:21 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, 0x0, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 15:08:21 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x8, 0x20101000, 0x0, 0x3, 0x2, 0x518, 0x4, 0xff, 0x3, 0x1}, 0x10) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xd95, 0x9a8fbaac2b940ad9) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) 15:08:24 executing program 2: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(0x0, 0x1048, 0x0) clone(0x800101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) 15:08:24 executing program 1: r0 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x12) 15:08:24 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, 0x0, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 15:08:24 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) time(&(0x7f0000000040)) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x9, &(0x7f0000000080)="d7448908a5421e60ced92f80c7038106bb888e7a7a44f55e363aade6497581c58637db4be7e285a7835d6e1890b9d03bdf5e236fd1f2e3044e998ad7d309ab3f9729f4d14333e889e06b6866298fcec8aac80c85f06b716433d9a22e94ab758577a64edb9f4f6fb9b0fa197d523f647a63342466c568721218fcf4392ff5", 0x7e) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) 15:08:24 executing program 5: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x660c, 0x0) r1 = gettid() ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) tkill(r1, 0x3d) 15:08:24 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x79) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) fchdir(r0) sched_setattr(0x0, &(0x7f00000002c0)={0x830}, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x31f, 0x6, 0x7, 0x1f, 0x7f}, 0x10) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000040)=""/148) socket(0x22, 0x2, 0x2) r2 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0c6300001163484000"/56, @ANYPTR=&(0x7f0000000100)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB="15000000000000dd7e0b028919f0834c62ddbd74556cdb0d95039b1398f25d3f99455d4f4c496bf642338a01d26f8c1bbe6aeda92d"], 0x0, 0x0, &(0x7f0000000200)}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r2, 0xa, 0x1) r4 = socket$unix(0x1, 0x801, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r5, 0x0) r6 = accept4(r5, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r6, &(0x7f0000000340)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffe9c) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0xa655e68c17a90db3}}}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) r7 = getgid() setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x0, 0x200}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), 0x1, 0x0, &(0x7f0000000140)="e1"}) mount(&(0x7f00000003c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES16=r7, @ANYRESHEX=0x0, @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR, @ANYBLOB="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"], @ANYRES32=r7, @ANYBLOB="06ace9a2338bc00e653594d957cf3739d1ad25000c728866b28b83b9ee7f92f65316c35cfd12a762358564e1bb84afa91de427699ba819a5fc469701729610570e94", @ANYRES16=r7]], 0x0, 0x0, 0x2000000, 0x0) 15:08:24 executing program 1: r0 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x12) 15:08:24 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, 0x0, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 15:08:24 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x800, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'ip_vti0\x00', 0x803}, 0x18) 15:08:24 executing program 2: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(0x0, 0x1048, 0x0) clone(0x800101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) 15:08:24 executing program 1: r0 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x12) 15:08:24 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(0x0, 0x0, 0x0) 15:08:24 executing program 2: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(0x0, 0x1048, 0x0) clone(0x800101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) 15:08:24 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x5, 0x80) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010629bdb86e838a1f7000fcdbdf2515000000440007000c000400560c0000000000000800010004000000080002000001000008000200030000000c0004007f00000000000000080002000600000008000200ff000000"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x80) 15:08:24 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:24 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(0x0, 0x0, 0x0) 15:08:24 executing program 5: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x660c, 0x0) r1 = gettid() ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) tkill(r1, 0x3d) 15:08:24 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000140)='attr/sockcreate\x00') ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x79) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') bind$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) fchdir(r1) sched_setattr(0x0, &(0x7f00000002c0)={0x830}, 0x0) bind$llc(r1, &(0x7f00000000c0)={0x1a, 0x31f, 0x6, 0x7, 0x1f, 0x7f}, 0x10) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000040)=""/148) socket(0x22, 0x2, 0x2) r3 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x54, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="06630440030000001163484000"/60, @ANYPTR=&(0x7f0000000100)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB], 0x0, 0x0, &(0x7f0000000200)}) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r5, 0xa, 0x1) r6 = socket$unix(0x1, 0x801, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r7, 0x0) r8 = accept4(r7, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r8, &(0x7f0000000340)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffe9c) write$P9_RLOPEN(r6, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0xa655e68c17a90db3}}}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8923, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) getgid() setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x0, 0x200}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), 0x1, 0x0, &(0x7f00000000c0)="e1"}) mount(&(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x2000000, 0x0) 15:08:24 executing program 2: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) clone(0x800101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) 15:08:24 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:24 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x153000, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000040)={0x1ff, 0x5, 0x0, 0x8, 0x13bb, 0x100000000, 0x4}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) 15:08:24 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(0x0, 0x0, 0x0) 15:08:24 executing program 5: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x660c, 0x0) r1 = gettid() ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) tkill(r1, 0x3d) 15:08:24 executing program 2: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) clone(0x800101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) 15:08:24 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0), 0x0, 0x0) 15:08:24 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:25 executing program 2: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) clone(0x800101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) 15:08:25 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:25 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000000c0)) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) setsockopt$rose(r0, 0x104, 0x0, &(0x7f0000000040)=0x100000000, 0x4) 15:08:25 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x79) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) fchdir(r0) sched_setattr(0x0, &(0x7f00000002c0)={0x830}, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x31f, 0x6, 0x7, 0x1f, 0x7f}, 0x10) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000040)=""/148) socket(0x22, 0x2, 0x2) r2 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000180)=[@enter_looper, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000200)}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r2, 0xa, 0x1) r3 = socket$unix(0x1, 0x801, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) r5 = accept4(r4, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r5, &(0x7f0000000340)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffe9c) write$P9_RLOPEN(r3, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0xa655e68c17a90db3}}}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8923, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) getgid() setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x0, 0x200}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), 0x1, 0x0, &(0x7f00000000c0)="e1"}) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="e91f71894b000001000000"], 0x0, 0x0, 0x2000000, 0x0) 15:08:25 executing program 2: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) 15:08:25 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0), 0x0, 0x0) 15:08:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adcba123c123f319bd070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') sendfile(r1, r2, 0x0, 0xc2) 15:08:25 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:25 executing program 5: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x660c, 0x0) r1 = gettid() ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) tkill(r1, 0x3d) 15:08:25 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0), 0x0, 0x0) 15:08:25 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f00000038c0), 0x4000000000000a8, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0x10) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 691.913933] syz-executor.0 (32025) used greatest stack depth: 23920 bytes left 15:08:25 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:26 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{}], 0x1, 0x0) 15:08:26 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:26 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:26 executing program 3: syz_emit_ethernet(0x48, &(0x7f0000000000)={@remote, @local, [], {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @remote, @rand_addr="2ce687121b09afe23b3d67fa4d6a4b75", @random="34d6d4095b58", @mcast2}}}}, 0x0) 15:08:26 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{}], 0x1, 0x0) 15:08:26 executing program 5: r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffe5b) r1 = gettid() ptrace$peekuser(0x3, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, 0x0) write$P9_RLERROR(0xffffffffffffffff, 0x0, 0xeabeeb63d4af1eb8) clock_gettime(0x0, &(0x7f0000000040)) tkill(r1, 0x1001000000016) 15:08:26 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:26 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f00000038c0), 0x4000000000000a8, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0x10) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 15:08:26 executing program 2: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) 15:08:26 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{}], 0x1, 0x0) 15:08:26 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:26 executing program 5: 15:08:26 executing program 3: 15:08:26 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x79) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) fchdir(r0) sched_setattr(0x0, &(0x7f00000002c0)={0x830}, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x31f, 0x6, 0x7, 0x1f, 0x7f}, 0x10) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000040)=""/148) socket(0x22, 0x2, 0x2) r2 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0c6300001163484000"/56, @ANYPTR=&(0x7f0000000100)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB="15000000000000dd7e0b028919f0834c62ddbd74556cdb0d95039b1398f25d3f99455d4f4c496bf642338a01d26f8c1bbe6aeda92d"], 0x0, 0x0, &(0x7f0000000200)}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r2, 0xa, 0x1) r4 = socket$unix(0x1, 0x801, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r5, 0x0) r6 = accept4(r5, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r6, &(0x7f0000000340)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffe9c) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0xa655e68c17a90db3}}}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) r7 = getgid() setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x0, 0x200}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), 0x1, 0x0, &(0x7f0000000140)="e1"}) mount(&(0x7f00000003c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES16=r7, @ANYRESHEX=0x0, @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR, @ANYBLOB="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"], @ANYRES32=r7, @ANYBLOB="06ace9a2338bc00e653594d957cf3739d1ad25000c728866b28b83b9ee7f92f65316c35cfd12a762358564e1bb84afa91de427699ba819a5fc469701729610570e94", @ANYRES16=r7]], 0x0, 0x0, 0x2000000, 0x0) 15:08:26 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) clone(0x800101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) 15:08:26 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:26 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x79) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x28c) fchdir(r0) sched_setattr(0x0, &(0x7f00000002c0)={0x830}, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x31f, 0x6, 0x7, 0x1f, 0x7f}, 0x10) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000040)=""/148) socket(0x22, 0x2, 0x2) r3 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYRES16, @ANYRES16=r1], 0xa7, 0x0, &(0x7f0000000700)="f39a8f5689055add8aa6367b0a1651adfe19a62fb2496848c202e57f04e4cb1ace7244085eceae2b3b1d4d5a08cab951d8a1e00e833b934d1541023d39dc29bdb5ace8bd7b1fc033424c330864be9e3ab49bca08affbe6bdd7eba6762cdf81c0d124e5b1f5c656ddb59666a1da460501ae022ce44db3d34bdcdf98fb299c105dcd68dcdd9963f846f9a02706a22e36486dcef00d823a17b3ef5b9ebb93a83065078584a82dbd6f"}) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000026bd7000fcdbdf2508007ca097e7f300000400010008000400080000000800050000040000000400000008000800030000000800050090540a4f9842c5629900000000080006"], 0x54}, 0x1, 0x0, 0x0, 0x84}, 0x2004c005) r6 = socket$inet6(0xa, 0x400000000001, 0x0) r7 = dup(r3) setsockopt$inet6_tcp_int(r4, 0x6, 0x14, &(0x7f0000000280)=0x4a3b, 0xfc82) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000005c0)={0xa, 0x4e1f, 0x0, @ipv4={[], [], @remote}}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/36, 0x3bfde9d00c37b4f0}, 0x2000) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x40000000000059b, 0x0) write$P9_RWRITE(r7, &(0x7f0000000480)={0xb}, 0xfd8d) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) 15:08:27 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:27 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) 15:08:27 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f00000038c0), 0x4000000000000a8, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0x10) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 15:08:27 executing program 2: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) 15:08:27 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:27 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x79) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) fchdir(r0) sched_setattr(0x0, &(0x7f00000002c0)={0x830}, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x31f, 0x6, 0x7, 0x1f, 0x7f}, 0x10) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000040)=""/148) socket(0x22, 0x2, 0x2) r2 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000180)=[@enter_looper, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000200)}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r2, 0xa, 0x1) r4 = socket$unix(0x1, 0x801, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r5, 0x0) r6 = accept4(r5, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r6, &(0x7f0000000340)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffe9c) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0xa655e68c17a90db3}}}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) getgid() setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x0, 0x200}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), 0x1, 0x0, &(0x7f00000000c0)="e1"}) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="0000000000ae8d4811000036480122c4dee1f9c5d62b40f560a3f441f19a0f4aa4da06d0691f6d1f8fcb8e09d6b6be7c0e270d5edcbd2a0b6655ec4758b32a002840121d31b24b5303e1a084be1e4176efc57603ed5d9ca1e585ee6ad55c65698e4afc0a047cc16d023b5894d0367b222d5a4bd3c8e3bc497b2b788fe91a3ce91a50495e7873880d962613a4bc0962950d2212df89bef4cec3ad67eb9e392fd32c1db9836d44cb11c20f1e8b51992e28512f981b4ed0808a"], 0x0, 0x0, 0x84000, 0x0) 15:08:27 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x79) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) fchdir(r0) sched_setattr(0x0, &(0x7f00000002c0)={0x830}, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x31f, 0x6, 0x7, 0x1f, 0x7f}, 0x10) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000040)=""/148) socket(0x22, 0x2, 0x2) r2 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000180)=[@enter_looper, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000200)}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r2, 0xa, 0x1) r4 = socket$unix(0x1, 0x801, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r5, 0x0) r6 = accept4(r5, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r6, &(0x7f0000000340)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffe9c) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0xa655e68c17a90db3}}}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000280)={'team_slave_0\x00', 0x1000}) getgid() setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x0, 0x200}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), 0x1, 0x0, &(0x7f00000000c0)="e1"}) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="e91f71894b000001000000"], 0x0, 0x0, 0x2000000, 0x0) 15:08:27 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x79) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) fchdir(r0) sched_setattr(0x0, &(0x7f00000002c0)={0x830}, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x31f, 0x6, 0x7, 0x1f, 0x7f}, 0x10) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000040)=""/148) socket(0x22, 0x2, 0x2) r2 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000180)=[@enter_looper, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000200)}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r2, 0xa, 0x1) r4 = socket$unix(0x1, 0x801, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r5, 0x0) r6 = accept4(r5, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r6, &(0x7f0000000340)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffe9c) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0xa655e68c17a90db3}}}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) getgid() setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x0, 0x200}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), 0x1, 0x0, &(0x7f00000000c0)="e1"}) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="e91f710700000001000000"], 0x0, 0x0, 0x2000000, 0x0) 15:08:27 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) [ 693.629327] binder: 32127:32133 transaction failed 29189/-22, size 0-0 line 2802 [ 693.635966] binder: 32126:32130 transaction failed 29189/-22, size 0-0 line 2802 15:08:29 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x79) syz_genetlink_get_family_id$fou(&(0x7f0000000240)='fou\x00') bind$unix(r0, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e21}, 0xfffffffffffffff9) fchdir(r0) sched_setattr(0x0, &(0x7f00000002c0)={0x830}, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x31f, 0x6, 0x7, 0x1f, 0x7f}, 0x10) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000040)=""/148) socket(0x22, 0x2, 0x2) r2 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0c63000011634840000000000000000000000000000000000000000000000000000000000000000000002e9400"/56, @ANYPTR=&(0x7f0000000100)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000200)}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r2, 0xa, 0x1) r4 = socket$unix(0x1, 0x801, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r5, 0x0) r6 = accept4(r5, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r6, &(0x7f0000000340)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffe9c) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0xa655e68c17a90db3}}}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) getgid() setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x0, 0x200}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), 0x1, 0x0, &(0x7f00000000c0)="e1"}) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="e91f71894b000001000000"], 0x0, 0x0, 0x2000000, 0x0) 15:08:29 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:29 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x79) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) fchdir(r0) sched_setattr(0x0, &(0x7f00000002c0)={0x830}, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x31f, 0x6, 0x7, 0x1f, 0x7f}, 0x10) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000040)=""/148) socket(0x22, 0x2, 0x2) r2 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000180)=[@enter_looper, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000200)}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r2, 0xa, 0x1) r4 = socket$unix(0x1, 0x801, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r5, 0x0) r6 = accept4(r5, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r6, &(0x7f0000000340)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffe9c) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0xa655e68c17a90db3}}}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000280)={'team_slave_0\x00', 0x1000}) getgid() setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x0, 0x200}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), 0x1, 0x0, &(0x7f00000000c0)="e1"}) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="e91f71894b000001000000"], 0x0, 0x0, 0x2000000, 0x0) 15:08:29 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x79) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) fchdir(r0) sched_setattr(0x0, &(0x7f00000002c0)={0x830}, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x31f, 0x6, 0x7, 0x1f, 0x7f}, 0x10) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000040)=""/148) socket(0x22, 0x2, 0x2) r2 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000180)=[@enter_looper, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000200)}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r2, 0xa, 0x1) r4 = socket$unix(0x1, 0x801, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r5, 0x0) r6 = accept4(r5, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r6, &(0x7f0000000340)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffe9c) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0xa655e68c17a90db3}}}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) getgid() setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x0, 0x200}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), 0x1, 0x0, &(0x7f00000000c0)="e1"}) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="e91f710700000001000000"], 0x0, 0x0, 0x2000000, 0x0) 15:08:29 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f00000000c0)={0x0, 0x101, 0x1, [], &(0x7f0000000080)=0xfffffffffffffffa}) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)) 15:08:29 executing program 2: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) clone(0x800101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) 15:08:29 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[], 0x0) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:30 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e22, 0x3, @remote, 0xa8a0}, 0x390f97468869462a) listen(r1, 0x10001) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000003d40), 0x40000000000008b, 0x0) close(r1) close(r2) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000000)={0x27, 0x20, 0x0, 0x17, 0x6, 0xfff, 0x3, 0xf6, 0xffffffffffffffff}) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) 15:08:30 executing program 2: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) clone(0x800101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) [ 696.082137] binder: 32165:32173 transaction failed 29189/-22, size 0-0 line 2802 [ 696.097160] binder: 32169:32175 transaction failed 29189/-22, size 2486042624-0 line 2802 15:08:30 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[], 0x0) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:30 executing program 2: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) clone(0x800101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) [ 696.126843] binder: 32164:32168 transaction failed 29189/-22, size 0-0 line 2802 15:08:30 executing program 2: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) clone(0x800101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) 15:08:30 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x79) syz_genetlink_get_family_id$fou(&(0x7f0000000240)='fou\x00') bind$unix(r0, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e21}, 0xfffffffffffffff9) fchdir(r0) sched_setattr(0x0, &(0x7f00000002c0)={0x830}, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x31f, 0x6, 0x7, 0x1f, 0x7f}, 0x10) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000040)=""/148) socket(0x22, 0x2, 0x2) r2 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0c63000011634840000000000000000000000000000000000000000000000000000000000000000000002e9400"/56, @ANYPTR=&(0x7f0000000100)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000200)}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r2, 0xa, 0x1) r4 = socket$unix(0x1, 0x801, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r5, 0x0) r6 = accept4(r5, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r6, &(0x7f0000000340)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffe9c) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0xa655e68c17a90db3}}}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) getgid() setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x0, 0x200}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), 0x1, 0x0, &(0x7f00000000c0)="e1"}) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="e91f71894b000001000000"], 0x0, 0x0, 0x2000000, 0x0) 15:08:30 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x79) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) fchdir(r0) sched_setattr(0x0, &(0x7f00000002c0)={0x830}, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x31f, 0x6, 0x7, 0x1f, 0x7f}, 0x10) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000040)=""/148) socket(0x22, 0x2, 0x2) r2 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x80, 0x0, &(0x7f0000000200)="d0055710c7d5e35609ec48bb908774013af17c87d4ab29d7af5a8486144a747da4992b1bee8288fee20ef687ab18c72ed6e7d28b7c733f5b28f6476a6fd5b2b1f631fb21d2cf78fc97481ce535dac92eadfd3ecb3dfa07153db5bd693a7ddd985fa126d327cc2e10889dde1778eb39ff31cc72c6174c6a98e1b03517c0b5eb41"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000180)=[@enter_looper, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000200)}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r2, 0xa, 0x1) r4 = socket$unix(0x1, 0x801, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r5, 0x0) r6 = accept4(r5, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r6, &(0x7f0000000340)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffe9c) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0xa655e68c17a90db3}}}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) getgid() setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x0, 0x200}, 0x10) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000140)={0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x24, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="3242193a0dd964790000000003630840054f891f018e2bdd89303235bfd01d131e1daa0322334e139bb8b6af234cbd09598de1a62ee6050ee02c1f412f6b4203b7295b9acccc854ca421d50b5c622bb8654accd891031f74d41ed8098499bc80b34799367c8a65d5fba283151a71d8747e32ae55ce290fab174503cb021392347e380e6b29b70d2431759fd808d010aabe573eb916be6192356634367afc234df0a9c67eb03a5a", @ANYRES64=r7], 0x1, 0x0, &(0x7f00000000c0)="e1"}) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="e91f71894b000001000000"], 0x0, 0x0, 0x2000000, 0x0) 15:08:30 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[], 0x0) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:30 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x79) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) fchdir(r0) sched_setattr(0x0, &(0x7f00000002c0)={0x830}, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x31f, 0x6, 0x7, 0x1f, 0x7f}, 0x10) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000040)=""/148) socket(0x22, 0x2, 0x2) r2 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000180)=[@enter_looper, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000200)}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r2, 0xa, 0x1) r4 = socket$unix(0x1, 0x801, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r5, 0x0) r6 = accept4(r5, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r6, &(0x7f0000000340)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffe9c) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0xa655e68c17a90db3}}}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) getgid() setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x0, 0x200}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), 0x1, 0x0, &(0x7f00000000c0)="e1"}) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="e91f710700000001000000"], 0x0, 0x0, 0x2000000, 0x0) 15:08:30 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x79) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) fchdir(r0) sched_setattr(0x0, &(0x7f00000002c0)={0x830}, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x31f, 0x6, 0x7, 0x1f, 0x7f}, 0x10) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000040)=""/148) socket(0x22, 0x2, 0x2) r2 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000180)=[@enter_looper, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000200)}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r2, 0xa, 0x1) r4 = socket$unix(0x1, 0x801, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r5, 0x0) r6 = accept4(r5, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r6, &(0x7f0000000340)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffe9c) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0xa655e68c17a90db3}}}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000280)={'team_slave_0\x00', 0x1000}) getgid() setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x0, 0x200}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), 0x1, 0x0, &(0x7f00000000c0)="e1"}) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="e91f71894b000001000000"], 0x0, 0x0, 0x2000000, 0x0) 15:08:30 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) [ 696.421444] binder: 32221:32226 transaction failed 29189/-22, size 2486042624-0 line 2802 [ 696.431961] binder: 32222:32227 transaction failed 29189/-22, size 0-0 line 2802 15:08:30 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) [ 696.505501] binder: 32220:32225 transaction failed 29189/-22, size 0-0 line 2802 15:08:30 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:30 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x79) syz_genetlink_get_family_id$fou(&(0x7f0000000240)='fou\x00') bind$unix(r0, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e21}, 0xfffffffffffffff9) fchdir(r0) sched_setattr(0x0, &(0x7f00000002c0)={0x830}, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x31f, 0x6, 0x7, 0x1f, 0x7f}, 0x10) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000040)=""/148) socket(0x22, 0x2, 0x2) r2 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0c63000011634840000000000000000000000000000000000000000000000000000000000000000000002e9400"/56, @ANYPTR=&(0x7f0000000100)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000200)}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r2, 0xa, 0x1) r4 = socket$unix(0x1, 0x801, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r5, 0x0) r6 = accept4(r5, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r6, &(0x7f0000000340)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffe9c) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0xa655e68c17a90db3}}}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) getgid() setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x0, 0x200}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), 0x1, 0x0, &(0x7f00000000c0)="e1"}) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="e91f71894b000001000000"], 0x0, 0x0, 0x2000000, 0x0) 15:08:30 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x79) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) fchdir(r0) sched_setattr(0x0, &(0x7f00000002c0)={0x830}, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x31f, 0x6, 0x7, 0x1f, 0x7f}, 0x10) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000040)=""/148) socket(0x22, 0x2, 0x2) r2 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000180)=[@enter_looper, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000200)}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r2, 0xa, 0x1) r4 = socket$unix(0x1, 0x801, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r5, 0x0) r6 = accept4(r5, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r6, &(0x7f0000000340)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffe9c) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0xa655e68c17a90db3}}}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) getgid() setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x0, 0x200}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), 0x1, 0x0, &(0x7f00000000c0)="e1"}) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="e91f71894b00e001000000"], 0x0, 0x0, 0x2000000, 0x0) 15:08:30 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000080)=0x8000000000005) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x9, 0x3}}) [ 696.784662] binder: 32259:32263 transaction failed 29189/-22, size 0-0 line 2802 [ 696.785988] binder: 32260:32264 transaction failed 29189/-22, size 2486042624-0 line 2802 15:08:30 executing program 2: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) clone(0x800101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) 15:08:30 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb"], 0x3) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:30 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x79) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) fchdir(r0) sched_setattr(0x0, &(0x7f00000002c0)={0x830}, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x31f, 0x6, 0x7, 0x1f, 0x7f}, 0x10) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000040)=""/148) socket(0x22, 0x2, 0x2) r2 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000180)=[@enter_looper, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000200)}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, r1, 0x0) fcntl$setsig(r2, 0xa, 0x1) r4 = socket$unix(0x1, 0x801, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r5, 0x0) r6 = accept4(r5, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r6, &(0x7f0000000340)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffe9c) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0xa655e68c17a90db3}}}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) getgid() setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x0, 0x200}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), 0x1, 0x0, &(0x7f00000000c0)="e1"}) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="e91f71894b000001000000"], 0x0, 0x0, 0x2000000, 0x0) 15:08:30 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000080)=0x8000000000005) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x9, 0x3}}) 15:08:30 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x79) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) fchdir(r0) sched_setattr(0x0, &(0x7f00000002c0)={0x830}, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x31f, 0x6, 0x7, 0x1f, 0x7f}, 0x10) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000040)=""/148) socket(0x22, 0x2, 0x2) r2 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000180)=[@enter_looper, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000200)}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r2, 0xa, 0x1) r4 = socket$unix(0x1, 0x801, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r5, 0x0) r6 = accept4(r5, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r6, &(0x7f0000000340)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffe9c) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0xa655e68c17a90db3}}}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) getgid() setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x0, 0x200}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), 0x1, 0x0, &(0x7f00000000c0)="e1"}) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="e91f71894b00e001000000"], 0x0, 0x0, 0x2000000, 0x0) 15:08:30 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x79) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) fchdir(r0) sched_setattr(0x0, &(0x7f00000002c0)={0x830}, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x31f, 0x6, 0x7, 0x1f, 0x7f}, 0x10) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000040)=""/148) socket(0x22, 0x2, 0x2) r2 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000180)=[@enter_looper, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000200)}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r2, 0xa, 0x1) r4 = socket$unix(0x1, 0x801, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r5, 0x0) r6 = accept4(r5, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r6, &(0x7f0000000340)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffe9c) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0xa655e68c17a90db3}}}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) getgid() setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x0, 0x200}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xb9, 0x0, &(0x7f0000000440), 0x1, 0x0, &(0x7f00000000c0)="e1"}) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="e91f71894b000001000000"], 0x0, 0x0, 0x2000000, 0x0) 15:08:31 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb"], 0x3) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:31 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000080)=0x8000000000005) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x9, 0x3}}) 15:08:31 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb"], 0x3) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) [ 697.129086] binder: 32277:32289 transaction failed 29189/-22, size 0-0 line 2802 [ 697.137890] binder: 32278:32288 transaction failed 29189/-22, size 0-0 line 2802 [ 697.148197] binder: 32280:32283 transaction failed 29189/-22, size 0-0 line 2802 15:08:31 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x79) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) fchdir(r0) sched_setattr(0x0, &(0x7f00000002c0)={0x830}, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x31f, 0x6, 0x7, 0x1f, 0x7f}, 0x10) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000040)=""/148) socket(0x22, 0x2, 0x2) r2 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f00000002c0)={0xffffffffffffff73, 0x0, &(0x7f0000000180)=ANY=[], 0x93, 0x0, &(0x7f0000000480)="4b3bf3fb699308ab9ce459621dd0acfb5cbce3959f641ada3ed95e67a22a4720453191aa8d62533664be040008220f3801236a32ed34d87bae667ce7d2dab029a0531a27da7b6878e1799ccf07554e75cdc4fd845cea8323a015b56dee9eb9a58d95a594c215dd3317d4939b36d10365f56543e1b8a3049302abad271c3dafbffcf39a32eab2b2024aff22b01294364d6135c2"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0c6300001163484000"/56, @ANYPTR=&(0x7f0000000100)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB="0000000000000000bc8c6fc894743c8162575159f73bbce1832c96d82e07282f997872ef48670130fa"], 0x0, 0x0, &(0x7f0000000200)}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r2, 0xa, 0x1) r4 = socket$unix(0x1, 0x801, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r5, 0xffffffffffffffff) r6 = accept4(r5, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x411, 0x0) connect(r6, &(0x7f0000000340)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffe9c) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000140)=r1) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0xa655e68c17a90db3}}}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) getgid() setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x0, 0x200}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), 0x1, 0x0, &(0x7f00000000c0)="e1"}) 15:08:31 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb0600"], 0x5) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:31 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x79) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) fchdir(r0) sched_setattr(0x0, &(0x7f00000002c0)={0x830}, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x31f, 0x6, 0x7, 0x1f, 0x7f}, 0x10) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000040)=""/148) socket(0x22, 0x2, 0x2) r2 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000180)=[@enter_looper, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000200)}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, r1, 0x0) fcntl$setsig(r2, 0xa, 0x1) r4 = socket$unix(0x1, 0x801, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r5, 0x0) r6 = accept4(r5, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r6, &(0x7f0000000340)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffe9c) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0xa655e68c17a90db3}}}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) getgid() setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x0, 0x200}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), 0x1, 0x0, &(0x7f00000000c0)="e1"}) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="e91f71894b000001000000"], 0x0, 0x0, 0x2000000, 0x0) [ 697.360424] binder: undelivered TRANSACTION_ERROR: 29189 [ 697.460573] binder: 32319:32324 transaction failed 29189/-22, size 0-0 line 2802 15:08:31 executing program 2: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) clone(0x800101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) 15:08:31 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x79) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) fchdir(r0) sched_setattr(0x0, &(0x7f00000002c0)={0x830}, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x31f, 0x6, 0x7, 0x1f, 0x7f}, 0x10) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000040)=""/148) socket(0x22, 0x2, 0x2) r2 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000180)=[@enter_looper, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000200)}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r2, 0xa, 0x1) r4 = socket$unix(0x1, 0x801, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r5, 0x0) r6 = accept4(r5, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r6, &(0x7f0000000340)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffe9c) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0xa655e68c17a90db3}}}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) getgid() setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x0, 0x200}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), 0x1, 0x0, &(0x7f00000000c0)="e1"}) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="e91f71894b00e001000000"], 0x0, 0x0, 0x2000000, 0x0) 15:08:31 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x79) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) fchdir(r0) sched_setattr(0x0, &(0x7f00000002c0)={0x830}, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x31f, 0x6, 0x7, 0x1f, 0x7f}, 0x10) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000040)=""/148) socket(0x22, 0x2, 0x2) r2 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000180)=[@enter_looper, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000200)}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r2, 0xa, 0x1) r4 = socket$unix(0x1, 0x801, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r5, 0x0) r6 = accept4(r5, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r6, &(0x7f0000000340)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffe9c) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0xa655e68c17a90db3}}}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) getgid() setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x0, 0x200}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xb9, 0x0, &(0x7f0000000440), 0x1, 0x0, &(0x7f00000000c0)="e1"}) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="e91f71894b000001000000"], 0x0, 0x0, 0x2000000, 0x0) 15:08:31 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb0600"], 0x5) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:31 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000100)={0xa30, 0x0, 0x0, 0x5}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000140)={0x8, r2}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000001c0)={0xb0, 0xc3d, 0x80, 0x6, 0x3f, 0x7e0d, 0xffff00000000, 0x9}, &(0x7f0000000200)={0x4, 0x7, 0x2, 0x16ca8972, 0xfffffffffffffffc, 0x6a, 0x3, 0x73ab}, &(0x7f0000000240)={0x34, 0x7f245d03, 0x8, 0x4, 0x7fff, 0x2, 0x9, 0xfff}, &(0x7f00000002c0)={r3, r4+30000000}, &(0x7f0000000340)={&(0x7f0000000300), 0x8}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000180)={0x1000000000000ff, 0x9, 0x7fff, 0x0, 0xfff}, 0x14) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) 15:08:31 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x79) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) fchdir(r0) sched_setattr(0x0, &(0x7f00000002c0)={0x830}, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x31f, 0x6, 0x7, 0x1f, 0x7f}, 0x10) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000040)=""/148) socket(0x22, 0x2, 0x2) r2 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000180)=[@enter_looper, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000200)}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, r1, 0x0) fcntl$setsig(r2, 0xa, 0x1) r4 = socket$unix(0x1, 0x801, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r5, 0x0) r6 = accept4(r5, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r6, &(0x7f0000000340)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffe9c) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0xa655e68c17a90db3}}}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) getgid() setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x0, 0x200}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), 0x1, 0x0, &(0x7f00000000c0)="e1"}) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="e91f71894b000001000000"], 0x0, 0x0, 0x2000000, 0x0) 15:08:31 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb0600"], 0x5) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:31 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000100)={0xa30, 0x0, 0x0, 0x5}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000140)={0x8, r2}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000001c0)={0xb0, 0xc3d, 0x80, 0x6, 0x3f, 0x7e0d, 0xffff00000000, 0x9}, &(0x7f0000000200)={0x4, 0x7, 0x2, 0x16ca8972, 0xfffffffffffffffc, 0x6a, 0x3, 0x73ab}, &(0x7f0000000240)={0x34, 0x7f245d03, 0x8, 0x4, 0x7fff, 0x2, 0x9, 0xfff}, &(0x7f00000002c0)={r3, r4+30000000}, &(0x7f0000000340)={&(0x7f0000000300), 0x8}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000180)={0x1000000000000ff, 0x9, 0x7fff, 0x0, 0xfff}, 0x14) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) [ 697.966555] binder: 32336:32347 transaction failed 29189/-22, size 0-0 line 2802 [ 697.975187] binder: 32340:32345 transaction failed 29189/-22, size 0-0 line 2802 15:08:31 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:32 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000100)={0xa30, 0x0, 0x0, 0x5}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000140)={0x8, r2}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000001c0)={0xb0, 0xc3d, 0x80, 0x6, 0x3f, 0x7e0d, 0xffff00000000, 0x9}, &(0x7f0000000200)={0x4, 0x7, 0x2, 0x16ca8972, 0xfffffffffffffffc, 0x6a, 0x3, 0x73ab}, &(0x7f0000000240)={0x34, 0x7f245d03, 0x8, 0x4, 0x7fff, 0x2, 0x9, 0xfff}, &(0x7f00000002c0)={r3, r4+30000000}, &(0x7f0000000340)={&(0x7f0000000300), 0x8}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000180)={0x1000000000000ff, 0x9, 0x7fff, 0x0, 0xfff}, 0x14) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) [ 698.029684] binder: 32337:32344 transaction failed 29189/-22, size 0-0 line 2802 15:08:32 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:32 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20000, 0x0) recvmsg$kcm(r1, &(0x7f0000001180)={&(0x7f0000000040)=@sco, 0x80, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001100)=""/115, 0x73}, 0x0) [ 698.247541] binder: undelivered TRANSACTION_ERROR: 29189 15:08:32 executing program 2: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) clone(0x800101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) 15:08:32 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x200, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000000c0)=0x1, 0x4) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x1, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) accept4$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14, 0x80000) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)) 15:08:32 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x79) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) fchdir(r0) sched_setattr(0x0, &(0x7f00000002c0)={0x830}, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x31f, 0x6, 0x7, 0x1f, 0x7f}, 0x10) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000040)=""/148) socket(0x22, 0x2, 0x2) r2 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0c6300001163484000"/56, @ANYPTR=&(0x7f0000000100)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB="3a9400000000"], 0x0, 0x0, &(0x7f0000000200)}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r2, 0xa, 0x1) r4 = socket$unix(0x1, 0x801, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r5, 0x0) r6 = accept4(r5, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r6, &(0x7f0000000340)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffe9c) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0xa655e68c17a90db3}}}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) getgid() setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x0, 0x200}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), 0x1, 0x0, &(0x7f00000000c0)="e1"}) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="e91f71894b000001000000"], 0x0, 0x0, 0x2000000, 0x0) 15:08:32 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:32 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x79) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) fchdir(r0) sched_setattr(0x0, &(0x7f00000002c0)={0x830}, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x31f, 0x6, 0x7, 0x1f, 0x7f}, 0x10) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000040)=""/148) socket(0x22, 0x2, 0x2) r2 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000180)=[@enter_looper, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000200)}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r2, 0xa, 0x1) r4 = socket$unix(0x1, 0x801, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r5, 0x0) r6 = accept4(r5, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r6, &(0x7f0000000340)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffe9c) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0xa655e68c17a90db3}}}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) getgid() setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x0, 0x200}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xb9, 0x0, &(0x7f0000000440), 0x1, 0x0, &(0x7f00000000c0)="e1"}) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="e91f71894b000001000000"], 0x0, 0x0, 0x2000000, 0x0) 15:08:32 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20000, 0x0) recvmsg$kcm(r1, &(0x7f0000001180)={&(0x7f0000000040)=@sco, 0x80, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001100)=""/115, 0x73}, 0x0) 15:08:32 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) lstat(&(0x7f0000001340)='./file0\x00', &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000014c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000001500)=0x4, &(0x7f0000001540)=0x4) bind$llc(r0, &(0x7f0000000080)={0x1a, 0x30d, 0x0, 0xed, 0x3, 0x0, @dev={[], 0x27}}, 0x10) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x100000000, 0x4, &(0x7f00000012c0)=[{&(0x7f00000000c0)="35ad2722c977dfb2a52ad00220159be9cc9e2c82fa6575c4aa24092e2a612a0b22ccbe8779b6c123f1ab71d8654b25a6e390845b152d75cee944e8066a9bee7f6e250bafc5be41c60bba99286a4dcd4141b3bd154705f85e49a1fb3c75f625f67c60225c8c0b27ba8c7620503822641e5ac1a5d685b5eda77b1e12b5037dda677b1fa164618c41ed1807de37962847e43642ca41c95b45909a0503e4291088ee76d3103bdefdac26c84a9eaa14c2b04918fe2890f3f21b9599a5", 0xba, 0x59}, {&(0x7f0000000180)="fad00e61b74868af66d121845f815b2776a784f09c1a2e9ae85020cbd4023c2df0f1eeb18d626dc8d57064efdef2a66497c3f8725d37f386baf3fb4b56ba37da133170440e079f416a72d72b2fde45aaa03229eb39c7900983a4d9f7c63ce54338ebdceedd9f27bfbe8c1858d5a9475e3df00443cd3967f1d68de186afe7c2f1da63b704da66fa5f851a6ada238a5c02710ed92937e930ed5106053d4305c391259fedee345ccba9e113636e8effe64ba6b958c6de6d89132bc09d397826ad8d33c48f92f38c5df2f9ac7b672f5aa444dd569f5017868bed10a54725d54a186283ed40fe39584954a86d15bc7ceec95118abd12198af61693463924ecc4dd5f1fea7bd44401438c7c5cddd8beefd23aa42fda418e8ad920260f7fc0aa0067b9c63640d77921368b8cc690f0aaf46c0350ea654755b3985330d500470bf03bca975714aab5afde959a38a6b8263cad551124d0d026875a8f61f28b08d7bc67a62b00917dbd1ccec0ec98c4c74d816cf60abed90da5fe62156dccedf21172c56a906722129e5fe60df9882e1a723c0cfd3f1b660dbc7132a1fd91c812510d1b17ecbe9ee8bcf61ba320d66a1ef09e231458c8b14b2985866f9d4423e6e915abd6ec55c7b7cb889df617877e6441d09aa09a3613a5e7c3874635d949bfad6546653099b97665cd21fb4585d72886788072ea988e69f47da5486ca9e930c39dc1026de24d38cad0ed0b1a157c8b0a98df2ac76b49565bf5e27edcb43a745070d9e870bcf3e9231f08cc999883ee040e3d1bd66bfaa9d1198164ce2ddf2fe818256fb140c537a3da5d82f48d0014e89be2c4d9d688cdf44ffedeef664cff92782b1d02121afc54ad1240ec741ac100fd6edf10a35fab4f50067d55ee95721761543c051999f1d3dcdaff6c741bdbd14bd90ee6cffe47f60d9841bd294ce37615a9be20462fa6fe267549591b148b104567c52b1f5d52752606b3ed6e75e682cef256a316979f152c0182486ec9a1318d8b8fa5fc9a048b61f7bb5ee5afd952bdffa846d5a6614c47697fa7ec76fbf843356d862e3c5ce4f8cbf71ba5e9bb68e2a1a2dcd97761afb1384359a2d0c220b1f28b7df37ebb1fa3722fb723e9141d7571b2670064789f11d51209946aad6a0ac517bdeab205618bcde9c6fe0ae132a594554aaa7bde3f65becbfbaf79a6eec4bd46fa6e62eeb2a9f0f0c93da1fcd9b5eb02bf45baccdf47cc7b2bcd3f0bdf64b2cf4cdc63a9773ddd38506c34b4d168b73505517ac8dc75db9333e6ef40667364b5267a50efa56c200bc46cbb17dc1d067065fb6aa3e7c4a3228a53d16310237abae2f126463e48a5d74be413ec3777fb82c5cc8d0a7f43f6f35ca235b367efc4fd057c144d9d87316f4f2660eb13f6e82bf6d80f3864716ff1338d0012156fab2ec3acd352d27ef957117ffed809136b122c2506f943009becdd75b4da598bf70a6b8e14a0e72610d5877d89c9e7cc88eed145ab3a33bd9999b735882ae4a8160be87aa64c3c16681aeb53440812b06005b1775117c28387037fae169169c3287efdc914605be4ae1b65d4d04d34bfc71b2947a72dcfafa51b0645b8bc85a8e0a26df8ac06c2c1c6a93f56319f7cb95d338c40b586b88ffa76c0e45a48c30e748da10ffb5bd25deaa9b11306c7589be315f5eba204ca02ff1498d48193b3ced1d046fec96ef3e6a39288c75373eb3b407cdd0ded8af34089925b66b524e9a6470c261567cc5a75b14ce1e2244d14cc2bca16af7df81a6876ade35b023226fd05ceebe51ff545fcb31d2a70608627bf2dcb74e353c18947c8526225fb0f2d60d8863179778c2f49c4795b436c47a94be2aa11032d39cce8a86944512ecb47635c3edb7b4a36ac3b78e88f571eeae8e4406cd19edbf293a5960ff7625f4c5b481de623fdc446108e7a92b959597f840b65f548652ab4218437f7ce36a6f0ff374b450e97f2b6c131cf6c3eff59c621f76b47b2d2614b2897e3c03d9a03ab9a31d10b1e4e4617128679c164dbc59cee5753bf381cee3ab19119d6493ab9f58c15d2ed8468ca54bebaf3b8523ac15b599ec1812601bba8b6b061cf5fc7d332e8ae0a9d4930a764b8d078da0e902b868d90db5c6d90ee34423608f533c1228ac089714234779f13544a744b1a9e72ee4f3d6d6bca569907c9e92f4d710be370a9927a00bc9b39920a2f2f04468612228718e39e42ce73e6c0164d112b8106d4376e48e8262540bab0fe57f79fa53c42b23f9f5306daa3aea80c2cac758f69245a84130419a4e1be619cfca78fe64a585fb66a3a1b3ae70756bc6b58187e33a30b7b05d1836d0611ea4259cf7547f08ecd88162c8ab9d236745adb8691c72a3e6e380343c2692ead5180a2df2381a2265bfa3792727f6608aa9999e96f7b7d2f5016d651884c7d3a2f6fbc8fab1977eeb55320fc252b8699f453c5fa0e1ae747043a413f89d2088e6a7d59912581574fec35d186de0eb75ff4a34749ce58d8ee95022e7c5c68ecc0922cdfba083a888b16b39f772de68c5926435f0d1f9c3226bd210db45a93c58cfe6d7ba814d47fdebbfa0f570eaa163cd293c17a7afbaafbc8de2519b3ba9ade6c71632f034fde2b9053386f97941d6b2337ac4b52a1d7633fc80e7b3826dfe9ab6b29572cd61590e3784f87f77d767af639ff6ecd7af567b9284cabb382b706511b25c69b74b5dcfeee2526d4a096d30a92ab9e10a40347f229c6e197c4e07e61ed436addb0a20322be94d4d29e5bb242e7909a3172cdfd7e69e06b8046c57687252c4342b8faf13ac60c1eb6b2f0aece67677ab6521a6715f0983f8417e257dbc3c004f957d1194e6f71f401eb1d21165e3d973b393ce181bd40ffc51425c9e66e64ac1583e5c745f8c166893a93ae51abf318e4b2301490f99123dff83b3b141a0bb147d0e78bc57ea233b6163c7c4d603ccb7fe807687cb6875887a61edf0d5b7dc00a9672389ca42a82ba91fedd14656696e035daaea501956cd726b771a59782b6d9d5802690ad23c8d1c12ea9d2caa8aa531056bf236d790c23210f809a253e35f4df9d7c80acb68f6a3779872c9e3c5157a248ed3b47d64b5c255b57d1628a3b435ce6c577817cddcc4b73988a9e89b8ea46d4fc9735b2be89c44ccd5f3f9f10808bcb1db3e8a3fb96774e1c22f27d34c1766bf67c40978f8bccc4eae12826dcb2b6e0e7ff3c1d12e9664e56a2a74a51cc13964f4141a3345d30887eb1c92d6128dd6f88ebb94fc37f3b1cc0637047d42782b345de2c4a49a30674c30e0e2bae325c90e567c1e5b65f56823f9eea1409cc3f27ebc606be3c15ce94a6e9a6f1625cc737f3ae5e4d55574f06037244953c18d385173acb1086fb975280f9f42f6ed178b0e1524478b353538fddc504a492431bfc4d47ae618e6ca74e2d174e72bd7ed2ef12b932b487b6396dd2146b9fb9219fdb664ab5b67a4a0515d6089fbd3f9135cde93063a76ddf79908e8f7dadecdd1ab0268d760ca4f4ac351ef3a3e5b69f0fd7c874e6bdba2c003f42f74eae5c8b85f38435f084678e5d8daf3758c918a977535ae491677c3012afdf7d8cc63770c5fed311b61db4e7d9d4b033f60228127e26b90de62685d2a8e2cb6652536ed3f6daedf2dc14d00a34a1a3e58fc38a8d2283ee0bea4af0fca3a5332a6588e2005cc3b6e60ff179de31ae6df35eff1d61ad48765b47fac01722ffbaf5273e3cab89b8b9a0ef4e12697d18fc71e6f0bac00eaadb0ffc21a9c18f45b42cfd1d1421118d51eaf36848bb8e8e93f7d0b5fc733aa7b1cbf9e227a499138b8d5409e295863b5bd9308b4c2dc5186b3d922baa4fa3c8780a7548610c38d22a4b6f36ad656bd462ead5d08e8486eb3626122487b26d3140d3b14eee76234607e99c5e38c6e5cf0b25ede2d0db2b80d9683574933c29028420fc8ffe9ef7d4aa4d63aa10baf2649e92badcb3919b7a714207c80994678b76648e83e9f05b625f4ecdbefc6ef77abdeec094b04a2f66420af562e3eaaf049ec6a6d7bb475840d4a662c48500f918f02e9379c6cdc18e965b41424ba8e144b2e2f322ead01c9851054db0cb20f7fc99c7fe7c57f0afa1b1742288671a1b02a472f0b2bd4d864d7c6cb9bb183d734478f74a45c4b0365243b258ab5f70c1f6f513c0a9b7af4dce1d8e0bea723bab266dc87a25f7f649400d328ec666b9cd79e9aa1685e28b33d88abfc2ce448dc4bb03332b0c34086eb9dc1e6ade1816265d36a7638933d20464b04acab47793beaa88ef354fab85c4406d565c49dd0bb5f8783dea65a91a390da53507ee9633078f5d39e766c9f3a4cddd4a0aa33b4678dba5024a18bc2d221a09feefe4a514448e18fc61338886357a660334845dfc46bfef94ac7ac0b089726d80b951fe69ee234a8f5b0e5608c4f7882d6f7b6e0c5443fd91960fa9e97d90fc232188c30197b4567900b80ab4a4dccc571765c33957a0fa8fee845ef0e37b0803d7816c5df4f8f58087d0bcf1ff2a330c3044484ac1615063324b327865798cb94b4aabac3478ed05153a87f95dabc17c7d194c1f842171a5b34a4d2ae5f4452460bb61e072772ad8f838ff6fa4204a71a07d8e43289fbb0f54d4cdc35e12e6d92b7eff29a378382a1fbc44c260a85c9100c727b24b707672c16cf444995fddb1604eef534711d1a8c926937e22a43b3760a22e4a0b7f89d2825872f2d5df094c70a808a72aebc67ae2c8ad331868301c2377a702559551ca4b5fa9abcc4d53f2516d5b33bb41e5dd877d55ec4152ea93054c8e277c6254471f599d5ded7f44fbd770266060f2e6b86e59a13553eed303eb2b1d2a9d0e28d4fceab86627041b9a1613d4bab4059fbb24aede7e6725860d76cb7c1b6283bfac5843181542c3c095c0b5453153b19ff3dd091903f6fbd4de0b86e38cf0f76be027f01a9481beb10f2d384a441c1de970220b3aeccc977867bcd7c58ce326ea2b8bb57675ad209d042cc8bb0197a196f5552984f415a1d54f748aefc120a89c08d3d76b82808e36688b82f2d2d8a938f0a8c9533d84a6825c77c708acdd20cbe82eabb1c746bd53fe05a52ff2f50eb2b4deb660d1acb1fd742a88ce3ef451932a0416aaa1a7d8b30ac09b1b55bcee749719e6d57dfc3993b04c3e79013c238fc04320978ee9e697e271ab7f95a6c9ac3bbdd94d422bcab94f9f12c6af3c15f520c11a86d35f5dedc2e8804f61b8a60a8a188570edd08d07401e64102b7aa3aa3c25e56f57f0c4b63f5f65356a3ebd131aaabe4bed1ccaf130013eb1a9755153260386e28694f32ef656de888b4147607c9832a4cf715e05c874e07191e5069dd7f4710c2e67d4ab5ff92925ba75e8a771fc48a7659fd02ccd4865037c62f804d9309791fa7da26b108a1027243a0dada1335bc0b93e420ab381d7a276f44a5efc3ae5e44931c9caf317e9a78b2407f9b4111e1b55f7912ef47b83f84892a01e17899c79bee4838b28f329a261b73c8ba2e648d91b59f469b3c1f84d56c6235146040e3b7ecdd9eaf40f2b91c0130ddc58e6d6aeca33152df884afe57b05309c2e9420dc2321350729e7a7b9e19b0280e7e96e5daf4b9f7a013a8f92a4f71a7045e9c2214d2b247f68bd69a7cb7d507121a97bc1a0badb67cb8bdd8ca1cc92f42264481c395c51b6d8a0379f22ac6c19b18fa4cc367577f70a21740925996a2c6d574098cbc39ce81bdc59ab25a784c1b276d2ff7343edd2121b6534984e35950fb5145dea396075fd729da6673df2ebd1d2499b98e6427066977d9d282ba5edd5915df04", 0x1000, 0x8001}, {&(0x7f0000001180)="4ddba710765d2a0d0ba3187caed669ab21e2385699783c88684a55bcd26958fea299563411e909f50c9d30fa3e2ead31a43356f8a41db69a9905cf536c4db26000f23fa0f573bc015403662bb17d86ee0def5faf4a8ade5778703239db492da89c7e56ae4f50288e51ea921b2a5d6be432e2c94fe941ff577fe9a3aac45d55f836bb18a3cbf302d76ced4cb97367ad3fefd10b452410aab9742bdd966fb63337b78dea20bb19a37f4159145eb76d6db38918cdadc06881b94534aef9a60d5c1cb93f444f2d83e6948dadd068fec7515c941b0f7a7d63ae0480a2d218740cf634551403fce00f16aa53", 0xe9, 0x3f}, {&(0x7f0000001280)="8ef68b4c0309c0538d7452ff8de7f9c12860", 0x12, 0x92}], 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="73657373696f6e3d30783030303030303030303030d53d4eec40fc4fe47373696f6e3d3078303030303030303030303030303030312c706172743d3078303030303030303030303030303030302c747970653d8a341edc2c7569643d", @ANYRESHEX=r1, @ANYBLOB="2c696f636861007365743d63703837346f6e746578743d726f68b8eb785fd257aa7d6f742c00"]) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000001400)={0x6, 0x101, 0x3, {0x13e1, 0x2994, 0x3, 0x1000}}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000001780)=ANY=[@ANYBLOB="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"]) bind$llc(r0, &(0x7f0000001440)={0x1a, 0x3, 0x2, 0x2, 0xfffffffffffffffd}, 0x10) bind(r0, 0x0, 0x0) 15:08:32 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:32 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20000, 0x0) recvmsg$kcm(r1, &(0x7f0000001180)={&(0x7f0000000040)=@sco, 0x80, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001100)=""/115, 0x73}, 0x0) [ 698.850808] binder: 32389:32397 transaction failed 29189/-22, size 0-0 line 2802 [ 698.885175] binder: 32390:32394 transaction failed 29189/-22, size 0-0 line 2802 15:08:32 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:32 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x79) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) fchdir(r0) sched_setattr(0x0, &(0x7f00000002c0)={0x830, 0x0, 0x0, 0x400000000000000}, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x31f, 0x6, 0x7, 0x1f, 0x7f}, 0x10) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000040)=""/148) socket(0x22, 0x2, 0x2) r2 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000180)=[@enter_looper, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000200)}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r2, 0xa, 0x1) r4 = socket$unix(0x1, 0x801, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r5, 0x0) r6 = accept4(r5, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r6, &(0x7f0000000340)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffe9c) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0xa655e68c17a90db3}}}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) getgid() setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x0, 0x200}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), 0x1, 0x0, &(0x7f00000000c0)="e1"}) mount(&(0x7f0000000140)=ANY=[@ANYBLOB="00800000000010000008a8d9d0625426165f7d58a8559547a55b00"], 0x0, 0x0, 0x2000000, 0x0) 15:08:32 executing program 3: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0xffff, 0x0, 0x0, 'queue0\x00'}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x1, 0x70bd29, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x1f, 0x6, 0x1, 0x308}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x800) write$sndseq(r0, &(0x7f0000042f70)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0xbf}, @addr}], 0x30) [ 699.026991] binder: 32416:32423 transaction failed 29189/-22, size 0-0 line 2802 [ 699.068207] binder: undelivered TRANSACTION_ERROR: 29189 15:08:33 executing program 2: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) clone(0x800101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) 15:08:33 executing program 3 (fault-call:2 fault-nth:0): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 15:08:33 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:33 executing program 4 (fault-call:4 fault-nth:0): r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) 15:08:33 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x79) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) fchdir(r0) sched_setattr(0x0, &(0x7f00000002c0)={0x830}, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x31f, 0x6, 0x7, 0x1f, 0x7f}, 0x10) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000040)=""/148) socket(0x22, 0x2, 0x2) r2 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0c6300001163484000"/56, @ANYPTR=&(0x7f0000000100)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB="3a9400000000"], 0x0, 0x0, &(0x7f0000000200)}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r2, 0xa, 0x1) r4 = socket$unix(0x1, 0x801, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r5, 0x0) r6 = accept4(r5, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r6, &(0x7f0000000340)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffe9c) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0xa655e68c17a90db3}}}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) getgid() setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x0, 0x200}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), 0x1, 0x0, &(0x7f00000000c0)="e1"}) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="e91f71894b000001000000"], 0x0, 0x0, 0x2000000, 0x0) 15:08:33 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x79) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) fchdir(r0) sched_setattr(0x0, &(0x7f00000002c0)={0x830, 0x0, 0x0, 0x400000000000000}, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x31f, 0x6, 0x7, 0x1f, 0x7f}, 0x10) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000040)=""/148) socket(0x22, 0x2, 0x2) r2 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000180)=[@enter_looper, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000200)}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r2, 0xa, 0x1) r4 = socket$unix(0x1, 0x801, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r5, 0x0) r6 = accept4(r5, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r6, &(0x7f0000000340)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffe9c) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0xa655e68c17a90db3}}}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) getgid() setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x0, 0x200}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), 0x1, 0x0, &(0x7f00000000c0)="e1"}) mount(&(0x7f0000000140)=ANY=[@ANYBLOB="00800000000010000008a8d9d0625426165f7d58a8559547a55b00"], 0x0, 0x0, 0x2000000, 0x0) [ 699.652199] FAULT_INJECTION: forcing a failure. [ 699.652199] name failslab, interval 1, probability 0, space 0, times 0 [ 699.680653] CPU: 0 PID: 32444 Comm: syz-executor.4 Not tainted 4.14.113 #3 [ 699.688120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 699.688126] Call Trace: [ 699.688153] dump_stack+0x138/0x19c [ 699.688173] should_fail.cold+0x10f/0x159 [ 699.707905] should_failslab+0xdb/0x130 [ 699.711902] kmem_cache_alloc_node_trace+0x283/0x770 [ 699.717035] __get_vm_area_node+0xf0/0x340 [ 699.721303] __vmalloc_node_range+0x9f/0x6a0 [ 699.725733] ? snd_seq_pool_init+0x5d/0x2f0 [ 699.730072] ? get_pid_task+0x98/0x140 [ 699.731500] binder: 32442:32449 transaction failed 29189/-22, size 0-0 line 2802 [ 699.734027] vmalloc+0x46/0x50 [ 699.734042] ? snd_seq_pool_init+0x5d/0x2f0 [ 699.734056] snd_seq_pool_init+0x5d/0x2f0 [ 699.749320] snd_seq_write+0x4e8/0x5b0 [ 699.757371] ? snd_seq_client_enqueue_event+0x430/0x430 [ 699.762757] ? __f_unlock_pos+0x19/0x20 [ 699.766746] __vfs_write+0x107/0x6c0 [ 699.770106] binder: 32441:32448 transaction failed 29189/-22, size 0-0 line 2802 [ 699.770475] ? snd_seq_client_enqueue_event+0x430/0x430 [ 699.783420] ? kernel_read+0x120/0x120 [ 699.787337] ? __inode_security_revalidate+0xd6/0x130 [ 699.792634] ? avc_policy_seqno+0x9/0x20 [ 699.796705] ? selinux_file_permission+0x85/0x480 [ 699.801701] ? security_file_permission+0x8f/0x1f0 [ 699.806655] ? rw_verify_area+0xea/0x2b0 [ 699.810726] vfs_write+0x198/0x500 [ 699.814293] SyS_write+0xb8/0x180 [ 699.817769] ? SyS_read+0x180/0x180 [ 699.821529] ? do_syscall_64+0x53/0x630 [ 699.825520] ? SyS_read+0x180/0x180 [ 699.829161] do_syscall_64+0x1eb/0x630 [ 699.833058] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 699.837926] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 699.843145] RIP: 0033:0x458c29 15:08:33 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[], 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:33 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0xffffffffffffff93) poll(&(0x7f0000000000)=[{r0}], 0x1eda, 0x0) prctl$PR_GET_KEEPCAPS(0x7) 15:08:33 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x79) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) fchdir(r0) sched_setattr(0x0, &(0x7f00000002c0)={0x830, 0x0, 0x0, 0x400000000000000}, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x31f, 0x6, 0x7, 0x1f, 0x7f}, 0x10) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000040)=""/148) socket(0x22, 0x2, 0x2) r2 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000180)=[@enter_looper, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000200)}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r2, 0xa, 0x1) r4 = socket$unix(0x1, 0x801, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r5, 0x0) r6 = accept4(r5, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r6, &(0x7f0000000340)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffe9c) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0xa655e68c17a90db3}}}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) getgid() setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x0, 0x200}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), 0x1, 0x0, &(0x7f00000000c0)="e1"}) mount(&(0x7f0000000140)=ANY=[@ANYBLOB="00800000000010000008a8d9d0625426165f7d58a8559547a55b00"], 0x0, 0x0, 0x2000000, 0x0) [ 699.846338] RSP: 002b:00007f74d1f4bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 699.854060] RAX: ffffffffffffffda RBX: 00007f74d1f4bc90 RCX: 0000000000458c29 [ 699.861344] RDX: 0000000000000030 RSI: 0000000020042f70 RDI: 0000000000000003 [ 699.868686] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 699.875969] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f74d1f4c6d4 [ 699.883259] R13: 00000000004c87cd R14: 00000000004defa8 R15: 0000000000000005 15:08:33 executing program 3: prctl$PR_GET_DUMPABLE(0x3) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x800, 0x0) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000040)=0x6) prctl$PR_SET_FPEMU(0xa, 0x1) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r1, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0) 15:08:33 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x79) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) fchdir(r0) sched_setattr(0x0, &(0x7f00000002c0)={0x830}, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x31f, 0x6, 0x7, 0x1f, 0x7f}, 0x10) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000040)=""/148) socket(0x22, 0x2, 0x2) r2 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0c6300001163484000"/56, @ANYPTR=&(0x7f0000000100)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB="3a9400000000"], 0x0, 0x0, &(0x7f0000000200)}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r2, 0xa, 0x1) r4 = socket$unix(0x1, 0x801, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r5, 0x0) r6 = accept4(r5, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r6, &(0x7f0000000340)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffe9c) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0xa655e68c17a90db3}}}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) getgid() setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x0, 0x200}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), 0x1, 0x0, &(0x7f00000000c0)="e1"}) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="e91f71894b000001000000"], 0x0, 0x0, 0x2000000, 0x0) 15:08:33 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[], 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x12) [ 700.007116] binder: 32467:32469 transaction failed 29189/-22, size 0-0 line 2802 [ 700.044813] binder: 32473:32477 transaction failed 29189/-22, size 0-0 line 2802 [ 700.102088] syz-executor.4: vmalloc: allocation failure: 24000 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 700.113349] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 700.119728] CPU: 0 PID: 32444 Comm: syz-executor.4 Not tainted 4.14.113 #3 [ 700.126851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 700.136470] Call Trace: [ 700.139074] dump_stack+0x138/0x19c [ 700.142715] warn_alloc.cold+0x96/0x1af [ 700.146697] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 700.151685] ? __get_vm_area_node+0x27f/0x340 [ 700.156298] __vmalloc_node_range+0x3be/0x6a0 [ 700.160803] ? get_pid_task+0x98/0x140 [ 700.164791] vmalloc+0x46/0x50 [ 700.167997] ? snd_seq_pool_init+0x5d/0x2f0 [ 700.172323] snd_seq_pool_init+0x5d/0x2f0 [ 700.176485] snd_seq_write+0x4e8/0x5b0 [ 700.180388] ? snd_seq_client_enqueue_event+0x430/0x430 [ 700.185779] ? __f_unlock_pos+0x19/0x20 [ 700.189840] __vfs_write+0x107/0x6c0 [ 700.193605] ? snd_seq_client_enqueue_event+0x430/0x430 [ 700.198987] ? kernel_read+0x120/0x120 [ 700.202981] ? __inode_security_revalidate+0xd6/0x130 [ 700.208186] ? avc_policy_seqno+0x9/0x20 [ 700.212277] ? selinux_file_permission+0x85/0x480 [ 700.217140] ? security_file_permission+0x8f/0x1f0 [ 700.222297] ? rw_verify_area+0xea/0x2b0 [ 700.222311] vfs_write+0x198/0x500 [ 700.222324] SyS_write+0xb8/0x180 [ 700.222334] ? SyS_read+0x180/0x180 [ 700.222345] ? do_syscall_64+0x53/0x630 [ 700.222355] ? SyS_read+0x180/0x180 [ 700.222365] do_syscall_64+0x1eb/0x630 [ 700.222375] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 700.222393] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 700.222401] RIP: 0033:0x458c29 [ 700.222406] RSP: 002b:00007f74d1f4bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 700.222418] RAX: ffffffffffffffda RBX: 00007f74d1f4bc90 RCX: 0000000000458c29 [ 700.222424] RDX: 0000000000000030 RSI: 0000000020042f70 RDI: 0000000000000003 [ 700.222430] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 700.222435] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f74d1f4c6d4 [ 700.222441] R13: 00000000004c87cd R14: 00000000004defa8 R15: 0000000000000005 [ 700.226268] Mem-Info: [ 700.240978] active_anon:162277 inactive_anon:16048 isolated_anon:0 [ 700.240978] active_file:17483 inactive_file:16803 isolated_file:0 [ 700.240978] unevictable:5120 dirty:262 writeback:0 unstable:0 [ 700.240978] slab_reclaimable:12783 slab_unreclaimable:116107 [ 700.240978] mapped:58910 shmem:1608 pagetables:4100 bounce:0 [ 700.240978] free:1184251 free_pcp:296 free_cma:0 [ 700.245392] Node 0 active_anon:644736kB inactive_anon:64192kB active_file:68752kB inactive_file:67212kB unevictable:20480kB isolated(anon):0kB isolated(file):0kB mapped:234608kB dirty:1024kB writeback:0kB shmem:6432kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 645120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 700.374541] Node 1 active_anon:4372kB inactive_anon:0kB active_file:1180kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1032kB dirty:24kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 700.401447] Node 0 DMA free:15908kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 700.427648] lowmem_reserve[]: 0 2580 2580 2580 [ 700.432400] Node 0 DMA32 free:942608kB min:36468kB low:45584kB high:54700kB active_anon:644712kB inactive_anon:64188kB active_file:68752kB inactive_file:67216kB unevictable:20480kB writepending:1028kB present:3129332kB managed:2644920kB mlocked:20480kB kernel_stack:12416kB pagetables:16332kB bounce:0kB free_pcp:1304kB local_pcp:632kB free_cma:0kB [ 700.463456] lowmem_reserve[]: 0 0 0 0 [ 700.467269] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 700.493133] lowmem_reserve[]: 0 0 0 0 15:08:34 executing program 2: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) clone(0x800101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) 15:08:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) fgetxattr(r0, &(0x7f0000000080)=@random={'btrfs.', '\x00'}, &(0x7f0000000140)=""/247, 0xf7) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r1, &(0x7f00000000c0)={0x27, 0x0, 0x2, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x1fa) poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0) 15:08:34 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[], 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x12) [ 700.497068] Node 1 Normal free:3779436kB min:53420kB low:66772kB high:80124kB active_anon:4372kB inactive_anon:0kB active_file:1180kB inactive_file:0kB unevictable:0kB writepending:24kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 700.526555] lowmem_reserve[]: 0 0 0 0 [ 700.530474] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 700.553880] Node 0 DMA32: 3136*4kB (UME) 96*8kB (UME) 24*16kB (UME) 16*32kB (UME) 75*64kB (UME) 17*128kB (UME) 6*256kB (UM) 0*512kB 2*1024kB (ME) 1*2048kB (U) 223*4096kB (M) = 940224kB [ 700.577144] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 700.598469] Node 1 Normal: 55*4kB (UME) 352*8kB (UE) 255*16kB (UM) 45*32kB (UE) 14*64kB (UM) 7*128kB (U) 7*256kB (UE) 4*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 918*4096kB (M) = 3779436kB [ 700.615409] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 700.624396] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 700.639609] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 15:08:34 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000000)={0x0, 0x0, @ioapic}) 15:08:34 executing program 5 (fault-call:0 fault-nth:0): shmctl$SHM_LOCK(0x0, 0xb) 15:08:34 executing program 0 (fault-call:4 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:08:34 executing program 3: bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{}], 0x1, 0x0) 15:08:34 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x12) [ 700.639620] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 700.659311] 35895 total pagecache pages [ 700.663481] 0 pages in swap cache [ 700.666952] Swap cache stats: add 0, delete 0, find 0/0 [ 700.672399] Free swap = 0kB [ 700.675448] Total swap = 0kB [ 700.678470] 1965979 pages RAM [ 700.686241] 0 pages HighMem/MovableOnly [ 700.690405] 333220 pages reserved [ 700.693879] 0 pages cma reserved 15:08:34 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:34 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x908, 0x80000) ioctl$TIOCGPTPEER(r0, 0x5441, 0x273) shmctl$SHM_LOCK(0x0, 0xb) 15:08:34 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x206001, 0x0) r2 = getpgid(0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0}, &(0x7f0000000780)=0xc) fcntl$getownex(r0, 0x10, &(0x7f0000000c00)={0x0, 0x0}) r8 = fcntl$getown(r0, 0x9) sendmsg$netlink(r1, &(0x7f0000000dc0)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x10080}, 0xc, &(0x7f0000000d80)=[{&(0x7f00000007c0)={0x430, 0x1a, 0x200, 0x70bd26, 0x25dfdbfb, "", [@generic="83dd8cc63b5fa8850777eeeee5184b5994", @typed={0x8, 0x88, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @nested={0x168, 0x2c, [@typed={0xc, 0x6d, @u64=0x5}, @typed={0x8, 0x36, @pid=r2}, @generic="5286c6955566335f191e02493a4bd4b83050752c54dfca680546284415e00e4cd3a3ba7b4e05730f55e24e0519fd0742e546171199b4d59c16366633bb5af2969062440d4799001cd95a18373c3e40a0fa19e17cb3ab1857e47b89585d875c2879a40da6fd35f5ce5e6bbc69e921f405bf6781e0315583786ab873a9140a04a4af85356b95cccc8dbac465aa55ca67caf2b5dfd3ec54ca69b69b2853522d63127ff56b9928c6c16cbdee29abcab2c2786116d120cf0b864189cdfe5650c0039058e797a2", @typed={0x4, 0x62}, @typed={0x20, 0x3c, @str='ppp0+,selfppp0vmnet1proc\']\x00'}, @generic="d063266148ddc7d6244e510d646afdf96c1213c9a23b84430279fe10bacab953fc1e42e48a98b53f70d89a0a816e001959619913dbbf2cd5de6939fbf1278657853bbcc27003203ec8028e60c1718b0e5e3cdb", @generic="054c65ec552a24315130", @typed={0x8, 0x60, @pid=r3}]}, @generic="077d9c12e832dd3b39637f38f6396936822e7646d3544f3a5c5c945871f25acd86", @nested={0x27c, 0x59, [@typed={0x8, 0x6b, @uid=r4}, @generic="909633dcec2685a124aa700e0a3b169378624d71a4499a7a452b2ff587e42e7535472d8e16421e711839430b370f864da0aac3c292c3376e83eb646775db93f6571296ff5a9c61406eef91cbaa86ad393411d5fd013ee6f13aa8199247bf7019f071c02c65", @typed={0x8, 0x71, @pid=r5}, @typed={0x8, 0x2e, @fd=r0}, @generic="a85d4651f3b627d1bccda99f61d98702c0d8772f7214cfe49e8cd548fff8921feccae31542d093cbed7b5ef4856d618e67fb06cec2beb71ec4574d35c3e7876c5058e10b383197bac9b16b87e7f83107e79dd20245474bfc3e839ecb0cae69b9acaf8356113c599562a0727566bec5fe870150d00c2a3f1e98cfd5065bf1963799bf7abdec47b4a71ef23ef6b45c191ca99ddecddd08ffe0ba5ce7ae4eab363075f416f889fb2d15049e89b751af5dd383db446283e4a18a2d812365003dcfedce81db19450b2df0e12c006e6c198b182bc2a862cce85725a619445b327479621807fd29c86bf4", @generic="fa47f5593f6585899987edd26ad0149f7d021601cbc5cdfde37cb8ecd6a5f4ffd72c882d5bef7e4b5daecd4d16c380b335f458660d8f0f6f598d507a269eaff25c396e60406fe6c3ee32665034fdc9e7e770084e0f9c13aafd80cdd37982d718546b78a871202290c8baa643b306bae30bcd21fbd3f134bd7c3b3b403972829509d988cf1e6ddaea7785e472fd", @typed={0x8, 0x90, @uid=r6}, @generic="b4b39ce86d67a7aba6f7de71d5357d209a45b0c6ffbb4439443a94dee7b8", @generic="ec3bea4cd8358a7298f6fba9ac7ce4d54d745f4cc02d6b4637d5d116f2c07dced89886b6b7c2ec727deec6f7267f1baf5f9f9488528a7cd016274f974908f1c56678a27362e53aad4a82822b24cf74acb217b0ca0c43820957abb5129c4f"]}]}, 0x430}, {&(0x7f0000000c40)={0x13c, 0x3e, 0xe00, 0x70bd26, 0x25dfdbfb, "", [@typed={0x8, 0x4b, @pid=r7}, @nested={0x124, 0x6c, [@generic="4aedb084dca8cca5c92109439df06e7f8f1a7d69e1bc70cd1570d463826ca6a9fd94caacecee500b25d7ff58de08d21aee0b37beffba55783deb467f66841bb16fabcb0aa329fcdc5513c8bdfe636155a7967695bed41a0521715d117fc56a073d65be6c48f50e4bb783bce305a18c50718f68e2424c26a66e982ae40d5db96faa03e5261e818a8bdfc63b1b3d30c3ad29593c489585cd6b5ee0deb073a322104228b98e2d7c9c883244d8b8c476fbcd797de6db5e029d", @typed={0x8, 0x4e, @pid=r8}, @generic="2dbdabf3", @typed={0x4, 0x77}, @typed={0x58, 0x4a, @binary="339df66db154f467b8499e0e35c6c0b987ee41107afe3844ffbb7b2edd264a1850c72e1a5172a67d18ea93009595a34bbe20e16f261ec96f0d66da18ae09879095230a58dad3b3380c0323393c6977a9d5c95c92"}]}]}, 0x13c}], 0x2, 0x0, 0x0, 0x4000000}, 0x8000) r9 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r10 = dup2(r9, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000000)={0x20, 0x5, 0xfffffffffffffffc, 'queue0\x00', 0x4e}) ioctl$KVM_SET_LAPIC(r10, 0x4400ae8f, &(0x7f00000002c0)={"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"}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) [ 700.757937] FAULT_INJECTION: forcing a failure. [ 700.757937] name failslab, interval 1, probability 0, space 0, times 0 [ 700.816237] CPU: 0 PID: 32513 Comm: syz-executor.0 Not tainted 4.14.113 #3 [ 700.823323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 700.832788] Call Trace: [ 700.835409] dump_stack+0x138/0x19c [ 700.839154] should_fail.cold+0x10f/0x159 [ 700.843333] should_failslab+0xdb/0x130 [ 700.847325] kmem_cache_alloc+0x2d9/0x780 [ 700.851506] ? __sb_end_write+0xc1/0x100 [ 700.855586] getname_flags+0xcb/0x580 [ 700.859403] getname+0x1a/0x20 [ 700.862604] SyS_execve+0x1f/0x50 [ 700.866065] ? setup_new_exec+0x790/0x790 [ 700.870224] do_syscall_64+0x1eb/0x630 [ 700.874128] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 700.878993] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 700.884193] RIP: 0033:0x458c29 [ 700.887389] RSP: 002b:00007faee867bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 700.895118] RAX: ffffffffffffffda RBX: 00007faee867bc90 RCX: 0000000000458c29 [ 700.903141] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 15:08:34 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) r1 = socket$inet_sctp(0x2, 0x5, 0x84) recvmmsg(r0, &(0x7f0000004200)=[{{&(0x7f0000000240)=@can={0x1d, 0x0}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/177, 0xb1}, {&(0x7f0000000400)=""/232, 0xe8}, {&(0x7f0000000380)=""/21, 0x15}, {&(0x7f0000000500)=""/191, 0xbf}], 0x4, &(0x7f0000000600)=""/115, 0x73}, 0x8001}, {{&(0x7f0000000680)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000700)=""/237, 0xed}, {&(0x7f0000000800)=""/236, 0xec}, {&(0x7f0000000900)=""/127, 0x7f}, {&(0x7f0000000980)=""/168, 0xa8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/141, 0x8d}, {&(0x7f0000001b00)=""/30, 0x1e}, {&(0x7f0000001b40)=""/7, 0x7}], 0x8, &(0x7f0000001c00)=""/208, 0xd0}, 0x5ef8}, {{&(0x7f0000001d00)=@nl, 0x80, &(0x7f0000002f40)=[{&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/121, 0x79}, {&(0x7f0000001e40)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/247, 0xf7}], 0x4, &(0x7f0000002f80)=""/96, 0x60}, 0x4}, {{0x0, 0x0, &(0x7f0000004100)=[{&(0x7f0000003000)=""/4096, 0x1000}, {&(0x7f0000004000)=""/241, 0xf1}], 0x2, &(0x7f0000004140)=""/143, 0x8f}, 0x785}], 0x4, 0x1, &(0x7f0000004300)={0x77359400}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000004340)={'erspan0\x00', r2}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @broadcast, @multicast2}, &(0x7f0000000140)=0xc) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1, 0x120) getsockname$ax25(r3, &(0x7f0000000180)={{0x3, @null}, [@remote, @default, @bcast, @remote, @bcast, @netrom, @null, @default]}, &(0x7f0000000200)=0x48) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000040)=0x3, 0x8) [ 700.910538] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 700.917911] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faee867c6d4 [ 700.925185] R13: 00000000004bf216 R14: 00000000004d0458 R15: 0000000000000004 15:08:35 executing program 2: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) clone(0x800101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) ptrace(0x10, r0) 15:08:35 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:35 executing program 5: shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffb000/0x2000)=nil) shmget(0x3, 0x3000, 0x78001040, &(0x7f0000ffb000/0x3000)=nil) r0 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) 15:08:35 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x400080, 0x0) ioctl$IMCLEAR_L2(r2, 0x80044946, &(0x7f0000000040)=0x8001) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) 15:08:35 executing program 0 (fault-call:4 fault-nth:1): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:08:35 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x10a) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000080)=0x4) r2 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x1000000000000007, 0x101000) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) [ 701.438459] FAULT_INJECTION: forcing a failure. [ 701.438459] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 701.450317] CPU: 1 PID: 32544 Comm: syz-executor.0 Not tainted 4.14.113 #3 [ 701.450326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 701.450332] Call Trace: [ 701.450355] dump_stack+0x138/0x19c [ 701.450374] should_fail.cold+0x10f/0x159 [ 701.450389] __alloc_pages_nodemask+0x1d6/0x7a0 [ 701.450402] ? fs_reclaim_acquire+0x20/0x20 [ 701.450417] ? __alloc_pages_slowpath+0x2930/0x2930 [ 701.450440] cache_grow_begin+0x80/0x410 [ 701.450461] kmem_cache_alloc+0x6a8/0x780 [ 701.477201] ? __sb_end_write+0xc1/0x100 [ 701.477220] getname_flags+0xcb/0x580 [ 701.477233] getname+0x1a/0x20 [ 701.477258] SyS_execve+0x1f/0x50 [ 701.514056] ? setup_new_exec+0x790/0x790 [ 701.518229] do_syscall_64+0x1eb/0x630 [ 701.522149] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 701.527019] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 701.532223] RIP: 0033:0x458c29 15:08:35 executing program 5: shmctl$SHM_LOCK(0x0, 0xb) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x1, 0x0) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x3, @multicast2}}, 0x1e) 15:08:35 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x3, 0x2) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000140)=0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) connect$llc(r2, &(0x7f0000000040)={0x1a, 0x207, 0x100000000, 0xadf, 0x2, 0x637, @dev={[], 0xa}}, 0x10) 15:08:35 executing program 2: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) clone(0x800101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) ptrace(0x10, r0) 15:08:35 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@ipv4={[], [], @multicast1}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000640)=0xe8) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x9, 0x6, &(0x7f00000003c0)=[{&(0x7f0000000080)="a8833647bd3a19c6bd8d70abbe4c79df6827bf24718f092a925e3dfd3faed84d6343b8dafc4f8edb950c6b08cbde0dd83103ec751605d8bc2249", 0x3a, 0x6}, {&(0x7f00000000c0)="2c38e1c2767f6d96ab2edd86d86921c5abdbd22beb82cf32ab81ae6dcda0c551615cc2d7dca8d9ffd39db45f58f587d261bc445952ba7558befae5aee4af143eff6a291f254ac54505fa5de62c1fc1418298acfb67", 0x55}, {&(0x7f00000002c0)="f1b2d32bf8ea6acd22a873e42dedc113edaaaa094085f0fddc17872e7742427b7122b19163dd970b43a7a2e9d3e073f4d9f1707f0573d6d7ef9f4e008b2ce3446b7bbe7bd0ae46b3261f0e9eca261e18fe0732725815c6966970c90e98f69aedf33307fbc0322d3de03fd7d48549bed1c21e0f29f98e5b1ebd93f7ce8fa85eb7f50a7899be9ffd10b80e70aeae10ada90bb87b775f200eedc50d8c3ef662129f4173ccad4b090ee6741757828c", 0xad, 0x7}, {&(0x7f0000000140)="6377ef647f5a840e22fc9f6ceebaac6eec51496b56cf902dec1b2bb252f3be46dbec3b8813f8e50ac280c70e9ca18b0ca0cc1b2538032e197bce3c0e6772dc90da889c6ef8dd0e3b40d274dbcc087dc4de231196d49ed346f5c59720fee2c7", 0x5f, 0x2aba}, {&(0x7f0000000380)="77df013a54b08bae652d836ede5b", 0xe, 0x1}, {0xfffffffffffffffd, 0x0, 0x807}], 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="6d61703d6e6f726d616c2c6d6f64653d3078303030303030303030303030303030362c6d61703d6f66662c73657373696f6e3d3078303030303030303030303030303031652c63727566742c6f626a5f757365723d9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d2c646f6e745f6d6561737572652c666f776e65723e", @ANYRESDEC=r3, @ANYBLOB=',euid<', @ANYRESDEC=r4, @ANYBLOB="2c736d61636b6673666c6f6f723d9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d2c736d61636b6673726f6f743d6c6f2d2c6673757569643d38777f677b3500002d397777302d3961663f2d773d747b2d75007f37003377642c61707072616973655f747970653de96d617369672c00"]) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) 15:08:35 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x8000000000005, 0x1) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x400200, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x6}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={r2, @in={{0x2, 0x4e20, @broadcast}}}, &(0x7f0000000200)=0x84) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) [ 701.535623] RSP: 002b:00007faee867bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 701.543527] RAX: ffffffffffffffda RBX: 00007faee867bc90 RCX: 0000000000458c29 [ 701.550818] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 701.558104] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 701.565425] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faee867c6d4 [ 701.572715] R13: 00000000004bf216 R14: 00000000004d0458 R15: 0000000000000004 15:08:35 executing program 5: shmget(0x1, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmget(0x0, 0x3000, 0x40a, &(0x7f0000ffc000/0x3000)=nil) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) shmget(0x2, 0x4000, 0x78000521, &(0x7f0000ffc000/0x4000)=nil) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmget$private(0x0, 0x1000, 0x820, &(0x7f0000ffc000/0x1000)=nil) shmget$private(0x0, 0x3000, 0x54000020, &(0x7f0000ffd000/0x3000)=nil) r0 = shmget(0x2, 0x3000, 0x8, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) 15:08:35 executing program 1: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r0 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x12) 15:08:35 executing program 2: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) clone(0x800101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) ptrace(0x10, r0) 15:08:35 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) 15:08:35 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/211, 0xd3}, {&(0x7f0000000240)=""/29, 0x1d}, {&(0x7f0000000280)=""/209, 0xd1}, {&(0x7f0000000400)=""/157, 0x9d}, {&(0x7f0000000380)=""/34, 0x22}], 0x5, 0x0) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x400000, 0x0) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000540)) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 15:08:35 executing program 0 (fault-call:4 fault-nth:2): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:08:35 executing program 1: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r0 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x12) 15:08:35 executing program 5: shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffc000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil) r0 = shmget(0x3, 0x1000, 0x200, &(0x7f0000ffa000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) 15:08:35 executing program 2: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) clone(0x800101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0xffffffffffffffff, r0) 15:08:35 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM', 0x3}) write$sndseq(r2, &(0x7f0000042f70)=[{0x26, 0x0, 0x5, 0x0, @tick, {}, {0xda}, @addr}], 0x30) lsetxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'U+', 0xaf0}, 0x28, 0x1) 15:08:35 executing program 3: bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f0000000040), 0x1, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x105200, 0x0) 15:08:35 executing program 1: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r0 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x12) 15:08:35 executing program 3: r0 = semget(0x3, 0x7, 0x10) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x80000, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000380)=ANY=[@ANYRESDEC=r0], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x1ff, 0x8, 0xffffffffffffffa9]) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000004, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f00000002c0)={0x88, @rand_addr=0x20b, 0x4e22, 0x3, 'wlc\x00', 0x10, 0xffff, 0x37}, 0x2c) bind$nfc_llcp(r2, &(0x7f0000000040)={0x27, 0x0, 0xfffffffffffffffd, 0x7, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x171) getpeername$netlink(r1, &(0x7f0000000100), &(0x7f0000000140)=0xc) poll(&(0x7f00000003c0), 0x2000000000000040, 0x9) [ 701.901724] FAULT_INJECTION: forcing a failure. [ 701.901724] name failslab, interval 1, probability 0, space 0, times 0 [ 701.923339] CPU: 1 PID: 32603 Comm: syz-executor.0 Not tainted 4.14.113 #3 [ 701.930519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 701.939908] Call Trace: [ 701.942558] dump_stack+0x138/0x19c [ 701.946265] should_fail.cold+0x10f/0x159 [ 701.950464] should_failslab+0xdb/0x130 [ 701.954498] kmem_cache_alloc_trace+0x2ec/0x790 [ 701.959246] ? lock_downgrade+0x6e0/0x6e0 [ 701.963483] alloc_fdtable+0x7f/0x280 [ 701.967331] dup_fd+0x693/0xa40 [ 701.970627] ? save_trace+0x290/0x290 [ 701.974477] unshare_fd+0x110/0x170 [ 701.978155] ? find_held_lock+0x35/0x130 [ 701.982281] ? lockdep_tasklist_lock_is_held+0x20/0x20 [ 701.987586] unshare_files+0x6a/0x1b0 [ 701.991395] ? SyS_unshare+0x7e0/0x7e0 [ 701.995485] do_execveat_common.isra.0+0x20d/0x1dd0 15:08:35 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x12) [ 702.000524] ? prepare_bprm_creds+0x120/0x120 [ 702.005051] SyS_execve+0x39/0x50 [ 702.008523] ? setup_new_exec+0x790/0x790 [ 702.012868] do_syscall_64+0x1eb/0x630 [ 702.016770] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 702.021767] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 702.026971] RIP: 0033:0x458c29 [ 702.030168] RSP: 002b:00007faee867bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 702.037979] RAX: ffffffffffffffda RBX: 00007faee867bc90 RCX: 0000000000458c29 15:08:35 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) readahead(r0, 0x1, 0xfffffffffffffffc) 15:08:36 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x6) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) 15:08:36 executing program 5: shmctl$SHM_LOCK(0x0, 0xb) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x12a}, 0x68) r1 = dup(r0) connect$rose(r1, &(0x7f0000000080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x80, 0x400040) [ 702.045296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 702.052669] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 702.059964] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faee867c6d4 [ 702.067259] R13: 00000000004bf216 R14: 00000000004d0458 R15: 0000000000000004 15:08:36 executing program 0 (fault-call:4 fault-nth:3): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:08:36 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x12) 15:08:36 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x7fffffff, 0x24180) write$selinux_attr(r1, &(0x7f0000000080)='system_u:object_r:vhost_device_t:s0\x00', 0x24) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000240)={r1}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x281204}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r2, 0x501, 0x70bd26, 0x25dfdbfe, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz1\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x90442, 0x0) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000140)="7286f1ef34c75e957fbb99c66ea4b155f3f7402046e07fc41beb773da84c575e0546f87d87a2a55f648136ba046a3bba3fbb374d878ee12d746345b580d9907275cec96288460ef382a613d6eab28328554bfd017335716f35d7117225fe12bc24292c59093114582a06655654a2baca4ff3986cbadd9066039b0a917c96064cfd35e4c39f049974409ea4b4cdb911b9608b39c101074624c54051e647660c60ed454961e12794e1e43f7ef5c42504f6ed1e0542d607d738895adc6bd813c997e106ad86178a14826ade76") [ 702.227325] FAULT_INJECTION: forcing a failure. [ 702.227325] name failslab, interval 1, probability 0, space 0, times 0 [ 702.258411] CPU: 1 PID: 32634 Comm: syz-executor.0 Not tainted 4.14.113 #3 [ 702.265485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 702.274958] Call Trace: [ 702.277580] dump_stack+0x138/0x19c [ 702.281238] should_fail.cold+0x10f/0x159 [ 702.285416] should_failslab+0xdb/0x130 [ 702.289414] kmem_cache_alloc_trace+0x2ec/0x790 [ 702.294112] ? lock_downgrade+0x6e0/0x6e0 [ 702.298288] alloc_fdtable+0x7f/0x280 [ 702.302105] dup_fd+0x693/0xa40 [ 702.302126] unshare_fd+0x110/0x170 [ 702.302138] ? lockdep_tasklist_lock_is_held+0x20/0x20 [ 702.302151] unshare_files+0x6a/0x1b0 [ 702.302160] ? SyS_unshare+0x7e0/0x7e0 [ 702.302176] do_execveat_common.isra.0+0x20d/0x1dd0 [ 702.302194] ? prepare_bprm_creds+0x120/0x120 [ 702.302207] SyS_execve+0x39/0x50 [ 702.335271] ? setup_new_exec+0x790/0x790 [ 702.339515] do_syscall_64+0x1eb/0x630 [ 702.343397] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 702.348243] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 702.353547] RIP: 0033:0x458c29 [ 702.356873] RSP: 002b:00007faee867bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 702.364777] RAX: ffffffffffffffda RBX: 00007faee867bc90 RCX: 0000000000458c29 [ 702.372275] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 702.379567] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 702.386883] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faee867c6d4 [ 702.394682] R13: 00000000004bf216 R14: 00000000004d0458 R15: 0000000000000004 15:08:36 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2, 0x0) ioctl$RTC_UIE_OFF(r0, 0x7004) r1 = shmget$private(0x0, 0x1000, 0x120, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) 15:08:36 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)=0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) rt_tgsigqueueinfo(r2, r3, 0x3d, &(0x7f0000000080)={0x1f, 0x7fff, 0x4}) dup2(r1, r0) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) 15:08:36 executing program 0 (fault-call:4 fault-nth:4): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:08:36 executing program 2: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) clone(0x800101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0xffffffffffffffff, r0) 15:08:36 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x12) 15:08:36 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x1, 0x0) 15:08:36 executing program 4: pipe(&(0x7f0000000000)) r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) [ 702.719679] FAULT_INJECTION: forcing a failure. [ 702.719679] name failslab, interval 1, probability 0, space 0, times 0 [ 702.759138] CPU: 0 PID: 32650 Comm: syz-executor.0 Not tainted 4.14.113 #3 [ 702.766213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 702.775594] Call Trace: [ 702.778207] dump_stack+0x138/0x19c [ 702.781854] should_fail.cold+0x10f/0x159 [ 702.786055] should_failslab+0xdb/0x130 [ 702.790132] kmem_cache_alloc_node_trace+0x283/0x770 [ 702.795273] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 702.800927] __kmalloc_node+0x3d/0x80 [ 702.804759] kvmalloc_node+0x4e/0xe0 [ 702.808492] alloc_fdtable+0xcf/0x280 [ 702.812338] dup_fd+0x693/0xa40 [ 702.815718] unshare_fd+0x110/0x170 15:08:36 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x2000000000004, 0x3, 0xfffffffffffffffd, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) 15:08:36 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x2) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) [ 702.819370] ? lockdep_tasklist_lock_is_held+0x20/0x20 [ 702.824762] unshare_files+0x6a/0x1b0 [ 702.828596] ? SyS_unshare+0x7e0/0x7e0 [ 702.832504] do_execveat_common.isra.0+0x20d/0x1dd0 [ 702.837550] ? prepare_bprm_creds+0x120/0x120 [ 702.842065] SyS_execve+0x39/0x50 [ 702.845528] ? setup_new_exec+0x790/0x790 [ 702.849695] do_syscall_64+0x1eb/0x630 [ 702.853599] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 702.858468] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 702.863674] RIP: 0033:0x458c29 15:08:36 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xffffffff, 0xa100) 15:08:36 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x600, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000080)={0x0, 0x80, 0xbb, &(0x7f0000000040)=0x6}) 15:08:36 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, 0x0, 0x12) 15:08:36 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) [ 702.866889] RSP: 002b:00007faee867bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 702.874622] RAX: ffffffffffffffda RBX: 00007faee867bc90 RCX: 0000000000458c29 [ 702.881910] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 702.889189] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 702.896481] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faee867c6d4 [ 702.903857] R13: 00000000004bf216 R14: 00000000004d0458 R15: 0000000000000004 15:08:36 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, &(0x7f0000000140)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x65}}, 0x10) poll(&(0x7f00000003c0)=[{r0, 0x3a}], 0x1, 0x400) poll(&(0x7f0000000000)=[{r0, 0x10}, {r0, 0x10}, {r0, 0x1000}], 0x3, 0x7) 15:08:37 executing program 0 (fault-call:4 fault-nth:5): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:08:37 executing program 2: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) clone(0x800101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0xffffffffffffffff, r0) 15:08:37 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffb, 0x1) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000040)={0x26, 0x3, 0x0, {0x6, 0x5, 0x0, ',---#'}}, 0x26) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000080)={0x7080000000000000, 0x0, 0xf1, 0x2, 0x18}) shmctl$SHM_LOCK(0x0, 0xb) 15:08:37 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r1, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) 15:08:37 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, 0x0, 0x12) 15:08:37 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') write$P9_RLOPEN(r1, &(0x7f0000000040)={0x18, 0xd, 0x2, {{0xa0, 0x1}, 0x4}}, 0x18) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x81) [ 703.604061] FAULT_INJECTION: forcing a failure. [ 703.604061] name failslab, interval 1, probability 0, space 0, times 0 [ 703.632886] CPU: 0 PID: 32697 Comm: syz-executor.0 Not tainted 4.14.113 #3 [ 703.639964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 703.649369] Call Trace: 15:08:37 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$FUSE_NOTIFY_DELETE(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="3b0000000600000000000000000000001d00000000000000060000000000000012000000000000002d5c76626f786e657431736563757269747900d9eacaf7fe6c0e757416f0881a0542d34cfe25ecdd1c7e6bc099a7afe250946c8e3e2c9de66ff8464b6c66e4e84393b996fce2f48ec2c165c9af9b68bf3cb8a28d8848468fa05a62abe3078b0e36bcb52e5975e4218ab7585c4450a328f3e8269429652f8cc04e65bfcbf526c352f6e9afc951dcbe7ff68172f2c7f78bf4a1819ea05b03f774fe8a607bdd"], 0x3b) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) [ 703.652006] dump_stack+0x138/0x19c [ 703.655658] should_fail.cold+0x10f/0x159 [ 703.659826] should_failslab+0xdb/0x130 [ 703.663819] kmem_cache_alloc_node_trace+0x283/0x770 [ 703.669119] ? kasan_unpoison_shadow+0x35/0x50 [ 703.673730] __kmalloc_node+0x3d/0x80 [ 703.677550] kvmalloc_node+0x4e/0xe0 [ 703.681772] alloc_fdtable+0x13b/0x280 [ 703.685814] dup_fd+0x693/0xa40 [ 703.689117] unshare_fd+0x110/0x170 [ 703.692852] ? lockdep_tasklist_lock_is_held+0x20/0x20 [ 703.698171] unshare_files+0x6a/0x1b0 [ 703.701987] ? SyS_unshare+0x7e0/0x7e0 [ 703.705895] do_execveat_common.isra.0+0x20d/0x1dd0 [ 703.710934] ? prepare_bprm_creds+0x120/0x120 [ 703.715451] SyS_execve+0x39/0x50 [ 703.719031] ? setup_new_exec+0x790/0x790 [ 703.723219] do_syscall_64+0x1eb/0x630 [ 703.727126] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 703.731994] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 703.737187] RIP: 0033:0x458c29 [ 703.740396] RSP: 002b:00007faee867bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b 15:08:37 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, 0x0, 0x12) 15:08:37 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80008042}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r2, 0x8f0903b6327bb4b1, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000002c0)={0x9, @win={{0x4, 0x9, 0x7, 0x1}, 0x0, 0x4, &(0x7f0000000240)={{0x7, 0xfffffffffffffffd, 0x8000, 0x7}, &(0x7f0000000200)={{0x13b, 0x2, 0x5814, 0xd8}, &(0x7f00000001c0)={{0xe4, 0x48, 0x1}}}}, 0x9, &(0x7f0000000280)="0c57590094ed24212bd015cf35129cc707760c70ae8d673ad23070076e51894a18d1939a42c96c717849486882ceb6edb49ae0a3a84d7bbb3ce8007144ef37", 0xfffffffffffffffb}}) shmctl$SHM_LOCK(0x0, 0xb) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x3, 0x2) write$binfmt_misc(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="73797a3062bf5acec26a255d362ed73a7ec90b0afcb4537c567ef1d29b6c5139c8c561b06a8b22be0728bf836e6b94e0ae1a3bd4131d66d3ae22d9079f2900ac98ee6a520ea5a1f11c2dc9fcbdad9ed14ef9e5b769d8527c2c4157fd0016521a23a3cb91fa209a747512bf71f61f64f90896020f0b7e077eb4847cd36b0885d2568c70"], 0x92) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000140)={0x5, &(0x7f0000000100)=[{0x4, 0x7, 0x8, 0x8001}, {0x6, 0x7, 0x4, 0x602746fc}, {0x0, 0x7ff, 0x3, 0x5}, {0xbdf, 0x1ff, 0xfffffffffffffffe, 0x5}, {0xfffffffffffffff7, 0x8, 0x2, 0xffffffff80000004}]}) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x7) 15:08:37 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) 15:08:37 executing program 0 (fault-call:4 fault-nth:6): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:08:37 executing program 5: shmctl$SHM_LOCK(0x0, 0xb) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}, 0x3}}, 0x10) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x7) 15:08:37 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x0) [ 703.740408] RAX: ffffffffffffffda RBX: 00007faee867bc90 RCX: 0000000000458c29 [ 703.740413] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 703.740418] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 703.740423] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faee867c6d4 [ 703.740428] R13: 00000000004bf216 R14: 00000000004d0458 R15: 0000000000000004 [ 703.839131] FAULT_INJECTION: forcing a failure. [ 703.839131] name failslab, interval 1, probability 0, space 0, times 0 [ 703.909248] CPU: 0 PID: 32720 Comm: syz-executor.0 Not tainted 4.14.113 #3 [ 703.916335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 703.925704] Call Trace: [ 703.928318] dump_stack+0x138/0x19c [ 703.931977] should_fail.cold+0x10f/0x159 [ 703.936147] should_failslab+0xdb/0x130 [ 703.940172] kmem_cache_alloc+0x2d9/0x780 [ 703.944376] ? creds_are_invalid+0x48/0x110 [ 703.948829] ? __validate_process_creds+0x14c/0x200 [ 703.953885] prepare_creds+0x3e/0x340 [ 703.957727] prepare_exec_creds+0x12/0xf0 [ 703.961897] prepare_bprm_creds+0x6a/0x120 [ 703.966158] do_execveat_common.isra.0+0x2a1/0x1dd0 [ 703.971198] ? prepare_bprm_creds+0x120/0x120 [ 703.975718] SyS_execve+0x39/0x50 [ 703.979185] ? setup_new_exec+0x790/0x790 [ 703.983346] do_syscall_64+0x1eb/0x630 [ 703.987234] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 703.992190] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 703.997805] RIP: 0033:0x458c29 [ 704.000995] RSP: 002b:00007faee867bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 704.008713] RAX: ffffffffffffffda RBX: 00007faee867bc90 RCX: 0000000000458c29 [ 704.016002] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 704.023281] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 704.030607] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faee867c6d4 [ 704.037871] R13: 00000000004bf216 R14: 00000000004d0458 R15: 0000000000000004 15:08:38 executing program 2: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) clone(0x800101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) 15:08:38 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) syz_open_dev$admmidi(&(0x7f0000000280)='/dev/admmidi#\x00', 0x10cd, 0x840) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x400, 0x0) lseek(r0, 0x4a, 0x5) rt_sigsuspend(&(0x7f0000000240)={0x9}, 0x8) getsockname$inet(r1, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000140)=[@in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e23, @empty}], 0x20) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180), &(0x7f00000001c0)=0xb) poll(&(0x7f0000000200)=[{r0}], 0x3c1, 0x0) 15:08:38 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x20200, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000080)=0x80, 0x4) openat$cgroup_type(r3, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) 15:08:38 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x0) 15:08:38 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x3}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x20200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002dc0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000100)={0xba, 0xffff, 0x4, 0xd9, [], [], [], 0xfff, 0xffffffffffffff7f, 0x3, 0x3, "4e3d1c4822bd34f9efad58337e61641d"}) shmctl$SHM_LOCK(0x0, 0xb) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f0000000040)={0x2, 0xc38}) r3 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f00000002c0)='dns_resolver\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)='/selinux/policy\x00', r3) 15:08:38 executing program 0 (fault-call:4 fault-nth:7): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:08:38 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x0) 15:08:38 executing program 4: r0 = memfd_create(&(0x7f0000000140)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000005c0)='/dev/snd/seq\x00', 0x0, 0x208080) r2 = syz_open_dev$sndpcmp(&(0x7f0000000400)='/dev/snd/pcmC#D#p\x00', 0x7ff, 0x100) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000b00)={0x0, 0x0, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000b40)={r4, 0x80000, r2}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000a80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x91}, 0xc, &(0x7f0000000a40)={&(0x7f00000008c0)={0x144, r5, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x108, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x68}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2322}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_NET={0x28, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xca0}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}]}, 0x144}}, 0x4000000) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200004}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x74, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x28}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x100000000}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x34}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x4890) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680)='TIPCv2\x00') ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f0000000ac0)={0x9}) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xcc, r6, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xac, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffff0000}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) io_setup(0x8001, &(0x7f0000000100)=0x0) io_cancel(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xf, 0x1, r7, &(0x7f00000002c0)="eca20714dca140734dd3ae0ef7c048e74a651405c78e6dae474d9aa585cfa03046759e79ef6e4dd43347d2fade730bb68d15ee2e182b6a89c8708cb76e80f8812b60ca79e2c519509570d9c9c8b9b57f09c301ca7e8b007508bf47d39af2fe443d7a21fa9f56e1d8cbab7d697b81c1eaed415fb7ceb075bbe2769ffa05872e3abb78458552bd8486d0a168b111f8cbe04e23f24df6d0a71694e6795d39031d76e8e8aaafe0733c48081699f4df7d6a64", 0xb0, 0x4, 0x0, 0x1, r7}, &(0x7f00000001c0)) ioctl$BLKPG(r7, 0x1269, &(0x7f00000000c0)={0x100000000, 0x3f, 0xbc, &(0x7f0000000000)="d41b99984f39ef07e5a4856c52eb3e282688b68282113ad361698020d3b6fb50a21680856a265dcd5d3126e47c267db2fbc4351e65d15887f0fb69046d2f8c766673dc3c65194608ed01b47ffc6c0c4dd3fdb945b28bdc28bcdf89c2dd861b6da114c96234be50f547a404813119b28073e73f0a0a621610192e9fa71f779d53b14880ea7328d0afbfbfd00a54851bbe81769ecf00e80d90d0820b2ba2944784df113f60548a8a133809549c38da53b784ca6c742ee2f5efdf0e8735"}) prctl$PR_SET_SECCOMP(0x16, 0x3, &(0x7f00000003c0)={0x3, &(0x7f0000000380)=[{0x2, 0x7, 0x7, 0x5}, {0x400, 0x293, 0x10001, 0x10000}, {0x8, 0x75, 0x9, 0x1}]}) [ 704.504165] FAULT_INJECTION: forcing a failure. [ 704.504165] name failslab, interval 1, probability 0, space 0, times 0 [ 704.577892] CPU: 1 PID: 32746 Comm: syz-executor.0 Not tainted 4.14.113 #3 [ 704.585075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 704.594445] Call Trace: [ 704.597056] dump_stack+0x138/0x19c [ 704.600713] should_fail.cold+0x10f/0x159 [ 704.604897] should_failslab+0xdb/0x130 [ 704.608895] kmem_cache_alloc+0x2d9/0x780 [ 704.613069] ? creds_are_invalid+0x48/0x110 [ 704.617423] ? __validate_process_creds+0x14c/0x200 [ 704.622469] prepare_creds+0x3e/0x340 [ 704.626423] prepare_exec_creds+0x12/0xf0 [ 704.630757] prepare_bprm_creds+0x6a/0x120 [ 704.635178] do_execveat_common.isra.0+0x2a1/0x1dd0 [ 704.640216] ? prepare_bprm_creds+0x120/0x120 [ 704.644727] SyS_execve+0x39/0x50 [ 704.648204] ? setup_new_exec+0x790/0x790 [ 704.652390] do_syscall_64+0x1eb/0x630 [ 704.656290] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 704.661150] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 704.666344] RIP: 0033:0x458c29 [ 704.669560] RSP: 002b:00007faee867bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b 15:08:38 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000000)) 15:08:38 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, 0x0, 0x12) [ 704.677293] RAX: ffffffffffffffda RBX: 00007faee867bc90 RCX: 0000000000458c29 [ 704.688853] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 704.696278] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 704.703929] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faee867c6d4 [ 704.711673] R13: 00000000004bf216 R14: 00000000004d0458 R15: 0000000000000004 15:08:38 executing program 0 (fault-call:4 fault-nth:8): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:08:38 executing program 1 (fault-call:4 fault-nth:0): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) [ 704.856771] FAULT_INJECTION: forcing a failure. [ 704.856771] name failslab, interval 1, probability 0, space 0, times 0 [ 704.865723] FAULT_INJECTION: forcing a failure. [ 704.865723] name failslab, interval 1, probability 0, space 0, times 0 [ 704.873863] CPU: 0 PID: 309 Comm: syz-executor.1 Not tainted 4.14.113 #3 [ 704.886116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 704.886126] Call Trace: [ 704.898289] dump_stack+0x138/0x19c [ 704.901938] should_fail.cold+0x10f/0x159 [ 704.906106] should_failslab+0xdb/0x130 [ 704.906120] kmem_cache_alloc_trace+0x2ec/0x790 [ 704.906139] alloc_pipe_info+0xb0/0x380 [ 704.918846] ? save_trace+0x290/0x290 [ 704.922779] splice_direct_to_actor+0x5da/0x7b0 [ 704.927465] ? avc_policy_seqno+0x9/0x20 [ 704.931537] ? selinux_file_permission+0x85/0x480 [ 704.936388] ? generic_pipe_buf_nosteal+0x10/0x10 [ 704.941339] ? security_file_permission+0x8f/0x1f0 [ 704.946301] ? do_splice_to+0x170/0x170 [ 704.950303] ? rw_verify_area+0xea/0x2b0 [ 704.954408] do_splice_direct+0x18d/0x230 [ 704.958569] ? splice_direct_to_actor+0x7b0/0x7b0 [ 704.963433] ? rw_verify_area+0xea/0x2b0 [ 704.967504] do_sendfile+0x4db/0xbd0 [ 704.971229] ? do_compat_pwritev64+0x140/0x140 [ 704.975919] ? kasan_check_write+0x14/0x20 [ 704.980247] ? _copy_from_user+0x99/0x110 [ 704.984420] SyS_sendfile64+0x9d/0x110 [ 704.988327] ? SyS_sendfile+0x130/0x130 [ 704.992307] ? do_syscall_64+0x53/0x630 [ 704.996298] ? SyS_sendfile+0x130/0x130 [ 705.000368] do_syscall_64+0x1eb/0x630 [ 705.004357] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 705.009218] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 705.014424] RIP: 0033:0x458c29 [ 705.017624] RSP: 002b:00007fb8ba68ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 705.025344] RAX: ffffffffffffffda RBX: 00007fb8ba68ec90 RCX: 0000000000458c29 [ 705.032655] RDX: 0000000020000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 705.039936] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 705.056032] R10: 0000000000000012 R11: 0000000000000246 R12: 00007fb8ba68f6d4 [ 705.063419] R13: 00000000004c5e10 R14: 00000000004da5c8 R15: 0000000000000005 [ 705.070724] CPU: 1 PID: 306 Comm: syz-executor.0 Not tainted 4.14.113 #3 [ 705.077586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 705.087128] Call Trace: [ 705.089734] dump_stack+0x138/0x19c [ 705.093366] should_fail.cold+0x10f/0x159 [ 705.097512] should_failslab+0xdb/0x130 [ 705.101483] __kmalloc_track_caller+0x2ef/0x790 [ 705.106235] ? __lock_is_held+0xb6/0x140 [ 705.110313] ? check_preemption_disabled+0x3c/0x250 [ 705.115341] ? prepare_creds+0x3e/0x340 [ 705.119329] ? selinux_cred_prepare+0x49/0xb0 [ 705.123851] kmemdup+0x27/0x60 [ 705.127051] selinux_cred_prepare+0x49/0xb0 [ 705.131379] security_prepare_creds+0x83/0xc0 [ 705.135879] prepare_creds+0x29a/0x340 [ 705.139815] prepare_exec_creds+0x12/0xf0 [ 705.143971] prepare_bprm_creds+0x6a/0x120 [ 705.148203] do_execveat_common.isra.0+0x2a1/0x1dd0 [ 705.153220] ? prepare_bprm_creds+0x120/0x120 [ 705.157856] SyS_execve+0x39/0x50 [ 705.161308] ? setup_new_exec+0x790/0x790 [ 705.165496] do_syscall_64+0x1eb/0x630 [ 705.169401] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 705.174336] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 705.179618] RIP: 0033:0x458c29 [ 705.182926] RSP: 002b:00007faee867bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 705.190797] RAX: ffffffffffffffda RBX: 00007faee867bc90 RCX: 0000000000458c29 [ 705.198064] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 705.205353] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 705.212706] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faee867c6d4 [ 705.219972] R13: 00000000004bf216 R14: 00000000004d0458 R15: 0000000000000004 15:08:39 executing program 2: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) clone(0x800101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) 15:08:39 executing program 5: shmget(0x0, 0x1000, 0x7c001004, &(0x7f0000ffc000/0x1000)=nil) shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffc000/0x1000)=nil) shmget(0x3, 0x2000, 0xeea78731824b82ab, &(0x7f0000ffc000/0x2000)=nil) r0 = shmget(0x3, 0x3000, 0x44, &(0x7f0000ffc000/0x3000)=nil) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x80) removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0xe8, "50903b232f457e1e3448cee53331d366f5f29bd7833a51efe1f7a620bc3612d50840bca8000fe0159359f6029f76ad320ab4a4896527746406a2d11f2f2202042bd0e20361dc466a68941b7fd2a90dd3087ad81af661892dbd611e3d60f8181078be26897cc84d73665d4d9d8b3ba5199681a3a0739b65354f7175cb75a76f578bbfd845c9c33b485db67f6968aa075c1f511b0448d38c2e8d2fa4010b47804cc432a7b665109c33982c5fc5917d9a4381743a049e7bb51e7d9ce6546b00dfce927660522bcbaf6677cdd54fc905265ac72331476709be7e8b5a46f1a7c44ad2d5819ee82e7e475c"}, &(0x7f0000000200)=0xf0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000240)={r2}, 0x8) shmctl$SHM_LOCK(r0, 0xb) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x18000, 0x0) getsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000000040)=0x7fff, &(0x7f0000000080)=0x4) 15:08:39 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x480, 0x0) write$vhci(r0, &(0x7f00000002c0)=@HCI_ACLDATA_PKT={0x2, "30697b5db1fdf23b5e0081a26f2c4d414baf25db56d7efe66e89687cbd44e682a01730577ef952607080dbff15cb802e57beeb25a47867dc4fe064f977b13419b399e593c05b"}, 0x47) r1 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x40000) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x8001}, &(0x7f0000000080)=0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f0000000440)=0xe8) r6 = getgid() fchownat(r3, &(0x7f0000000180)='./file0\x00', r5, r6, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000140)=ANY=[@ANYRES32=r4, @ANYBLOB="100000f0faa439094402e8be7a8d6ab95a00697787e131c095eb5d607f0038ee1e26"], &(0x7f0000000100)=0x18) r7 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r1, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) ioctl$BLKBSZSET(r7, 0x40081271, &(0x7f0000000480)=0x401) 15:08:39 executing program 1 (fault-call:4 fault-nth:1): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:39 executing program 0 (fault-call:4 fault-nth:9): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:08:39 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x7ec7f38aed43aa00, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) r1 = shmget$private(0x0, 0x1000, 0x100, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x80500, 0x0) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000040)=0x0) ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f0000000080)=r3) 15:08:39 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x490d5f97, 0x4000) ioctl$TIOCSCTTY(r1, 0x540e, 0x6) r2 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) tee(r0, r2, 0x8001, 0x1) r3 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) r4 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r3, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000002c0)={0x0, 0xa442, 0x30, 0x7}, &(0x7f0000000300)=0x18) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={r5, 0x9}, &(0x7f0000000380)=0x8) 15:08:39 executing program 5: shmctl$SHM_LOCK(0x0, 0xb) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x100, 0x0) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000040)={0x8001, 0xfffffffffffffffb}) epoll_create1(0x80000) [ 705.345547] FAULT_INJECTION: forcing a failure. [ 705.345547] name failslab, interval 1, probability 0, space 0, times 0 [ 705.371179] FAULT_INJECTION: forcing a failure. [ 705.371179] name failslab, interval 1, probability 0, space 0, times 0 [ 705.414271] CPU: 1 PID: 321 Comm: syz-executor.1 Not tainted 4.14.113 #3 [ 705.421176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 705.430546] Call Trace: [ 705.433240] dump_stack+0x138/0x19c [ 705.436919] should_fail.cold+0x10f/0x159 [ 705.441091] should_failslab+0xdb/0x130 [ 705.445087] __kmalloc+0x2f3/0x7a0 [ 705.448639] ? kmem_cache_alloc_trace+0x626/0x790 [ 705.453495] ? alloc_pipe_info+0x15c/0x380 [ 705.457740] alloc_pipe_info+0x15c/0x380 [ 705.461817] ? save_trace+0x290/0x290 [ 705.465730] splice_direct_to_actor+0x5da/0x7b0 [ 705.470439] ? avc_policy_seqno+0x9/0x20 [ 705.474607] ? selinux_file_permission+0x85/0x480 [ 705.479466] ? generic_pipe_buf_nosteal+0x10/0x10 [ 705.484328] ? security_file_permission+0x8f/0x1f0 [ 705.489284] ? do_splice_to+0x170/0x170 [ 705.493278] ? rw_verify_area+0xea/0x2b0 [ 705.497351] do_splice_direct+0x18d/0x230 [ 705.501707] ? splice_direct_to_actor+0x7b0/0x7b0 [ 705.506575] ? rw_verify_area+0xea/0x2b0 [ 705.510738] do_sendfile+0x4db/0xbd0 [ 705.514488] ? do_compat_pwritev64+0x140/0x140 [ 705.519087] ? kasan_check_write+0x14/0x20 [ 705.523335] ? _copy_from_user+0x99/0x110 [ 705.527501] SyS_sendfile64+0x9d/0x110 [ 705.531404] ? SyS_sendfile+0x130/0x130 [ 705.535400] ? do_syscall_64+0x53/0x630 [ 705.539392] ? SyS_sendfile+0x130/0x130 [ 705.543408] do_syscall_64+0x1eb/0x630 [ 705.547652] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 705.552513] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 705.557715] RIP: 0033:0x458c29 15:08:39 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7f, 0x80000) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x10005) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 15:08:39 executing program 5: 15:08:39 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x100, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM\x00'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) [ 705.560906] RSP: 002b:00007fb8ba68ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 705.568840] RAX: ffffffffffffffda RBX: 00007fb8ba68ec90 RCX: 0000000000458c29 [ 705.576125] RDX: 0000000020000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 705.583599] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 705.590904] R10: 0000000000000012 R11: 0000000000000246 R12: 00007fb8ba68f6d4 [ 705.598556] R13: 00000000004c5e10 R14: 00000000004da5c8 R15: 0000000000000005 [ 705.605853] CPU: 0 PID: 326 Comm: syz-executor.0 Not tainted 4.14.113 #3 [ 705.612717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 705.622094] Call Trace: [ 705.622116] dump_stack+0x138/0x19c [ 705.622132] should_fail.cold+0x10f/0x159 [ 705.622147] should_failslab+0xdb/0x130 [ 705.622160] kmem_cache_alloc+0x2d9/0x780 [ 705.622175] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 705.628391] ? check_preemption_disabled+0x3c/0x250 [ 705.628407] selinux_file_alloc_security+0xb4/0x190 [ 705.628422] security_file_alloc+0x73/0xb0 [ 705.660548] get_empty_filp+0x130/0x3b0 15:08:39 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x80000000, 0x80000) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000040)) shmctl$SHM_LOCK(0x0, 0xb) [ 705.664539] path_openat+0x8f/0x3f70 [ 705.668274] ? prepare_bprm_creds+0x6a/0x120 [ 705.672799] ? do_execveat_common.isra.0+0x2a1/0x1dd0 [ 705.678004] ? SyS_execve+0x39/0x50 [ 705.681644] ? do_syscall_64+0x1eb/0x630 [ 705.685724] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 705.691319] ? trace_hardirqs_on+0x10/0x10 [ 705.695563] ? prepare_creds+0x3e/0x340 [ 705.699556] ? prepare_exec_creds+0x12/0xf0 [ 705.703912] ? do_execveat_common.isra.0+0x2a1/0x1dd0 [ 705.709126] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 705.713876] do_filp_open+0x18e/0x250 [ 705.717690] ? may_open_dev+0xe0/0xe0 [ 705.721519] ? trace_hardirqs_on+0x10/0x10 [ 705.725773] ? save_trace+0x290/0x290 [ 705.729591] ? do_execveat_common.isra.0+0x697/0x1dd0 [ 705.734798] ? find_held_lock+0x35/0x130 [ 705.738874] ? do_execveat_common.isra.0+0x697/0x1dd0 [ 705.744080] do_open_execat+0xe7/0x4a0 [ 705.744093] ? unregister_binfmt+0x170/0x170 [ 705.744103] ? lock_downgrade+0x6e0/0x6e0 [ 705.744120] do_execveat_common.isra.0+0x6d2/0x1dd0 [ 705.744137] ? prepare_bprm_creds+0x120/0x120 [ 705.766119] SyS_execve+0x39/0x50 [ 705.769584] ? setup_new_exec+0x790/0x790 [ 705.773744] do_syscall_64+0x1eb/0x630 [ 705.777674] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 705.782634] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 705.787845] RIP: 0033:0x458c29 [ 705.791073] RSP: 002b:00007faee867bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 705.798903] RAX: ffffffffffffffda RBX: 00007faee867bc90 RCX: 0000000000458c29 [ 705.806189] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 705.813561] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 705.824391] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faee867c6d4 [ 705.831830] R13: 00000000004bf216 R14: 00000000004d0458 R15: 0000000000000004 15:08:40 executing program 2: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) clone(0x800101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) 15:08:40 executing program 5: r0 = shmget$private(0x0, 0x1000, 0x54000684, &(0x7f0000ffc000/0x1000)=nil) socketpair(0x9, 0x3, 0x100000001, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={0x0, 0x1f}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000240)={r2, 0x90, "afc743deee8e07cc7ceca8e184694649c07a78d451e16f8167d1a7e2f633ad3459e1cc7011f4e4601ab2e9d71dfd87ae5934d9f3620d8fcee605ee4ad7d4a579aa666a55e6b35e81b8cfb0034da9e90b55516f429112bd5097bc3fb42c2efa95cba86705f59015b1afbfce36338f46683802c8105b82b1dee98622d928975beb8d94d7a3737086762e554d4adf1f8c34"}, &(0x7f0000000300)=0x98) shmctl$SHM_LOCK(r0, 0xb) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8, 0x8080) getsockopt$inet6_opts(r3, 0x29, 0x3f, &(0x7f0000000040)=""/199, &(0x7f0000000140)=0xc7) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f00000003c0)={@loopback, @local}, 0xfffffffffffffe9d) 15:08:40 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x80801, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e21, 0x400, @remote, 0xfffffffffffffff8}}}, &(0x7f0000000100)=0x84) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000140)={r3, 0x1a67}, 0x8) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000180)=0x2) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) 15:08:40 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0xfffffffffffffffe, 0x1) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000040)={0x2}, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0xfffffffffffffe57) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) fcntl$getflags(r0, 0x40a) ioctl$FICLONE(r0, 0x40049409, r1) 15:08:40 executing program 1 (fault-call:4 fault-nth:2): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:40 executing program 0 (fault-call:4 fault-nth:10): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:08:40 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7a9, 0x2) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x9, @mcast1, 0x1}, {0xa, 0x4e21, 0x7fffffff, @rand_addr="eb3cb654c8912555f99a19608c76364b", 0xa3}, r1, 0xb62d}}, 0x48) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffb000/0x2000)=nil) 15:08:40 executing program 4: r0 = memfd_create(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) shmget$private(0x0, 0x4000, 0x1e, &(0x7f0000ffb000/0x4000)=nil) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'ip6tnl0\x00', 0x4200}) ioctl$TCSETXF(r2, 0x5434, &(0x7f00000000c0)={0xec0, 0x0, [0x10000, 0x5, 0x0, 0x2, 0x1000]}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000180)={{0x9, 0x4d1d}, {0x97b2}, 0x0, 0x6, 0x7}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x802, 0x0) getrusage(0x1, &(0x7f00000002c0)) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, &(0x7f0000000040)={0x100, 0x6}) 15:08:40 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x7, 0x482040) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000140)=0x5, 0x4) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x40000, 0x0) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000040)=0x80000000) 15:08:40 executing program 1: r0 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="687e4870fd1960a4a818fbba03688489c191fa8dee2ead542b17ecd00300"], 0x6) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x12) [ 706.273327] FAULT_INJECTION: forcing a failure. [ 706.273327] name failslab, interval 1, probability 0, space 0, times 0 15:08:40 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0xc1, 0x0) syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000200)={0x292, 0xfcda, 0x8, {r1, r2+30000000}, 0x401, 0x7}) r3 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0xfffffffffffffff9) dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000040)={0x7, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM', 0xfffffbfffffffffc}) write$sndseq(r3, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) [ 706.329424] CPU: 1 PID: 365 Comm: syz-executor.0 Not tainted 4.14.113 #3 [ 706.336458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 706.345839] Call Trace: [ 706.348451] dump_stack+0x138/0x19c [ 706.352110] should_fail.cold+0x10f/0x159 [ 706.352135] should_failslab+0xdb/0x130 [ 706.360366] kmem_cache_alloc+0x2d9/0x780 [ 706.360378] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 706.360390] ? check_preemption_disabled+0x3c/0x250 15:08:40 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) [ 706.360404] selinux_file_alloc_security+0xb4/0x190 [ 706.360416] security_file_alloc+0x73/0xb0 [ 706.360429] get_empty_filp+0x130/0x3b0 [ 706.360439] path_openat+0x8f/0x3f70 [ 706.360448] ? prepare_bprm_creds+0x6a/0x120 [ 706.360458] ? do_execveat_common.isra.0+0x2a1/0x1dd0 [ 706.360466] ? SyS_execve+0x39/0x50 [ 706.360481] ? do_syscall_64+0x1eb/0x630 [ 706.409451] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 706.414851] ? trace_hardirqs_on+0x10/0x10 [ 706.419103] ? prepare_creds+0x3e/0x340 [ 706.423198] ? prepare_exec_creds+0x12/0xf0 [ 706.423213] ? do_execveat_common.isra.0+0x2a1/0x1dd0 [ 706.423224] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 706.423241] do_filp_open+0x18e/0x250 [ 706.423260] ? may_open_dev+0xe0/0xe0 [ 706.423280] ? trace_hardirqs_on+0x10/0x10 [ 706.423298] ? save_trace+0x290/0x290 [ 706.453156] ? do_execveat_common.isra.0+0x697/0x1dd0 [ 706.458366] ? find_held_lock+0x35/0x130 [ 706.462446] ? do_execveat_common.isra.0+0x697/0x1dd0 [ 706.467654] do_open_execat+0xe7/0x4a0 [ 706.471583] ? unregister_binfmt+0x170/0x170 [ 706.476113] ? lock_downgrade+0x6e0/0x6e0 [ 706.480298] do_execveat_common.isra.0+0x6d2/0x1dd0 [ 706.485447] ? prepare_bprm_creds+0x120/0x120 [ 706.490049] SyS_execve+0x39/0x50 [ 706.490059] ? setup_new_exec+0x790/0x790 [ 706.490071] do_syscall_64+0x1eb/0x630 [ 706.490080] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 706.490097] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 706.490105] RIP: 0033:0x458c29 [ 706.490110] RSP: 002b:00007faee867bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 706.490125] RAX: ffffffffffffffda RBX: 00007faee867bc90 RCX: 0000000000458c29 [ 706.529909] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 706.537200] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 706.544479] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faee867c6d4 [ 706.551907] R13: 00000000004bf216 R14: 00000000004d0458 R15: 0000000000000004 15:08:41 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f00000001c0)={'filter\x00', 0x5c, "b33df792aede22523a93efe9ca85e6c903f342d4ede4ab97c843ef4e006c080b46a6e27d77f42909b803711fe6be8b1954cb954ad5bee7bf41e5925d24b0a3945f662f992d4911556081a0daba310f00904a3b1a9930d871872b01e4"}, &(0x7f0000000100)=0x80) r2 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYPTR64], 0x8) sendfile(r0, r2, &(0x7f0000000000), 0x12) 15:08:41 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) dup2(r1, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@initdev}, 0x167) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x800000022) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$describe(0x6, r5, &(0x7f0000000080)=""/130, 0x82) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) 15:08:41 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000006, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 15:08:41 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={r1, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e22, @loopback}]}, &(0x7f0000000180)=0x10) ioctl$CAPI_NCCI_GETUNIT(r0, 0x80044327, &(0x7f0000000040)=0x81) 15:08:41 executing program 0 (fault-call:4 fault-nth:11): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:08:41 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x490d5f97, 0x4000) ioctl$TIOCSCTTY(r1, 0x540e, 0x6) r2 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) tee(r0, r2, 0x8001, 0x1) r3 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) r4 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r3, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000002c0)={0x0, 0xa442, 0x30, 0x7}, &(0x7f0000000300)=0x18) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={r5, 0x9}, &(0x7f0000000380)=0x8) 15:08:41 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x10000, 0x0) ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f0000001040)={"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"}) write$binfmt_aout(r0, &(0x7f0000000600)={{0x10b, 0x5, 0x6, 0xe0, 0x2cb, 0x5, 0x12b, 0xfffffffffffffffa}, "6d06fc70e1c9914cf690e0d4147604b3e28a50ebf4250b14fc353f2ef09f48", [[], [], [], [], [], [], [], [], [], []]}, 0xa3f) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='autogroup\x00') ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000001c0)={"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"}) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="82cc71210003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x2000, 0x0) 15:08:41 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) connect(r0, &(0x7f0000000000)=@isdn={0x22, 0x100000000, 0x1, 0xfff, 0xfffffffffffffffd}, 0x80) [ 707.143627] FAULT_INJECTION: forcing a failure. [ 707.143627] name failslab, interval 1, probability 0, space 0, times 0 [ 707.182067] CPU: 0 PID: 402 Comm: syz-executor.0 Not tainted 4.14.113 #3 [ 707.188997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 707.198489] Call Trace: [ 707.201098] dump_stack+0x138/0x19c [ 707.204767] should_fail.cold+0x10f/0x159 [ 707.208949] should_failslab+0xdb/0x130 [ 707.212937] kmem_cache_alloc+0x2d9/0x780 [ 707.217102] ? sched_exec+0x190/0x200 [ 707.220927] ? get_iowait_load+0x120/0x120 [ 707.225193] mm_alloc+0x1d/0xd0 [ 707.228501] do_execveat_common.isra.0+0x951/0x1dd0 [ 707.233550] ? prepare_bprm_creds+0x120/0x120 [ 707.238074] SyS_execve+0x39/0x50 [ 707.241540] ? setup_new_exec+0x790/0x790 [ 707.245812] do_syscall_64+0x1eb/0x630 [ 707.249713] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 707.254585] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 707.259782] RIP: 0033:0x458c29 [ 707.263082] RSP: 002b:00007faee867bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 707.270808] RAX: ffffffffffffffda RBX: 00007faee867bc90 RCX: 0000000000458c29 [ 707.278086] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 707.285365] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 15:08:41 executing program 5: r0 = shmget(0x0, 0x4000, 0x7c000001, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000040)=0x5, 0x4) shmget$private(0x0, 0x2000, 0x108, &(0x7f0000ffc000/0x2000)=nil) 15:08:41 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x3}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x20200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002dc0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000100)={0xba, 0xffff, 0x4, 0xd9, [], [], [], 0xfff, 0xffffffffffffff7f, 0x3, 0x3, "4e3d1c4822bd34f9efad58337e61641d"}) shmctl$SHM_LOCK(0x0, 0xb) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f0000000040)={0x2, 0xc38}) r3 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f00000002c0)='dns_resolver\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)='/selinux/policy\x00', r3) [ 707.292786] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faee867c6d4 [ 707.300112] R13: 00000000004bf216 R14: 00000000004d0458 R15: 0000000000000004 15:08:41 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000000000000000000000fa8fdaef11b3659fe6341fd0b5d10db1f5a2dde4a80f34f230a8cdcff636e400965702d235d7d3b007b3b2db951446e56ab9f2d378861d6fe81f1ffa41da168896c828aebb3f91724992aa733b8969d111cec8c5b2ea4fbede1a8172"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x80000, 0x0) 15:08:41 executing program 0 (fault-call:4 fault-nth:12): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:08:41 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xffff, 0x40000) dup2(r1, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f0000000080)) r5 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) keyctl$reject(0x13, 0x0, 0x0, 0x9, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x401, 0x2, 0x0, 0x54}, 0x98) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x5, 0xe6, 0x2, 0x4, 0x5}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) 15:08:41 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x8000, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x2) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, &(0x7f00000002c0)={r3, 0x1, &(0x7f00000001c0)=[0x3], &(0x7f0000000200)=[0x7fff, 0x10001, 0x40, 0xffffffff80000001, 0x6], 0x20, 0x1, 0x11e, &(0x7f0000000240)=[0x8], &(0x7f0000000280)=[0x9, 0xffffffff, 0x5, 0x2]}) ioctl$TIOCSTI(r2, 0x5412, 0x2) write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[@ANYRESDEC], 0xfffffec3) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:41 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) 15:08:41 executing program 5: r0 = shmget$private(0x0, 0x1000, 0x78000902, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) [ 707.455195] FAULT_INJECTION: forcing a failure. [ 707.455195] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 707.544845] CPU: 1 PID: 427 Comm: syz-executor.0 Not tainted 4.14.113 #3 [ 707.551778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 707.561281] Call Trace: [ 707.563905] dump_stack+0x138/0x19c [ 707.567564] should_fail.cold+0x10f/0x159 [ 707.571739] ? __might_sleep+0x93/0xb0 [ 707.575656] __alloc_pages_nodemask+0x1d6/0x7a0 [ 707.580364] ? __alloc_pages_slowpath+0x2930/0x2930 [ 707.585496] ? __lock_is_held+0xb6/0x140 [ 707.589799] ? check_preemption_disabled+0x3c/0x250 15:08:41 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)='\x10\xbd-q\xab\xa4\xf0R\xaf\x00YT\xe0\xe1`;S\xad\x9e@\xeaVr\x1cH\x9d\xca\x8c\x15\xd8\x9c\xc0\x84\x92\xde5d`\xf4\xa0\x8b\x8feI\xca~ \xb04>\xce\x1fv\xb5\xb8\xfdn3\xferB-#<\xacJ\xa3;\xef\x15I\xac\xaf\x8b\xf0\x03\x85,\xb5\'\xcb@\x14\xbe@\xf9+\xa5p@\xbb\tQ\t\xe5\xfbHY\xaam\x01@K\xb3\x84j]\xc1\x90\x19}AW', 0x0) r2 = socket$inet6(0xa, 0x800, 0x1000) r3 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x5, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240)=0x5e827449173ed5ce, 0x4) r4 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x2, 0x20800) r5 = fcntl$getown(r1, 0x9) ioctl$SIOCAX25NOUID(r3, 0x89e3, &(0x7f0000000280)) write$cgroup_pid(r4, &(0x7f0000000140)=r5, 0x12) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="761c564c199136a3fc5b2c26b3d2a7e9f6a689918c72a26e1e5485b5bae1736cafd314b935f6d9352df89daf1c087ead09386f50"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) [ 707.594930] alloc_pages_current+0xec/0x1e0 [ 707.599402] __get_free_pages+0xf/0x40 [ 707.603316] pgd_alloc+0x25/0x2b0 [ 707.606813] ? lockdep_init_map+0x9/0x10 [ 707.610903] mm_init+0x578/0x970 [ 707.614304] mm_alloc+0xa6/0xd0 [ 707.617614] do_execveat_common.isra.0+0x951/0x1dd0 [ 707.622669] ? prepare_bprm_creds+0x120/0x120 [ 707.627367] SyS_execve+0x39/0x50 [ 707.630851] ? setup_new_exec+0x790/0x790 [ 707.635024] do_syscall_64+0x1eb/0x630 [ 707.638932] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 707.643810] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 707.649016] RIP: 0033:0x458c29 [ 707.652218] RSP: 002b:00007faee867bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 707.659959] RAX: ffffffffffffffda RBX: 00007faee867bc90 RCX: 0000000000458c29 [ 707.667250] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 707.674552] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 15:08:41 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="2818fb06000349fcbe20687fce8146d61dd216d1e44fb277919ee8409ae821bdb628510e74f1aaf79e760dd199ead4b8"], 0x6) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000880)='/dev/full\x00', 0x80, 0x0) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f00000008c0)="bbe97d39a39871e8598847cc985d94a097fdbaca07f6ee74316d5cb2a9cffe5728a62049f2a108bfddb496f29600aec6f0baf3b73d7bcf7b9c9b4fa991e65dc58d0d028d6905207c49b450988e2c8fc1e4f1fde07770f1eb84663601f375c2f88e4820cede039f0cb6b662e97f75c23a8ad13a54") write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0x0) io_setup(0x35be, &(0x7f0000000080)=0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x800c0, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/btrfs-control\x00', 0x80, 0x0) r6 = syz_open_dev$mouse(&(0x7f0000000580)='/dev/input/mouse#\x00', 0x1, 0x60240) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vga_arbiter\x00', 0x200840, 0x0) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dsp\x00', 0x0, 0x0) r9 = dup(r0) ioctl$TIOCSPTLCK(r8, 0x40045431, &(0x7f0000000940)=0x1) io_submit(r3, 0x7, &(0x7f0000000800)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x80000001, r1, &(0x7f00000001c0)="f9756677a00ae760e7ce7e317d1d09f4fd8e197ea3a7fad26f15cf818b7c23d64dc1e91e44a32dadff099edf92f476ba8279e02942fadf7baa5981734dbdc73a84ab536e1452402ee6b8d424adff79c2dbc50bbdec62bfb92b47a464b093363b6dccb9dd054cef53f65217591eb78038b0869c8381b44b9dd2c700b93caeb11f14512909903bebc50cb84cd7db0c166467de1f15feb6ac4475fae986e17807b743", 0xa1, 0x5, 0x0, 0x3, r4}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x0, r1, &(0x7f0000000280)="3b2e8d4a451a82d68ab8e0ab9e6e5d7417eeee4bf2d037388029e46529e709a0f40a3770d9524f8b6f8fbb582faaadcb27f96ad6ba", 0x35, 0x100, 0x0, 0x3, r0}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x8, 0x5, r0, &(0x7f0000000300)="ab06ade4eef84135214580c05b6071c6695a4aadd9cfa73e236a0d6ae4af6faf0647ea6d3fb446e86dabc5665cbf1d373c773f634126ee4a2d464522cd4d05df011026b5b1a067c2fce3b1fad474eb234a3696539987469085dd4f5fc5502e96df6b5bc5ffa15cb1e944e158a0115a8a1ddefb55950c80b9806f2ae2749d5c7d5fc0ca319e293bf2766d156d8c0cd8a8031275e1af2868f952a8a91b12337a196849a124c0cd1bd8d87cbb320c0d2cdc41cf9335d8526c08268e095bf4450934c52247800a8fac40", 0xc8, 0x100000001, 0x0, 0x2, r5}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x5, r1, &(0x7f0000000480)="436910f4ceed1919dfe0333cd2aaf215ecfcc4e8f7d219b1faa790cfbbb55e0e4139d28f32fe0d876a68607012dc76fdcaf79d2ec4941849b6b4a4f1a8a0cf6a68982b3e4212ba3ab6f025e8e1e2123c0767a67e1e0bf571e05f2fe248bc60c4c67547d74f17dfa8412dc43d0fbeccd03e78a1992253d475e58efd0012ffbd79a2c030aa4139eccf12bc68973595974f6cf2528970d6b2200395864395457be7cfd65d16a8a7652ee1325f775f4326f272d8fc2c9f5629ce0067a8a1a9d8452c9cc67e17ec2f495a616f7e3bec29a6c4c348f8f2e9fa1c6a10e568d06f", 0xdd, 0x80, 0x0, 0x1, r6}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x7, 0x9, r0, &(0x7f0000000600)="25a56cc983dce47473166f6a5ff5382f6ed24fa1d87eb820581ca8bda90151de797153b91664366e7308557a4a4c", 0x2e, 0x1000, 0x0, 0x1, r7}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x3, 0x3f, r1, &(0x7f00000006c0)="bf71da63d6afc3", 0x7, 0x4, 0x0, 0x3, r8}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x6c, r1, &(0x7f0000000780)="a62c8459a5d642fafcf40e8a2a8f00b039f446f1e0b389db684934d4b65e27cf5d17cf48f45c5a113dfb66", 0x2b, 0x7, 0x0, 0x1, r9}]) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:41 executing program 5: shmget(0x2, 0x2000, 0x800, &(0x7f0000ffc000/0x2000)=nil) shmget(0x3, 0x3000, 0x10, &(0x7f0000ffc000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x180, &(0x7f0000ffc000/0x3000)=nil) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$update(0x2, r0, &(0x7f0000000080)="80a98475887a302431ce36a70ac80a3e9c4aedfd3ee7ba555a426da389f2a7d3e853f9fafc39941c3ea14859f5e0aea958d6b79e782cd428eeca4991e65b8213812191571bd5924dc85bcce390e9c6e2f84312f1c5f6e91009928a20d8b7e66e3b8a9ac51948ccda8c428bcd08a55660198434feccde7e15ccaef9e54c5bc444c139290aff58cb0dff125c864efd27617cc9d82b1b6bf81cfb3095c37e3c5620938a3d8904c36da5866f4d28e13b3c79c86e1c33039c3c47d993a57b45ab7190ee9ba9a072751de35741c824df7349b0b6842b305a5600bf0a1d6e9d7605", 0xde) r1 = shmget$private(0x0, 0x3000, 0x2000000000000080, &(0x7f0000ffd000/0x3000)=nil) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x7, 0x400000) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000002c0)=0x2c) shmctl$SHM_LOCK(r1, 0xb) sysinfo(&(0x7f0000000180)=""/227) ioctl$VIDIOC_ENUMAUDOUT(r2, 0xc0345642, &(0x7f0000000300)={0x3705e0da, "c93faa5e3348cdce37560d56e1bafa01111432828ec0c4dbe512f1547afa215c", 0x2, 0x1}) [ 707.681853] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faee867c6d4 [ 707.712227] R13: 00000000004bf216 R14: 00000000004d0458 R15: 0000000000000004 15:08:41 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4600, 0x0) mq_unlink(&(0x7f0000000340)='/dev/dsp\x00') sendmsg$tipc(r1, &(0x7f0000000300)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x43}, 0x4}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)="450e4a160b05fab8baebedb822b790599f8a72a63e0bf8779784", 0x1a}, {&(0x7f0000000140)="01e9a03dc62732272800502abcfdd99dcba10197ea026cce7063fffe1860ee2964cd8c614a013c80e3f388a0320298872dba8f81d348f11b7af0cc06fcfc14a16a3708562bcda8ab729afd1307171149a5d81ef74ecbd6a22ffc79229b12e86e6066c58281b9a40332064586786d8a1ee549cf712553fa459feeba2d86bd12e7b5e51c5e302606fcb729fcd56eedc86088e2ef26a62e5502c379c60245f1292b591e70765312a13980cdf8fb67ef3a505bbddc059d65679492c8e3b1d2b98288c840b1c7356aa92938ea22efc5a845ff3f325d95d86917471f413196b1fab9f0b8fa52da1b05", 0xe6}], 0x2, &(0x7f0000000280)="8553cb59da5d05a3846c9c104caddb34a6e1071809e01b76d2bff1f0a256ac583d5e0a627be90feb66756ddaf7fce0c4d46487ed92864b48a53e498c19c0cea41992a0ae66345ed3005a65666b3571eac9f3218ba59459a440b0f69dbe0c41637e80afdfaccd8445", 0x68, 0x40840}, 0x4044) 15:08:41 executing program 0 (fault-call:4 fault-nth:13): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:08:41 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x400040000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x0, 0x0, 0x0) 15:08:41 executing program 5: shmctl$SHM_LOCK(0x0, 0xb) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0xffffffffffffffff}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000140)={r1, 0x6}, 0x8) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x1e2e0000000000, 0x1000, 0x7, 0x3ff}, 'syz0\x00', 0x2}) [ 707.894726] FAULT_INJECTION: forcing a failure. [ 707.894726] name failslab, interval 1, probability 0, space 0, times 0 [ 707.949596] CPU: 1 PID: 464 Comm: syz-executor.0 Not tainted 4.14.113 #3 [ 707.956520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 707.965915] Call Trace: [ 707.968540] dump_stack+0x138/0x19c [ 707.972302] should_fail.cold+0x10f/0x159 [ 707.976492] should_failslab+0xdb/0x130 [ 707.980676] kmem_cache_alloc+0x2d9/0x780 [ 707.984839] ? mm_init+0x756/0x970 [ 707.988382] do_execveat_common.isra.0+0x9c9/0x1dd0 [ 707.993406] ? prepare_bprm_creds+0x120/0x120 [ 707.997905] SyS_execve+0x39/0x50 [ 708.001476] ? setup_new_exec+0x790/0x790 [ 708.005645] do_syscall_64+0x1eb/0x630 [ 708.009858] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 708.014733] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 708.019924] RIP: 0033:0x458c29 [ 708.023127] RSP: 002b:00007faee867bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 708.030848] RAX: ffffffffffffffda RBX: 00007faee867bc90 RCX: 0000000000458c29 [ 708.038142] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 15:08:42 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x600080, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000180)=0x3f) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000040)) ioctl$KVM_NMI(r2, 0xae9a) 15:08:42 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x200802, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000140)={0x0, 0x8, 0x1f, &(0x7f0000000100)=0x7}) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r3 = dup2(r2, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) getsockopt$ax25_int(r3, 0x101, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x800, 0x0) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x20000000000, 0x0, @tick, {}, {0xf401}, @connect={{0x1, 0x80}, {0xc06, 0x7}}}], 0x30) 15:08:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f0000000400)='security.SMACK64IPIN\x00', &(0x7f00000003c0)='\x00', 0x1, 0x3) shmctl$SHM_LOCK(0x0, 0xb) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/fib_trie\x00') ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000340)) sendto$ax25(r1, &(0x7f0000000180)="d971a8a679bfcc5b8e6105652075ff309bfb53edd07c9470a8d2eb38bf40108185651c2054dc58241449002537adbf4d1dd0a7b3110e95c0a5794c8d4e6e95c8d4cd74347c28a5ce17977a854decdbaaee52f7855e7048accdf2ad485e0c22f873a282b03439ab8f9cabc198bee20866dad22362c3fa67f08afb88332554542d02fbb2e8daebe145e2d4b8958cd4f43b6b7ca479eb7e58fd99a762aba53581c561b5869ba82292061f9261f716a4e3aa3e1bd2a7284c7a582587cadecf797d058661569aea8bd94b333ff2e91504da8d0a1bad3e9eb73a977a21b9a5a14a504fdaadf8349f9ba865c608e981d14aa2388f2a5e0514d28e46", 0xf8, 0x0, &(0x7f0000000280)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0xe36, 0x800}) sendto$ax25(r1, &(0x7f0000000040)="63fd84b54ec5059ab3feb10f72a752ea1184966aac68d558394c92e250db415af2c3af51a62ae451feee221fcb91b5347ff0f0eef5d6663ad6a094304af03a31aa233868f464b43f0a8232421117b2d87da02923d2acfaf2debc7d43cedd5c0654c3b007c51d8e8c67c308fff300c8ccca1d3f9b1473cc59fc93fc9a3469d67d89e1e10f4fca7fdd9205a00586a2cf53f071fdfe6fa9d76030603c580ae28f11073410e51f1b68bb0a3f19069d46edb7b0d78a13859b02990156cdda", 0xbc, 0x8080, &(0x7f0000000100)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) openat(r1, &(0x7f0000000440)='./file0\x00', 0x880, 0x15f) 15:08:42 executing program 2: ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000080)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) [ 708.045646] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 708.052998] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faee867c6d4 [ 708.060599] R13: 00000000004bf216 R14: 00000000004d0458 R15: 0000000000000004 15:08:42 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) r2 = dup2(r1, r1) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000080)=0x5, 0x4) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:42 executing program 0 (fault-call:4 fault-nth:14): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:08:42 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x430040, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/create\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x3) mkdirat$cgroup(r2, &(0x7f0000000040)='syz0\x00', 0x1ff) r4 = semget$private(0x0, 0x1, 0x4) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f00000004c0)) getgroups(0x5, &(0x7f00000003c0)=[0x0, 0xee00, 0xee01, 0xee01, r6]) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000400)={{0x4, r5, r7, r8, r9, 0x0, 0x10000}, 0x9, 0x7fff, 0x5}) [ 708.223425] FAULT_INJECTION: forcing a failure. [ 708.223425] name failslab, interval 1, probability 0, space 0, times 0 [ 708.235133] CPU: 0 PID: 490 Comm: syz-executor.0 Not tainted 4.14.113 #3 [ 708.241998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 708.251397] Call Trace: [ 708.253993] dump_stack+0x138/0x19c [ 708.257638] should_fail.cold+0x10f/0x159 [ 708.261818] should_failslab+0xdb/0x130 [ 708.265829] kmem_cache_alloc+0x47/0x780 [ 708.269925] ? ext4_xattr_get+0x139/0x8b0 [ 708.274109] ebitmap_cpy+0xcd/0x270 [ 708.277744] ? hashtab_search+0x1a0/0x230 [ 708.277770] mls_compute_sid+0x22f/0xd60 [ 708.277783] ? mls_convert_context+0x6a0/0x6a0 [ 708.277803] security_compute_sid.part.0+0xa9e/0x1100 [ 708.295889] ? security_compute_validatetrans.part.0+0x470/0x470 [ 708.295907] ? __lock_is_held+0xb6/0x140 [ 708.295931] security_transition_sid+0xd6/0x130 [ 708.310819] selinux_bprm_set_creds+0x6ab/0xb60 [ 708.315510] ? selinux_setprocattr+0x880/0x880 [ 708.320113] security_bprm_set_creds+0x73/0xb0 [ 708.320129] prepare_binprm+0x54c/0x7f0 [ 708.320140] ? install_exec_creds+0x170/0x170 [ 708.320151] ? count.isra.0.constprop.0+0xc6/0x130 [ 708.320164] do_execveat_common.isra.0+0xd7e/0x1dd0 [ 708.320181] ? prepare_bprm_creds+0x120/0x120 [ 708.328749] SyS_execve+0x39/0x50 [ 708.328761] ? setup_new_exec+0x790/0x790 [ 708.328774] do_syscall_64+0x1eb/0x630 [ 708.328787] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 708.364514] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 708.369823] RIP: 0033:0x458c29 15:08:42 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) recvmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000100)=""/37, 0x25}, {&(0x7f00000002c0)=""/119, 0x77}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000180)=""/3, 0x3}], 0x4, &(0x7f0000001380)=""/127, 0x7f}, 0x10041) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x420080, 0x20) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x8) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f0000001440)='ppp1\x00') r4 = dup2(r2, r0) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000140)) chdir(&(0x7f0000000080)='./file0\x00') ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x1f00000) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000000)=0xae) 15:08:42 executing program 2: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000f00)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000002200)=""/4096, 0x1000}], 0x1, 0x0) 15:08:42 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000200)='/dev/amidi#\x00', 0x6, 0x80) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@initdev}}, &(0x7f0000000340)=0xe8) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='fuseblk\x00', 0x1800, &(0x7f0000000440)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x7722}}, {@default_permissions='default_permissions'}], [{@smackfsdef={'smackfsdef', 0x3d, 'proctrusted\''}}, {@appraise='appraise'}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/rfkill\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/rfkill\x00'}}, {@dont_hash='dont_hash'}, {@fsmagic={'fsmagic', 0x3d, 0x4f}}, {@obj_type={'obj_type'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}]}}) r4 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r4, &(0x7f0000000000), 0x12) 15:08:42 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000180)={r0, 0x0, 0x75, 0x10001, 0xae}) r1 = request_key(&(0x7f00000001c0)='blacklist\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='\x00', 0xfffffffffffffffb) keyctl$get_keyring_id(0x0, r1, 0x6) r2 = accept4(r0, &(0x7f0000000000)=@sco, &(0x7f0000000080)=0x80, 0x800) setsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000140), 0x4) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xb8, r3, 0xa4a591490ba1f9f, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4d}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3ff}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000000}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x810) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xc0021}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r3, 0x60e, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x19c940000}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000440)='/dev/vcsa#\x00', 0x7f, 0x40) ioctl$EVIOCSABS3F(r4, 0x401845ff, &(0x7f0000000480)={0x64, 0x5, 0x80000001, 0x9b9, 0x0, 0x4}) syncfs(r0) [ 708.373022] RSP: 002b:00007faee867bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 708.380826] RAX: ffffffffffffffda RBX: 00007faee867bc90 RCX: 0000000000458c29 [ 708.388109] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 708.395388] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 708.402671] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faee867c6d4 [ 708.402677] R13: 00000000004bf216 R14: 00000000004d0458 R15: 0000000000000004 15:08:42 executing program 5: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r1, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x50, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfcf}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8805}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8001}, 0xc005) 15:08:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = memfd_create(&(0x7f0000000000)='\x00'/10, 0x0) write$binfmt_elf32(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4610f6ff000000000000000008030003000000df870000000038000000000000000800000000002000010000000000997c00000000030000000000bf40000000000000f100000800"/88], 0x58) execveat(r1, &(0x7f0000000080)='\x00', 0x0, 0x0, 0x1000) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) wait4(r0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 15:08:42 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) ioctl$void(r0, 0x5451) 15:08:42 executing program 0 (fault-call:4 fault-nth:15): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:08:42 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000080)={0xc, 0x8, 0xfa00, {&(0x7f00000001c0)}}, 0x10) 15:08:42 executing program 5: shmctl$SHM_LOCK(0x0, 0xb) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x80000000, @ipv4={[], [], @remote}, 0x1}], 0x1c) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x9d, 0x10001}, 0x2) 15:08:42 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x800, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000140)={0x40, {{0xa, 0x4e21, 0xffffffff, @dev={0xfe, 0x80, [], 0x1a}, 0xffff}}}, 0x88) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x200000, 0x0) [ 708.601802] FAULT_INJECTION: forcing a failure. [ 708.601802] name failslab, interval 1, probability 0, space 0, times 0 [ 708.613461] CPU: 0 PID: 524 Comm: syz-executor.0 Not tainted 4.14.113 #3 [ 708.620410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 708.629776] Call Trace: [ 708.632483] dump_stack+0x138/0x19c [ 708.636128] should_fail.cold+0x10f/0x159 [ 708.640301] ? ebitmap_cpy+0xcd/0x270 [ 708.644208] should_failslab+0xdb/0x130 [ 708.648198] kmem_cache_alloc+0x47/0x780 15:08:42 executing program 5: shmctl$SHM_LOCK(0x0, 0xb) uselib(&(0x7f0000000000)='./file0\x00') 15:08:42 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x3, 0x5, 0x6dce, 0x8001, 0x1}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x3, 0xbf54, 0x208, 0x100, 0xffffffff, 0x9, 0x0, 0x5, r1}, 0x20) r2 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r2, &(0x7f0000000040), 0xffffffffffffff13) 15:08:42 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x400000000000007f) 15:08:42 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) connect(r0, &(0x7f0000000000)=@in={0x2, 0x4e24, @remote}, 0x80) [ 708.652281] ? ext4_xattr_get+0x139/0x8b0 [ 708.656452] ebitmap_cpy+0xcd/0x270 [ 708.660086] ? hashtab_search+0x1a0/0x230 [ 708.664267] mls_compute_sid+0x22f/0xd60 [ 708.668352] ? mls_convert_context+0x6a0/0x6a0 [ 708.672958] security_compute_sid.part.0+0xa9e/0x1100 [ 708.678184] ? security_compute_validatetrans.part.0+0x470/0x470 [ 708.684658] ? __lock_is_held+0xb6/0x140 [ 708.688758] security_transition_sid+0xd6/0x130 [ 708.693455] selinux_bprm_set_creds+0x6ab/0xb60 [ 708.698148] ? selinux_setprocattr+0x880/0x880 [ 708.702755] security_bprm_set_creds+0x73/0xb0 [ 708.707356] prepare_binprm+0x54c/0x7f0 [ 708.711347] ? install_exec_creds+0x170/0x170 [ 708.715859] ? count.isra.0.constprop.0+0xc6/0x130 [ 708.720805] do_execveat_common.isra.0+0xd7e/0x1dd0 [ 708.725845] ? prepare_bprm_creds+0x120/0x120 [ 708.730366] SyS_execve+0x39/0x50 [ 708.733831] ? setup_new_exec+0x790/0x790 [ 708.737996] do_syscall_64+0x1eb/0x630 [ 708.741896] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 708.746791] entry_SYSCALL_64_after_hwframe+0x42/0xb7 15:08:42 executing program 5: getresuid(&(0x7f0000001440), &(0x7f0000001480)=0x0, &(0x7f00000014c0)) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000040)='./file0\x00', 0x2, 0x7, &(0x7f0000001380)=[{&(0x7f0000000080)="7a4c24e0f30d", 0x6, 0x2}, {&(0x7f00000000c0)="06f747332829ce8d339991f6fa6fc46d70f9dfba1a5be554c2ddec2c84efca36e163de00df60f75fbc937f8a82e889547781af78f961747c6871e36a0dab6100512bee28b8d64d4856cf2873aa4df8c0bfff4b0a0a1e8f76e5168ee5bdebca35968f50abc5f0e42ec27b1fd22f73e91761da25114347006f75cc533de8c8584b84f39ae564473406abff22c9c800e52bedd960df4e3a3404449ad86231f59d1881d4f6c94c8ef76c83c634ee954aa89167527f99f48850e51921cb2f534b5489c596b173dba73cba68a3a34b7dec1aa47ea2cdb40f7b3292d6f326ead649b8642287", 0xe2, 0x4}, {&(0x7f00000001c0)="c1aa8e2e5bfbfafb589c", 0xa, 0x4}, {&(0x7f0000000200)="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", 0x1000, 0xfffffffffffffffd}, {&(0x7f0000001200)="6c5deab9b8df37ef35d1d7fa202a4d2587b31e346e4a7b99ad7186b366e25162ee7189ec29c578e5b74b01db7c9a98a005eefc0844071e036265ef53c281beba91bd4e71039566846053a14e9d511d953cf139a7a2e96f9dfd55853d02db0cddc5200c2a009afb3824b1837eae227a34f8f3d7a491334e220b11b116c311ccbffdea158f0d0d6a8dca693b3812d48f840249673aebcb1344e23f48762643d74a9006f28ed76c507e5bd66b617144d87835fb0bc1e30918f2f323f2dbe08f3f4ad0c5bc25d398c8e559535b59f2517daddc50", 0xd2, 0xfffffffffffffffa}, {&(0x7f0000001300)="649cac1499c9e3e8bceec537162a0213400d721a4a334c1c313fd4e6c68bdcd46cb81617836bf2cc6e243b4bdb93dd850aa5738de147d0e9de5cab08a0ab", 0x3e}, {&(0x7f0000001340)="228d65074b", 0x5, 0x6}], 0x801045, &(0x7f0000001500)={[{@norecovery='norecovery'}, {@user_xattr='user_xattr'}, {@alloc_mode_def='alloc_mode=default'}, {@acl='acl'}], [{@obj_user={'obj_user'}}, {@smackfsdef={'smackfsdef'}}, {@seclabel='seclabel'}, {@euid_lt={'euid<', r0}}, {@dont_hash='dont_hash'}]}) shmctl$SHM_LOCK(0x0, 0xb) socket$bt_bnep(0x1f, 0x3, 0x4) 15:08:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x200, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f0000001080)='./file1\x00', &(0x7f0000001100)='./file1\x00') r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r0, r1) execve(&(0x7f00000002c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 15:08:42 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$RTC_WIE_OFF(r1, 0x7010) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r3 = dup2(r2, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @time, {}, {0xf401}, @addr}], 0x30) write$P9_RSYMLINK(r3, &(0x7f0000000000)={0x14, 0x11, 0x2, {0x2, 0x0, 0x2}}, 0x14) [ 708.752005] RIP: 0033:0x458c29 [ 708.755200] RSP: 002b:00007faee867bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 708.762921] RAX: ffffffffffffffda RBX: 00007faee867bc90 RCX: 0000000000458c29 [ 708.770205] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 708.777491] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 708.784801] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faee867c6d4 [ 708.792094] R13: 00000000004bf216 R14: 00000000004d0458 R15: 0000000000000004 15:08:42 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x10000) 15:08:42 executing program 0 (fault-call:4 fault-nth:16): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:08:42 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='mime_typesecurity\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) mq_timedsend(r2, &(0x7f0000000000)="012f3dea41c7a1cea7f361", 0xb, 0x3f, &(0x7f0000000040)={0x77359400}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) 15:08:42 executing program 5: shmctl$SHM_LOCK(0x0, 0xb) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000000)={'vcan0\x00', 0x7fffffff}) 15:08:42 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="13100f65fadc"], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:42 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000400)={0x1000, 0x1, 0x1ff, "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"}) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 15:08:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x8000000000009, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x17}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) mkdir(0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000000c0)="a96e7e766da68b5d09d87f47f70bf9f8756cea8230decf7198d8b40e464a8265c63bab258d1ed15333c6d616334651597bde1f4df3c951cb201cd05845440d67336b1bb7c2abf7dd7b3e1a826bebca1894f54830671dc788fa2781a14681ae800ea57a8f9b5427a523d3", 0x6a, 0x0, 0x0, 0x0) sigaltstack(&(0x7f0000ffb000/0x4000)=nil, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x0) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x149) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x5, @empty, 0x8}, {0xa, 0x4e22, 0x6, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}, 0x0, [0x72, 0xb6, 0x80, 0x3, 0x100000001, 0xf7, 0x0, 0xff]}, 0x5c) r3 = pkey_alloc(0x0, 0x1) lstat(&(0x7f0000000280)='./file0\x00', 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) pkey_free(r3) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, "86367f1f13d762d807f8133dff372f1e77f5075c3b3cf2214a2e6131555d291e"}) r4 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGLED(r4, 0x80404519, 0xfffffffffffffffd) pkey_alloc(0x0, 0x2) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) 15:08:43 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000000300)=0xe8) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x4, &(0x7f0000000280)=[{&(0x7f0000000140)="97b30d86713470e37b3f0f503778d8a4f443a4ca71c72ae0118a02f626ea083545697fabe3523ee88fdba2c1d786b61d41fb4f60dae05d94dba4d1c1b0af3bc1bb632dc60a94", 0x46, 0x101}, {&(0x7f0000000080)="2edb14fccbcb00d7649c8e8a5112f95af70129c92bb3cbccf55151425e2c51d50ef2253a2169fc46a0", 0x29, 0xffffffffffffffff}, {&(0x7f00000001c0)="776b05c614081f6efcbeb05e1947c72a9a0a2bf21c19dacbdf8a3be794cc8a351c44b18a45ed778b1609614e6cfed51c8425b123f9acbba8b715cc840d66a6c3ef5e454fecd36289e749d26e98edcc486e56b4", 0x53, 0x5}, {&(0x7f0000000240), 0x0, 0xfffffffffffffffa}], 0x8000, &(0x7f0000000340)={[{@uqnoenforce='uqnoenforce'}, {@inode64='inode64'}, {@grpquota='grpquota'}], [{@euid_eq={'euid', 0x3d, r1}}]}) 15:08:43 executing program 5: shmctl$SHM_LOCK(0x0, 0xb) r0 = shmget(0x2, 0x4000, 0x1408, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r1, 0x0) [ 709.083208] FAULT_INJECTION: forcing a failure. [ 709.083208] name failslab, interval 1, probability 0, space 0, times 0 [ 709.094702] CPU: 0 PID: 590 Comm: syz-executor.0 Not tainted 4.14.113 #3 [ 709.101559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 709.111006] Call Trace: [ 709.111029] dump_stack+0x138/0x19c [ 709.111049] should_fail.cold+0x10f/0x159 [ 709.111061] ? ebitmap_cpy+0xcd/0x270 [ 709.111077] should_failslab+0xdb/0x130 [ 709.111091] kmem_cache_alloc+0x47/0x780 [ 709.111102] ? ext4_xattr_get+0x139/0x8b0 [ 709.111122] ebitmap_cpy+0xcd/0x270 [ 709.111132] ? hashtab_search+0x1a0/0x230 [ 709.111145] mls_compute_sid+0x22f/0xd60 [ 709.111159] ? mls_convert_context+0x6a0/0x6a0 [ 709.133556] security_compute_sid.part.0+0xa9e/0x1100 [ 709.133576] ? security_compute_validatetrans.part.0+0x470/0x470 [ 709.133592] ? __lock_is_held+0xb6/0x140 [ 709.133616] security_transition_sid+0xd6/0x130 [ 709.141417] selinux_bprm_set_creds+0x6ab/0xb60 [ 709.141434] ? selinux_setprocattr+0x880/0x880 [ 709.141454] security_bprm_set_creds+0x73/0xb0 [ 709.141468] prepare_binprm+0x54c/0x7f0 [ 709.141479] ? install_exec_creds+0x170/0x170 [ 709.141490] ? count.isra.0.constprop.0+0xc6/0x130 [ 709.141502] do_execveat_common.isra.0+0xd7e/0x1dd0 [ 709.141519] ? prepare_bprm_creds+0x120/0x120 [ 709.159595] SyS_execve+0x39/0x50 [ 709.159608] ? setup_new_exec+0x790/0x790 [ 709.159621] do_syscall_64+0x1eb/0x630 [ 709.159631] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 709.159650] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 709.159662] RIP: 0033:0x458c29 [ 709.236601] RSP: 002b:00007faee867bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 709.236614] RAX: ffffffffffffffda RBX: 00007faee867bc90 RCX: 0000000000458c29 [ 709.236625] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 709.259129] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 709.266438] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faee867c6d4 [ 709.273721] R13: 00000000004bf216 R14: 00000000004d0458 R15: 0000000000000004 15:08:43 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f0000000280)) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, @in6={0xa, 0x4e22, 0xc9, @ipv4, 0x2}, @in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x1f}, 0x80}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e20, 0x1, @local, 0x1c0000}], 0x84) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:43 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r2, &(0x7f0000000000), 0xffffff2f) ioctl$TCSBRK(r2, 0x5409, 0xba97) 15:08:43 executing program 5: shmget(0x1, 0x3000, 0x1, &(0x7f0000ffd000/0x3000)=nil) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000040), 0x4) r1 = shmget(0x0, 0x1000, 0x200, &(0x7f0000ffb000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) [ 709.284685] audit: type=1400 audit(1555945723.023:107): avc: denied { map } for pid=595 comm="syz-executor.5" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:security_t:s0 tclass=file permissive=1 15:08:43 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8, 0x4000) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000040)={0x9, 0x26, 0x13, 0xf, 0x8, 0x9, 0x1, 0xf5, 0x1}) 15:08:43 executing program 0 (fault-call:4 fault-nth:17): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:08:43 executing program 5: shmctl$SHM_LOCK(0x0, 0xb) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6f26, 0x2400) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000040)={0x0, 0x400, 0xfffffffffffffffc}) 15:08:43 executing program 5: shmget(0x1, 0x4000, 0x54000800, &(0x7f0000ffc000/0x4000)=nil) shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffe000/0x2000)=nil) shmget(0x0, 0x2000, 0x2, &(0x7f0000ffb000/0x2000)=nil) shmget(0x1, 0x4000, 0x54000500, &(0x7f0000ffb000/0x4000)=nil) r0 = shmget(0x1, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) fcntl$getown(0xffffffffffffff9c, 0x9) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000100)) r1 = fcntl$getown(0xffffffffffffffff, 0x9) r2 = getpgid(r1) r3 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x8, 0x400101) modify_ldt$write(0x1, &(0x7f0000000140)={0x1, 0x20001000, 0x0, 0x6, 0x85, 0x3, 0x0, 0x100000000, 0x6c6, 0x6}, 0x10) ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000000080)) sched_setaffinity(r2, 0x8, &(0x7f0000000000)=0x8) [ 709.428960] FAULT_INJECTION: forcing a failure. [ 709.428960] name fail_page_alloc, interval 1, probability 0, space 0, times 0 15:08:43 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) sysfs$1(0x1, &(0x7f0000000000)='cgroup&\x00') r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x80000001, 0x40) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000140)=0x4) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 15:08:43 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) r3 = geteuid() getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@initdev}}, &(0x7f0000000140)=0xe8) setresuid(r3, r4, r5) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) [ 709.542309] CPU: 1 PID: 612 Comm: syz-executor.0 Not tainted 4.14.113 #3 [ 709.549207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 709.558677] Call Trace: [ 709.561302] dump_stack+0x138/0x19c [ 709.564959] should_fail.cold+0x10f/0x159 [ 709.569128] ? __might_sleep+0x93/0xb0 [ 709.573127] __alloc_pages_nodemask+0x1d6/0x7a0 [ 709.577826] ? __alloc_pages_slowpath+0x2930/0x2930 [ 709.582875] ? lock_downgrade+0x6e0/0x6e0 [ 709.587055] alloc_pages_current+0xec/0x1e0 [ 709.591407] __page_cache_alloc+0x248/0x3e0 [ 709.595753] generic_file_read_iter+0x12e0/0x21c0 [ 709.600777] ? avc_has_perm+0x273/0x4b0 [ 709.604874] ? filemap_range_has_page+0x1e0/0x1e0 [ 709.610116] ? __lock_is_held+0xb6/0x140 [ 709.614187] ? fsnotify+0x933/0x11e0 [ 709.617924] ext4_file_read_iter+0x14e/0x340 [ 709.622347] __vfs_read+0x4ab/0x6b0 [ 709.625979] ? __fsnotify_update_child_dentry_flags.part.0+0x300/0x300 [ 709.633081] ? vfs_copy_file_range+0xa40/0xa40 [ 709.650327] ? rw_verify_area+0xea/0x2b0 [ 709.654398] vfs_read+0x137/0x350 [ 709.657861] kernel_read+0xab/0x120 [ 709.661491] prepare_binprm+0x5cb/0x7f0 [ 709.665458] ? install_exec_creds+0x170/0x170 [ 709.669950] ? count.isra.0.constprop.0+0xc6/0x130 [ 709.674875] do_execveat_common.isra.0+0xd7e/0x1dd0 [ 709.680037] ? prepare_bprm_creds+0x120/0x120 [ 709.684645] SyS_execve+0x39/0x50 [ 709.688101] ? setup_new_exec+0x790/0x790 [ 709.692357] do_syscall_64+0x1eb/0x630 [ 709.696280] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 709.701126] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 709.706314] RIP: 0033:0x458c29 [ 709.709502] RSP: 002b:00007faee867bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 709.717197] RAX: ffffffffffffffda RBX: 00007faee867bc90 RCX: 0000000000458c29 [ 709.724460] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 709.731819] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 709.739087] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faee867c6d4 15:08:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x8000000000009, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x17}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) mkdir(0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000000c0)="a96e7e766da68b5d09d87f47f70bf9f8756cea8230decf7198d8b40e464a8265c63bab258d1ed15333c6d616334651597bde1f4df3c951cb201cd05845440d67336b1bb7c2abf7dd7b3e1a826bebca1894f54830671dc788fa2781a14681ae800ea57a8f9b5427a523d3", 0x6a, 0x0, 0x0, 0x0) sigaltstack(&(0x7f0000ffb000/0x4000)=nil, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x0) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x149) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x5, @empty, 0x8}, {0xa, 0x4e22, 0x6, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}, 0x0, [0x72, 0xb6, 0x80, 0x3, 0x100000001, 0xf7, 0x0, 0xff]}, 0x5c) r3 = pkey_alloc(0x0, 0x1) lstat(&(0x7f0000000280)='./file0\x00', 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) pkey_free(r3) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, "86367f1f13d762d807f8133dff372f1e77f5075c3b3cf2214a2e6131555d291e"}) r4 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGLED(r4, 0x80404519, 0xfffffffffffffffd) pkey_alloc(0x0, 0x2) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) 15:08:43 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000003"], 0x6) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x7, 0x7, &(0x7f00000005c0)=[{&(0x7f00000001c0)="cdf30e3e5adca815aac44379e27f6062b86095f18ba21670013c7bf61f6d4df237277b37a4cad5ec6d8ecd8d716421a5b8c37ea5830e55c5e8b568275545e35b5f41ea9cb0e2653178f5b7e95864062dd1a16a8644", 0x55, 0x9}, {&(0x7f0000000240)="ec7023e82b09efc168f1e0f8e411ab8d8e6c617686d70b1b141d3d0122e16fe109b5b1f7425046d99b9338ecb56818f03dee2d14309bba45a133f3ec87fe66e181ad549d1441cbc217512248afc5c33238b4eefb18f4d006a2d4ce96c80a67fab3c894ca75dc2d8515381fa2cc9212f56f78a2854bbf2c3e9d3b740f97a73f6275ed41a2d583523c2e6cb6ad", 0x8c, 0x3}, {&(0x7f0000000300)="09651d040470583bfa41235db8fcd3f5b184ac12453d3dd9340309d82f3573a7033257b81cb8051467775b9d81c6ce60b92982f934a377e3c20416d0eb7d6dc6caa9f3335967c1a4b03832d8d2360f012f0cc8ec2fa61f56f9191240b5bb28ea81db5fddb72b299f982f96d54f0e5e64b28de2b0d09f415d0dd64b623168f74ec21c96155c02b3c7710ca77b19c0bff3b79879b24a7282dd4c49014413bca5383e4bec6a288f061b72b1e7830127ef23322f0c4eeba3b533cc46", 0xba, 0x3f}, {&(0x7f00000003c0)="1b90124f5142f65cdcbfa1c3b760d031167881ab6967e5db36190c9f532eae65f84bfac863b680687f4edad742e022e61fd87a358c6f1bc320a21b1de0", 0x3d, 0x2}, {&(0x7f0000000400)="7c4cb2bd6c75e38c2e1194d839d5b7e03fc9ed34df06b2909d438db57a4137a395917c4b03b23b4aa660290b9f9e92b17ecd6db02a48d5e59e91c468dc32bc95fd0d9054e18dac122f10f2564db54469776a603cfd1724ceb9250b8e1dca899e5930549bb5c898e17eb874ea9d3793d43e495d730fb8cf6ec11d1223d33b72b6b15e495142829eb6e985e998", 0x8c, 0x8}, {&(0x7f00000004c0), 0x0, 0x3}, {&(0x7f0000000500)="7a171e3559c848c602b2299958a000988036891b0bf537936868d1db652e1df5d39a9393025d8ec0b3a2136f4007d5bbb32cfe8381f3473653a2e96a2c023a3e38db4c2a96beac8c4955bc3fcebe96967ef43e94de33b5181f9959bc3d07eb727cdc2cc00b6d22136d81a5a25070baf4a9e6e3dfcc11d52c1275efa529d287470665dfdbaa867608d3542e93ce465a121fbb3b9079574661248f41722bddd0f11f564a3cd906c11575ac12", 0xab, 0x9}], 0x40022, &(0x7f0000000680)={[{@errors_recover='errors=recover'}, {@case_sensitive_yes='case_sensitive=yes'}, {@disable_sparse_no='disable_sparse=no'}, {@utf8='utf8'}, {@nls={'nls', 0x3d, 'macgreek'}}, {@errors_recover='errors=recover'}, {@utf8='utf8'}], [{@dont_appraise='dont_appraise'}, {@smackfsdef={'smackfsdef', 0x3d, '$ppp0'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@obj_type={'obj_type'}}]}) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000080)=0xfffefffffffffffe, 0x5c355ce2) 15:08:43 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 15:08:43 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") socket$bt_hidp(0x1f, 0x3, 0x6) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f0000000680)=0xfff, 0x4) bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f0000000040)={0x9, 0x5, 0xffff}) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100)=0x1003, 0xffffffffffffff52) write$binfmt_elf64(r4, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x10000017c) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, &(0x7f0000000080)=""/13, &(0x7f00000000c0)=0xd) recvmsg(r4, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1ffc}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x400100) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) 15:08:43 executing program 5: shmctl$SHM_LOCK(0x0, 0xb) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/90) [ 709.746469] R13: 00000000004bf216 R14: 00000000004d0458 R15: 0000000000000004 15:08:43 executing program 0 (fault-call:4 fault-nth:18): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:08:43 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x20000, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000140), &(0x7f0000000180)=0x4) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) kcmp(r2, r3, 0x4, r0, r0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 15:08:43 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) fsetxattr$security_ima(r2, &(0x7f0000000380)='security.ima\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="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"/327], 0x7, 0x3) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000740)={'vcan0\x00', 0x0}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e22, 0x81, @empty, 0x9}}, 0x750000000000000, 0x2000000000000000, 0x6, 0x25, 0x64}, &(0x7f0000000100)=0x98) write$sndseq(r1, &(0x7f0000000440)=[{0x6, 0x81, 0x7, 0x7f, @tick=0x40, {0x7f, 0xa44c}, {0xc80, 0x1}, @note={0x3, 0x1, 0x8, 0x55b33b77, 0xd119}}, {0x1, 0x100000000, 0x1ff, 0x6, @tick=0x7fff, {0x1, 0x24}, {0xb0, 0x7}, @control={0x1, 0x7, 0x1}}], 0x60) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000140)={r4, 0x7, 0x5d64}, &(0x7f0000000180)=0x8) sendmsg$nl_route_sched(r2, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x41000400}, 0xc, &(0x7f0000000840)={&(0x7f00000002c0)=ANY=[@ANYBLOB="64d3658fa9363cdbee42f8ffb02500140327bd7000", @ANYRES32=r3, @ANYBLOB="0f00f3ff1c00020009000d0008000d00030000000c0001007072696f0000000018000200c5000000a181cb76607bacb9358d53e552116e7a08000100736662002c00020028000100900200000100000007000000070000002000000006000000ffff000080000000ff00000008000e008f01000008000500b67f00000c0001006d756c746971000008000200fc05d70008000e0008000000"], 0xb0}, 0x1, 0x0, 0x0, 0x854}, 0x4000) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000400)={r4, 0x400}, 0x8) 15:08:43 executing program 5: shmget(0x3, 0x1000, 0x780000a6, &(0x7f0000ffd000/0x1000)=nil) shmget(0x1, 0x2000, 0x840, &(0x7f0000ffd000/0x2000)=nil) shmget(0x3, 0x2000, 0x54000044, &(0x7f0000ffe000/0x2000)=nil) r0 = shmget(0x1, 0x1000, 0x32, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/if_inet6\x00') ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x3ff, @bcast, @rose={'rose', 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast]}) syz_init_net_socket$rose(0xb, 0x5, 0x0) [ 709.897371] FAULT_INJECTION: forcing a failure. [ 709.897371] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 709.975945] CPU: 1 PID: 651 Comm: syz-executor.0 Not tainted 4.14.113 #3 [ 709.982929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 709.992387] Call Trace: [ 709.994998] dump_stack+0x138/0x19c [ 709.998756] should_fail.cold+0x10f/0x159 [ 710.002928] ? __might_sleep+0x93/0xb0 [ 710.006919] __alloc_pages_nodemask+0x1d6/0x7a0 [ 710.011607] ? trace_hardirqs_on_caller+0x400/0x590 [ 710.016644] ? __alloc_pages_slowpath+0x2930/0x2930 [ 710.021715] ? __lock_acquire+0x5f9/0x45e0 15:08:43 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80000, 0x0) [ 710.025971] alloc_pages_current+0xec/0x1e0 [ 710.030324] __get_free_pages+0xf/0x40 [ 710.034231] get_zeroed_page+0x11/0x20 [ 710.038144] __pud_alloc+0x3b/0x200 [ 710.041802] __handle_mm_fault+0x690/0x3470 [ 710.046138] ? save_trace+0x290/0x290 [ 710.050070] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 710.054848] ? find_held_lock+0x35/0x130 [ 710.059104] ? handle_mm_fault+0x1b6/0x7c0 [ 710.063462] handle_mm_fault+0x293/0x7c0 [ 710.067546] __get_user_pages+0x465/0x1250 [ 710.071820] ? follow_page_mask+0x1550/0x1550 [ 710.076367] ? save_trace+0x290/0x290 [ 710.080187] ? vfs_copy_file_range+0xa40/0xa40 [ 710.084879] get_user_pages_remote+0x1bf/0x3a0 [ 710.089476] copy_strings.isra.0+0x488/0x8d0 [ 710.093901] ? remove_arg_zero+0x480/0x480 [ 710.098166] ? prepare_binprm+0x5d3/0x7f0 [ 710.102327] copy_strings_kernel+0xa5/0x110 [ 710.106708] do_execveat_common.isra.0+0xda2/0x1dd0 [ 710.111747] ? prepare_bprm_creds+0x120/0x120 [ 710.116265] SyS_execve+0x39/0x50 [ 710.119721] ? setup_new_exec+0x790/0x790 [ 710.123880] do_syscall_64+0x1eb/0x630 [ 710.127877] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 710.132733] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 710.137937] RIP: 0033:0x458c29 [ 710.141123] RSP: 002b:00007faee867bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 710.148847] RAX: ffffffffffffffda RBX: 00007faee867bc90 RCX: 0000000000458c29 [ 710.156120] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 710.163395] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 15:08:44 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:44 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000080)=0x4, 0x4) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f0000000040)=[{r0, 0x828d}], 0x1, 0x1000) [ 710.170668] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faee867c6d4 [ 710.177989] R13: 00000000004bf216 R14: 00000000004d0458 R15: 0000000000000004 15:08:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x8000000000009, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x17}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) mkdir(0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000000c0)="a96e7e766da68b5d09d87f47f70bf9f8756cea8230decf7198d8b40e464a8265c63bab258d1ed15333c6d616334651597bde1f4df3c951cb201cd05845440d67336b1bb7c2abf7dd7b3e1a826bebca1894f54830671dc788fa2781a14681ae800ea57a8f9b5427a523d3", 0x6a, 0x0, 0x0, 0x0) sigaltstack(&(0x7f0000ffb000/0x4000)=nil, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x0) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x149) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x5, @empty, 0x8}, {0xa, 0x4e22, 0x6, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}, 0x0, [0x72, 0xb6, 0x80, 0x3, 0x100000001, 0xf7, 0x0, 0xff]}, 0x5c) r3 = pkey_alloc(0x0, 0x1) lstat(&(0x7f0000000280)='./file0\x00', 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) pkey_free(r3) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, "86367f1f13d762d807f8133dff372f1e77f5075c3b3cf2214a2e6131555d291e"}) r4 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGLED(r4, 0x80404519, 0xfffffffffffffffd) pkey_alloc(0x0, 0x2) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) 15:08:44 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) ioctl$UI_DEV_CREATE(r0, 0x5501) 15:08:44 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x3) r2 = dup2(r1, r0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000080)={0x100, 0x2, 0x4, 0x1, {0x77359400}, {0x5, 0xa, 0x40, 0x9, 0x4, 0x3, "4d1453d3"}, 0x5, 0x2, @userptr=0x9, 0x4}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70), 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000140)={0x1, [0x9]}, 0x6) 15:08:44 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:44 executing program 0 (fault-call:4 fault-nth:19): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 710.425629] FAULT_INJECTION: forcing a failure. [ 710.425629] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 710.448668] CPU: 1 PID: 684 Comm: syz-executor.0 Not tainted 4.14.113 #3 [ 710.455578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 710.464957] Call Trace: [ 710.467584] dump_stack+0x138/0x19c [ 710.471232] should_fail.cold+0x10f/0x159 [ 710.475490] ? __might_sleep+0x93/0xb0 [ 710.479390] __alloc_pages_nodemask+0x1d6/0x7a0 [ 710.484073] ? __pud_alloc+0x16a/0x200 [ 710.487978] ? __alloc_pages_slowpath+0x2930/0x2930 [ 710.493004] ? __pud_alloc+0x16a/0x200 [ 710.496946] alloc_pages_current+0xec/0x1e0 [ 710.501633] __pmd_alloc+0x41/0x410 [ 710.505278] ? __pud_alloc+0x16f/0x200 [ 710.509185] __handle_mm_fault+0x14e8/0x3470 [ 710.513616] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 710.518389] ? find_held_lock+0x35/0x130 [ 710.522474] ? handle_mm_fault+0x1b6/0x7c0 [ 710.526734] handle_mm_fault+0x293/0x7c0 [ 710.530910] __get_user_pages+0x465/0x1250 [ 710.535192] ? follow_page_mask+0x1550/0x1550 [ 710.539793] ? save_trace+0x290/0x290 [ 710.544051] ? vfs_copy_file_range+0xa40/0xa40 [ 710.548659] get_user_pages_remote+0x1bf/0x3a0 [ 710.553300] copy_strings.isra.0+0x488/0x8d0 [ 710.557737] ? remove_arg_zero+0x480/0x480 [ 710.561987] ? prepare_binprm+0x5d3/0x7f0 [ 710.566155] copy_strings_kernel+0xa5/0x110 [ 710.570672] do_execveat_common.isra.0+0xda2/0x1dd0 [ 710.575749] ? prepare_bprm_creds+0x120/0x120 [ 710.580301] SyS_execve+0x39/0x50 [ 710.583803] ? setup_new_exec+0x790/0x790 [ 710.587963] do_syscall_64+0x1eb/0x630 [ 710.591872] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 710.596796] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 710.601991] RIP: 0033:0x458c29 [ 710.605178] RSP: 002b:00007faee867bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 710.612901] RAX: ffffffffffffffda RBX: 00007faee867bc90 RCX: 0000000000458c29 15:08:44 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f00000002c0)={"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"}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) 15:08:44 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000080), 0x12) 15:08:44 executing program 5: shmctl$SHM_LOCK(0x0, 0xb) r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="711ae0f3a5ee2008a2ab6933f3e7ca63179d7da2433e44cae86ec6ca8932d7e36907b529ae9a4de5b4a825f5889a6cc58816358bf8c4c44ae4adb4b651ec46474ec693542442dd5bddadf1f0f3dbdebbf64ffd5f89bf28dbb316d118df7b79343e47f810e29cb1a57b992993f06532759479f24d4e5479882b18f75a5d4ba0d386445e1087e271be077422c8f526e015f36469466c93c55798eb398839f0052c2d6f9a5adf5df356ea644b36fcc5548a8b472ddab826cc7578ef32bd1b2113bca85e02", 0xc3, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000200)={r0, 0x9, 0x10000}, &(0x7f0000000240)={'enc=', 'oaep', ' hash=', {'cmac(sm4)\x00'}}, &(0x7f00000002c0)="3f8a0db023cb2066dd436a8722d38cbb5b9d5ecae82c168dd1430159831699", &(0x7f0000000300)=""/4096) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0xa0a00, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000040)={0x100, 0x7, 0xfffffffffffffff7, 0x1862, 0x0, 0x3}) time(&(0x7f0000001300)) [ 710.620183] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 710.627460] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 710.634742] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faee867c6d4 [ 710.642020] R13: 00000000004bf216 R14: 00000000004d0458 R15: 0000000000000004 15:08:44 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x3}) sendmsg$rds(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/1, 0x1}], 0x1, 0x0, 0x0, 0x20000000}, 0x80) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) 15:08:44 executing program 1: r0 = open(&(0x7f0000000080)='./file0\x00', 0x210100, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000100)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000001c0)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast2}}, &(0x7f00000002c0)=0xe8) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x1a) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000300)={0x8, 0x4, r1, 0x0, r2, 0x0, 0x3, 0x1}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r4 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r3, r4, &(0x7f0000000000), 0x12) 15:08:44 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x6, 0x0, 0x5, 0x0, 0x3}) shmget(0x3, 0x1000, 0x54001102, &(0x7f0000ffc000/0x1000)=nil) r1 = shmget(0x3, 0x2000, 0x78000040, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_LOCK(r1, 0xb) 15:08:45 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) r1 = accept$netrom(0xffffffffffffff9c, &(0x7f0000000300)={{0x3, @null}, [@bcast, @remote, @default, @rose, @netrom, @bcast, @netrom, @null]}, &(0x7f0000000380)=0x48) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000400)=0x800, 0x4) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000140)={{0x6000, 0xf004, 0xb, 0x4aa1, 0x3, 0x7f, 0xffff, 0x7, 0x4, 0xfff, 0x3, 0x1ff}, {0x4, 0xf000, 0xf, 0x2, 0x7, 0x80000000, 0x39, 0x81, 0x401, 0x2, 0x8, 0xfffffffffffff9a8}, {0x6000, 0x7002, 0x0, 0xffff0000, 0x8001, 0x357, 0x2, 0xfffffffffffffffd, 0x5, 0x1f, 0x1, 0x1}, {0x7004, 0x7000, 0xd, 0x9, 0xf41c, 0x7fff, 0x9, 0x31, 0x6, 0x4, 0x4, 0x6}, {0x1, 0x0, 0xa, 0x2, 0x7, 0x8, 0x5, 0x4, 0x2, 0x3f, 0x6, 0x9}, {0xf000, 0x6000, 0xf, 0x2192, 0x7fff, 0xffffffffffffffff, 0x8, 0x1ff, 0x0, 0x9, 0x70f2, 0x401}, {0x3000, 0x1000, 0x0, 0x5, 0x4, 0x28, 0x401, 0x8, 0x7, 0x273, 0x386}, {0x0, 0x10000, 0xe, 0x80, 0xfffffffffffffffc, 0x10000, 0x1, 0x2, 0x7ff, 0x42c4fcfa, 0x8, 0x400}, {0xf000, 0x6000}, {0x100000, 0x3000}, 0x20000005, 0x0, 0x1f000, 0x2440, 0xa, 0x400, 0xd000, [0x40, 0x7a2, 0x8, 0xfffffffffffffffc]}) prctl$PR_CAPBSET_DROP(0x18, 0x9) 15:08:45 executing program 0 (fault-call:4 fault-nth:20): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:08:45 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000040)=""/24, &(0x7f00000000c0)=0x18) shmget(0x1, 0x3000, 0x520, &(0x7f0000ffc000/0x3000)=nil) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1, 0x20001) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) utimensat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{0x77359400}, {r2, r3/1000+10000}}, 0x100) 15:08:45 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000000000)={0x3, 0x4b76}) prctl$PR_SET_TIMERSLACK(0x1d, 0x3480) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) 15:08:45 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x0, @mcast2, 0x3}], 0x1c) r2 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r2, &(0x7f0000000000), 0x12) 15:08:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x8000000000009, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x17}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) mkdir(0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000000c0)="a96e7e766da68b5d09d87f47f70bf9f8756cea8230decf7198d8b40e464a8265c63bab258d1ed15333c6d616334651597bde1f4df3c951cb201cd05845440d67336b1bb7c2abf7dd7b3e1a826bebca1894f54830671dc788fa2781a14681ae800ea57a8f9b5427a523d3", 0x6a, 0x0, 0x0, 0x0) sigaltstack(&(0x7f0000ffb000/0x4000)=nil, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x0) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x149) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x5, @empty, 0x8}, {0xa, 0x4e22, 0x6, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}, 0x0, [0x72, 0xb6, 0x80, 0x3, 0x100000001, 0xf7, 0x0, 0xff]}, 0x5c) r3 = pkey_alloc(0x0, 0x1) lstat(&(0x7f0000000280)='./file0\x00', 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) pkey_free(r3) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, "86367f1f13d762d807f8133dff372f1e77f5075c3b3cf2214a2e6131555d291e"}) r4 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGLED(r4, 0x80404519, 0xfffffffffffffffd) pkey_alloc(0x0, 0x2) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) [ 711.153184] FAULT_INJECTION: forcing a failure. [ 711.153184] name failslab, interval 1, probability 0, space 0, times 0 15:08:45 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x6, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000100)="7b3187dd2fb5f59f215068139ca19a8b0c88e28b8be0eca6042aa70578463e528446dfb5221e2e9d59e694ec0eed3b813b142f5efa7246289e74465f1ffa3a96b52d2cef5694d7ba2311d88dce0e979b5657d476a4c06751b3a2b5914155e37e86568e3fce993703e8c0dcbeb55831794445530ea61f778f92f7eb19c555dcfc35d9217bb60e7d4e57ff813a37f297", 0x8f, 0x2}, {&(0x7f00000002c0)="578e4b6b08", 0x5, 0xfff}, {&(0x7f0000000300)="85afcdfb90ff7297f0bcfdafe815d5c355fd17ac45b74bfa1def8071a0cb9e0974a2daca14d0c45f28914df5dde52d3f2862efda56a77d3fdfa2477bf0a8ba4a84eb7e085f88b225174e724d6936db2bc01c11d3bf36a2e6773f65bdf01fc4e707495565c7aca7fdb1971c8d64133859f69320658fcc310d8c17a796c46081725849078fe5d63c09a211c15abed00a8c59a2026fcf6a1534519d2d7535d2312e15517a593e77cba65332769855", 0xad, 0x1}], 0x1800001, &(0x7f0000000640)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d31332c756e692c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f77650800657569643c2ad79657a705f5514274284b40d320008f8b3882007a6e51df9f7a2e238467e57b36353a45006ac869c354fc5804c7fbc534bfb4697cc87c0e6f3e2654ae5e79afdbd9292198583b65f86ebd023aabdc7461ea4a4e6a1420698df3518e3b7074ddc92c4e06836f7cac3a0570692e2e822233011cdc03ece5c9e5e53b9647e6437104eef119", @ANYRESDEC=r3, @ANYBLOB=',smackfstransmute=ppp0+,selfppp0vmnet1proc\']\x00,measure,\x00']) mq_timedreceive(r2, &(0x7f0000000000)=""/33, 0x21, 0x9, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {0xfffffffffffffffd}, {0xf401}, @note={0xffffffffffff9c5d, 0xe37, 0x1f, 0x2, 0x4}}], 0x30) [ 711.196084] CPU: 0 PID: 731 Comm: syz-executor.0 Not tainted 4.14.113 #3 [ 711.202977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 711.212347] Call Trace: [ 711.214985] dump_stack+0x138/0x19c [ 711.218679] should_fail.cold+0x10f/0x159 [ 711.222849] should_failslab+0xdb/0x130 [ 711.222863] kmem_cache_alloc+0x2d9/0x780 [ 711.222875] ? alloc_pages_current+0xf4/0x1e0 [ 711.222886] __pmd_alloc+0xbd/0x410 [ 711.222894] ? __pud_alloc+0x16f/0x200 [ 711.222906] __handle_mm_fault+0x14e8/0x3470 [ 711.222920] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 711.222932] ? find_held_lock+0x35/0x130 [ 711.222943] ? handle_mm_fault+0x1b6/0x7c0 [ 711.231114] handle_mm_fault+0x293/0x7c0 [ 711.231132] __get_user_pages+0x465/0x1250 [ 711.231149] ? follow_page_mask+0x1550/0x1550 [ 711.231160] ? save_trace+0x290/0x290 [ 711.231171] ? vfs_copy_file_range+0xa40/0xa40 [ 711.231188] get_user_pages_remote+0x1bf/0x3a0 [ 711.231205] copy_strings.isra.0+0x488/0x8d0 [ 711.231223] ? remove_arg_zero+0x480/0x480 [ 711.231234] ? prepare_binprm+0x5d3/0x7f0 [ 711.300062] copy_strings_kernel+0xa5/0x110 [ 711.300077] do_execveat_common.isra.0+0xda2/0x1dd0 [ 711.300095] ? prepare_bprm_creds+0x120/0x120 [ 711.300109] SyS_execve+0x39/0x50 [ 711.300118] ? setup_new_exec+0x790/0x790 [ 711.300136] do_syscall_64+0x1eb/0x630 [ 711.325592] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 711.330459] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 711.335657] RIP: 0033:0x458c29 [ 711.338856] RSP: 002b:00007faee867bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b 15:08:45 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r2, 0x10f, 0x83, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) r3 = fcntl$getown(r1, 0x9) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000002c0)=0x0) r5 = getpgid(0xffffffffffffffff) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000003c0)=0x0) fcntl$getownex(r2, 0x10, &(0x7f00000028c0)={0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000002ac0)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f0000002bc0)=0xe8) bind$bt_hci(r2, &(0x7f0000002c00)={0x1f, r9, 0x3}, 0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000002900)={{{@in=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002a00)=0xe8) r11 = getegid() sendmsg$netlink(r2, &(0x7f0000002a80)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20188040}, 0xc, &(0x7f0000002880)=[{&(0x7f0000000400)={0x247c, 0x1c, 0x200, 0x70bd28, 0x25dfdbfe, "", [@typed={0x8, 0x37, @pid=r3}, @typed={0x8, 0xf, @pid=r4}, @typed={0x20, 0x43, @str='ppp0+,selfppp0vmnet1proc\']\x00'}, @generic="292483858d8d24c3cbdd38e3076f8f448d55dadfa0ad12bffb937665c1a2ae3c6b85acd0c28923bc21ea66c4d2223c5777129f2c2a66deefce587b1e0d2949615a83e13430532f4ba362db5e38186b64f7653a570fb473714797a0b53cb7e0212e5ef18e9ed6301f61446d285f312c09b97ff11db3981d014a9d1facfad28c299ee1be24fca0962c0e58e02b3e53f4b5257984", @nested={0xd4, 0x7a, [@generic="28bf5062d3abb18ebffbfeab75e5833dee7706050eafccac63d7552adfa7f280c0476b7b77dc6aee9098fe574996479d773eb2fc956e2de250a7abc17e6329198f8b6d441c37fcd9f6a0c645c7ea752687efe0cd00a3704aa2e39ec1254509441eeeb2a6d667e7", @typed={0x8, 0x59, @pid=r5}, @generic="e6753f34850fb3a497f08b7cb32ddda20a907b47bd3f8c86be81e2f2a7c918d43fbb766d29a2e2ed5fc1f769a8e1c9f49c9d28122364764eac3af0bcaaabc3a50f6998d01095275a87baa7da3942d4edebe3cd84b229d1ba7ded61a1", @typed={0x4, 0x30}]}, @typed={0x20, 0x7e, @str='ppp0+,selfppp0vmnet1proc\']\x00'}, @nested={0x12a4, 0x1f, [@generic="3380e7c77030cee530fcc3d7f7a995df409db520cee60a4c4906296419a46daceabbfab671b52888bc2177d5f4f861e1a2a594d544b661e1582649bd06873874f10edafacdcf0848b644e7cc3e770955a9e15a9910ddf4096ef37fbcb3c465d7c19ea079c75a353384bdba60be597a24e9bbc2831be2db445ecbb16a34ec4e752474f1e9e0b960a34bf50f93d3af6b3d63b395d43dbf6ad5c8e8dac41b9851cedac84dd953a19dfff808216578a790fb5c19699537d289624cf2fab87ef3fa", @typed={0x9c, 0x0, @binary="b0f19a127717289fb21b53ea9cbe72afb143391a824e1e40fae5832a57687a5575b2f5779fd8c76682cb26d6ea1803136af571cfe2d29f83f0767a87c7de838a79e77523a9348e1d6b99522c6795093d3fb036493f4136957d559541fc44fbdae7dd59847be9dad449ec27c02a3419a670ba95d63f96818e9c7821fee2971f0554c6dfe915e019a02f61cfb0f3488cfe1562b6c3a226cc9f"}, @typed={0x8, 0x8d, @uid=r6}, @generic="38926c860c2131d04fc862b403db2a47c0d6a81c58c5854dcc6d0b388757f812a0e1643c75245616ffe117bfeecc4ad819e51fd79d12381814a2b3", @generic="907dcdf8ac91b01a8b2fbc825e72d955c03c09225ae22f1936ba7da1eb626c671bfb4c0b26c33830e3f3e3a50e01c829d144816255da2aa6ff014b1d9cef13a59e26b9e1fc70765a917f917e560be14c5742a5f5585432c64b7a814ce51217b0d902e801c893b01465df39e111a8bcc438a69e649a37f1f1197a79696b40790e81f725aca25a46e51c9884bec95f2c241073a8394fcd0ffaa479cfbfc3e57da038e0b44b2dccb29cd4139987f7d2007fd97988c1ec5a605982676954293a130a85e64c95a6b9d5b81eaa1f7dedf4dadf3e8e5daf68617f6e03d475", @generic="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", @generic="c6a6ed531ded1ce4f20a281f683a7d33cb4cad937cd9caf67c83a1b46b9e", @typed={0x8, 0x60, @fd=r1}]}, @typed={0x8, 0x90, @pid=r7}, @generic="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", @typed={0x8, 0x10, @ipv4=@local}]}, 0x247c}], 0x1, &(0x7f0000002a40)=[@cred={0x20, 0x1, 0x2, r8, r10, r11}], 0x20, 0x40}, 0x800) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000000c0)={r0, 0x0, 0x7, 0x2, 0xffffffff00000001}) write$sndseq(r2, &(0x7f0000000000)=[{0xffffffffffff7fff, 0x8, 0x101, 0x1f96d78, @tick=0xfffffffffffffffc, {0xc00, 0x2}, {0x1, 0xb73}, @queue={0xfffffffffffffe6b, {0xb64, 0x8000}}}, {0x0, 0x6, 0xfffffffffffffe01, 0x8000, @tick=0x5, {0x1ff, 0x6}, {0x8, 0xffffffffffffff3c}, @addr={0x2, 0x6}}, {0x80, 0x1, 0xffffffff00000001, 0x400, @tick=0x1, {0x3, 0x4}, {0x4, 0x800}, @control={0x5, 0x6}}, {0x7, 0x0, 0x800, 0x86, @tick=0x8, {0x400, 0xfffffffffffffff8}, {0x800}, @raw8={"6ef3deeceebc4f408c31ea9a"}}], 0xc0) write$sndseq(r0, &(0x7f0000042f70)=[{0x1ff, 0x0, 0x0, 0x7, @tick, {}, {0xf401, 0x4}, @addr}], 0x30) 15:08:45 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:45 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x240, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) perf_event_open$cgroup(&(0x7f0000000040)={0x7, 0x70, 0x1, 0x5, 0x2, 0x6, 0x0, 0x10000, 0x40000, 0x4, 0x1, 0x21d, 0x2, 0xfffffffffffffffd, 0x7, 0x0, 0x20a8, 0x3, 0x81, 0x100, 0x5, 0xe5, 0x2, 0x0, 0xfffffffffffffffa, 0xaa25, 0x1ff, 0x0, 0x17e2, 0x3f, 0x8, 0x4, 0x101, 0x6, 0x33, 0x7, 0x3ff, 0x3, 0x0, 0x6, 0x6, @perf_bp={&(0x7f0000000000), 0x2}, 0x20010, 0x6, 0x200, 0x9, 0x1, 0x5, 0x7}, r1, 0xe, r3, 0xd) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 15:08:45 executing program 5: socket$netlink(0x10, 0x3, 0xe) shmctl$SHM_LOCK(0x0, 0xb) 15:08:45 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000000)={0xe, "0e57852ef629928c4186a2abc1a55decd0c58f5dd1af8e082d665a54aa21b4378d51226538b9f3298143c5e2ef793e7ab239d11fc0e9edd974ed5b48c997afa8233934d525e9f35b56035c1c8e1b979ce615645d5926d8c9e8e08361dde5cb90a8322d78b5ef4cf20f147e1b3decbddccd00f06c76908968dfa9299874f4b2eb"}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) [ 711.346583] RAX: ffffffffffffffda RBX: 00007faee867bc90 RCX: 0000000000458c29 [ 711.353951] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 711.361251] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 711.368540] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faee867c6d4 [ 711.375837] R13: 00000000004bf216 R14: 00000000004d0458 R15: 0000000000000004 15:08:45 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x4, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) 15:08:45 executing program 0 (fault-call:4 fault-nth:21): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:08:45 executing program 1: r0 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000080)={'ip_vti0\x00', {0x2, 0x4e22, @local}}) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000001200)) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0', [{0x20, '\x00'}], 0xa, "caa3dd1b4a6ebef2d83e2fc4716675dcd9964f2ebd167ea294dd9293981bbff5c15bcba3074979b06d66cc129d4d4951ec6dc4a88a885d0df44b5f0cff9df34ea73ddf0636e2a00dbcaecb9807bb75a966d042c9bb25c2ec537b3f140cb064080b56a7ead2207473e9c6d2369ff235e91565f0d039b6a51dff9130d063aee016fd8e0b00c53ffb95c79695828983f4eada39f6874efbe6f3ceaabfdde886beb4b64e9972325014b3891e83b0d8d87e652d12bc3a8d8ecb34ead6208088f53a0da8b626c119e69f7e180c0428c3d28c0eced07effafc9560eb5135eca2d03ffee0bad5f9391649ace243149f9e97654a66e72586193a31e6c33c547741f33a037b19f493dfac9b8f3fdb6ade5690df42d60235f1a2335e13bce05ff3b329479e35e7e389f9e780b288977bd5ea46d48d16ab101f5768f907f154d42769914551da61b0092efe59b7cc82fdcd96345ff17dde9b00ae406d3c06406eba59fc8d1eb56797078e04399d803f887de864fb5525fcad0c251edb5a26a4384e0b603abc3a70a60dbeab9f5763bd4ed3832350b1a42c97a4741a9f00bc2ceecd12ac5399ae5ce0f7db876e6860026217233613c32cef30e89d7b3e38dd07b54ff7b61b0e63ed97db9ba9fff3f9a329b75304b5713500f9ae8043ac397dc07c149d35139b64c86afb8c98f742d932045332999680c04df29c6225b56ec98ad3280424eca31752a1d82804d76d6575a85f4e82b292dc51a182f44f7ab3bdc1b8547df0f73f4d0faa40b7b5e51610695d5747a6cfc14d4b008c77fb9703dee016eec7df73ad1bf9f416ad5a9e7099bf2adc98987713827145633b564ef1395cf6634b5710cc9bbbb04fa78a3f8abff93ca5d0b15a4aa81a5a72e8f5fe62eb6958b1ffa454577ae2a6ed70cca9e23083656212dff5597306bb2eb6347c6eac29be0ecd52684b35821cfb029e2b7acba8e67f38da06e9f6a2798caa37b633a023f3a2e22976a478876dde0a94b27cc54a2b1f3f2b14ac64c2ea9b67060bcfed1cb02fe23116155a15c10602800cf8a2e71894accc83c13ef420efdb4b08343d852fd2ebae84e1e5a9d525c16370fe00a1b5e0a58c1b4f8433165aa104c8161ad77da0eea2238d1e4ebdb3115e476c448e144491a6c1d41c44efa53d5d16c0774655f03787a5a08c23444992c1a87946e37fa5763d19ea9431700d50ef4161acfe367cdfc29be22d7715150fc6e57edca42b4cf42aa9e6ced1ad627305adfc7b0fecefcf185f80229ba4546a69a8870a674f4308d4217af28af1fe4669c4ab3704badef36821cfbb231fea1d1fec48f1a9e744331d43e629c082cb4b6fca21bb2a53406bb5e8bc418dba0780e3c536732891ec17ed8eac91259382fce5eed9210d88367f79d74f1d0ac09936f65d6f8d3be0335342e2ca31e1ba35209180c92591a43b40f056221e1ffc0c7749a368369fac5318ff71a1c126827290ff9c5df5b5f1bd96b09a8f2d1c0eb20490f8b1c9349ec0b59413589e17fd3e06bd97c52cb092a179b53226ac87406c4e34affff27b998899ce0865fe8ecfa67f582061f42a1b83da62e0314d36099812285cb6d7554d74ff82557843df0a09648a7aa34084f8a93dfb59f6e679126528681bbe55d86734969ee99cdb33182c4ff16d8767114607128c713d64f6a1af58e4ea6e5a61e143776a7ba44100964b405c012595f80d22ab43d9ef91ea002a558afa8a2af7d02401b60090d6abf0930d7f46b0afdbea81807c34f99f3813144fa6c82f6c866f9b0674c35a45d83976ddb36509893b3aad95bb9e184c5eecccc34c1c4c621c00dd0547ea4cd4979ca6342d7d538c3a428e8c9f93fa392f049d07537c619820d530d8ab6cff4217a775b80060e5ce79647101cba96d7e5f2dffbe13b64aac35554f7e0d76612add672bb74668dd75225e75271eaffe0fd3a48119f0463113ba0ab11fe5b264746390baacea3e678e44f62c17131f73b6f1922b67abe6cf2164c99a4fffdf763bc62e5fb24f2882f4abd89ecc3c4f65c01f8cbaede87ab47ad6c6cc443c77057ee503f28eaa56975c80deb116135ca92b5615a60225daddc9c145015d452aa8b14f4c833ff377659a07e7af3c5146332c8af06b0cb6064127ef2ef355b1e737748136698e1441ff241755630328447e8d55c24686c9fc56b3707f6dcad991c7d8cf2a383c8d6dd776b55c7c92fe043bda8eaf2d8a0963e07c1e166a6c0b3c352fdcb1f182f63c9d6f205754aabffa8a0a12a0ee6c157ffe11bebcb7c3e495eb5f28844e914edcebdc4070964fc43f848116d9ee655abeaf7d11857774a8c0711492463580b65e4bf70577a171aa74ef808315954b959bf7ac1d05bbc03a7bbd8bb43fa8d8ff61137fc416434f82267c0d7c326c84523f2b0e9e34626cd4923df48fb60c031e4a7eee865aa12f246db44b788d261adb512dec9a05ce437b8b9078355f7a207cc91b52b27a82fca74c1121d3b474eb4ba1cd3df14c7e3e15fe116634a7305c7a4d6d626df6317fd6ef5c2e16309f4e6872ac51056acccd7edc857f13a102a287ef925eb0a32ab1a4c933a1e8f97fb3271798cf46e96e32938eead7db11acacd0ca03cc66af96e690f4cb6d32e0f1a84b259913cecb5dd97e0a405233898e91c11f09294c6c5273520cd24a4be5578aad8b4f07ed2d85de3a11041c2dbd1e0bd2be4ae9cfa00207189309a0293f5d98fd17f66ccc36505ceea9b6f737f8cda5bc7b6a71009e17776997ea0ca9a3fdbc9f3a0d58d5138440b5e3414974a7e9b2fd3fb45d6d136b810cc2a2019900cffc595f5e28f9476a96e198e217dc232a004942ef62e2c61ce162ef42920a50b716174bea702c5cba82cc2d77d7402366b413dea679068008aa7d8bbe30f2ff9528c72eb834293a3a7df6ec6e313208cf3994ffcf3d2fc670d02a1807db94b9a3287d65a95393b1f07fdc5d7a72fe7c29732a9ca190b6e615bf88c6bb65c8362e62a321e1f2eb5a0558cdd8695ca39c6f15fa4a49b07921ce861dec87a6248a10488e27c279a8ba272c0529e5a1647411d4f88501f46459b073e265eb92cb4b47176fc32a68f02a0c1d334db2d6622ab253c58a7716b420e1004768b3c9a81654d315aa8d193dc851fc0d54f71290e8353c998b065dc97b5348804a746823530d4471acacd5d2d48804518de73457de81765a954663a09ac9150bc119652d717ebfac40ef0c789e86475d107af6d1a339a6872acbae966f9c3ca9382af419acb7c8e34edd34bd78ecdd4cbb704de6ff02b373360d4e9eca695eebab27e6be68239a9ac2dc6932fe09ec6bca803d3b1eea2fe198b86bce16bea7bbfd7f4e2773677524f7da92ed35243bbdaa3cf01d088298a000845fe92cd9dc482a068f8d32eac78896ab5f1b45ff3d62a36bab47272ca8282076831cc36bdbe548dbde9ae43748fc815458edc29c4402cd3dc6b467e817e1738f81089700ad020ebae5b763c30d796eae45d211fa5f1a97cae75326b825f21ed3d985803bb408ef9f3307e872e2c7d882e37b4f499d6994669225315eeff2bc866c75e4db90975b3e0063b5678e9e40f20299f0f7a7ceb2b8515dfb273b3b06c1ffaa8015ffef472d14aacf6fc8e0947390c21ab0522ffa819f9c036fb4f8a7ac4a481909f9afeecd194eb6fb5c02d16f068609614af7cdc30409e8687cdd8a35bf2f5fdf7cdbbe5c9a8df234f16bdc18d4b888997ac523c4bf619e277b43cb70e122e5efa1c77bdb3fefa22159b75844bd8a139ac0b8a65b38984c7c7fb747d3db159c2629456a8f0064ea5f9a0dc1740a451d3348296fcbca4ac45751d59e220b4f0382151ace2305fcd2ca8b39c3666adb1defde757b5b5e721679bd47c31f277790a8184ba23def61636f464dc4987c83acbc40ddee8103b719cd6b67c9dcf74d3bc33bf3452721ed6c58ceb32d25869671f21eee4a21902b26092d090557b6338af14f00728c5067b2ce4cd5c82fffb80c8c2354e659ce0ce00c0953e6f24d0c1563309ca452a4e2a947d151a57d7f1ec01d5b87872314e7d03d55f149351f915f2e6d0c0122f085889804bdcc86ae5db5a73c8d46a53e4db7a8bc2c278aaf4444c532b2f027ee6c29671aca20f02e5a1fc32c5d47b9c23ee265a49fc4a6d387e372867be08d1990bbe7074293a116c92f8891e3d597ba1f4f0a4122b63d4220f3b4ef3598adf33da2397c59a0310f30634f3fbf57ce400e8f6b6a9bbe234f97b4ea28087c0ae8915cddf253e3123a7d66ce0abbb74d75169e0b9766c447b54fff78a189a9bd2be7ee62b9ecbc22bab9d97fd5f9311bdb99d5743a4242be2e1da72ef41d993fe8f3ee23828bb74b29d82dda0bd6cb69df872fd8b06bb991a57fe3b09502f42951b68fc2d3d1e6da6d9c55b2ccc4f34677d641894a9de811e353fa60b4b6b58796ca5f5ecb96f35bdf0088f6ed2fc45280ebacb3d31b7fbc313e63a59673aa6b5ffdbd808950afb84cb9f496f53d348fc3e1cbde6fb2666b38376419630b2a6108793a4e78760edb3cdce93e6a443ee497020928c4917852d076a89c5440407025bc5440662d4b9ae5caba7e8a130a481f81652d8d47da9153f5101506bb9a87ade23fe922c2d07bad632275a2ce53b493350ddc954a27ce27c6939013754ab7a25f66280968dade9cc28337a201457407e04f4038580ec761be3bfe9aa42c3708ae6450ae0da8bd994c0d85a47f78f7a20f6dab6b45aadeb2ca703615ae04bacb42f6662674f43625523c249e8393f7d07b83eb3aadbede27996f81a611fc2523e43f103c77b36ea86556095f0ee845b2bcd37c67d0eeb98f5a01c8076fac24ca33b9e9999b4b7f743dca96fa8cdd78783ff9b6d46042ecc4621d3523999fd9726d399d20052fe58a0854cf90fa2e3f58e8b6804fc1ab1e6c8c0b464a7b773f7a1faa1de6811826a0861dd5299af57ebddd55106c9da7eadf2a9ffd217a4ae8a438f87fe7be37f8eb73c83c725e655cc69057d478f779a3f390d5a8e1935b7d554f2c151f28fb4e87575f3583f91cf4d6f169b75acf962cff9087627d3abf38b1aa29cba9e8891df7c4fd7bbdf2626c459819deec6c20f8454e36358e107a61890edd600f5e57e54c29988af1ccfb79c1695e8dcceaccb97614daddae4840bfefcede3dd7f6c06987f119458ae72dc7bef95869527f25d18c4f844a26e83ec139a0d066081f1c1881bd240daed2c98babea1c6a45432cf0ff57ee5f99fea63f2ef802cd88cb4ab0891a14da0a26d007bfc3e6843b18170339747909764681b509a8478217331d7a1ef582e8660ecdf82b16d37d39564d4955143bb458c406457c6b6dde611c45e494d3c1852a560a0eda700758225e2970305f9d3b479cbf7dd5f0eec04a87c2a680dcdf3ffd2087e28f6e67e0a6977bcbb53fe3a375d46932b12b31dfd4965a7bf7aa1f11857782ceca16d7a7037479ed0317da0427487a105e75713c91ccd7de5b67b3d8f3e1d50da696eb72aa271c8fbbefc9ac003c84add9278167f6a7b9698bf95c7ceef3cc48a02f1f1695d6be2227c3ffb3e9a72e3676135a06670b2cbf2d89c538c9afefe0c0a74c4babb2edded301e349bba38d94de925032ef497942532b7c8cd33de686aaa2d33d6b47996259e8abcaebf65c03ebeed422fbee76cf688f8dc8086e9c3471ed24af5305ecacd420cd9a481223983bd5007d0874d5b1872fab3631363c7e857612424ea4091a56b218e51eba3f8c6c041d376d4233a378851f2e2575cc18568c712e81e5963f328c2319ab646ff20"}, 0x100d) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x12) 15:08:45 executing program 3: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f0000000080)=0x1e) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r1, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0) 15:08:45 executing program 5: shmget(0x1, 0x4000, 0xa0, &(0x7f0000ffa000/0x4000)=nil) r0 = shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ff8000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000000), r2, 0x8}}, 0x18) [ 711.608324] FAULT_INJECTION: forcing a failure. [ 711.608324] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 711.625856] CPU: 1 PID: 772 Comm: syz-executor.0 Not tainted 4.14.113 #3 [ 711.632795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 711.642164] Call Trace: [ 711.644775] dump_stack+0x138/0x19c [ 711.648439] should_fail.cold+0x10f/0x159 [ 711.652709] ? __might_sleep+0x93/0xb0 [ 711.656614] __alloc_pages_nodemask+0x1d6/0x7a0 [ 711.661308] ? __alloc_pages_slowpath+0x2930/0x2930 [ 711.666359] alloc_pages_current+0xec/0x1e0 [ 711.670703] pte_alloc_one+0x1a/0x100 [ 711.674523] __pte_alloc+0x2a/0x2d0 [ 711.678163] __handle_mm_fault+0x2a8b/0x3470 [ 711.682587] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 711.687347] ? find_held_lock+0x35/0x130 [ 711.691413] ? handle_mm_fault+0x1b6/0x7c0 [ 711.695763] handle_mm_fault+0x293/0x7c0 [ 711.699842] __get_user_pages+0x465/0x1250 [ 711.704096] ? follow_page_mask+0x1550/0x1550 [ 711.708599] ? save_trace+0x290/0x290 [ 711.712401] ? vfs_copy_file_range+0xa40/0xa40 [ 711.716997] get_user_pages_remote+0x1bf/0x3a0 [ 711.721594] copy_strings.isra.0+0x488/0x8d0 [ 711.726016] ? remove_arg_zero+0x480/0x480 [ 711.730251] ? prepare_binprm+0x5d3/0x7f0 [ 711.734853] copy_strings_kernel+0xa5/0x110 [ 711.739192] do_execveat_common.isra.0+0xda2/0x1dd0 [ 711.744215] ? prepare_bprm_creds+0x120/0x120 [ 711.748714] SyS_execve+0x39/0x50 [ 711.752169] ? setup_new_exec+0x790/0x790 [ 711.756320] do_syscall_64+0x1eb/0x630 [ 711.760204] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 711.765061] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 711.777300] RIP: 0033:0x458c29 [ 711.781100] RSP: 002b:00007faee867bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 711.788828] RAX: ffffffffffffffda RBX: 00007faee867bc90 RCX: 0000000000458c29 [ 711.796201] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 15:08:45 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x4000, 0x0) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, 0x0) 15:08:45 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) close(r4) fcntl$getownex(r3, 0x10, &(0x7f0000000180)) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000000140)) ioctl$PPPIOCGDEBUG(r2, 0x80047441, &(0x7f0000000040)) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x2) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r7, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) 15:08:45 executing program 5: shmget$private(0x0, 0xa000, 0x1016, &(0x7f0000ff6000/0xa000)=nil) shmget(0x3, 0x4000, 0x20, &(0x7f0000ff9000/0x4000)=nil) shmget(0x0, 0x2000, 0x0, &(0x7f0000ff5000/0x2000)=nil) r0 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ff6000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x3, 0xc4000) setsockopt$llc_int(r1, 0x10c, 0x0, &(0x7f0000000140)=0x3ff, 0x4) r2 = shmget$private(0x0, 0x3000, 0x1040, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000000)=""/87) r3 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x800000003, 0x4) mknodat(r3, &(0x7f00000000c0)='./file0\x00', 0x104, 0x1) 15:08:45 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0, 0x400}], 0x0, 0x0) 15:08:45 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYBLOB="51d316b9f32eeec279cc4a8fa036bc9b79e2c7df2c9fab90f1ef4b5e7254fada64c0363ce8fe24662980361fd53bf5359441168ffae074b9a03983a086b8cd516a71d5efe2d202d1dbbf2ff673e092ac523fdd65588e0ab243bb12163632e26a209ce0b0d4458369211c0030efcd9b4b0373fd5d542432cce7f1e7e5a082e6c6d119dcf82484f55c02575c519758f4524e7656b668843ab0d996482246b8c131bfec1ff405298485f74557d27f18e8574a73ad5b09e0e8861af6fb534b5749918796c8b18d596b5a4cf1813309d876dd144b0cf828de4accaa", @ANYRESOCT=r0, @ANYPTR, @ANYRES16=r0, @ANYBLOB="431ee88b4c3528217712ae3caae8b120e5fe286d102b3828208cc430914e1413a6cf694ca70fe3d890bf7ddc13966e6206c51d94fcc84034a666ed9b13cb3352e41c80fdb20b172b6934419c2178d119b54f6768f8526c4d7157ef8b3bae81"], 0xdf) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000100), 0x4) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) [ 711.803565] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 711.810839] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faee867c6d4 [ 711.818490] R13: 00000000004bf216 R14: 00000000004d0458 R15: 0000000000000004 15:08:45 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) times(&(0x7f0000000080)) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:45 executing program 5: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000040)=0x3) r1 = shmget(0x3, 0x3000, 0x40, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_LOCK(r1, 0xb) 15:08:45 executing program 3: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/user\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r1, &(0x7f00000000c0)={0x27, 0x0, 0x1, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a5504000000000000449b6f0300e1ca917376a4870cef980e7800000000c0d79300"}, 0x366) poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0) 15:08:45 executing program 0 (fault-call:4 fault-nth:22): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:08:45 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM', 0x3ff}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) 15:08:45 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) write$cgroup_pid(r1, &(0x7f0000000080)=r2, 0x12) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x7, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 15:08:45 executing program 5: mount(&(0x7f0000000440)=ANY=[@ANYBLOB="c23e1507e517983e69178faab23ff00676201f9c4483b4d8afbcd3a9fba07111d0041511fc2150a625b664592a3a98cbeddd978014e72222ddd12b4ce4367e19eb5252b36bebebc167778286ffa54cc061a5a61e19d6b0c62d1061732403cf3fd0f68819a25d74c628bf4f5996a0a6e935b1a3d29dd4b2a5b1c46eda2efa0b00bba4e33a40aee49aa022d516ba5f4e58330841a78e2b6df1c23b4ce5f5f42ab878bbb5ca57b6c0b6d0551901d3b4ee5e14e7712941c6b314"], &(0x7f0000000280)='./file0\x00', &(0x7f0000000400)='qnx4\x00', 0xfaff3b86a9eccbe6, &(0x7f0000000300)='/dev/cachefiles\x00') shmctl$SHM_LOCK(0x0, 0xb) r0 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x80000) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000500)=""/4096) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x400, 0x0) write$vnet(r1, &(0x7f00000001c0)={0x1, {&(0x7f0000000040)=""/218, 0xda, &(0x7f0000000140)=""/107, 0x3, 0x2}}, 0x68) 15:08:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x8000000000009, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x17}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) mkdir(0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000000c0)="a96e7e766da68b5d09d87f47f70bf9f8756cea8230decf7198d8b40e464a8265c63bab258d1ed15333c6d616334651597bde1f4df3c951cb201cd05845440d67336b1bb7c2abf7dd7b3e1a826bebca1894f54830671dc788fa2781a14681ae800ea57a8f9b5427a523d3", 0x6a, 0x0, 0x0, 0x0) sigaltstack(&(0x7f0000ffb000/0x4000)=nil, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x0) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x149) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x5, @empty, 0x8}, {0xa, 0x4e22, 0x6, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}, 0x0, [0x72, 0xb6, 0x80, 0x3, 0x100000001, 0xf7, 0x0, 0xff]}, 0x5c) r4 = pkey_alloc(0x0, 0x1) lstat(&(0x7f0000000280)='./file0\x00', 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) pkey_free(r4) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, "86367f1f13d762d807f8133dff372f1e77f5075c3b3cf2214a2e6131555d291e"}) r5 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGLED(r5, 0x80404519, 0xfffffffffffffffd) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) 15:08:45 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="d8cd425a3549027f07d218dfee00"], 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/bnep\x00') ioctl$TCFLSH(r4, 0x540b, 0x10001) close(r3) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r4, 0xc0305616, &(0x7f00000003c0)={0x0, {0x5}}) r5 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$VIDIOC_TRY_ENCODER_CMD(r5, 0xc028564e, &(0x7f0000000340)={0x0, 0x1, [0x3, 0x6cb, 0x0, 0x0, 0x0, 0x7f, 0x5, 0x9]}) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f0000000200)={0x80000000, 0x0, "403f7ad92c250160496ea3ca1918d2241510a209be192bf04f33fa360343ab2d", 0x0, 0x400, 0x0, 0x3, 0x0, 0x9, 0x3, 0x7, [0x0, 0x0, 0x2, 0x3]}) close(r2) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000000c0)=0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:46 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000000080)=[{0x27, 0x0, 0x3, 0x0, @time={0x77359400}, {}, {0xf401}, @addr}], 0x342) 15:08:46 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0xfffffffffefffffd, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x40, 0x6001) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x1, 0x6, 0x10000, 0xff, "0068deadcac13497ec97e1217a8e02ebabe382041fd577fe6b92e673166676480cae5d98aac31d70f96e8996ed7fd46d0cba2e04ae90ce95a4cf4bcf970a80", 0x25}, 0x60) [ 712.203189] FAULT_INJECTION: forcing a failure. [ 712.203189] name failslab, interval 1, probability 0, space 0, times 0 [ 712.215122] CPU: 0 PID: 825 Comm: syz-executor.0 Not tainted 4.14.113 #3 [ 712.221997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 712.231367] Call Trace: [ 712.234062] dump_stack+0x138/0x19c [ 712.237720] should_fail.cold+0x10f/0x159 [ 712.241893] should_failslab+0xdb/0x130 [ 712.245965] kmem_cache_alloc+0x2d9/0x780 15:08:46 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @note={0x80000001, 0x7, 0x15d200, 0x4, 0x3}}], 0x30) [ 712.250132] ptlock_alloc+0x20/0x70 [ 712.253869] pte_alloc_one+0x60/0x100 [ 712.257682] __pte_alloc+0x2a/0x2d0 [ 712.261332] __handle_mm_fault+0x2a8b/0x3470 [ 712.265799] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 712.270574] ? find_held_lock+0x35/0x130 [ 712.274680] ? handle_mm_fault+0x1b6/0x7c0 [ 712.278941] handle_mm_fault+0x293/0x7c0 [ 712.283017] __get_user_pages+0x465/0x1250 [ 712.283034] ? follow_page_mask+0x1550/0x1550 [ 712.283046] ? save_trace+0x290/0x290 [ 712.283058] ? vfs_copy_file_range+0xa40/0xa40 [ 712.283077] get_user_pages_remote+0x1bf/0x3a0 [ 712.283094] copy_strings.isra.0+0x488/0x8d0 [ 712.283112] ? remove_arg_zero+0x480/0x480 [ 712.283121] ? prepare_binprm+0x5d3/0x7f0 [ 712.283135] copy_strings_kernel+0xa5/0x110 [ 712.283149] do_execveat_common.isra.0+0xda2/0x1dd0 [ 712.317683] ? prepare_bprm_creds+0x120/0x120 [ 712.317701] SyS_execve+0x39/0x50 [ 712.317712] ? setup_new_exec+0x790/0x790 [ 712.317727] do_syscall_64+0x1eb/0x630 [ 712.331703] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 712.331725] entry_SYSCALL_64_after_hwframe+0x42/0xb7 15:08:46 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000040)=0x7ff) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x3, @tick, {0x0, 0x26}, {0xf401, 0x3}, @addr}], 0x30) 15:08:46 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) r1 = dup3(r0, r0, 0x80000) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000240)={0x6, {{0xa, 0x4e21, 0xffff, @dev={0xfe, 0x80, [], 0xc}, 0x5f0f}}, {{0xa, 0x4e20, 0xfffffffffffffffd, @empty}}}, 0x108) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) r3 = openat(r2, &(0x7f0000000200)='./file0\x00', 0x40000, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) poll(&(0x7f0000000000)=[{r0, 0x4000}, {r0, 0x80a1}], 0x2, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r4, 0x408c5333, &(0x7f0000000140)={0x4, 0xffff, 0x9, 'queue0\x00', 0x3888}) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) [ 712.331734] RIP: 0033:0x458c29 [ 712.331740] RSP: 002b:00007faee867bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 712.331750] RAX: ffffffffffffffda RBX: 00007faee867bc90 RCX: 0000000000458c29 [ 712.331755] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 712.331760] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 712.331766] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faee867c6d4 [ 712.331772] R13: 00000000004bf216 R14: 00000000004d0458 R15: 0000000000000004 15:08:46 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f00000000c0)) r2 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) accept$netrom(r2, &(0x7f0000000000)={{0x3, @netrom}, [@rose, @netrom, @netrom, @default, @rose, @remote, @netrom, @default]}, &(0x7f0000000080)=0x48) 15:08:46 executing program 0 (fault-call:4 fault-nth:23): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:08:46 executing program 5: shmctl$SHM_LOCK(0x0, 0xb) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x14b) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x100, 0x440) ioctl$BLKRRPART(r0, 0x125f, 0x0) [ 712.483731] device nr0 entered promiscuous mode 15:08:46 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0xc0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x8, 0x7ff, 0x6, 0xb6b, 0x80000001, 0xffff, 0x200, 0xfff, 0x200, 0x7, 0x8, 0x8, 0xee4}, {0xfffffffffffffff7, 0x401, 0x7fff, 0x6, 0x3, 0xfff, 0x1, 0x6, 0x5, 0x6, 0x40}, {0xff, 0x3, 0xffffffffffffffe0, 0x2, 0x6, 0x7fffffff, 0x1f, 0x3, 0x5, 0xfffffffffffffffd, 0x7, 0x2, 0x7}], 0x3}) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) r2 = dup(r0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000140)={r3, 0x5a, "10dcfefc7bb67b65025c2094ef544fddc045b1573ccc792e9d028fc5aa57f91493e04df67bf94627d5d6a74a0bccc05fbbfc76817c741c6881306c853b0640edabad8fcb0643f84322f209a5b85de5a2a0143b56c807d56567ee"}, &(0x7f0000000080)=0x62) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 15:08:46 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0xd5, 0x0) 15:08:46 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x800c0) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000040)={{0x21, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x3, 'dh\x00', 0x10, 0x1, 0x7f}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x12007, 0x8, 0x99, 0x3}}, 0x44) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) [ 712.652480] FAULT_INJECTION: forcing a failure. [ 712.652480] name failslab, interval 1, probability 0, space 0, times 0 [ 712.709000] CPU: 0 PID: 860 Comm: syz-executor.0 Not tainted 4.14.113 #3 [ 712.716002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 712.725544] Call Trace: [ 712.728153] dump_stack+0x138/0x19c [ 712.731811] should_fail.cold+0x10f/0x159 [ 712.736076] should_failslab+0xdb/0x130 [ 712.740063] kmem_cache_alloc+0x2d9/0x780 [ 712.744242] ? __might_sleep+0x93/0xb0 [ 712.748169] __anon_vma_prepare+0x62/0x390 [ 712.752516] __handle_mm_fault+0x2b72/0x3470 [ 712.757040] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 712.761982] ? find_held_lock+0x35/0x130 [ 712.761994] ? handle_mm_fault+0x1b6/0x7c0 [ 712.762015] handle_mm_fault+0x293/0x7c0 [ 712.762030] __get_user_pages+0x465/0x1250 [ 712.762047] ? follow_page_mask+0x1550/0x1550 [ 712.762057] ? save_trace+0x290/0x290 [ 712.762069] ? vfs_copy_file_range+0xa40/0xa40 [ 712.762087] get_user_pages_remote+0x1bf/0x3a0 [ 712.770485] copy_strings.isra.0+0x488/0x8d0 [ 712.770504] ? remove_arg_zero+0x480/0x480 [ 712.770513] ? prepare_binprm+0x5d3/0x7f0 [ 712.770526] copy_strings_kernel+0xa5/0x110 [ 712.770538] do_execveat_common.isra.0+0xda2/0x1dd0 [ 712.770556] ? prepare_bprm_creds+0x120/0x120 [ 712.770571] SyS_execve+0x39/0x50 [ 712.770581] ? setup_new_exec+0x790/0x790 [ 712.770595] do_syscall_64+0x1eb/0x630 [ 712.835721] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 712.840858] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 712.846684] RIP: 0033:0x458c29 [ 712.849876] RSP: 002b:00007faee865ac78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 712.857599] RAX: ffffffffffffffda RBX: 00007faee865ac90 RCX: 0000000000458c29 [ 712.864908] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 712.872178] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 712.879472] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faee865b6d4 [ 712.886837] R13: 00000000004bf216 R14: 00000000004d0458 R15: 0000000000000004 15:08:46 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000540)='/dev/rfkill\x00', 0x101006, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x402, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000480)={0x3, 0x0, &(0x7f0000000300)=""/67, &(0x7f0000000380)=""/69, &(0x7f0000000400)=""/106, 0x7000}) r2 = memfd_create(&(0x7f0000000180)='\x00', 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x4202, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000100)={0x0, 0x0, 0x3, "4589e9abbd5cc56e86a7a4f2f1fbcaa42f6e439656bbcb399701f82547d62764", 0x7031775b}) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) write$binfmt_aout(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="6be0df692ac8ea7cbf75165ce3400f84c9d3472e1535e0e67e3c8034e34fdba31bb0a258dc54c18fe4ebc55c328a735ceacd3319429c8ee5b27917e7606379be6fdc0330"], 0x6) write$binfmt_elf64(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="00660e1c398eef4e9ea93c86f11a8f6d881d7730ff234db1795e6d942cae66a79de23e6b0ff06003bd0bccca63c046eccde490b93e09f7f1034a04f9a0"], 0x1) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f0000000200)=""/142) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000001c0)={0xfffffffffffffffa, 0x9, 0x5}) sendfile(r0, r2, &(0x7f0000000000), 0x12) write$P9_RUNLINKAT(r1, &(0x7f0000000140)={0x7, 0x4d, 0x1}, 0x7) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) 15:08:46 executing program 2: madvise(&(0x7f000090c000/0x2000)=nil, 0x2000, 0x12) clone(0x0, 0x0, 0x0, 0x0, 0x0) 15:08:46 executing program 5: shmctl$SHM_LOCK(0x0, 0xb) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400000, 0x40) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) 15:08:46 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x50243, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x1, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f00000002c0)) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000100)={0x12, 0x5a, &(0x7f0000000080)="96be91ce40aeaa0bbf2ca838ca407905291581b6dbf8fe3f856fba4181541972d374171102cd0e8d8e738b4f466719bf873eddd252e1aaab77e4302346b504717f93ca407eba7fab20fe6a9fbf8faf8ae5a4769d6d1e64d257f1"}) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) 15:08:46 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 15:08:46 executing program 0 (fault-call:4 fault-nth:24): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:08:46 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000080)={r0}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0, 0x8000000000}], 0x1, 0xffffffffffffffff) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84800) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x4}, 0x10) 15:08:46 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffffffe, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde(Q\xf0\x1b\x7f\v\x01O\xdf\x91\xee\xb7\xc1F\xc4\xa8\xe4\x0e\x83\xa6\xed\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) 15:08:47 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x4000, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1, {0x4, 0x0, 0xaba, 0x8, 0x8, 0x8}, 0x10, 0x7}, 0xe) shmctl$SHM_LOCK(0x0, 0xb) [ 713.037084] QAT: Invalid ioctl [ 713.052130] FAULT_INJECTION: forcing a failure. [ 713.052130] name failslab, interval 1, probability 0, space 0, times 0 [ 713.081575] CPU: 0 PID: 887 Comm: syz-executor.0 Not tainted 4.14.113 #3 [ 713.088552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 713.098026] Call Trace: [ 713.098051] dump_stack+0x138/0x19c [ 713.098072] should_fail.cold+0x10f/0x159 [ 713.098091] should_failslab+0xdb/0x130 [ 713.098109] kmem_cache_alloc+0x2d9/0x780 [ 713.116813] ? __might_sleep+0x93/0xb0 [ 713.120763] __anon_vma_prepare+0x1b1/0x390 [ 713.125150] __handle_mm_fault+0x2b72/0x3470 [ 713.129591] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 713.129606] ? find_held_lock+0x35/0x130 [ 713.129616] ? handle_mm_fault+0x1b6/0x7c0 [ 713.129642] handle_mm_fault+0x293/0x7c0 [ 713.146935] __get_user_pages+0x465/0x1250 [ 713.151191] ? follow_page_mask+0x1550/0x1550 [ 713.155730] ? save_trace+0x290/0x290 [ 713.159664] ? vfs_copy_file_range+0xa40/0xa40 [ 713.159687] get_user_pages_remote+0x1bf/0x3a0 [ 713.159707] copy_strings.isra.0+0x488/0x8d0 [ 713.159724] ? remove_arg_zero+0x480/0x480 [ 713.177529] ? prepare_binprm+0x5d3/0x7f0 [ 713.182312] copy_strings_kernel+0xa5/0x110 15:08:47 executing program 5: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) move_pages(r0, 0xa, &(0x7f0000000040)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil], &(0x7f00000000c0)=[0x6, 0x663, 0x9, 0x5, 0xbf, 0xa56, 0x5, 0x7d5b], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) shmctl$SHM_LOCK(0x0, 0xb) [ 713.186668] do_execveat_common.isra.0+0xda2/0x1dd0 [ 713.191702] ? prepare_bprm_creds+0x120/0x120 [ 713.196217] SyS_execve+0x39/0x50 [ 713.199691] ? setup_new_exec+0x790/0x790 [ 713.203848] do_syscall_64+0x1eb/0x630 [ 713.207830] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 713.212797] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 713.218087] RIP: 0033:0x458c29 [ 713.221407] RSP: 002b:00007faee867bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 713.230605] RAX: ffffffffffffffda RBX: 00007faee867bc90 RCX: 0000000000458c29 15:08:47 executing program 5: shmctl$SHM_LOCK(0x0, 0xb) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x781301, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@gettaction={0xa4, 0x32, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x7c, 0x1, [{0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x1, @TCA_ACT_INDEX={0x8}}, {0x10, 0x18, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}, {0x10, 0x17, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0x14, 0x13, @TCA_ACT_KIND={0xc, 0x1, 'gact\x00'}}, {0x10, 0xa, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x14, 0xc, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x911de5cb24036c0d}, 0x4000840) 15:08:47 executing program 3: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x22980, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000040), 0x4) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r1, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0) 15:08:47 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, r0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e1d3f877e5eae453e55d7d64d00d4901baed21f7de92a8669b38ccd6260857dbf5ae46354569636517b50f805ae208258dbb7d0abe8d208f0f1bcc885c8ba93c", "7b3177f4fc2eb04172daa8fdd1c4c4cf144a23173b6605afb988de7e07195d78f7ddd19a3782fba5bfe2566c845a0c58b400", "ee52c10d1e72a9432c222985fcedff747a3131991a00000000000004002000"}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000200)={{0x2, 0x0, @remote}, {0x0, @link_local}, 0x0, {0x2, 0x0, @remote}, 'veth1_to_bond\x00'}) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 713.237886] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 713.245163] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 713.252447] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faee867c6d4 [ 713.259723] R13: 00000000004bf216 R14: 00000000004d0458 R15: 0000000000000004 15:08:47 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x113, 0x8}}, 0x20) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) 15:08:47 executing program 5: socket$rds(0x15, 0x5, 0x0) shmctl$SHM_LOCK(0x0, 0xb) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0x6}, 0x1) 15:08:47 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000002, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f0000000000)=[{r0, 0x3}], 0x0, 0x0) 15:08:47 executing program 0 (fault-call:4 fault-nth:25): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:08:47 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:47 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$NBD_SET_SOCK(r2, 0xab00, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) 15:08:47 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x202, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 15:08:47 executing program 2: r0 = socket(0x400040000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x80000002720, 0x0, &(0x7f0000000080)) 15:08:47 executing program 5: shmctl$SHM_LOCK(0x0, 0xb) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ptrace(0x4207, r0) 15:08:47 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f0000000040)=[{r0, 0x1010}, {r0, 0x20}, {r0, 0x100}, {r0, 0x149}, {r0, 0x4}], 0x200000af, 0x0) 15:08:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102201ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2}, 0x20) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 15:08:47 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x10000, 0x0) write$P9_RCREATE(r0, &(0x7f0000000040)={0x18, 0x73, 0x1, {{0x4, 0x4, 0x1}, 0x6}}, 0x18) shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffb000/0x3000)=nil) r1 = shmget(0x3, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_LOCK(r1, 0xb) 15:08:47 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r1 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) dup2(r2, r1) ioctl$CAPI_CLR_FLAGS(r2, 0x80044325, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r1, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) close(r1) 15:08:47 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="cbd3ecfc03044bc48f20a6ba9ad6257e7700e47eacfb39f27f615fe31a823c3af726edd4b20987134250da333f4d6070200f5c7c8c4b89b8cd849100b3f38213476faca54e5c1a266686e32c63d178d259feb7c6de01f93860024681a684256d745d6eb0d747d7af2c3162495dcc0cfb214fa4cd2172505a25e6f7125130dc2d85fa507699e751b49f5e68fac01195f1f85f4a8a0950b704"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x484001, 0x0) ioctl$sock_bt_hci(r2, 0xc00448fe, &(0x7f00000001c0)="4040e09876374483274b863c0b259dc62d12cfba397036b237c301edb0fef484db1af094dc03c57c98df3f0000000000000078721185c2de52284c89640242dfab6e4fd8a4ccdf0b00") sendfile(r0, r1, &(0x7f0000000000), 0x12) setns(r2, 0x24000000) [ 713.641780] FAULT_INJECTION: forcing a failure. [ 713.641780] name fail_page_alloc, interval 1, probability 0, space 0, times 0 15:08:47 executing program 5: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000040)) socket$packet(0x11, 0x0, 0x300) shmctl$SHM_LOCK(0x0, 0xb) [ 713.727792] CPU: 0 PID: 947 Comm: syz-executor.0 Not tainted 4.14.113 #3 [ 713.734877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 713.734884] Call Trace: [ 713.734908] dump_stack+0x138/0x19c [ 713.734927] should_fail.cold+0x10f/0x159 [ 713.734940] ? __might_sleep+0x93/0xb0 [ 713.734956] __alloc_pages_nodemask+0x1d6/0x7a0 [ 713.734971] ? __anon_vma_prepare+0x184/0x390 [ 713.734984] ? __alloc_pages_slowpath+0x2930/0x2930 [ 713.735006] alloc_pages_vma+0xc9/0x4c0 [ 713.735023] __handle_mm_fault+0x18f8/0x3470 [ 713.735044] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 713.786716] ? find_held_lock+0x35/0x130 [ 713.791052] ? handle_mm_fault+0x1b6/0x7c0 [ 713.791073] handle_mm_fault+0x293/0x7c0 [ 713.791088] __get_user_pages+0x465/0x1250 [ 713.791106] ? follow_page_mask+0x1550/0x1550 [ 713.791117] ? save_trace+0x290/0x290 [ 713.791128] ? vfs_copy_file_range+0xa40/0xa40 [ 713.791144] get_user_pages_remote+0x1bf/0x3a0 [ 713.791164] copy_strings.isra.0+0x488/0x8d0 [ 713.791181] ? remove_arg_zero+0x480/0x480 [ 713.829786] ? prepare_binprm+0x5d3/0x7f0 [ 713.833949] copy_strings_kernel+0xa5/0x110 [ 713.838312] do_execveat_common.isra.0+0xda2/0x1dd0 [ 713.843354] ? prepare_bprm_creds+0x120/0x120 [ 713.847962] SyS_execve+0x39/0x50 [ 713.851463] ? setup_new_exec+0x790/0x790 [ 713.855633] do_syscall_64+0x1eb/0x630 [ 713.859535] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 713.864394] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 713.869605] RIP: 0033:0x458c29 15:08:47 executing program 0 (fault-call:4 fault-nth:26): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:08:47 executing program 5: shmctl$SHM_LOCK(0x0, 0xb) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)=0x0) waitid(0x0, r0, &(0x7f00000001c0), 0x2, &(0x7f0000000240)) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10020200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, ["", ""]}, 0x1c}}, 0x40) 15:08:47 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x269, 0x40000) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000000)={0x7fff}) 15:08:47 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="2818fb060003b9bfb669da60c77eb8877ebcf8edfda2be372fa5942ae587c06bbbe945ae40d3ec948fb863a81bd68f189c9c85468959acbd734fd12a44673e72b16d3108f54eb874508f979ec4eac889f994e8e2a28c3a33bdec14b5c0c7c2fc5910e8c7bfa83a29eba03e4d8ea1f4056c5f20a76219463b1cb1caa533bf0a20e4f73ad25aead8fd439da65dfd14d7dc84a54a8b1c69e322ba0178df3ccf9dacbef4a6b330ad9ce3a7deb1055f5943acf9f1167deaba9ca4"], 0xb8) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) [ 713.872805] RSP: 002b:00007faee867bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 713.880525] RAX: ffffffffffffffda RBX: 00007faee867bc90 RCX: 0000000000458c29 [ 713.887805] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 713.895111] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 713.902395] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faee867c6d4 [ 713.909676] R13: 00000000004bf216 R14: 00000000004d0458 R15: 0000000000000004 15:08:47 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) ptrace$getenv(0x4201, r1, 0x1f, &(0x7f0000000040)) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) dup2(r2, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70), 0x0) rt_sigqueueinfo(r1, 0xd, &(0x7f0000000080)={0x11, 0x7fffffff, 0x2}) 15:08:47 executing program 5: shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmget$private(0x0, 0x1000, 0x600, &(0x7f0000fff000/0x1000)=nil) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffc000/0x2000)=nil) shmget(0x1, 0x1000, 0x4, &(0x7f0000ffd000/0x1000)=nil) shmget(0x0, 0x2000, 0x4, &(0x7f0000ffe000/0x2000)=nil) shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffb000/0x3000)=nil) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r0 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) 15:08:48 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x80000000000, 0x40, 0xfffffffffffffffd, "4d659f77d4e4e373047123b8c72cc32a554f91324b936bb7449b6f0300e1ca91deeb7767b255de0d7872736aa4870cef980e78f91561b1b594e4fcb8c0d793", 0x1b}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x792b, 0x0) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000040)={0x100000001, 0x7, 0x6, 0x9, 0x3, 0x2, 0x3}) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000140)=""/174) getpeername$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c) [ 714.038141] FAULT_INJECTION: forcing a failure. [ 714.038141] name failslab, interval 1, probability 0, space 0, times 0 [ 714.109079] CPU: 0 PID: 987 Comm: syz-executor.0 Not tainted 4.14.113 #3 [ 714.116062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 714.125537] Call Trace: [ 714.128241] dump_stack+0x138/0x19c [ 714.132193] should_fail.cold+0x10f/0x159 [ 714.136368] should_failslab+0xdb/0x130 [ 714.140368] __kmalloc_track_caller+0x2ef/0x790 [ 714.145055] ? ima_calc_file_hash+0x312/0x7c0 [ 714.149567] ? ima_collect_measurement+0x270/0x450 [ 714.154518] krealloc+0x66/0xc0 [ 714.157810] ima_collect_measurement+0x270/0x450 [ 714.162582] ? ima_get_action+0x80/0x80 [ 714.166685] ? ima_get_cache_status+0x180/0x180 [ 714.171372] process_measurement+0x7dd/0xb90 [ 714.175797] ? ima_rdwr_violation_check+0x3f0/0x3f0 [ 714.183175] ? __lock_acquire+0x5f9/0x45e0 [ 714.187487] ? trace_hardirqs_on+0x10/0x10 [ 714.191733] ? save_trace+0x290/0x290 [ 714.195574] ? save_trace+0x290/0x290 [ 714.199404] ? __task_pid_nr_ns+0x1cb/0x450 [ 714.203735] ? do_execveat_common.isra.0+0xfce/0x1dd0 [ 714.208936] ? find_held_lock+0x35/0x130 [ 714.213007] ima_bprm_check+0x49/0x60 [ 714.216845] security_bprm_check+0x9a/0xb0 [ 714.221279] search_binary_handler+0x6b/0x700 [ 714.225812] do_execveat_common.isra.0+0xffd/0x1dd0 [ 714.230846] ? prepare_bprm_creds+0x120/0x120 [ 714.235360] SyS_execve+0x39/0x50 [ 714.238816] ? setup_new_exec+0x790/0x790 [ 714.242972] do_syscall_64+0x1eb/0x630 [ 714.246863] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 714.251723] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 714.256920] RIP: 0033:0x458c29 [ 714.260115] RSP: 002b:00007faee867bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 714.267834] RAX: ffffffffffffffda RBX: 00007faee867bc90 RCX: 0000000000458c29 [ 714.275124] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 714.282413] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 714.289783] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faee867c6d4 [ 714.297059] R13: 00000000004bf216 R14: 00000000004d0458 R15: 0000000000000004 [ 714.309252] audit: type=1800 audit(1555945728.233:108): pid=987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.0" name="file0" dev="sda1" ino=18104 res=0 15:08:48 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000080)={0x1a, 0x1}, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x1800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000000540), 0x4aa, 0x0) 15:08:48 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000180), &(0x7f00000002c0)=0x4) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r2, 0x10, &(0x7f0000000100)={&(0x7f0000000000)=""/207, 0xcf, 0xffffffffffffffff}}, 0x10) 15:08:48 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000440)='\x00\r\xc0\xdbw\"\x05\xbc\xf0\x06\xa6\x9bi;b,\xba\xea4\x12\xf7$\xd9\xcd\xcd\xc6\x85\xf9\x1c\x12\xe7Q\xad\x00\x85XI9\xa3\xc3\xa1\x831\x97OP\x9aP\xdd\x95]S^\xc7\xf8\xcb\x131\xdf-vf\x10\x91oLl7^\xa7E6\xb2j\xa3\f\xfe\x17^f\xa1\xc5soD\x0f\xa4\x89^\xb8\xe6V5\'yR{\xef\xed\xd8\x1b\x9f,\x8ao\xfe\xcc\xe5\x1d:\xa1\f\xcc\x8c\xad\x8dDXx\x02IF\xd5\n\xa9*4\xec\xf84l\xc2L\xee\xd9qG\xab\xda+wc\xe2\xc7,!@\xab|\x18\xaf\xb0\xfa\xdb\xa2g\xa7\xac<\xc0\'\"\xbf\v\x94\xd9\xb2{\xcc\xd3\r\xde[\x11\x8a(S\xf1\xcfm\xd6\x93K\x84L\x86T\xc9\xe5h<\xa8\xfd\x85\xa9C\xfb\x1bn\xcc\xee\x8b\xdf\xd9\xcdE\xf1<~\x11Z{\x93Q\xc6\x12\x88\xcdD\xe0\x83\x9c\xc4\xe8b\xa5\x8cI!\xa6\x02\xd9\xec\xc3\xfd\x17;\xf2\xb5\xd5T{\x83tf\x02\xa8\xef\xc2\xf90\x80\x9fj\xda\x02\xdd\xa9\xe8\xe8T\xd8\xd5\xe9\xe3\xf1\x87\x10_-\x03\xf0\x97F\x8a\xdeq\x1e\xb2\x952\x03\x00\xb8\a\x1c\x85\xde\x86]&K\x06,\xd62\xcc\r\x03%j\x19d\x83S%\xd2\xa2\xbb5\xaf\xed\xa5\xd3\xc6(\xca\xce\x01\x17\x96\x1c\x19\x9eN\bK\xf6E\xbaO\xcchO#\xef\x88\xceb+Q\xa3\xc6]p\x1ex\xac\"\xd4\xd8\xa3\xbbx\xe8\xfe_\xa2\xde\xb7E7\xff]\x0e\x89\xa3\x10\x87\xe8\x05\x14\xbcD/\xb55\xbf~\x02\x1f\xc4S\ni\x851V\x1a\xc1\x81uz\x9f\xd3\x0f\xbc\xadc\xefV\a\xab/\xac^\xdc;\x92\x8e\x1f~\xb8VD\xbd\xdd1\xc3\xa2\b]\xb7N\xf29\xd2\xf0\xa4\xfe\x99\xd3,\x01\xd6t\xd6\xdc\xfbdU\xb86\xd7\xbe\x80\b\x00\x86\xd1|\xf1h\xc4\xc8\xa6\x9d\v\x036\x8b\x97\xc5\b\xc4n\x84>\xca \x06_\xe7\xf2qnu\xa2\x13\x7f\xfd4fj\x1c\"\xaf\xad.\x19\xe1\xd53\xd6\x9c\xfaZ\xd8\x89\xbde\x06\x8d\xb2\xd8!\xce\x00\x83l\x8b\x12}\xfb\xa9`\xdb\xcd\x8b\xcf9\x15\xbf\x87G\x9d\x907\xa0[[\xd9[:\xe4O\xab\x80f\xe0\xac4\x12\x82\x84\x93\xa6Y\x9c4u%\xd4\xe8\xa5E$\x1dS\f \xfc\xe1P\xa9Xqu9\x01zGG\xc9V\x9b(\xb0K\xbf\xd8D\xc2\f\x0e2{\x1d\x11G\x7f\x1ak0\xf7\xf1/R\x96\x14\x94\v\x15\xd2Q\xf4\x01L\x18\xd7\xd4c\xf1\xaf~FL\x18v\x93\xecr\xee\xcbi\'>\xff\x00%A\xd7\x17\x06\xa2\x01\x84i@\xbc\xcd\xbb\x80\x1d\x94\x8a\xb1*\xbb\xbdu&\xd4\x86\xc4\x94w|K\xe1f\xc2=l\xa65\xb0_\n\xcb\x83x\x96\xa3lI\x18\n\xbb,9\xf5\x8e\x8c\xdb-C\x86\xe0\x95', 0x3cf136f0c8079a35) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:48 executing program 5: shmctl$SHM_LOCK(0x0, 0xb) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40) 15:08:48 executing program 3: r0 = accept4$rose(0xffffffffffffff9c, 0x0, &(0x7f0000000000)=0x35a, 0x80800) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r1, &(0x7f00000000c0)={0x27, 0x0, 0x1, 0x2, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x10000, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000140)=0x6, 0x4) 15:08:48 executing program 0 (fault-call:4 fault-nth:27): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:08:48 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000002c0)={{{@in6, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f00000003c0)=0xe8) r2 = getgid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000400)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000500)=0xe8) lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x8c8021, &(0x7f0000000600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@allow_other='allow_other'}], [{@appraise_type='appraise_type=imasig'}, {@uid_gt={'uid>', r3}}, {@fowner_gt={'fowner>', r4}}, {@hash='hash'}]}}) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r6 = fcntl$getown(r5, 0x9) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r5, &(0x7f00000001c0)={r8, r5, 0x4}) r9 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r9, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r5, r9, &(0x7f0000000000), 0x12) 15:08:48 executing program 5: shmget(0x1, 0x3000, 0x10, &(0x7f0000ffb000/0x3000)=nil) shmget(0x3, 0x1000, 0x6, &(0x7f0000ffd000/0x1000)=nil) shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ffb000/0x2000)=nil) r0 = shmget$private(0x0, 0x2000, 0x304, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x18800, 0x0) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000040)) [ 714.456046] FAULT_INJECTION: forcing a failure. [ 714.456046] name failslab, interval 1, probability 0, space 0, times 0 [ 714.490323] CPU: 0 PID: 1024 Comm: syz-executor.0 Not tainted 4.14.113 #3 [ 714.497431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 714.506805] Call Trace: [ 714.509412] dump_stack+0x138/0x19c [ 714.513079] should_fail.cold+0x10f/0x159 [ 714.517245] should_failslab+0xdb/0x130 [ 714.521267] __kmalloc_track_caller+0x2ef/0x790 [ 714.526024] ? ima_calc_file_hash+0x312/0x7c0 [ 714.530566] ? ima_collect_measurement+0x270/0x450 [ 714.535576] krealloc+0x66/0xc0 [ 714.538927] ima_collect_measurement+0x270/0x450 [ 714.543743] ? ima_get_action+0x80/0x80 [ 714.547802] ? ima_get_cache_status+0x180/0x180 [ 714.552547] process_measurement+0x7dd/0xb90 [ 714.557110] ? ima_rdwr_violation_check+0x3f0/0x3f0 [ 714.562209] ? __lock_acquire+0x5f9/0x45e0 [ 714.566837] ? trace_hardirqs_on+0x10/0x10 [ 714.571250] ? save_trace+0x290/0x290 [ 714.575158] ? save_trace+0x290/0x290 [ 714.579327] ? __task_pid_nr_ns+0x1cb/0x450 [ 714.583733] ? do_execveat_common.isra.0+0xfce/0x1dd0 [ 714.589082] ? find_held_lock+0x35/0x130 [ 714.593215] ima_bprm_check+0x49/0x60 [ 714.597090] security_bprm_check+0x9a/0xb0 [ 714.601649] search_binary_handler+0x6b/0x700 [ 714.606330] do_execveat_common.isra.0+0xffd/0x1dd0 [ 714.611442] ? prepare_bprm_creds+0x120/0x120 [ 714.616017] SyS_execve+0x39/0x50 [ 714.619545] ? setup_new_exec+0x790/0x790 [ 714.623776] do_syscall_64+0x1eb/0x630 [ 714.627739] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 714.632762] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 714.638012] RIP: 0033:0x458c29 [ 714.641307] RSP: 002b:00007faee867bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 714.649328] RAX: ffffffffffffffda RBX: 00007faee867bc90 RCX: 0000000000458c29 15:08:48 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) ioctl$RTC_EPOCH_SET(r2, 0x4008700e, 0x7) 15:08:48 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x2, 0x3, 0x9, 0x100000001, "77493b39caa5a60488b7680e4ad01c4c289af6d404e33a02daf14943c9ae836dd427092383ee550748f1dd6e71a003f4c370b6cf4e7d73d58d7bc2571c7eed", 0x3d}, 0x60) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0xfffffffffffffff9, 0x0) getsockopt$inet6_dccp_buf(r1, 0x21, 0x2, &(0x7f00000002c0)=""/219, &(0x7f0000000400)=0xdb) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r1, &(0x7f0000000140)="dc0d7ce0839b0f946d51d5b0e99b83cfa44887fba1a36dcef61137b04712609f813735d6e3febc8f4cad8dca494d05ac", &(0x7f0000000180)=""/240}, 0x18) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) [ 714.656834] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 714.664147] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 714.671488] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faee867c6d4 [ 714.678903] R13: 00000000004bf216 R14: 00000000004d0458 R15: 0000000000000004 15:08:48 executing program 5: shmctl$SHM_LOCK(0x0, 0xb) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.swap.current\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000180)={0x3f4, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xe4, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xba}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}]}]}, @TIPC_NLA_LINK={0xd0, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xceb2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x461}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e26}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd83}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa1}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2ecc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffffffffffb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}]}, @TIPC_NLA_BEARER={0x110, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x2, @mcast1, 0x78}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_bridge\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8d3, @dev={0xfe, 0x80, [], 0x22}, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xfffffffeffffffff, @local, 0x100}}}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'team_slave_0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x58, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x83e}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffffffffffb}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x22}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fff}]}, @TIPC_NLA_LINK={0x20, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}]}, 0x3f4}}, 0x8000) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f0000000040)={0x7, 0x3, @stop_pts=0x6f}) 15:08:48 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x14) ioctl$FICLONE(r0, 0x40049409, r1) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r3 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r2, r3, &(0x7f0000000000), 0x12) r4 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x7, 0x202000) ioctl$VIDIOC_S_TUNER(r4, 0x4054561e, &(0x7f00000001c0)={0x0, "152a8e6fc423da271cf8515cea5f8cf51de7fc461b9f0023980b438d1cdef428", 0x2, 0x8, 0x5, 0x8, 0x16, 0x0, 0x7a56, 0x9}) [ 714.863401] audit: type=1400 audit(1555945728.793:109): avc: denied { create } for pid=1047 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_rdma_socket permissive=1 [ 714.928606] audit: type=1800 audit(1555945728.853:110): pid=1024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.0" name="file0" dev="sda1" ino=18110 res=0 15:08:49 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000080)={0x1a, 0x1}, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x1800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000000540), 0x4aa, 0x0) 15:08:49 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f00000000c0)={0x0, 0xfb, 0x80, 0x1, 0x0, "2460be07e68fb548875a3fa6ac64b67b", "bec62497a2e9bf3146b18ed028630a3cbc2abf330c8f3755286cd1e55c8ce260997f851654624568e387c18ed39ab6fafef641d61332377a6dad5feb053835ee9fdb6c2056e011cb2bccf7df00f052b9245d578ad2cc61ad02602cdd1d4c510252b29ac7a68d1f98d5c940"}, 0x80, 0x3) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000040)={0x3, 0x1d, 0x6e4, 0x2, "d706caf3867a475b2ad9ddf11fdfb1745a3169899e99911ca8886e45a4ddfb0f"}) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0x4fa, 0x5d5322b1}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) 15:08:49 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x4, 0x8080) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000840)={r1, &(0x7f0000000680)="196e318ca1c08bd2deb1d98ce406803b6d4b62cc496dc852d1178bbb08928ebcf39aa079d8b7bd126f9fb84f43c5411399ab013755ec8269ccf72fcd58ff89cee9be3e84fccd7b237203e4a52b6a9778851ca5cf2e0fc7f49c425817dafc17a2133d6f1d9623d0333e82b5de4164703dd526ee3b3b0168349c8b4bc5f7bd817992e670b91f6c2ec47341f46bafe9e06d4e5a4b0e66d91a9e308bafd6997c8e56a2e4d9270fbd8ed2ea73292035fd0acd51c11390b54bcf01b808f1102e196046e59b7b1df143166c644ab7be221354c4c3178f78636d04fe4e8c7b68692c18b8142f0142c864758ebfe77e866a09b37bb69725afd415f2", &(0x7f0000000780)=""/152}, 0x18) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @empty}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@initdev}}, &(0x7f0000000040)=0xe8) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000240)={@mcast2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast1, 0xfffffffffffffffd, 0x3, 0xfffffffffffffff9, 0x100, 0xfffe000000000000, 0x4, r3}) lsetxattr$trusted_overlay_upper(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='trusted.overlay.upper\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="00fba005001c408a936ea5fd72d5815d4551984d5a5c57c28e005de596d687c54c68584c248aa49335f654e26f495fa32ba1347c0dd6e26a2e30948ab77b47bc7f4e7d9c464f6031cf32d9ea50f46c8ccd83a569ea5ab6fde888e8e83aa3da62e5f96c222e559607fabd02284c2535e0ddeaaad91edab63a692af41310956d0bb9134d9e0800000000000000e0be8ba984e6956c221bae70090295bd00000000"], 0xa0, 0x3) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000080)={0x30000001, 0xffffffffffffff01, 0x1b}) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000640)='/selinux/mls\x00', 0x0, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000400)) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@local, @in=@multicast1, 0x4e24, 0x7, 0x4e24, 0xfd, 0x2, 0x80, 0xa0, 0x3a, r3, r4}, {0x9, 0xffa5, 0x9, 0x4, 0x3800000000, 0x4, 0x6, 0x5}, {0x2, 0x1000, 0x8, 0x3}, 0x5, 0x6e6bbb, 0x3, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x1e}, 0x4d3, 0x32}, 0x2, @in6=@local, 0x3500, 0x3, 0x3, 0x7, 0x4, 0x5, 0x4}}, 0xe8) 15:08:49 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000100)) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000240)=""/67) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendmsg$nl_crypto(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=@getstat={0xe0, 0x15, 0x400, 0x70bd2c, 0x25dfdbfc, {{'ctr-serpent-avx2\x00'}, [], [], 0x2400, 0x400}, [""]}, 0xe0}, 0x1, 0x0, 0x0, 0x40000}, 0x800) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) sendfile(r0, r1, &(0x7f0000000000), 0x12) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f00000001c0)=0x6, 0x8) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_stats\x00', 0x0, 0x0) 15:08:49 executing program 5: shmget(0x2, 0x4000, 0x78000008, &(0x7f0000ffb000/0x4000)=nil) shmget(0x3, 0x1000, 0x20, &(0x7f0000ffb000/0x1000)=nil) shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) r0 = shmget(0x1, 0x2000, 0x54000005, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) 15:08:49 executing program 0 (fault-call:4 fault-nth:28): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:08:49 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x40040, 0x0) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) 15:08:49 executing program 5: shmctl$SHM_LOCK(0x0, 0xb) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x200) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000000040)={0x43}) prctl$PR_GET_NO_NEW_PRIVS(0x27) 15:08:49 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x480000, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x7) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 15:08:49 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="065a1882d780619875a70bb8facf5f63b42b0bf2aded9c751f6d6f7d321db17ff1d9e9ba8084746328db51a63bdc1055a23ee20add57a81fd4d1931c6044321c24f6b28972e09e4c9a70a3d75f19ae594ed4d30793e1c9140eb441f8845b4122fc5696d7fe19f9253f0278ff6cd1e0f2f2c092fb18215bd72ad8cae4481ae0a2b1f18070cc0fd9d6f74cf1fccba02fd91927387c6992e9a31754fcadf60db951ecfac6c42934442937235335b5bb26f7ae20c8d5130048dd83aa3b75d101000000f6c6101db809db86f1801878216e353369f9a768801010fbf2eced940ee2d27345c3b95b73ae89525d830c"], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) [ 715.279145] FAULT_INJECTION: forcing a failure. [ 715.279145] name failslab, interval 1, probability 0, space 0, times 0 [ 715.348093] CPU: 1 PID: 1073 Comm: syz-executor.0 Not tainted 4.14.113 #3 [ 715.355076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 715.364467] Call Trace: [ 715.367076] dump_stack+0x138/0x19c [ 715.370724] should_fail.cold+0x10f/0x159 [ 715.374979] should_failslab+0xdb/0x130 [ 715.379102] __kmalloc+0x2f3/0x7a0 [ 715.382777] ? ima_alloc_init_template+0x65/0x3b0 [ 715.387668] ima_alloc_init_template+0x65/0x3b0 [ 715.392403] ima_store_measurement+0x17b/0x330 [ 715.397001] ? ima_collect_measurement+0x450/0x450 [ 715.402045] ? kmem_cache_alloc+0x613/0x780 [ 715.406406] ? ima_d_path+0xaf/0x1de [ 715.410148] process_measurement+0x948/0xb90 [ 715.414587] ? ima_rdwr_violation_check+0x3f0/0x3f0 [ 715.419630] ? __lock_acquire+0x5f9/0x45e0 [ 715.423898] ? trace_hardirqs_on+0x10/0x10 [ 715.428154] ? save_trace+0x290/0x290 [ 715.431981] ? save_trace+0x290/0x290 [ 715.435811] ? __task_pid_nr_ns+0x1cb/0x450 [ 715.440179] ? do_execveat_common.isra.0+0xfce/0x1dd0 15:08:49 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x5b, 0x80000000, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000040)={0x7a, "7e2a7e90299e96c2c82f7941302b82b889dd3a26a79f5440d4ac390a79643c31", 0x2, 0x1}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000080)={0x1, 'team_slave_0\x00', 0x1}, 0x18) bind$nfc_llcp(r0, &(0x7f0000000180)={0x27, 0x0, 0x2, 0x4, 0x7, 0x7, "b5801c83cf756aa363a80e16a2482f203f56805d6545c1fa51b27b253ca0eaf8f86d620e4722d804c7e5925eb1771e84a3aa56d8fae39a78fbcc2422318b45", 0xd}, 0x60) finit_module(r1, &(0x7f0000000140)='\x00', 0x1) [ 715.445510] ? find_held_lock+0x35/0x130 [ 715.449598] ima_bprm_check+0x49/0x60 [ 715.453743] security_bprm_check+0x9a/0xb0 [ 715.457998] search_binary_handler+0x6b/0x700 [ 715.462519] do_execveat_common.isra.0+0xffd/0x1dd0 [ 715.467572] ? prepare_bprm_creds+0x120/0x120 [ 715.472109] SyS_execve+0x39/0x50 [ 715.475610] ? setup_new_exec+0x790/0x790 [ 715.480127] do_syscall_64+0x1eb/0x630 [ 715.484032] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 715.488994] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 715.494201] RIP: 0033:0x458c29 15:08:49 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) socket$inet_dccp(0x2, 0x6, 0x0) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) [ 715.497488] RSP: 002b:00007faee867bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 715.505213] RAX: ffffffffffffffda RBX: 00007faee867bc90 RCX: 0000000000458c29 [ 715.512498] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 715.519799] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 715.527093] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faee867c6d4 [ 715.534567] R13: 00000000004bf216 R14: 00000000004d0458 R15: 0000000000000004 [ 715.688077] audit: type=1804 audit(1555945729.613:111): pid=1073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="add_template_measure" cause="ENOMEM" comm="syz-executor.0" name="/root/syzkaller-testdir437791866/syzkaller.ie99VR/848/file0" dev="sda1" ino=18116 res=0 15:08:49 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r1}) syz_genetlink_get_family_id$tipc(0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000200)) 15:08:49 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400000, 0x4) getsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) 15:08:49 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) rt_sigprocmask(0x2, &(0x7f0000000000)={0xffffffffffffffff}, &(0x7f0000000040), 0x8) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM', 0x8}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) 15:08:49 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="000c3ba660f7f03a743274031bba9ff19c5d7827dd135179d64eaf4f1808f84e3d03ffddd409bf0682fcd9cd779f9bb85f991654f542b4f9730196fff9ce8d78c47a672f116e697e5300ac094fc43df06a45e60a806284b6d6403e532987c22a713d37c79ff80d2071f0a8e41a8569cff1f30037c7fa7c1a46585fc5cd0936566aafc9531a089bc129c3c21ce5791bfe4121e952122ded08ca28edb4003242f64aa8ec27dcf5578cd1e9f429938d2e946ca8f70f8d1b25b429a02b050f6e82ce94ed84c98f0ca2be4fc6"], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:49 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x1, 0x0, 0x27, 0x0, "da637b06689d05705ea45bba0668aa852f4eb84e52df48bc0b9f46c21bf9ccafe179ac9a75aa98cf236389bb4c1fe1040e9d8f5d7593f201208a42748cdc90", 0x12}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 15:08:49 executing program 0 (fault-call:4 fault-nth:29): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:08:49 executing program 5: shmctl$SHM_LOCK(0x0, 0xb) r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x72, 0xe1, 0xb9, "0e4a8f84af83d1dc9c3b710d0b85352fb7b9f924156fcd97aab621280c859c335d1b283e74da995f84b17be8adbe462275b50393134c3ae4884427d010600aa5377d53e05c6df682625f81cbcfc778c4eb74675adfbd80957ebd58e0b01f0b30f688cdc7cb87dd9395e1f8618e13f8c3a98c"}) [ 715.981498] FAULT_INJECTION: forcing a failure. [ 715.981498] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 715.993352] CPU: 1 PID: 1117 Comm: syz-executor.0 Not tainted 4.14.113 #3 [ 716.000295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 716.009925] Call Trace: [ 716.012580] dump_stack+0x138/0x19c [ 716.016226] should_fail.cold+0x10f/0x159 [ 716.020513] __alloc_pages_nodemask+0x1d6/0x7a0 [ 716.025457] ? __alloc_pages_slowpath+0x2930/0x2930 15:08:50 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001740)='/dev/sequencer\x00', 0x80, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x1c, r1, 0x10, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x810) shmget(0x3, 0x2000, 0x1, &(0x7f0000ffc000/0x2000)=nil) shmget(0x1, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) r2 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000140)) r4 = add_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="d11a53f1943ee0fcf189850ae3b28c14f846eceaead3341644ca875a7d3974e7ae6ebbbe8cc3482b1f22c84ef839177e6db41c1d", 0x34, 0xfffffffffffffff8) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000180)={0xa, 0xa, 0x8, 0xa2d2}, 0xa) add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r4) read$FUSE(r3, &(0x7f0000000240), 0x1000) [ 716.030507] cache_grow_begin+0x80/0x410 [ 716.034628] kmem_cache_alloc+0x6a8/0x780 [ 716.039156] ima_d_path+0x52/0x1de [ 716.042712] process_measurement+0x96a/0xb90 [ 716.047153] ? ima_rdwr_violation_check+0x3f0/0x3f0 [ 716.052293] ? __lock_acquire+0x5f9/0x45e0 [ 716.056565] ? trace_hardirqs_on+0x10/0x10 [ 716.060996] ? save_trace+0x290/0x290 [ 716.064823] ? save_trace+0x290/0x290 [ 716.068658] ? __task_pid_nr_ns+0x1cb/0x450 [ 716.073011] ? do_execveat_common.isra.0+0xfce/0x1dd0 15:08:50 executing program 5: shmctl$SHM_LOCK(0x0, 0xb) shmget(0x0, 0x4000, 0x1140, &(0x7f0000ffb000/0x4000)=nil) r0 = shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/96) [ 716.078230] ? find_held_lock+0x35/0x130 [ 716.082461] ima_bprm_check+0x49/0x60 [ 716.086299] security_bprm_check+0x9a/0xb0 [ 716.090681] search_binary_handler+0x6b/0x700 [ 716.095212] do_execveat_common.isra.0+0xffd/0x1dd0 [ 716.100351] ? prepare_bprm_creds+0x120/0x120 [ 716.105159] SyS_execve+0x39/0x50 [ 716.108633] ? setup_new_exec+0x790/0x790 [ 716.112886] do_syscall_64+0x1eb/0x630 [ 716.116802] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 716.121669] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 716.121690] RIP: 0033:0x458c29 15:08:50 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x881, 0x0) ioctl$CAPI_SET_FLAGS(r0, 0x80044324, &(0x7f0000000080)) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r1, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0x5) poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0) [ 716.121695] RSP: 002b:00007faee867bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 716.121706] RAX: ffffffffffffffda RBX: 00007faee867bc90 RCX: 0000000000458c29 [ 716.121712] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 716.121717] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 716.121723] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faee867c6d4 [ 716.121729] R13: 00000000004bf216 R14: 00000000004d0458 R15: 0000000000000004 [ 716.121926] protocol 88fb is buggy, dev hsr_slave_0 15:08:50 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) open(0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000240)='\xfaIhFlK\x99F\x17Fr>\xd3\xc0\x93\xb5.\xda\x06_bT\x1cB\xdb\x7f\f\x00\x00\x00k\xf1y\xed(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f00000005c0)="35a0f0e47d24baafdbdf8a7ad6d255e36f40897117f4ada6ff864eb656d207472d705cef02cd320577de9aefbb8d5bba", 0x30}], 0x1, 0x4081003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) fallocate(r2, 0x11, 0x0, 0x100000001) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000200)={0x0, 'bridge0\x00'}, 0x18) pwritev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)="663305e7a88cfde31c4987bd51e7b844bc7cd85da52f2a0b424b49da54783c2c3bed5ede8be69d8689395a0f7905308df1af1b15b74ad80b87c7a02647919e6a51df3bd484d4d01b43741d8e31658d8d0156c78539259ab89b5124fb9297d1d266bfea9d160f211f", 0x68}], 0x1, 0x0) fcntl$setstatus(r0, 0x4, 0x40800) sendfile(r0, r1, &(0x7f0000000000), 0x12) [ 716.145317] protocol 88fb is buggy, dev hsr_slave_1 15:08:50 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x400400, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000040)={0x0, 0xe, 0x5}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000000c0)={r3, 0x1}, 0xc) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x101, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) 15:08:50 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xfffffffffffffc00) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @empty}}, 0x1b) 15:08:50 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5620, 0x40000) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000080)=0x1, 0xfffffffffffffeba) shmctl$SHM_LOCK(0x0, 0xb) 15:08:50 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x5, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) r1 = dup(r0) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000000000)) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 15:08:50 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x1, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) fallocate(r2, 0xd, 0x3ff, 0x0) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) getpeername$tipc(r2, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) ioctl$BLKPG(r2, 0x1269, &(0x7f00000000c0)={0x0, 0xb46, 0x15, &(0x7f0000000080)="a4386ef18ebb819476a686d9a64471ed9fd9e203df"}) 15:08:50 executing program 0 (fault-call:4 fault-nth:30): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:08:50 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x67, 0x18102) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffff5273}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/mls\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f0000000080)={0x1, r3}) dup2(r2, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) 15:08:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000094ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) [ 716.660389] FAULT_INJECTION: forcing a failure. [ 716.660389] name failslab, interval 1, probability 0, space 0, times 0 15:08:50 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x1, 0x400000) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f0000000080)=[{r0, 0x40}, {r0, 0x200}, {r0, 0x4011}], 0x0, 0xfd6c) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x400, 0x5, 0x1, "94759b78b61bf382a39f45230f752c34304de84ee8aa35a955a5f116fcd2f687", 0x32315659}) 15:08:50 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x694800, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x80001, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000140)={{{@in6}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000000240)=0xe8) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) fchmodat(r2, &(0x7f0000000040)='./file0\x00', 0x111) shmctl$SHM_LOCK(0x0, 0xb) sendto$inet(r2, &(0x7f0000000080)="51873a6f776b6432d91b003386ad1156a3578bda5206fdd96039eb411f384617e4bf2735f89238e298", 0x29, 0x40c0, &(0x7f00000000c0)={0x2, 0x4e22, @empty}, 0x10) [ 716.787615] CPU: 0 PID: 1170 Comm: syz-executor.0 Not tainted 4.14.113 #3 [ 716.794598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 716.803969] Call Trace: [ 716.806609] dump_stack+0x138/0x19c [ 716.810365] should_fail.cold+0x10f/0x159 [ 716.818282] should_failslab+0xdb/0x130 [ 716.822288] __kmalloc+0x2f3/0x7a0 [ 716.825852] ? ima_alloc_init_template+0x65/0x3b0 [ 716.830712] ima_alloc_init_template+0x65/0x3b0 [ 716.835413] ima_store_measurement+0x17b/0x330 [ 716.840010] ? ima_collect_measurement+0x450/0x450 [ 716.844956] ? kmem_cache_alloc+0x613/0x780 [ 716.849387] ? ima_d_path+0xaf/0x1de [ 716.853142] process_measurement+0x948/0xb90 [ 716.857573] ? ima_rdwr_violation_check+0x3f0/0x3f0 [ 716.862613] ? __lock_acquire+0x5f9/0x45e0 [ 716.866903] ? trace_hardirqs_on+0x10/0x10 [ 716.871155] ? save_trace+0x290/0x290 [ 716.874965] ? save_trace+0x290/0x290 [ 716.878779] ? __task_pid_nr_ns+0x1cb/0x450 [ 716.883312] ? do_execveat_common.isra.0+0xfce/0x1dd0 [ 716.888618] ? find_held_lock+0x35/0x130 [ 716.892701] ima_bprm_check+0x49/0x60 [ 716.896552] security_bprm_check+0x9a/0xb0 [ 716.900807] search_binary_handler+0x6b/0x700 [ 716.905350] do_execveat_common.isra.0+0xffd/0x1dd0 [ 716.910420] ? prepare_bprm_creds+0x120/0x120 [ 716.914938] SyS_execve+0x39/0x50 [ 716.918420] ? setup_new_exec+0x790/0x790 [ 716.922713] do_syscall_64+0x1eb/0x630 [ 716.926619] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 716.931509] entry_SYSCALL_64_after_hwframe+0x42/0xb7 15:08:50 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$P9_RSTAT(r2, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], 0xf0) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f00000002c0)={0xba60, 0x1000, "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"}) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20, 0x0, 0x1, {0x1ff, 0x4, 0x3, 0x43c}}, 0x20) [ 716.936706] RIP: 0033:0x458c29 [ 716.939906] RSP: 002b:00007faee867bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 716.947631] RAX: ffffffffffffffda RBX: 00007faee867bc90 RCX: 0000000000458c29 [ 716.955028] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 716.962314] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 716.969619] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faee867c6d4 [ 716.976895] R13: 00000000004bf216 R14: 00000000004d0458 R15: 0000000000000004 [ 717.084638] audit: type=1804 audit(1555945731.013:112): pid=1170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="add_template_measure" cause="ENOMEM" comm="syz-executor.0" name="/root/syzkaller-testdir437791866/syzkaller.ie99VR/850/file0" dev="sda1" ino=18117 res=0 15:08:51 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) r1 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000e40)='/dev/snd/seq\x00', 0x0, 0x3ffe) fchmod(r0, 0x58) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) getsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f0000000d80), &(0x7f0000000dc0)=0x4) write$sndseq(r1, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) connect$can_bcm(r3, &(0x7f0000000d40), 0x10) recvmmsg(r3, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000040)=""/103, 0x67}, {&(0x7f00000000c0)=""/103, 0x67}, {&(0x7f00000002c0)=""/250, 0xfa}, {&(0x7f0000000140)=""/109, 0x6d}, {&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/170, 0xaa}, {&(0x7f0000000500)=""/91, 0x5b}, {&(0x7f0000000580)=""/125, 0x7d}], 0x8, &(0x7f0000000680)=""/37, 0x25}, 0xffffffffffff0000}, {{&(0x7f00000006c0)=@pppol2tp, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000740)=""/191, 0xbf}, {&(0x7f0000000800)=""/206, 0xce}, {&(0x7f0000000900)=""/76, 0x4c}, {&(0x7f0000000980)=""/114, 0x72}, {&(0x7f0000000a00)=""/11, 0xb}, {&(0x7f0000000a40)=""/193, 0xc1}, {&(0x7f0000000b40)=""/17, 0x11}, {&(0x7f0000000b80)=""/57, 0x39}, {&(0x7f0000000bc0)=""/22, 0x16}], 0x9}, 0x800}], 0x2, 0x1, 0x0) 15:08:51 executing program 5: shmctl$SHM_LOCK(0x0, 0xb) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x1, [@rand_addr=0x5]}, 0x14) r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x9, 0x8000) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) 15:08:51 executing program 0 (fault-call:4 fault-nth:31): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:08:51 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x300, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x1be, 0x0) [ 717.325210] FAULT_INJECTION: forcing a failure. [ 717.325210] name failslab, interval 1, probability 0, space 0, times 0 [ 717.337406] CPU: 0 PID: 1250 Comm: syz-executor.0 Not tainted 4.14.113 #3 [ 717.344365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 717.353915] Call Trace: [ 717.356524] dump_stack+0x138/0x19c [ 717.360185] should_fail.cold+0x10f/0x159 [ 717.364373] should_failslab+0xdb/0x130 [ 717.368418] __kmalloc+0x2f3/0x7a0 [ 717.371962] ? snprintf+0xa5/0xd0 [ 717.371971] ? vsprintf+0x40/0x40 [ 717.371985] ? ima_write_template_field_data.isra.0+0x43/0x1b0 [ 717.371998] ima_write_template_field_data.isra.0+0x43/0x1b0 [ 717.372011] ima_eventdigest_init_common+0x10a/0x220 [ 717.372024] ? ima_write_template_field_data.isra.0+0x1b0/0x1b0 [ 717.402054] ? save_trace+0x290/0x290 [ 717.405887] ? rcu_read_lock_sched_held+0x110/0x130 [ 717.410959] ? __kmalloc+0x379/0x7a0 [ 717.414688] ima_eventdigest_ng_init+0x60/0x150 [ 717.419372] ima_alloc_init_template+0x247/0x3b0 [ 717.424130] ima_store_measurement+0x17b/0x330 [ 717.424142] ? ima_collect_measurement+0x450/0x450 [ 717.424154] ? kmem_cache_alloc+0x613/0x780 [ 717.424169] ? ima_d_path+0xaf/0x1de [ 717.424180] process_measurement+0x948/0xb90 [ 717.424196] ? ima_rdwr_violation_check+0x3f0/0x3f0 [ 717.451476] ? __lock_acquire+0x5f9/0x45e0 [ 717.455837] ? trace_hardirqs_on+0x10/0x10 [ 717.460273] ? save_trace+0x290/0x290 [ 717.464114] ? save_trace+0x290/0x290 [ 717.467923] ? __task_pid_nr_ns+0x1cb/0x450 [ 717.467939] ? do_execveat_common.isra.0+0xfce/0x1dd0 [ 717.467952] ? find_held_lock+0x35/0x130 [ 717.467968] ima_bprm_check+0x49/0x60 [ 717.467983] security_bprm_check+0x9a/0xb0 [ 717.477546] search_binary_handler+0x6b/0x700 [ 717.477562] do_execveat_common.isra.0+0xffd/0x1dd0 [ 717.477582] ? prepare_bprm_creds+0x120/0x120 [ 717.477597] SyS_execve+0x39/0x50 [ 717.477611] ? setup_new_exec+0x790/0x790 [ 717.491057] BFS-fs: bfs_fill_super(): No BFS filesystem on loop5 (magic=39420000) [ 717.494313] do_syscall_64+0x1eb/0x630 [ 717.494325] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 717.494344] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 717.494353] RIP: 0033:0x458c29 [ 717.494363] RSP: 002b:00007faee867bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 717.544108] RAX: ffffffffffffffda RBX: 00007faee867bc90 RCX: 0000000000458c29 [ 717.551521] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 717.558805] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 717.566091] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faee867c6d4 15:08:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x1be, 0x0) 15:08:51 executing program 5: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x40, 0x9, &(0x7f0000002400)=[{&(0x7f0000000080)="d2cd02317f0400a87d41128d8e872580b6c1b49a41764b20f6f3037b1e8af559868ce0d02469bee3115a03e714ca8fc1e2132c178313e45298b86475aa", 0x3d, 0x100}, {&(0x7f00000000c0)="bbd710921b8786b624d79fe8bfec34236cc0798bf8eb", 0x16, 0x4c48}, {&(0x7f0000000100)="33b96896e90dd3301b0e1d07008a092de2d03cfb599f56f56335fcdc7157646d32ec6a1d63f69f47471178dc0f35fd7e0000b7a4b1be88dad696dc02fff13ce83c24c1c89969364e77776f7929dfbf7c9ab7c8b8d79fd67affc528dc38e9de621a970330affc1284cce499194e7c9442c87e348ee238e850df7a0d3665233700c1463e90e01550e1ec2be3b92f145dabd0b43da7f10c9c0d0886423227f00ff68f328c020d2b7052b2a92aea49a6817181b31e9e55a934d02465972271914c46d34a66bad63afb8a12d975528c818acdab5059e7e5f1159bf273577792943c9dce8dca7d8dddee8fcd628dea0f2be258115e6684dbfb1e0c85", 0xf9, 0x4}, {&(0x7f0000000200)="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", 0x1000, 0x2}, {&(0x7f0000001200)="bba2c2f3d6ba26bd9f0279bf0055e36a6edc430a08e00deed2951d61dffd770e5e4f5189cef21f88e8f9b5371cc4b85a719df59988c19c92d58bda1d8545395d4861233d5b29eba12c6ea6", 0x4b, 0x6}, {&(0x7f0000001280)="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", 0x1000, 0x5}, {&(0x7f0000002280)="a3e66519761a1e471f455fd102bc9ebdd217a8ed", 0x14, 0x5}, {&(0x7f00000022c0)="f216d67f8b82fa7338a76fc677e40d26ea3e14867f3ef8a56a60551ca0c483d8efc7b505c240da4c242d894d42ed0effc3d93015650419a6687371fecf8bd5d6336ce3356a3ec510b066970a072eb8de21233f569f14d0d0250a916fb07e5f3416713a044282a085349beedd7e6f31165ba7036215ca27cbe765847d12449a0ce30e0f85ec09d78d33255bfffc54696334bebba380dce8baf6c117006faefa520f059c5afa3c63ed2cbee9ac4b9baf6e2f6ae8bc8e9c4da0b1bda2c76b860b2f4aa9c5554b590eb4f1ec7e4f790b5f7dd99ad846799aeb181c384672f593b3597b674b63924ccc", 0xe7, 0x24e}, {&(0x7f00000023c0)="99dd87db4116cfa5", 0x8, 0x4b}], 0x200000, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 15:08:51 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f\x00', 0x2761, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x5, 0x0, 0x101, 0x522b, 0x0, 0x0, 0x100, 0x1, 0x0, 0x1, 0x5, 0x0, 0x4e73, 0x7, 0x7f, 0x5, 0x0, 0x0, 0x2, 0xa3, 0x0, 0x1, 0x0, 0x0, 0x4fe8, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x20, 0x0, 0x1, 0x0, 0x3f, 0x0, @perf_bp={0x0, 0x2}, 0x4, 0x5, 0x0, 0x0, 0xc0b}, 0x0, 0x0, r0, 0xb) socket$kcm(0x2, 0x3, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101100, 0x0) r2 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x11b, 0x3, &(0x7f0000002340)=r2, 0x4) mkdirat$cgroup(r1, 0x0, 0x1ff) recvmsg(0xffffffffffffffff, 0x0, 0x0) 15:08:51 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000000, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) 15:08:51 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='{'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:51 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) signalfd(r1, &(0x7f0000000000)={0x4}, 0x8) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) 15:08:51 executing program 0 (fault-call:4 fault-nth:32): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 717.573382] R13: 00000000004bf216 R14: 00000000004d0458 R15: 0000000000000004 [ 717.587965] audit: type=1804 audit(1555945731.513:113): pid=1250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="add_template_measure" cause="ENOMEM" comm="syz-executor.0" name="/root/syzkaller-testdir437791866/syzkaller.ie99VR/851/file0" dev="sda1" ino=17534 res=0 15:08:51 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000380)) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x2000000303480, 0x0) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f00000001c0)) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000280)="9ce4a19c7e22074c0446b934ded3c161c3ee977f260dbfd7df0f77a7bd31feda1b0cad98a182da4cfc305e05f87362a1698c0227ad0a1a95ec7ce8e64b336bea66f97b02ed02be872afc0133cb0c8a0aa55c555bdebf29ad4a53fb43e1e1d8d5729a3175d85b3b0b4ca97493cfdbe725b15d4203bd803d221f3bae78fe1e4e03f45a6f5dc926d698431c9753", 0x8c, r2}, 0x68) getpeername(r0, &(0x7f0000000580)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000180)=0x80) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e24, @remote}}, 0x0, 0x5, 0x0, "ae095721071f2ac4fdb19d1951594b2d03a33933c877048e5baf5d189ac4e4be095bd9cb25320041781611fdeb1db3dd6b37a4aca35640e6b29f62326f43d230d396a41d487de6a6ea58708d4a64ec35"}, 0xd8) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000040)={0xfffffffffffffe01, 0x1f, 0x0, 0x9a6, 0x4, 0x5, 0xa98, 0xfa, 0x10001, 0x1}) getsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000080), &(0x7f0000000140)=0x4) exit(0x8) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000200)=0x101, 0x4) [ 717.679673] BFS-fs: bfs_fill_super(): No BFS filesystem on loop5 (magic=39420000) 15:08:51 executing program 5: shmctl$SHM_LOCK(0x0, 0xb) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0xc0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0x7, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x5, 0x8}, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x3, 0x1000, 0x1b58}, &(0x7f00000000c0)=0x10001, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x4}}, 0x10) syz_mount_image$ceph(&(0x7f0000000240)='ceph\x00', &(0x7f00000002c0)='./file0\x00', 0x9, 0x9, &(0x7f0000001740)=[{&(0x7f0000000300)="151b8aa0eb9feb3803b9500158b928b10fca93f0e2a1ae147a99c0910323fab1a0ad8b517f6446f9f4ca0f934493e9f8829983c63d2464b2b7e3bf5f646d3df7c4f35aa76d545a2e365a2d0feaa0467bde79c228585bc112cf8381ec64914ec2f9022a3d0751ff8c24c0f564f5cb7e9dd13fe21baffc6fc3d46384850a5219d4f809e823c8a367e6d9282c75e5a8d2970affd6b667708e0d8db1f3bb0d810fb75b4cf0d4", 0xa4, 0xc1f}, {&(0x7f00000003c0)="d3c846039e1a08113d3594f2d63c179a2d96b720e469dd5119219818254aaec312f997739187141b6b486e54318ae680f0c248f88d5a223c9c9270bff1fb", 0x3e, 0x1}, {&(0x7f0000000400)="fdc0fd996f80a3fcf32cc2931fba0b9bb34cbd7ef9b00b15259c6d6f39f25708989fae791b4d69be6aa8c0", 0x2b, 0xfffffffffffffbff}, {&(0x7f0000000440)="4ae4d885a2b48a92bba7db4430a188854f93dee063699d7b673218e2fa54959fb6fa655fe599082bd542628bbec8fc5d914c2555dad105cbf9f0be5c343c6ad197bb8d597998b7a9c1f65793a13b0fba30a49dde1eeb8d959e40eddc6dbe020c1dcf9fe7733711038143a49792f70d50a268c47a159665755f7686e1e5b21a5362d90b026fff6e8d07d5574f5188905cbc18", 0x92, 0x3}, {&(0x7f0000000500)="3c97517484788899263ea30e877a7c0cc82a46f3e5ebf7a973593b1a534ffe5ba2f6cdd1dd1072492ab1c72409c86c3ebf4f1a12089310b1f99788", 0x3b, 0x7}, {&(0x7f0000000540)="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", 0x1000, 0x4df}, {&(0x7f0000001540)="d1803ea419d8fe62eb636e1416eb962e16866c33b197a160630449a0b189b5d624baf7f4cbe0e4f75803281bf035b4543e273631fbdeeb0f4f3570a6ebb11de3b2ebe2d309cf641ba2fa29d8177d7dea89bd47c7401f7346491499c945eb056679cc56b455dac663cab245142b9f240442fa39e68d7aacae2fb0e5414490fd30593a494ff1944a06cca40bcb", 0x8c, 0x3}, {&(0x7f0000001600)="b203414dbdb309269eaa81", 0xb, 0x2}, {&(0x7f0000001640)="2051daff967b8212202abb9d8a933b293e23f9170d9cf5c0188c905290fbb0b4aabc563ec4da584635e4fd6d9df4d95dda2d750fe1f1f3ae1734b115f6c780daa2ee8902acc97480d265ca5e5f6f974376257b87c8fc76fcaa4a1e4a5d9bd95af5c131a82fd541b17b2d54b0cd6603e71bbebfa8755ff8e5d373b53c553584197134802b6ab0fd01d4b4a50287a62aebbd09517ca7994274193a5ea828716effc52e1b4b97823f2f15402301a254decd4a270dab5fb97892ac7e7b13b29259f0d682cdd52ec4f312ee0626c91fea8daab37240af9a", 0xd5, 0x28000000000000}], 0x2008000, &(0x7f0000001840)='keyring}\x00') bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)=r0, 0x4) 15:08:51 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) 15:08:51 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f00000000c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6}, [@null, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default]}, 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_G_ENC_INDEX(r2, 0x8818564c, &(0x7f00000001c0)) r4 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r4, &(0x7f0000000a00)=ANY=[@ANYBLOB="086c6d790f02bbb1acd1c5a9b0df99db23e9021f5e7888d02213dc13a52806292600188dcb178a112b4b9d195d66239caabfec76858afa349c061136c6988f46124343590b1c78dc4d3f70e755d1cbf393ef7211af81208575f93cd30a4d5b20"], 0x1) fcntl$setpipe(r3, 0x407, 0x2) socket$inet_udp(0x2, 0x2, 0x0) sendfile(r0, r4, &(0x7f0000000000), 0x12) [ 717.759979] FAULT_INJECTION: forcing a failure. [ 717.759979] name failslab, interval 1, probability 0, space 0, times 0 [ 717.795963] CPU: 0 PID: 1288 Comm: syz-executor.0 Not tainted 4.14.113 #3 15:08:51 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x10000, 0x0) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000040)={0x10000, "97eacc3009c9e77ed05b588d58a5e9313c25096cefe6d9628116a702a9c77b7d", 0x1}) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) [ 717.802945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 717.812348] Call Trace: [ 717.814944] dump_stack+0x138/0x19c [ 717.818594] should_fail.cold+0x10f/0x159 [ 717.822768] should_failslab+0xdb/0x130 [ 717.826790] __kmalloc+0x2f3/0x7a0 [ 717.830355] ? ima_write_template_field_data.isra.0+0xf7/0x1b0 [ 717.836439] ima_write_template_field_data.isra.0+0xf7/0x1b0 [ 717.842245] ima_eventname_init_common+0x122/0x1a0 [ 717.847200] ima_eventname_ng_init+0x20/0x30 [ 717.851611] ima_alloc_init_template+0x247/0x3b0 [ 717.856388] ima_store_measurement+0x17b/0x330 [ 717.860976] ? ima_collect_measurement+0x450/0x450 [ 717.865998] ? kmem_cache_alloc+0x613/0x780 [ 717.870344] ? ima_d_path+0xaf/0x1de [ 717.874074] process_measurement+0x948/0xb90 [ 717.878512] ? ima_rdwr_violation_check+0x3f0/0x3f0 [ 717.883652] ? __lock_acquire+0x5f9/0x45e0 [ 717.887996] ? trace_hardirqs_on+0x10/0x10 [ 717.892240] ? save_trace+0x290/0x290 [ 717.896049] ? save_trace+0x290/0x290 [ 717.899946] ? __task_pid_nr_ns+0x1cb/0x450 [ 717.904307] ? do_execveat_common.isra.0+0xfce/0x1dd0 [ 717.909591] ? find_held_lock+0x35/0x130 [ 717.913669] ima_bprm_check+0x49/0x60 [ 717.917481] security_bprm_check+0x9a/0xb0 [ 717.921727] search_binary_handler+0x6b/0x700 [ 717.926236] do_execveat_common.isra.0+0xffd/0x1dd0 [ 717.931299] ? prepare_bprm_creds+0x120/0x120 [ 717.935830] SyS_execve+0x39/0x50 [ 717.939307] ? setup_new_exec+0x790/0x790 [ 717.943577] do_syscall_64+0x1eb/0x630 [ 717.947494] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 717.952351] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 717.957542] RIP: 0033:0x458c29 15:08:51 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f0000000080), 0x121, 0x0) [ 717.961098] RSP: 002b:00007faee867bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 717.968819] RAX: ffffffffffffffda RBX: 00007faee867bc90 RCX: 0000000000458c29 [ 717.976099] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 717.983379] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 717.990754] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faee867c6d4 [ 717.998031] R13: 00000000004bf216 R14: 00000000004d0458 R15: 0000000000000004 15:08:52 executing program 0 (fault-call:4 fault-nth:33): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 718.016874] audit: type=1804 audit(1555945731.943:114): pid=1288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="add_template_measure" cause="ENOMEM" comm="syz-executor.0" name="/root/syzkaller-testdir437791866/syzkaller.ie99VR/852/file0" dev="sda1" ino=17534 res=0 15:08:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0xfe41) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) shutdown(r0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100), 0x28) recvmmsg(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x3b9ac9ff, 0x0) 15:08:52 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x80) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x80}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e23, 0xffff, @mcast1, 0x8}}, [0xbb6b, 0x0, 0x7, 0x200, 0x4, 0x4, 0x0, 0x2, 0x4, 0x8, 0x5, 0x4, 0x3, 0x8, 0x743f]}, &(0x7f0000000240)=0x100) 15:08:52 executing program 5: r0 = shmget(0x3, 0x2000, 0x78000000, &(0x7f0000ffe000/0x2000)=nil) io_setup(0x3f, &(0x7f0000000000)) shmctl$SHM_LOCK(r0, 0xb) 15:08:52 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {0x3}, {0xf401}, @addr}], 0x30) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x400002, 0x0) 15:08:52 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f0000000100)={0x3, 0x3, 0x7, 0x3, 'syz0\x00', 0x2}) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[], 0x0) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0xfffffffffffffdfd) sendfile(r0, r1, &(0x7f0000000000), 0x12) [ 718.199541] FAULT_INJECTION: forcing a failure. [ 718.199541] name failslab, interval 1, probability 0, space 0, times 0 15:08:52 executing program 2: seccomp(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x1, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6}]}) 15:08:52 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000040)="ab68a69ded2e8b91bafd2082321d") bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) [ 718.280472] CPU: 1 PID: 1316 Comm: syz-executor.0 Not tainted 4.14.113 #3 [ 718.287569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 718.296941] Call Trace: [ 718.299556] dump_stack+0x138/0x19c [ 718.303213] should_fail.cold+0x10f/0x159 [ 718.307391] should_failslab+0xdb/0x130 [ 718.311377] __kmalloc+0x2f3/0x7a0 [ 718.314927] ? up_read+0x1a/0x40 [ 718.318306] ? crypto_alg_lookup+0x41/0x50 [ 718.322682] ? crypto_create_tfm+0x88/0x2f0 15:08:52 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r1 = dup2(r0, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x2, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4004) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(0xffffffffffffffff, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000001c0)=0x1, 0x4) getsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 718.327021] crypto_create_tfm+0x88/0x2f0 [ 718.331182] crypto_alloc_tfm+0x11b/0x300 [ 718.335338] ? __kmalloc+0x379/0x7a0 [ 718.339073] crypto_alloc_shash+0x2d/0x40 [ 718.343235] ima_alloc_tfm+0x8b/0xc0 [ 718.346977] ima_calc_field_array_hash+0x49/0xc0 [ 718.351760] ima_store_template+0x111/0x260 [ 718.351773] ? ima_alloc_init_template+0x3b0/0x3b0 [ 718.351781] ? ima_alloc_init_template+0x262/0x3b0 [ 718.351802] ima_store_measurement+0x1a4/0x330 [ 718.351814] ? ima_collect_measurement+0x450/0x450 [ 718.351826] ? kmem_cache_alloc+0x613/0x780 [ 718.351841] ? ima_d_path+0xaf/0x1de [ 718.351853] process_measurement+0x948/0xb90 [ 718.351870] ? ima_rdwr_violation_check+0x3f0/0x3f0 [ 718.351888] ? __lock_acquire+0x5f9/0x45e0 [ 718.351907] ? trace_hardirqs_on+0x10/0x10 [ 718.351919] ? save_trace+0x290/0x290 [ 718.406235] ? save_trace+0x290/0x290 [ 718.410076] ? __task_pid_nr_ns+0x1cb/0x450 [ 718.414420] ? do_execveat_common.isra.0+0xfce/0x1dd0 [ 718.419623] ? find_held_lock+0x35/0x130 [ 718.423717] ima_bprm_check+0x49/0x60 [ 718.423730] security_bprm_check+0x9a/0xb0 [ 718.423743] search_binary_handler+0x6b/0x700 [ 718.423757] do_execveat_common.isra.0+0xffd/0x1dd0 [ 718.423774] ? prepare_bprm_creds+0x120/0x120 [ 718.423788] SyS_execve+0x39/0x50 [ 718.423804] ? setup_new_exec+0x790/0x790 [ 718.423815] do_syscall_64+0x1eb/0x630 [ 718.423823] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 718.423839] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 718.423847] RIP: 0033:0x458c29 [ 718.423856] RSP: 002b:00007faee867bc78 EFLAGS: 00000246 [ 718.432015] ORIG_RAX: 000000000000003b 15:08:52 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000080)=')eth1}GPLvboxnet0\x00', 0x0) r2 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x2, 0x2) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000580)=0xf1) r3 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r3) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x2010010, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_L='version=9p2000.L'}], [{@audit='audit'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'wlan1GPL'}}, {@fowner_gt={'fowner>'}}, {@obj_role={'obj_role', 0x3d, ')eth1}GPLvboxnet0\x00'}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}]}}) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="082e379a882c39c65d4ec3416fc80c69c11217840e13f899e3cdb72c943e975cff4668792a9f4ff588c748f2eb96267dd714448ed906000000ee35d4cd0bb2e0dee7a5d8114c90628727a6a059568317fb8fb6b0"], 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e22, 0x8b, @local, 0x694}}, [0x5, 0x4, 0x1f, 0x2, 0x358, 0x80000, 0x8, 0x1, 0x1, 0x1ff, 0x4, 0x3, 0x9, 0x4, 0x1]}, &(0x7f0000000140)=0x100) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000340)={r4, 0x0, 0x62, "7454bfd1870160f0f2c24eb296fc6f91091dfd51ad9f8e5b2150fd8d360997eaaad2974c7c84e0690dc1dcee531352204f4b1333f86b4a0a581df21e79b8d03365b57fe5554bdbb292c73c3d8526a0c3b0888c4d5ab838f7847738cbce5623358d00"}, 0x6a) sendfile(r0, r2, &(0x7f00000000c0), 0x5) fcntl$getflags(r1, 0x408) sendfile(r0, r0, &(0x7f0000000180), 0x12) 15:08:52 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) [ 718.432022] RAX: ffffffffffffffda RBX: 00007faee867bc90 RCX: 0000000000458c29 [ 718.432027] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 718.432032] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 718.432037] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faee867c6d4 [ 718.432042] R13: 00000000004bf216 R14: 00000000004d0458 R15: 0000000000000004 15:08:52 executing program 3: bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{}], 0x1, 0x0) [ 718.527241] audit: type=1326 audit(1555945732.453:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=1333 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ba8a code=0x0 [ 718.616566] ima: Can not allocate sha1 (reason: -12) [ 718.648579] audit: type=1326 audit(1555945732.513:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=1333 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ba8a code=0x0 15:08:52 executing program 0 (fault-call:4 fault-nth:34): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:08:52 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x401, 0x40) shmget$private(0x0, 0x1000, 0x18, &(0x7f0000ffd000/0x1000)=nil) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000100)=0x80000001, 0x1b4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0xfffffffffffffffe) getsockopt$inet6_dccp_int(r1, 0x21, 0x4, &(0x7f0000000000), &(0x7f0000000180)=0x4) r3 = dup2(r2, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x239) open(&(0x7f00000000c0)='./file0\x00', 0x525801, 0x8) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000140)) prctl$PR_MCE_KILL_GET(0x22) 15:08:52 executing program 5: r0 = shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x400000, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', r1}, 0x10) shmctl$SHM_LOCK(0x0, 0xb) 15:08:52 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x402080, 0x0) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:52 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0xfffffffffffffffd, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000140)={0x0, 0xfffffffffffffc01, 0xd4, 0xffffffffffff0000, 0x800, 0x8, 0x6, 0x3ff, {0x0, @in={{0x2, 0x4e22, @empty}}, 0x6, 0x4, 0xd9, 0x6, 0x3ff}}, &(0x7f0000000080)=0xb0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000200)=ANY=[@ANYRES32=r2, @ANYBLOB="cb0000007988c7246035c6deb26cf4ad3a37ee2adf6b942aec8328e17d7e55581cac4bc6df06d7b5ee94588ba4aee9982b9175152bf80b1b6a899b190da81b0741bf1022a6341429a5c35b7210c095af458c677ab43d69847150579b62ee7cfc6e401bab79cec0c430af027a06281d76dd37ffcdc513ccf732f742049d7ade6d84d69709ed94362a3c626411ddfc40b563c159d33eab66b4cdc8cb92c4d57ba3f99eb32c00e0ad9ca7707b819e0dd3f3e61cf9ed2f2b7b65fedba2b7420dfaa0ba1771471888245ec77d1580bb85fb"], &(0x7f0000000300)=0xd3) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x1) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000040)=""/62) [ 718.676374] audit: type=1326 audit(1555945732.533:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=1333 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ba8a code=0x0 15:08:52 executing program 5: shmctl$SHM_LOCK(0x0, 0xb) r0 = socket$caif_seqpacket(0x25, 0x5, 0x4) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffb000/0x4000)=nil) [ 718.794723] FAULT_INJECTION: forcing a failure. [ 718.794723] name failslab, interval 1, probability 0, space 0, times 0 [ 718.828733] CPU: 0 PID: 1370 Comm: syz-executor.0 Not tainted 4.14.113 #3 [ 718.835896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 718.835914] Call Trace: [ 718.835937] dump_stack+0x138/0x19c [ 718.835957] should_fail.cold+0x10f/0x159 [ 718.855673] should_failslab+0xdb/0x130 [ 718.859792] kmem_cache_alloc_trace+0x2ec/0x790 [ 718.864567] ima_add_digest_entry+0x51/0x430 [ 718.868991] ima_add_template_entry+0x2cf/0x550 [ 718.873687] ? ima_get_binary_runtime_size+0x40/0x40 [ 718.878831] ? kzfree+0x29/0x30 [ 718.882127] ? crypto_destroy_tfm+0x14d/0x2f0 [ 718.886661] ima_store_template+0x1a4/0x260 [ 718.891521] ? ima_alloc_init_template+0x3b0/0x3b0 [ 718.891538] ima_store_measurement+0x1a4/0x330 [ 718.891550] ? ima_collect_measurement+0x450/0x450 [ 718.891562] ? kmem_cache_alloc+0x613/0x780 [ 718.891576] ? ima_d_path+0xaf/0x1de [ 718.891588] process_measurement+0x948/0xb90 [ 718.919180] ? ima_rdwr_violation_check+0x3f0/0x3f0 [ 718.924458] ? __lock_acquire+0x5f9/0x45e0 [ 718.928773] ? trace_hardirqs_on+0x10/0x10 [ 718.933006] ? save_trace+0x290/0x290 [ 718.936886] ? save_trace+0x290/0x290 [ 718.940780] ? __task_pid_nr_ns+0x1cb/0x450 [ 718.945127] ? do_execveat_common.isra.0+0xfce/0x1dd0 [ 718.950439] ? find_held_lock+0x35/0x130 [ 718.954496] ima_bprm_check+0x49/0x60 [ 718.958294] security_bprm_check+0x9a/0xb0 [ 718.962522] search_binary_handler+0x6b/0x700 [ 718.967207] do_execveat_common.isra.0+0xffd/0x1dd0 [ 718.972241] ? prepare_bprm_creds+0x120/0x120 [ 718.976749] SyS_execve+0x39/0x50 [ 718.980204] ? setup_new_exec+0x790/0x790 [ 718.984364] do_syscall_64+0x1eb/0x630 [ 718.988254] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 718.993100] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 718.998283] RIP: 0033:0x458c29 [ 719.001460] RSP: 002b:00007faee867bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 719.011741] RAX: ffffffffffffffda RBX: 00007faee867bc90 RCX: 0000000000458c29 [ 719.019019] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 719.026289] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 719.033575] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faee867c6d4 [ 719.040930] R13: 00000000004bf216 R14: 00000000004d0458 R15: 0000000000000004 [ 719.049426] ima: OUT OF MEMORY ERROR creating queue entry 15:08:55 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r1 = gettid() ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(r1, 0x3d) 15:08:55 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) ioctl$SIOCAX25NOUID(r2, 0x89e3, &(0x7f0000000000)) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) 15:08:55 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x80000, 0x0) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 15:08:55 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x4000) ioctl$KVM_ASSIGN_DEV_IRQ(r2, 0x4040ae70, &(0x7f0000000200)={0x3, 0x0, 0xea0, 0x201}) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) timer_create(0x7, &(0x7f0000000080)={0x0, 0xb, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000100)=0x0) timer_getoverrun(r3) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:55 executing program 0 (fault-call:4 fault-nth:35): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:08:55 executing program 5: shmget(0x3, 0x3000, 0x1000, &(0x7f0000ffa000/0x3000)=nil) shmget(0x3, 0x3000, 0x140, &(0x7f0000ffb000/0x3000)=nil) shmget$private(0x0, 0x2000, 0x84, &(0x7f0000ffe000/0x2000)=nil) shmget$private(0x0, 0x4000, 0x120, &(0x7f0000ffa000/0x4000)=nil) shmget(0x1, 0x2000, 0x78000002, &(0x7f0000ffa000/0x2000)=nil) r0 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) 15:08:55 executing program 5: r0 = shmget(0x1, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) 15:08:55 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='trusted.overlay.upper\x00', &(0x7f0000000280)={0x0, 0xfb, 0x5b, 0x5, 0x5a, "3d18162187a194b860d1f145ced3a857", "075ecf7facdd864ab670966934c248ea403f2c9ee692ec0d2f4cd9656f8ae99f1bcef217571d7529903414923c910291d04b6579cae3d751a59d1c655a79f5d98d8feec95d54"}, 0x5b, 0x3) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) r2 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000100)=""/13, &(0x7f00000001c0)=0xd) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) [ 721.364211] FAULT_INJECTION: forcing a failure. [ 721.364211] name failslab, interval 1, probability 0, space 0, times 0 15:08:55 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0xffffffffffffffff, 0x1) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x141500) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000080)={0x0, {0x2, 0x2, 0x5, 0x3}, {0x2, 0x95, 0x9, 0x7fff}, {0xffff, 0xfffffffffffff32f}}) modify_ldt$write2(0x11, &(0x7f0000000140)={0x7, 0x20001000, 0x0, 0x800, 0x1, 0x5, 0xfffffffffffffffb, 0x2, 0x7ff, 0x9}, 0x10) [ 721.437926] CPU: 0 PID: 1395 Comm: syz-executor.0 Not tainted 4.14.113 #3 [ 721.445961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 721.455607] Call Trace: [ 721.458235] dump_stack+0x138/0x19c [ 721.461896] should_fail.cold+0x10f/0x159 [ 721.466335] should_failslab+0xdb/0x130 [ 721.470336] kmem_cache_alloc_trace+0x2ec/0x790 [ 721.475031] load_elf_binary+0xc5/0x4ba0 [ 721.479194] ? save_trace+0x290/0x290 [ 721.483021] ? search_binary_handler+0xff/0x700 [ 721.487887] ? find_held_lock+0x35/0x130 [ 721.492424] ? search_binary_handler+0xff/0x700 [ 721.497577] ? notesize.isra.0+0x80/0x80 [ 721.501938] ? lock_downgrade+0x6e0/0x6e0 [ 721.501959] search_binary_handler+0x14f/0x700 [ 721.510698] do_execveat_common.isra.0+0xffd/0x1dd0 [ 721.510715] ? prepare_bprm_creds+0x120/0x120 [ 721.510728] SyS_execve+0x39/0x50 [ 721.510736] ? setup_new_exec+0x790/0x790 [ 721.510749] do_syscall_64+0x1eb/0x630 [ 721.510757] ? trace_hardirqs_off_thunk+0x1a/0x1c 15:08:55 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x400, 0x400000) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:55 executing program 3: r0 = semget(0x0, 0x0, 0x200) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x0) semctl$SEM_INFO(r1, 0x4, 0x13, &(0x7f0000000000)=""/3) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r2, &(0x7f00000000c0)={0x27, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r2}], 0x1, 0x0) 15:08:55 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0xa2, 0x0}, 0xc100) sendmsg(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000fc0)="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", 0x4d9}], 0x1}, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) dup2(r2, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) [ 721.510775] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 721.510787] RIP: 0033:0x458c29 [ 721.546522] RSP: 002b:00007faee867bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 721.554253] RAX: ffffffffffffffda RBX: 00007faee867bc90 RCX: 0000000000458c29 [ 721.561566] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 721.569805] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 721.578452] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faee867c6d4 15:08:55 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/68, 0x44}, {0x0}], 0x2, 0x0) 15:08:55 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x600200, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="9a2cdd1b940008c6dc64e2ff53fc2e89712a1e6794adf70fb2edad93cc6dea6b33f33ca037b3c54ade2466672ab575119f4dc4a044817ed1d0caf26869be6b073c19d1f5702a055b6839e4c4132d0faaa9b7bdb73cf4ae9b16d55030abe9235e7daf7ef1352b9e00423750fe87121402f9f7d65b390414d49bc2cb86e603fd092de9a017e67bb48e9b5fdc9cad139b7dfc4b555b9a1259f899c12c978d353ddb369cae8e", 0xa4, 0x40040, &(0x7f0000000280)={0xa, 0x4e24, 0xafa, @remote, 0x8}, 0x1c) r2 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="2818fb060003"], 0x6) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="a52a7c96d6881058f533fb7ca49c604ae428f0ab677b5e7889e0dffe047a3619025759403fa532e35f7c5b8e1e2ed6a9460cd10e376950e2c64fea9cdb96167b2bb5aa2463369c0b6c5859448542175504fb5c9d0f1179dafb00e232173ddc75dfc2c2f5f3f7f154d2953df5a23fa00afcaa691eb2e3fb7e1701293e2e21b895ce51b0123516bc5527d26bb53f0d328a7ea8c00d3958952f7af3665e90eaa358176c1d4a1bca3292b32bea022b9557a0f9724cfaa339868982fbbb826575b974"], 0xfffffffffffffecc) sendfile(r0, r0, &(0x7f0000000080)=0x1, 0x12) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000100)) 15:08:55 executing program 5: shmget(0x0, 0x4000, 0x120, &(0x7f0000ffa000/0x4000)=nil) shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ffa000/0x1000)=nil) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ff7000/0x4000)=nil) shmget$private(0x0, 0x2000, 0xc0, &(0x7f0000ffa000/0x2000)=nil) r0 = shmget$private(0x0, 0x3000, 0xafb6febe6ba5a9c, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) [ 721.585830] R13: 00000000004bf216 R14: 00000000004d0458 R15: 0000000000000004 15:08:55 executing program 5: r0 = shmget(0x1, 0x2000, 0x9, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_LOCK(0x0, 0xb) 15:08:55 executing program 0 (fault-call:4 fault-nth:36): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:08:55 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[], 0xfd9b) sendfile(r0, r0, &(0x7f0000000000), 0xf) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_int(r1, &(0x7f0000000140)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x1d, 0x80) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f0000000100)=0x7) 15:08:55 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1f, 0x2001) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000040)) 15:08:55 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, &(0x7f0000000080)=0x7, 0x4) 15:08:55 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') 15:08:55 executing program 5: r0 = shmget(0x3, 0x3000, 0x400, &(0x7f0000ffb000/0x3000)=nil) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x1c, &(0x7f0000000000)=""/10, &(0x7f0000000040)=0xa) shmctl$SHM_LOCK(r0, 0xb) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x90080, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000000c0)=0x7fffffff, 0x4) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 15:08:55 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) getpeername(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000080)=0x80) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x5, 0x4) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x4, 0x800) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000200)={0x8, &(0x7f00000001c0)=[{0x0, 0x80000000, 0x7, 0x10000000000000}, {0x9, 0x4, 0x80000001, 0x3}, {0xffffffffffffff7f, 0x2, 0x92, 0x1}, {0x6, 0x7, 0xfffffffffffffffd, 0x401}, {0x9, 0x200, 0x8, 0x9}, {0x1, 0x40, 0x7928, 0x2}, {0x1, 0x6, 0x6, 0xfffffffffffffffa}, {0x5, 0x8, 0x1, 0xff}]}) 15:08:55 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) getcwd(&(0x7f0000000000)=""/95, 0x5f) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) [ 721.775828] FAULT_INJECTION: forcing a failure. [ 721.775828] name failslab, interval 1, probability 0, space 0, times 0 15:08:55 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:55 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x173b, 0x10200) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x2d) r1 = shmget(0x3, 0x2000, 0x54000000, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_LOCK(0x0, 0xb) [ 721.865976] CPU: 1 PID: 1463 Comm: syz-executor.0 Not tainted 4.14.113 #3 [ 721.872959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 721.882320] Call Trace: [ 721.884953] dump_stack+0x138/0x19c [ 721.888600] should_fail.cold+0x10f/0x159 [ 721.892767] should_failslab+0xdb/0x130 [ 721.896853] __kmalloc_track_caller+0x2ef/0x790 [ 721.901551] ? __request_module+0x241/0x8ed [ 721.901565] ? rcu_read_lock_sched_held+0x110/0x130 [ 721.901576] ? kmem_cache_alloc_trace+0x626/0x790 [ 721.901586] ? __request_module+0x25f/0x8ed [ 721.901599] kstrdup+0x3a/0x70 [ 721.901610] __request_module+0x25f/0x8ed [ 721.901624] ? trace_hardirqs_on+0x10/0x10 [ 721.932474] ? search_binary_handler+0x2f6/0x700 [ 721.937285] ? free_modprobe_argv+0xa0/0xa0 [ 721.941626] ? save_trace+0x290/0x290 [ 721.945552] ? search_binary_handler+0x266/0x700 [ 721.950328] ? find_held_lock+0x35/0x130 [ 721.954403] ? search_binary_handler+0x266/0x700 [ 721.959180] ? lock_downgrade+0x6e0/0x6e0 15:08:55 executing program 5: r0 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_LOCK(0x0, 0xb) prctl$PR_SET_FPEMU(0xa, 0x0) [ 721.963433] search_binary_handler+0x2f6/0x700 [ 721.968036] do_execveat_common.isra.0+0xffd/0x1dd0 [ 721.973072] ? prepare_bprm_creds+0x120/0x120 [ 721.977608] SyS_execve+0x39/0x50 [ 721.981081] ? setup_new_exec+0x790/0x790 [ 721.985238] do_syscall_64+0x1eb/0x630 [ 721.989158] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 721.989178] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 721.999213] RIP: 0033:0x458c29 [ 722.002567] RSP: 002b:00007faee867bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b 15:08:55 executing program 5: r0 = socket$isdn(0x22, 0x3, 0x11) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='syzkaller0\x00'}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x164) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f00000000c0)={0x8, 0x26, 0x1, 0x1b, 0x1, 0x0, 0x1, 0x156, 0xffffffffffffffff}) shmctl$SHM_LOCK(0x0, 0xb) 15:08:56 executing program 0 (fault-call:4 fault-nth:37): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:08:56 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000080)=""/105) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[@ANYRES32=r1], 0x4) sendfile(r0, r1, &(0x7f0000000000), 0x12) signalfd4(r1, &(0x7f0000000100)={0x41}, 0x8, 0x80800) 15:08:56 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f0000000000)={@local, 0x0}, &(0x7f0000000040)=0x14) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x19, r3, 0x1, 0xf9e1, 0x6, @broadcast}, 0x14) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) 15:08:56 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x200001, 0x0) [ 722.010294] RAX: ffffffffffffffda RBX: 00007faee867bc90 RCX: 0000000000458c29 [ 722.017600] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 722.025054] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 722.032471] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faee867c6d4 [ 722.040915] R13: 00000000004bf216 R14: 00000000004d0458 R15: 0000000000000004 15:08:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") io_setup(0x5b3, &(0x7f0000000040)) [ 722.141487] FAULT_INJECTION: forcing a failure. [ 722.141487] name failslab, interval 1, probability 0, space 0, times 0 15:08:56 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x5}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000380)=ANY=[@ANYRES32=r3, @ANYBLOB="920000001c80fdb0d082d1efd8e9aa52f47a44f8a750c6a408a9e71903ab4a90f955ad82498b3f468beb6376f64bcef5abb86c5ec13c255234c87ec40f2c90ce654056b2fc1040c312a0b562703e2ba3f56654a4930734c61dfdd073d534ca499efb042773cce7b73942e6a264a59e86eda0ea37b48ed4916ef177ce6111cfe51e06babe667396c62cc63980e3bef13d445a0fbf21ef3f2c5953be9d82b77fd5045bea"], &(0x7f0000000140)=0x9a) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000002c0)={r3, @in6={{0xa, 0x4e22, 0x2, @local, 0x1f}}}, 0x84) 15:08:56 executing program 5: shmget(0x2, 0x3000, 0x26, &(0x7f0000ffc000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffa000/0x3000)=nil) shmget(0x1, 0x2000, 0x78001882, &(0x7f0000ffc000/0x2000)=nil) shmget$private(0x0, 0x2000, 0x5400000e, &(0x7f0000ffc000/0x2000)=nil) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) shmget(0x2, 0xa000, 0x600, &(0x7f0000ff6000/0xa000)=nil) shmget$private(0x0, 0x12000, 0x0, &(0x7f0000fee000/0x12000)=nil) shmget$private(0x0, 0x1000, 0x10, &(0x7f0000fee000/0x1000)=nil) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmget(0x0, 0x3000, 0x1918, &(0x7f0000ff0000/0x3000)=nil) shmget(0x2, 0x3000, 0x10, &(0x7f0000ffb000/0x3000)=nil) r0 = shmget$private(0x0, 0x3000, 0x404, &(0x7f0000ff5000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) [ 722.224028] CPU: 0 PID: 1511 Comm: syz-executor.0 Not tainted 4.14.113 #3 [ 722.231625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 722.241106] Call Trace: [ 722.243715] dump_stack+0x138/0x19c [ 722.247459] should_fail.cold+0x10f/0x159 [ 722.251717] should_failslab+0xdb/0x130 [ 722.255806] kmem_cache_alloc_trace+0x2ec/0x790 [ 722.260781] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 722.267146] __request_module+0x241/0x8ed [ 722.271570] ? trace_hardirqs_on+0x10/0x10 [ 722.276729] ? search_binary_handler+0x2f6/0x700 [ 722.281945] ? free_modprobe_argv+0xa0/0xa0 [ 722.286531] ? save_trace+0x290/0x290 [ 722.290534] ? search_binary_handler+0x266/0x700 [ 722.295408] ? find_held_lock+0x35/0x130 [ 722.299674] ? search_binary_handler+0x266/0x700 [ 722.304556] ? lock_downgrade+0x6e0/0x6e0 [ 722.309086] search_binary_handler+0x2f6/0x700 [ 722.313785] do_execveat_common.isra.0+0xffd/0x1dd0 [ 722.319348] ? prepare_bprm_creds+0x120/0x120 15:08:56 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2045c0) getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f0000000140)) bind$isdn_base(r1, &(0x7f0000000200)={0x22, 0x7, 0x77f1, 0x8, 0x6}, 0x6) r3 = getegid() write$FUSE_ATTR(r1, &(0x7f0000000180)={0x78, 0x0, 0x1, {0x10000, 0x50a, 0x0, {0x5, 0x6, 0xa6, 0x2, 0x7, 0x6, 0x7, 0x2, 0x7, 0x1, 0x10001, r2, r3, 0x3ff, 0x75}}}, 0x78) 15:08:56 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f0000000000), 0x0, 0x400004) [ 722.324123] SyS_execve+0x39/0x50 [ 722.327678] ? setup_new_exec+0x790/0x790 [ 722.331851] do_syscall_64+0x1eb/0x630 [ 722.335767] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 722.340643] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 722.346021] RIP: 0033:0x458c29 [ 722.349394] RSP: 002b:00007faee867bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 722.358447] RAX: ffffffffffffffda RBX: 00007faee867bc90 RCX: 0000000000458c29 [ 722.366336] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 15:08:56 executing program 5: shmctl$SHM_LOCK(0x0, 0xb) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000040)={0x9, 0x0, 0x4, 0x400000, {0x0, 0x2710}, {0x5, 0xe, 0x4, 0x1, 0x1, 0x0, "0f774964"}, 0x1, 0x3, @offset=0x4, 0x4}) 15:08:56 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000080)) setsockopt$inet_tcp_buf(r1, 0x6, 0x1b, &(0x7f0000000000)="ec56147bca647153f2d45c985e6225b343f0d1ec3bec88a83fb15eb375c256e3bf1ccc1242f7d38f2fe9675c68ec820183331e039624743065f17dc5f954f8911161cd", 0x43) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(0xffffffffffffffff, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) 15:08:56 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x5) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) [ 722.373894] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 722.381183] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faee867c6d4 [ 722.388477] R13: 00000000004bf216 R14: 00000000004d0458 R15: 0000000000000004 15:08:56 executing program 0 (fault-call:4 fault-nth:38): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:08:56 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x6) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCGDEV(r1, 0x80045432, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x8001004000000016) 15:08:56 executing program 5: shmctl$SHM_LOCK(0x0, 0xb) r0 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10, 0x80000) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000080)={0x0, 0xbb}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={r1, 0x3}, 0x8) 15:08:56 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000100)='\x00', 0x20000000) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="3524005f060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:56 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x202000, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={0x0, 0xd73d, 0x1, 0x9}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e20, 0x1, @mcast1, 0x3f}}, [0xfffffffffffffffc, 0x2, 0x7, 0x7, 0x2, 0x7f, 0x7, 0x7fff, 0x4, 0x3, 0x5, 0x76, 0x0, 0x401, 0x9]}, &(0x7f0000000180)=0x100) r3 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) dup2(r3, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) [ 722.529430] FAULT_INJECTION: forcing a failure. [ 722.529430] name failslab, interval 1, probability 0, space 0, times 0 [ 722.574622] CPU: 0 PID: 1552 Comm: syz-executor.0 Not tainted 4.14.113 #3 [ 722.581777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 722.591929] Call Trace: [ 722.594617] dump_stack+0x138/0x19c [ 722.598444] should_fail.cold+0x10f/0x159 [ 722.602784] should_failslab+0xdb/0x130 [ 722.607136] kmem_cache_alloc_trace+0x2ec/0x790 [ 722.611837] ? rcu_read_lock_sched_held+0x110/0x130 [ 722.616958] ? __kmalloc_track_caller+0x375/0x790 [ 722.621817] ? __request_module+0x241/0x8ed [ 722.626145] ? rcu_read_lock_sched_held+0x110/0x130 [ 722.631173] call_usermodehelper_setup+0x70/0x2e0 [ 722.631184] ? memcpy+0x46/0x50 [ 722.631195] ? dec_ucount+0x120/0x120 [ 722.631208] __request_module+0x35a/0x8ed [ 722.631219] ? trace_hardirqs_on+0x10/0x10 [ 722.631230] ? search_binary_handler+0x2f6/0x700 [ 722.631242] ? free_modprobe_argv+0xa0/0xa0 [ 722.631252] ? save_trace+0x290/0x290 [ 722.631276] ? search_binary_handler+0x266/0x700 [ 722.631289] ? find_held_lock+0x35/0x130 15:08:56 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vfio/vfio\x00', 0x80, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000200)={0x0, 0x200, 0x20, 0x3e, 0x5f5e}, &(0x7f0000000240)=0x18) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000280)={r1, 0x6, 0x3501}, 0x8) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r3 = memfd_create(&(0x7f0000000340)='cpusetem1\x00', 0x5) setrlimit(0x4, &(0x7f0000000180)={0x4, 0x80}) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="00370922d5384349f09103180100000703"], 0x6) setrlimit(0xf, &(0x7f00000000c0)={0x9, 0x4}) write$binfmt_elf64(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="4f280180000000c120158c115db100020a0101c4f7769608d678ee422ae3913ea3ac83aee93fadf04027ff09e940f605b2e605000a00bb28bfe5f5c4442f0557f69ec4f8f0f9a52fd7ff977b2b3d4ed61d7656ad62e405517d4b8fe52982dd433cf68cb99fa0"], 0x1) sendfile(r2, r3, &(0x7f0000000000), 0x12) 15:08:56 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f00000001c0)) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20ncci\x00', 0x101000, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000280)=@hopopts={0x37, 0x21, [], [@generic={0x5, 0xb3, "7dd8fc44e8c99ef54f726c31e6d70f49c5dd524fd19141725ad089efb624f1bf36c61c19f896458797f690529b33e243490db9d976e7cdd07ba6c2838518fbac4fa110937d461edc219708410dad02cfa4b6966f75f428ba500c0eebe219881d99962a2aae2e2e2ec1367b2a2ff4c48cfd3f21f0a241bb00808661a96b51220c4906cb8b5080ab79815800293ab350fea2f2a3e546b9d13df2202c00a65d3544c1131dfb8dd9bbeac23122e449395d15968316"}, @enc_lim={0x4, 0x1, 0x7f8}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x7a}, @pad1, @calipso={0x7, 0x48, {0x8, 0x10, 0x2, 0x1f, [0x1, 0x7fff, 0x81, 0xffffffffffffff00, 0x1, 0xbf, 0x2, 0x43f]}}]}, 0x118) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x20) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x9) sendfile(r0, r1, &(0x7f0000000000), 0x12) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f0000000100)=0x5bb5, 0x4) [ 722.651868] ? search_binary_handler+0x266/0x700 [ 722.651890] ? lock_downgrade+0x6e0/0x6e0 [ 722.651908] search_binary_handler+0x2f6/0x700 [ 722.651921] do_execveat_common.isra.0+0xffd/0x1dd0 [ 722.651938] ? prepare_bprm_creds+0x120/0x120 [ 722.651953] SyS_execve+0x39/0x50 [ 722.651961] ? setup_new_exec+0x790/0x790 [ 722.651974] do_syscall_64+0x1eb/0x630 [ 722.651983] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 722.652002] entry_SYSCALL_64_after_hwframe+0x42/0xb7 15:08:56 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000300)={0x3, 0xd57}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f00000000c0)) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x0) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x4, @tick, {}, {0xf401}, @addr}], 0x30) accept4$netrom(r2, &(0x7f0000000140)={{}, [@bcast, @rose, @netrom, @remote, @default, @null, @remote, @netrom]}, &(0x7f00000002c0)=0x48, 0x80800) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000340)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f00000003c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), r3, r2}}, 0x18) [ 722.652010] RIP: 0033:0x458c29 [ 722.652019] RSP: 002b:00007faee867bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 722.734692] RAX: ffffffffffffffda RBX: 00007faee867bc90 RCX: 0000000000458c29 [ 722.742150] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 722.742157] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 722.742162] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faee867c6d4 [ 722.742167] R13: 00000000004bf216 R14: 00000000004d0458 R15: 0000000000000004 15:08:57 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) poll(&(0x7f0000000000)=[{r0, 0x200}, {r0, 0x1002}, {r0, 0x40}], 0x3, 0x2e3c) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f0000000080)=0x4, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/123, 0x7b}], 0x1}, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000e59f13)=')', 0x1}], 0x1) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 15:08:57 executing program 5: shmget$private(0x0, 0x4000, 0x54000800, &(0x7f0000ffc000/0x4000)=nil) shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffc000/0x3000)=nil) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x80000, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r0, 0x3, 0x1, 0x70, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000000c0)) r1 = shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_LOCK(r1, 0xb) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x101000, 0x0) connect$rds(r2, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 15:08:57 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x3f, 0x80) write$P9_RCREATE(r0, &(0x7f0000000140)={0x18, 0x73, 0x1, {{0x9d, 0x4, 0x8}, 0x1}}, 0x18) r1 = memfd_create(&(0x7f0000000180)='ppp0+,selfppp0vmnet1proc\']\x00', 0xfffffffffffffffe) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r3 = dup2(r2, r1) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x22c, r4, 0x810, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x894e}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x375c}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x38, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x14e0cd96}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x20}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xce1d}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffffffffffe}]}, @TIPC_NLA_BEARER={0x12c, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'batadv0\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'bond_slave_1\x00'}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffffff7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa69}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x40040}, 0x800) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r1, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) 15:08:57 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xffffffffffffffb6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:08:57 executing program 0 (fault-call:4 fault-nth:39): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 723.276403] FAULT_INJECTION: forcing a failure. [ 723.276403] name failslab, interval 1, probability 0, space 0, times 0 [ 723.294893] CPU: 1 PID: 1589 Comm: syz-executor.0 Not tainted 4.14.113 #3 [ 723.302150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 723.311717] Call Trace: [ 723.314395] dump_stack+0x138/0x19c [ 723.318046] should_fail.cold+0x10f/0x159 [ 723.322334] should_failslab+0xdb/0x130 [ 723.326325] kmem_cache_alloc_trace+0x2ec/0x790 [ 723.331024] ? rcu_read_lock_sched_held+0x110/0x130 [ 723.336054] ? __kmalloc_track_caller+0x375/0x790 [ 723.341166] ? __request_module+0x241/0x8ed [ 723.345586] ? rcu_read_lock_sched_held+0x110/0x130 [ 723.351139] call_usermodehelper_setup+0x70/0x2e0 [ 723.356084] ? memcpy+0x46/0x50 [ 723.359373] ? dec_ucount+0x120/0x120 [ 723.363216] __request_module+0x35a/0x8ed [ 723.367372] ? trace_hardirqs_on+0x10/0x10 [ 723.371695] ? search_binary_handler+0x2f6/0x700 [ 723.376655] ? free_modprobe_argv+0xa0/0xa0 [ 723.380994] ? save_trace+0x290/0x290 [ 723.384991] ? search_binary_handler+0x266/0x700 [ 723.389768] ? find_held_lock+0x35/0x130 [ 723.394026] ? search_binary_handler+0x266/0x700 [ 723.398807] ? lock_downgrade+0x6e0/0x6e0 [ 723.402972] search_binary_handler+0x2f6/0x700 [ 723.407576] do_execveat_common.isra.0+0xffd/0x1dd0 [ 723.412726] ? prepare_bprm_creds+0x120/0x120 [ 723.417325] SyS_execve+0x39/0x50 [ 723.420789] ? setup_new_exec+0x790/0x790 [ 723.425097] do_syscall_64+0x1eb/0x630 [ 723.429093] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 723.434047] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 723.439243] RIP: 0033:0x458c29 [ 723.442475] RSP: 002b:00007faee867bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 723.450288] RAX: ffffffffffffffda RBX: 00007faee867bc90 RCX: 0000000000458c29 [ 723.457735] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 723.465037] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 723.472576] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faee867c6d4 [ 723.479940] R13: 00000000004bf216 R14: 00000000004d0458 R15: 0000000000000004 15:08:59 executing program 5: shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffd000/0x3000)=nil) r0 = shmget$private(0x0, 0x1000, 0xc, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) 15:08:59 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) r2 = add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="18678058ebd3835fa9468e9c30f76f478661c7eea4151051f84e78d0d36b9ba3285dce8c9ef52e70ea35e87a79ccf9340fc17eff7c2b3a447db15e607a3431bd72890184bf279c42e40e73f8818cee63afcf36f4105031884a49a0f139066e812e77abb21be9ddcc46017ef53cb0d07d2a566b304879733579d52fadc53f6ff0fa97e99ad6d84776b097cc514c99b848636d4314c24756ee6d23c38e1c75e9a876a1e5cdcd48a2daa833381bf83e76a98e20b035c8698a7c320a2b2d63ce87d2fb096572776e12296c444d43f2375bbb01415f6cffcfe61f3422652da81043bac4e20fe08b49a9cd4b00a6b9", 0xec, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000180)={r2, 0xffffffff, 0x1}, &(0x7f00000002c0)={'enc=', 'pkcs1', ' hash=', {'sha224-avx\x00'}}, &(0x7f0000000340)="458afb750939fb300fbc2b79b4ad6015b4500703ebee34afc012fc2cadd79ad234aacad8c742904ccdfe5757f736d30de75559786264c5a01ec12f8e6978db4bdbe1c54c30a03e7a37682a74542c10314241417c", &(0x7f00000003c0)="cb6dad10e67c6109fb2ad0acf74fcfb363c4a4d5dadd2138762f0858ecb2450669c556c4dea8e848ee0719fba66c7c21ef2041a23babfa0d78e42e5233ce8564764c38090947cc4bf2c7a7c4c83d07d61a94ddd10b86375e9cb5c2a162047ab4f5f43a9d4a453a477244b9b967210275d64529aa371e7ec3422319026c28a43d9f0d3ea3b47b2e4c0d23c176") 15:08:59 executing program 0 (fault-call:4 fault-nth:40): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:08:59 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x101100, 0x0) ioctl$PPPIOCSMRRU(r2, 0x4004743b, &(0x7f0000000100)=0xffffffffffffff9f) 15:08:59 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x4) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKREPORTZONE(r1, 0xc0101282, 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') recvmsg$kcm(r1, &(0x7f0000000280)={&(0x7f00000001c0)=@can, 0x80, &(0x7f0000000240)=[{&(0x7f0000000040)=""/5, 0x5}], 0x1}, 0x10000) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f00000038c0), 0x4000000000000a8, 0x60000000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0x10) syz_open_dev$loop(0x0, 0x0, 0x105082) openat$cgroup_ro(r1, &(0x7f0000000380)='memory.swap.current\x00', 0x0, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 15:08:59 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x1, 0x0) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000180)={0xe, 0x1, 0x8, 0x2, 0x5f, "7c1f13faf658a3ea8dc0d9d5775fe6e0d60abe8ddba11134d250dfedf1f7cce43717733074e32a83f40a1130ff8f9d59d9e1231b176351f3e0def07c04fe51d0b0a5468f062bfc1b4bf4a84edbe25d15826dd33da4e4f937a08fe9974527bf"}, 0x6b) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) timer_create(0x4, &(0x7f0000000000)={0x0, 0x2c, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_gettime(r2, &(0x7f0000000080)) 15:08:59 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000280)='PD\xe6\xa8-\xcd\x1e\x1dJKq\xb6Bf\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="030000000000"], 0x6) r2 = socket$inet(0x2, 0x3, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000003440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[{0x10, 0x0, 0x1}], 0x10}}], 0x1, 0x0) sendmmsg(r2, &(0x7f00000038c0)=[{{&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000380)}}, {{&(0x7f0000000400)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000480), 0x1400}}], 0x2, 0x0) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="0fadf649030000009b98ee21ef3508ecc05094b0b0d025c437040400000000000000aa"], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x581200, 0x0) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000100)=[0x2, 0x7]) 15:08:59 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80040, 0x1c) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000180)) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 15:08:59 executing program 5: shmctl$SHM_LOCK(0x0, 0xb) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@empty, @in6=@ipv4={[], [], @local}}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000000280)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in=@broadcast}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 15:08:59 executing program 4: r0 = memfd_create(&(0x7f0000000100)='cgroup,ppp0}%mime_type^{-/\x00', 0x4) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x4) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) socket$bt_rfcomm(0x1f, 0x3, 0x3) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) [ 725.364149] raw_sendmsg: syz-executor.1 forgot to set AF_INET. Fix it! 15:08:59 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x400000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000400)={0x0, 0x1000, "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"}, &(0x7f0000000040)=0x1008) r3 = fcntl$getown(r0, 0x9) fcntl$setownex(r0, 0xf, &(0x7f00000001c0)={0x1, r3}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={r2, 0x7, 0x20000000000}, &(0x7f0000000140)=0x8) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) socketpair(0x11, 0x80000, 0x7, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000200)=[{r0, 0x69}, {r0, 0x20}, {r5, 0x8000}, {r0, 0x1400}, {r0, 0x20}, {r4, 0x2040}, {r0, 0x48}, {r1, 0x8600}], 0x8, 0x6) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 15:08:59 executing program 5: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x1, 0x0) write$binfmt_script(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x1059) [ 725.409775] FAULT_INJECTION: forcing a failure. [ 725.409775] name failslab, interval 1, probability 0, space 0, times 0 [ 725.441221] CPU: 1 PID: 1615 Comm: syz-executor.0 Not tainted 4.14.113 #3 [ 725.448224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 725.457604] Call Trace: [ 725.460214] dump_stack+0x138/0x19c [ 725.463883] should_fail.cold+0x10f/0x159 [ 725.468059] should_failslab+0xdb/0x130 [ 725.472063] kmem_cache_alloc_trace+0x2ec/0x790 [ 725.476758] load_elf_binary+0xc5/0x4ba0 [ 725.480844] ? save_trace+0x290/0x290 [ 725.484669] ? search_binary_handler+0x3a6/0x700 [ 725.489444] ? find_held_lock+0x35/0x130 [ 725.493547] ? search_binary_handler+0x3a6/0x700 [ 725.498333] ? notesize.isra.0+0x80/0x80 [ 725.502424] ? lock_downgrade+0x6e0/0x6e0 15:08:59 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000180)={r0, 0xd38}) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xec3f, 0x400000) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000080)=&(0x7f0000000040)) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) [ 725.506608] search_binary_handler+0x3f6/0x700 [ 725.511320] do_execveat_common.isra.0+0xffd/0x1dd0 [ 725.516376] ? prepare_bprm_creds+0x120/0x120 [ 725.520992] SyS_execve+0x39/0x50 [ 725.524469] ? setup_new_exec+0x790/0x790 [ 725.528637] do_syscall_64+0x1eb/0x630 [ 725.532636] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 725.537504] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 725.542707] RIP: 0033:0x458c29 [ 725.545899] RSP: 002b:00007faee867bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b 15:08:59 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000340)={0x0, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xec\xff\xff\xff\xff\xff\xff\xff\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000480)=""/195, 0xc3}, 0x4d6) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uhid\x00', 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040), 0x21c}], 0x8) 15:08:59 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x3, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793", 0x19}, 0x60) socketpair(0x10, 0x4, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x3ff, 0x1000, 0xfff, 0x2, 0x52}, &(0x7f0000000040)=0x98) r3 = getpgid(0xffffffffffffffff) syz_open_procfs(r3, &(0x7f0000000200)='maps\x00') setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={r2, 0x1}, 0x8) [ 725.553660] RAX: ffffffffffffffda RBX: 00007faee867bc90 RCX: 0000000000458c29 [ 725.561036] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 725.568425] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 725.575746] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faee867c6d4 [ 725.583037] R13: 00000000004bf216 R14: 00000000004d0458 R15: 0000000000000004 [ 725.652529] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.666139] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.681058] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.687911] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.694985] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 15:08:59 executing program 0 (fault-call:4 fault-nth:41): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:08:59 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f00000000c0)) ioctl$KDDELIO(r2, 0x4b35, 0x3ff) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './file0', [{}, {0x20, ':'}, {0x20, '/dev/rfkill\x00'}], 0xa, "3eb6705e3ed9f3b5f42fa898ffdcde8e6901de2f67e9503e392dac1d433253e0c93545d2d74612c4995f868deaeea036f8d8481732a2f0ef46e93e2b5586fb1d7a426a65ac8c53a621ce72ea30b6b8cd781bc2e0a341fa0089bedfe12f4d7dfa09eaa836cb5cf518eff38f402302d3ed444c9a6758669e9026d803"}, 0x96) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="5a76a43be85f20019e2ed7cbd3cfbaf0cee1e79b7ea5e76b2450dd7529b73873264189e864c9b29f49f9e19451a9b964554f443a2d615144b4908567ad5b2d958cc1f23756cf11e98339b7a7b26953042b0c563a65c490459c69076f71d248d8b9047623fa51acc4e9672e890b472b22fb789c3626dbd1c0690eda0fe51dcfa92957a46276d8ae345c7e3baf4b4f1e8200c0bbe698f89397d4a4eaa5597e77516d205b7eccc110ed31b86f1ca42638cbf27aab46de"], 0x1) sendfile(r0, r1, &(0x7f0000000080), 0x16) 15:08:59 executing program 5: shmctl$SHM_LOCK(0x0, 0xb) r0 = shmget(0x3, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) 15:08:59 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x800) r3 = dup2(r1, r0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="bb000000", @ANYRES16=r4, @ANYBLOB="000326bd7000fcdbdf25010000000c00050000010000000000000c00040002000000000000002c00070008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100000000000c00060001000000000000000c00070008000100", @ANYRES32=r3, @ANYBLOB="0c00060003000000000000000c00050020000000000000000c0008000300000000000000"], 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$P9_RMKNOD(r3, &(0x7f0000000300)={0x14, 0x13, 0x1, {0x8, 0x1}}, 0x14) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) 15:08:59 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x200000b7, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)={0x0, 0x8, 0x7, 0x0, 0x0, [{r0, 0x0, 0x4}, {r0, 0x0, 0x20}, {r0, 0x0, 0xffffffff}, {r0, 0x0, 0x4}, {r0, 0x0, 0x10000}, {r0, 0x0, 0x8}, {r0, 0x0, 0x8001}]}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0xc00, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r2, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x401}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1f}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr="c7a4b02a4a907b0cde9a87f13189c3bd"}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000001) [ 725.704501] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.711612] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.718357] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.725171] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.749904] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 15:08:59 executing program 5: shmctl$SHM_LOCK(0x0, 0xb) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200c00, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x8, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) socket$bt_bnep(0x1f, 0x3, 0x4) [ 725.786367] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.821429] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 15:08:59 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x8400, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x4, {0x6, 0x1, 0x2, 0x4, 0x8, 0x2}, 0xcd0c, 0x8}, 0xe) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x8000, 0x0) bind$nfc_llcp(r1, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x3f, 0x20}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={r2, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xcd, 0x7a}, &(0x7f0000000240)=0x90) poll(&(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCCBRK(r0, 0x5428) 15:08:59 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x2000000007288, 0x80402) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000)=0x9, &(0x7f00000000c0)=0x2) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000100)={0x100, {{0x2, 0x4e24, @rand_addr=0x101}}, {{0x2, 0x4e24, @multicast1}}}, 0x108) connect$vsock_dgram(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711}, 0x10) shmctl$SHM_LOCK(0x0, 0xb) 15:08:59 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) getgroups(0x3, &(0x7f0000000080)=[0x0, 0xee01, 0xee01]) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) write$P9_RSTATu(r2, &(0x7f00000002c0)={0x9e, 0x7d, 0x2, {{0x0, 0x74, 0x3, 0x80000001, {0x40, 0x2, 0x3}, 0x80180000, 0x101, 0x5, 0x7, 0x0, '', 0xf, 'Lselinuxkeyring', 0x25, 'mime_typeposix_acl_accessvmnet1^(eth1', 0xd, '/dev/snd/seq\x00'}, 0x15, 'selinux*procmime_type', r3, r4, r5}}, 0x9e) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) 15:08:59 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000100)) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) [ 725.841163] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.859564] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.873929] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.917989] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.938642] FAULT_INJECTION: forcing a failure. [ 725.938642] name failslab, interval 1, probability 0, space 0, times 0 [ 725.948225] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.973270] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.974859] CPU: 0 PID: 1666 Comm: syz-executor.0 Not tainted 4.14.113 #3 [ 725.987166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 725.996530] Call Trace: [ 725.998778] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.999129] dump_stack+0x138/0x19c [ 726.006065] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.010071] should_fail.cold+0x10f/0x159 [ 726.010088] should_failslab+0xdb/0x130 [ 726.010100] kmem_cache_alloc_trace+0x2ec/0x790 [ 726.010119] load_elf_binary+0xc9/0x5140 [ 726.016914] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.020945] ? save_trace+0x290/0x290 [ 726.020962] ? search_binary_handler+0x3a6/0x700 [ 726.020971] ? find_held_lock+0x35/0x130 [ 726.020981] ? search_binary_handler+0x3a6/0x700 [ 726.021000] ? notesize.isra.0+0x80/0x80 [ 726.025103] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.029680] ? lock_downgrade+0x6e0/0x6e0 [ 726.029700] search_binary_handler+0x3f6/0x700 [ 726.029717] do_execveat_common.isra.0+0xffd/0x1dd0 [ 726.033948] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.040494] ? prepare_bprm_creds+0x120/0x120 [ 726.040510] SyS_execve+0x39/0x50 [ 726.040518] ? setup_new_exec+0x790/0x790 [ 726.040530] do_syscall_64+0x1eb/0x630 [ 726.040543] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 726.044456] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.049128] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 726.049139] RIP: 0033:0x458c29 [ 726.049144] RSP: 002b:00007faee867bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 726.053365] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.057990] RAX: ffffffffffffffda RBX: 00007faee867bc90 RCX: 0000000000458c29 [ 726.057996] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 726.058002] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 726.058007] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faee867c6d4 [ 726.058012] R13: 00000000004bf216 R14: 00000000004d0458 R15: 0000000000000004 [ 726.131064] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.169114] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.188338] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.199429] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.219252] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.228682] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.238768] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.257203] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.268283] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.275084] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.282280] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.288972] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.295726] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.302683] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.309465] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.316247] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.323022] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.329711] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.336569] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.343458] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.350240] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.356983] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.363759] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.370923] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.377625] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.384403] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.391124] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.397810] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.404621] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.411551] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.418270] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.425374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.432384] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.439074] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.445925] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.452778] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.459460] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.466289] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.473017] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.479693] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.486439] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.493157] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.499886] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.506619] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.513378] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.520659] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.527356] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.534106] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.540859] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.547912] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.555742] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.562630] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.569327] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.576062] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.582999] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.590287] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.597132] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.603906] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.610804] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.617511] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.624247] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.630981] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.637683] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.644439] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.651169] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.657853] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.664608] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.671343] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.678519] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.685270] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.692020] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.698703] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.705440] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.712204] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.719033] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.725889] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.732610] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.739655] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.746411] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.753155] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.760757] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.767498] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.774359] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.781105] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.787901] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.794677] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.801425] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.808122] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.814969] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.825074] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.831969] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.838691] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.845429] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.852276] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.858952] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.865683] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.872703] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.879417] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.886158] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.893557] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.900393] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.907075] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.913804] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.920559] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.927241] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.933972] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.940702] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.947409] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.954137] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.960902] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.967593] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.974421] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.981155] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.987875] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.994618] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.001439] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.008254] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.014989] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.021717] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.028397] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.035130] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.041896] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.048580] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.055433] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.062173] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.068969] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.075703] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.082436] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.089142] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.095917] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.102869] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.109702] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.116457] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.123194] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.129885] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.137596] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.144349] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.151231] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.158022] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.164744] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.171452] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.178145] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.184881] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.191699] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.198478] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.205205] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.212015] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.218687] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.225513] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.232392] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.239161] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.245907] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.252635] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.259404] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.266139] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.272866] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.279549] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.286385] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.293106] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.299970] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.306705] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.313429] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.321452] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.328142] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.334908] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.341743] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.348556] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.355507] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.362425] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.369393] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 727.377558] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 727.393439] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.404689] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.411985] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.418776] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.425818] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.432663] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.439744] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.446927] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.453733] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.460646] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.467367] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.474147] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.481188] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.487904] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.494661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.501401] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.508084] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.514877] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.523810] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.531131] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.537872] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.546664] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.553408] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.560228] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.566931] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.573710] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.580711] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.587398] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.594216] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.601375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.608241] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.615013] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.622308] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.629090] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.636423] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.644638] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.651999] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.658816] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.665823] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.672748] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.680454] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.688080] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.695100] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.704877] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.712983] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.719906] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.727046] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.735290] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.742116] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.748961] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.756040] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.763012] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.769897] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.776973] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.783825] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.791390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.798422] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.805314] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.812080] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.818861] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.825628] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.832421] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.839413] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.846205] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.852945] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.859854] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.866599] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.873414] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.880184] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.887052] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.893927] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.900906] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.907605] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.914594] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.921504] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.928209] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.935238] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.943809] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.951048] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.957845] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.964921] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.971750] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.978607] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.986364] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.993305] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 727.999993] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.006795] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.013902] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.020776] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.027501] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.034343] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.041078] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.047908] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.054829] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.061586] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.068414] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.075170] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.082202] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.088890] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.095748] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.102480] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.109164] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.115916] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.122761] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.129443] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.136910] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.144057] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.150824] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.157525] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.164313] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.171102] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.177915] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.184676] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.191469] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.198328] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.205081] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.211824] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.218504] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.225283] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.232372] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.239115] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.245905] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.252674] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.259464] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.266270] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.273460] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.280245] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.286968] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.293739] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.300487] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.307302] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.314087] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.320823] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.327635] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.334403] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.341365] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.348141] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.354918] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.362061] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.368751] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.375513] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.382255] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.389036] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.395797] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.402639] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.409330] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.416085] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.422844] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.429620] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.436538] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.443274] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.449986] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.457022] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.463753] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.470858] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.477565] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.484566] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.492015] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.498897] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.506172] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.513163] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.521288] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.528386] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.535653] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.542425] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.549117] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.555888] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.562819] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.569634] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.576488] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.583209] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.590273] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.597048] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.604079] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.611411] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.618225] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.624991] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.631972] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.638661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.645424] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.652381] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.659197] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.666130] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.672900] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.679842] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.686702] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.693471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.700442] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.707174] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.714126] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.721196] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 15:09:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_group_source_req(r1, 0x0, 0x30, &(0x7f00000000c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) fcntl$setstatus(r1, 0x4, 0x42804) 15:09:02 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000180)={0x1, 'ipddp0\x00', 0x3}, 0x18) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x401, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000040)="b9390b0000b800500000ba000000000f30b8120000000f23d80f21f835800000300f23f866baf80cb82a51f082ef66bafc0c66b8700066ef0f0176220f350f01c9c744240087428114c74424025d99b4a0c7442406000000000f0114246666646f660f01dfb95a0800000f32", 0x6c}], 0x1, 0x48, &(0x7f0000000180), 0x0) 15:09:02 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) fcntl$setsig(r2, 0xa, 0x30) fcntl$getown(r2, 0x9) 15:09:02 executing program 5: 15:09:02 executing program 0 (fault-call:4 fault-nth:42): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:09:02 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rfkill\x00', 0x2ac40, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2818fb060003e11cecd24a92f95170579ceb057843c0bbd2acb1b8f5fd373adda3216bc4511e802bb4cbff9fd4762c338550c642a7f554376c3ba1271881f0fbf3915863827ea89ec23fa241c6be92c407dbcdedeb3c1b2943271f5523303fc94937e8c6256eeaede5147b8342aae694cdf5d197272c4a0314877e142a12932bf934f1e0fa747fe4b55ab6c1fa779005abbcde1294af9023b1157bdff566149de96095aa6d9f02af728fb2455a20be2569561b16ae67da3147ead7a9c95335d21a4a6d715ef075bfec9eb078688adbfe3f539d8b5d7c2fc2bf3587cc3b14cadb3db71bf404c70d2e45ba1cf81e072b331f560ea2592c4872b7fc36a7fc31ba3d591e016d"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) ioctl$int_out(r1, 0x5460, &(0x7f0000000100)) sendfile(r0, r1, &(0x7f0000000000), 0x12) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) ioctl$VT_RELDISP(r2, 0x5605) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x400, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000200)={r4, 0x80000, r2}) [ 728.729496] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.736417] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.743413] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.752088] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 728.761079] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 15:09:02 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) r1 = accept(r0, &(0x7f0000000000)=@llc, &(0x7f0000000340)=0x80) getsockopt$inet_dccp_int(r1, 0x21, 0x15, &(0x7f0000000140), &(0x7f0000000180)=0x4) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) r2 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x2, 0x2) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000200)) 15:09:02 executing program 5: shmget(0x0, 0x3000, 0x78001101, &(0x7f0000ffa000/0x3000)=nil) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffff9c, 0xae01, 0x0) fcntl$getflags(r1, 0x40b) shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ffa000/0x1000)=nil) shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ff7000/0x3000)=nil) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000100)=0xe8) r3 = socket(0x2, 0x5, 0x0) fstat(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r2, r4) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000380)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f00000003c0)={r6}) shmctl$SHM_LOCK(r0, 0xb) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f00000001c0)={0x0, 0x83, "a219f52d063c5533ed3524dd106ce571a9d9ca374f4997501be9d67622a3c3c6b2d417506e5ff389d6f55f819318edc89119e003cc0bbe69a13faa6bf138d04e50bd033825457100586dd3f969e95ef21b5494dfb32d8463b23eb126e038887afc9e126275eda8df2a536bb1367e901e3f3ea51ee06e6c889870b700d58250765511fe"}, &(0x7f0000000280)=0x8b) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f00000002c0)={r7, 0x4}, &(0x7f0000000300)=0x8) 15:09:02 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x3, 0x2) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @remote}}, 0x8001, 0xffff, 0x2, 0x7, 0x2f}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000380)={r3, 0x2, 0xd66, 0x4, 0x9, 0x2, 0x7, 0x8, {r4, @in6={{0xa, 0x4e20, 0x100, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}}, 0x9, 0x8, 0xd74, 0x1, 0x5c94}}, &(0x7f0000000440)=0xb0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x100, 0x0) r5 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000000)=0x100000000) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) ioctl$TIOCEXCL(r5, 0x540c) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000480), &(0x7f00000004c0)=0x4) 15:09:02 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x2, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000100)=0x1a, 0x4) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:09:02 executing program 5: shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ffa000/0x4000)=nil) shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ff9000/0x4000)=nil) r0 = shmget(0x0, 0x2000, 0x100, &(0x7f0000ffa000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) 15:09:02 executing program 4: socket$key(0xf, 0x3, 0x2) r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xfffffffffffffffc, 0x30000) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000080)=""/89) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000040)={0x4, 0x5, 0x10001, 0x4, 0x3, 0x3, 0xfffffffffffffff8, 0x800, 0x7ff, 0x2}) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) dup2(r2, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) [ 729.010411] FAULT_INJECTION: forcing a failure. [ 729.010411] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 729.062455] CPU: 1 PID: 1705 Comm: syz-executor.0 Not tainted 4.14.113 #3 [ 729.069528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 729.069535] Call Trace: [ 729.069559] dump_stack+0x138/0x19c [ 729.069576] should_fail.cold+0x10f/0x159 [ 729.069593] __alloc_pages_nodemask+0x1d6/0x7a0 [ 729.069606] ? __alloc_pages_slowpath+0x2930/0x2930 [ 729.069624] ? check_preemption_disabled+0x3c/0x250 [ 729.069642] alloc_pages_current+0xec/0x1e0 [ 729.069658] __get_free_pages+0xf/0x40 [ 729.069667] tlb_remove_table+0x115/0x1e0 [ 729.069681] ___pte_free_tlb+0x9e/0xd0 [ 729.069697] free_pgd_range+0x979/0xd10 [ 729.094272] free_pgtables+0x1fa/0x2b0 [ 729.094289] exit_mmap+0x294/0x4e0 [ 729.094309] ? search_binary_handler+0x1bd/0x700 [ 729.132286] ? SyS_munmap+0x30/0x30 [ 729.132297] ? exit_aio+0x254/0x320 [ 729.132321] ? __might_sleep+0x93/0xb0 [ 729.132336] mmput+0x114/0x440 [ 729.132350] do_execveat_common.isra.0+0x13c7/0x1dd0 [ 729.132367] ? prepare_bprm_creds+0x120/0x120 [ 729.132382] SyS_execve+0x39/0x50 [ 729.140802] ? setup_new_exec+0x790/0x790 [ 729.140816] do_syscall_64+0x1eb/0x630 [ 729.140825] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 729.140842] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 729.140850] RIP: 0033:0x458c29 [ 729.140856] RSP: 002b:00007faee867bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 729.140866] RAX: ffffffffffffffda RBX: 00007faee867bc90 RCX: 0000000000458c29 [ 729.140872] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 15:09:03 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x79) write$binfmt_aout(r0, &(0x7f0000000780)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0xfdef) 15:09:03 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x10000, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) mq_timedreceive(r1, &(0x7f0000000280)=""/195, 0xc3, 0x10000, &(0x7f0000000380)={r2, r3+30000000}) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000140)=ANY=[@ANYBLOB="62726f7574650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="000000000000001000a5840000000000000000000000000000000000000000000000bbfacf9f714ca58e9a86594a27f0017e624733be6175bb580100ffff31efa866"], @ANYBLOB='\x00'/40], 0x98) 15:09:03 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x80000, 0x0) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f00000001c0)={0x1, 0x3, @raw_data=[0x3f, 0xfffffffffffffffc, 0x10000, 0x0, 0x8794, 0x800, 0x8, 0x7ff, 0x2, 0x100000000, 0x5, 0x1, 0xffffffff, 0x3b1, 0x3, 0x8]}) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:09:03 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10200, 0x15e) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044000}, 0x4008000) shmctl$SHM_LOCK(0x0, 0xb) 15:09:03 executing program 0 (fault-call:4 fault-nth:43): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 729.140877] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 729.140882] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faee867c6d4 [ 729.140888] R13: 00000000004bf216 R14: 00000000004d0458 R15: 0000000000000004 15:09:03 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000040)=0x8f, &(0x7f0000000080)=0x4) r1 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f00000000c0)=""/172) fchdir(r1) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r1, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) 15:09:03 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x2) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:09:03 executing program 5: shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffa000/0x4000)=nil) r0 = shmget(0x1, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) 15:09:03 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x20000, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x1) 15:09:03 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) 15:09:03 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x800) r3 = dup2(r1, r0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="bb000000", @ANYRES16=r4, @ANYBLOB="000326bd7000fcdbdf25010000000c00050000010000000000000c00040002000000000000002c00070008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100000000000c00060001000000000000000c00070008000100", @ANYRES32=r3, @ANYBLOB="0c00060003000000000000000c00050020000000000000000c0008000300000000000000"], 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$P9_RMKNOD(r3, &(0x7f0000000300)={0x14, 0x13, 0x1, {0x8, 0x1}}, 0x14) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) 15:09:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0xdabac0f8fd70f458, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000001c0)={0x6, 0xdfc, 0x3, 0x4, 0xb, 0x9, 0xfffffffffffffffa, 0x9, 0x1, 0x4, 0x85, 0x3}) shmctl$SHM_LOCK(0x0, 0xb) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfffffffffffffffd, 0x6, 0x820a, 0x100, 0x8, 0x3, 0x80000001, 0x4, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000100)={r2, 0x4, 0x30, 0x1, 0x5e2}, &(0x7f0000000140)=0x18) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x80, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x5) 15:09:03 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 15:09:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=@random={'trusted.', 'system_u:system_r:kernel_t:s0\x00'}, &(0x7f0000000180)='\x00', 0x1, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:09:03 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000000000)=[{0x101, 0x0, 0xfffffffffffffffc, 0x93, @tick, {}, {0xf402}, @addr}], 0x30) 15:09:03 executing program 2: r0 = socket$isdn(0x22, 0x3, 0x11) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='syzkaller0\x00'}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x164) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f00000000c0)={0x8, 0x26, 0x1, 0x1b, 0x1, 0x0, 0x1, 0x156, 0xffffffffffffffff}) shmctl$SHM_LOCK(0x0, 0xb) 15:09:03 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080)) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:09:03 executing program 5: r0 = shmget$private(0x0, 0x1000, 0x7c00004a, &(0x7f0000ffc000/0x1000)=nil) r1 = gettid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x260000, 0x0) r4 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) kcmp(r1, r2, 0x2, r3, r4) shmctl$SHM_LOCK(r0, 0xb) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLINK(r4, &(0x7f0000000100)={0x7, 0x47, 0x1}, 0x7) ioctl$NBD_CLEAR_QUE(r5, 0xab05) munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) 15:09:03 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) r2 = getuid() sendmsg$nl_generic(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1a}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x304, 0x32, 0x500, 0x70bd2c, 0x25dfdbff, {0x17}, [@nested={0x158, 0x2, [@generic="edca42c08621d86c177ebced3b2bc6a032dbfe7127acd2a2b71b77de26425b371835f2de8f02738ce9b55ae8", @generic="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", @generic="ad6856796b21b9069fc0f8e521a9dc5320ee2ce75b12046354574a3d6957620fd2ff255d9fb132"]}, @typed={0x8, 0x7c, @uid=r2}, @nested={0xc, 0x15, [@typed={0x8, 0x87, @u32=0xc33}]}, @generic="2ece591caf2de2d6763b1ff99a978cdd90cbfa14862bd1ed36b19f987be2deba9807407c55808cf4b4a50c07f40bf7267960c2541633e863b7a16187df8f9fa6e44d1c6363b59b1d6cb18adc1a8cbad71aa40050e1edc5698a79529d903cbbb94345755f82b90b8bfc8de58b41505c68027cf114a7356dc7bf3d6baffc7c09c9966a24698279db356f7b19462886e8cc0c4c34435891879afef8c34ea7543c1dbe04630b4beae059583cf600bdf7004acdff36880757891bdd2f1e7ac6cc0e198084d21c8b1cf135375f44b45f5c11b34a997632fa6e4605264d622aac96452c52928547360bc8b1d94754d83310ef266e17", @generic="19f59e2391dd46c44f1d14bbb85651b29031e1bb12410fa79efd518d3a47858f775da8a6f4018aefadec54012b35c0b3017a1f2ac3d5b86437dc6f9db6c44363e47949777db755eced454c2811d670fa1d12de6e5efbba5c9eff0c8a45a412380d91a54dbde58ab33172db95ecf8e9980bfbdaec7d2979d8e8ee41b01a17a1c6d16ab11fcb2173a0a98ef79179dd4ad4f74f"]}, 0x304}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 15:09:03 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) 15:09:03 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='{'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:09:03 executing program 5: shmctl$SHM_LOCK(0x0, 0xb) r0 = socket$bt_hidp(0x1f, 0x3, 0x6) listen(r0, 0xffffffffffbffff8) 15:09:03 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000300)='\x96\x13;\xea\xb8\x1cf=*\x9b\xe6_#9Cr\x00', 0x3) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x6, 0x5, 0x1800000000, 'queue1\x00', 0x1ff}) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="e256d78263aeaa6c2db4a6d5ca5d4882e9ac584dd574d5f3c6d3f7704e24ed39469e91dd5320e0f294d0f8dbef5ab82cce3beb11dbad41e6a17b9742c20088dce4a16344bc"], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:09:03 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f0000000040), 0x8) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 15:09:03 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) dup2(r1, r0) socket$packet(0x11, 0x0, 0x300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) 15:09:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/if_inet6\x00') getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240), &(0x7f0000000280)=0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000002c0)={0x40, 0x8, 0x5, 0x7, 0xac7b635, 0x1, 0x0, 0x1, 0x0}, &(0x7f0000000300)=0x20) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000340)={r2, 0x400}, 0x8) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") lsetxattr$security_selinux(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:getty_var_run_t:s0\x00', 0x234, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x40000, 0x0) futimesat(r3, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{}, {0x77359400}}) 15:09:03 executing program 5: shmctl$SHM_LOCK(0x0, 0xb) r0 = shmget(0x2, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/207) 15:09:03 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) open(0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000240)='\xfaIhFlK\x99F\x17Fr>\xd3\xc0\x93\xb5.\xda\x06_bT\x1cB\xdb\x7f\f\x00\x00\x00k\xf1y\xed(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f00000005c0)="35a0f0e47d24baafdbdf8a7ad6d255e36f40897117f4ada6ff864eb656d207472d705cef02cd320577de9aefbb8d5bba", 0x30}], 0x1, 0x4081003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) fallocate(r2, 0x11, 0x0, 0x100000001) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000200)={0x0, 'bridge0\x00'}, 0x18) pwritev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)="663305e7a88cfde31c4987bd51e7b844bc7cd85da52f2a0b424b49da54783c2c3bed5ede8be69d8689395a0f7905308df1af1b15b74ad80b87c7a02647919e6a51df3bd484d4d01b43741d8e31658d8d0156c78539259ab89b5124fb9297d1d266bfea9d160f211f", 0x68}], 0x1, 0x0) fcntl$setstatus(r0, 0x4, 0x40800) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:09:03 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:09:03 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000003, 0x1) ioctl$sock_proto_private(r0, 0x40, &(0x7f0000000000)="a876ca2606a81f6daf3e659faac31f0e82f171dd382eb3f834bf80b732fa08a8efad3f74f983686a1a8ae9ec89ad3c89d94f3419a64ce24f36216d32c8620f63c5eb689076ca7d1131c1726c96d0a1b4f863b883f21d3fba21a39894dab100f0316be252bcbf532789d472e61dd438d7304575afa7829a38763c81e6912c007ae5cf59cbb61f137650dab7277e3cfb6906d37678912edae36254401ae407e16cb77f223f0e03a78f007e156af9328b8c15a55cb7a38748f1966d2253c51f572b") bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d659f77d4e4e373047123b8c72cc32a554f91324b9b6bb7449b6f0300e1ca91deeb77674e8ca23c7872736aa4870cef980e78fb1561b1b594e4fcb8c0d793"}, 0x60) prctl$PR_SET_SECUREBITS(0x1c, 0x5) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 15:09:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x4) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x8) write$apparmor_exec(r1, &(0x7f0000000140)={'exec ', 'system_u:system_r:kernel_t:s0\x00'}, 0x23) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000180)) 15:09:03 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) ioctl$TIOCLINUX4(r2, 0x541c, &(0x7f0000000000)) 15:09:03 executing program 5: shmctl$SHM_LOCK(0x0, 0xb) r0 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$void(r0, 0xc0045878) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x400200, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', r1}, 0x10) 15:09:03 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000300)='\x96\x13;\xea\xb8\x1cf=*\x9b\xe6_#9Cr\x00', 0x3) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x6, 0x5, 0x1800000000, 'queue1\x00', 0x1ff}) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="e256d78263aeaa6c2db4a6d5ca5d4882e9ac584dd574d5f3c6d3f7704e24ed39469e91dd5320e0f294d0f8dbef5ab82cce3beb11dbad41e6a17b9742c20088dce4a16344bc"], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) [ 730.019151] print_req_error: I/O error, dev loop0, sector 0 15:09:04 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rfkill\x00', 0x402240, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x424000, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f00000001c0)={{0xa, 0x4e20, 0xffffffff84602ad8, @empty, 0x7ff}, {0xa, 0x4e24, 0x1, @mcast1, 0x2}, 0x8, [0x5, 0x0, 0x0, 0x1ff, 0xffffffffffffffff, 0x5, 0x6b06e459, 0xffff]}, 0x5c) r2 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r2, &(0x7f0000000000), 0x12) 15:09:04 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000300)='\x96\x13;\xea\xb8\x1cf=*\x9b\xe6_#9Cr\x00', 0x3) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x6, 0x5, 0x1800000000, 'queue1\x00', 0x1ff}) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="e256d78263aeaa6c2db4a6d5ca5d4882e9ac584dd574d5f3c6d3f7704e24ed39469e91dd5320e0f294d0f8dbef5ab82cce3beb11dbad41e6a17b9742c20088dce4a16344bc"], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:09:04 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x410000) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000140)=""/166) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:09:04 executing program 4: r0 = memfd_create(&(0x7f0000000000)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) 15:09:04 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:09:04 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="d8cd425a3549027f07d218dfee00"], 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/bnep\x00') ioctl$TCFLSH(r4, 0x540b, 0x10001) close(r3) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r4, 0xc0305616, &(0x7f00000003c0)={0x0, {0x5}}) r5 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$VIDIOC_TRY_ENCODER_CMD(r5, 0xc028564e, &(0x7f0000000340)={0x0, 0x1, [0x3, 0x6cb, 0x0, 0x0, 0x0, 0x7f, 0x5, 0x9]}) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f0000000200)={0x80000000, 0x0, "403f7ad92c250160496ea3ca1918d2241510a209be192bf04f33fa360343ab2d", 0x0, 0x400, 0x0, 0x3, 0x0, 0x9, 0x3, 0x7, [0x0, 0x0, 0x2, 0x3]}) close(r2) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000000c0)=0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:09:04 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) dup2(r0, r0) sched_yield() ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) r2 = shmget$private(0x0, 0x400000, 0x200, &(0x7f0000bff000/0x400000)=nil) shmctl$SHM_LOCK(r2, 0xb) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) 15:09:04 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000100)) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000240)=""/67) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendmsg$nl_crypto(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=@getstat={0xe0, 0x15, 0x400, 0x70bd2c, 0x25dfdbfc, {{'ctr-serpent-avx2\x00'}, [], [], 0x2400, 0x400}, [""]}, 0xe0}, 0x1, 0x0, 0x0, 0x40000}, 0x800) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) sendfile(r0, r1, &(0x7f0000000000), 0x12) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f00000001c0)=0x6, 0x8) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_stats\x00', 0x0, 0x0) 15:09:04 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000300)='\x96\x13;\xea\xb8\x1cf=*\x9b\xe6_#9Cr\x00', 0x3) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x6, 0x5, 0x1800000000, 'queue1\x00', 0x1ff}) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="e256d78263aeaa6c2db4a6d5ca5d4882e9ac584dd574d5f3c6d3f7704e24ed39469e91dd5320e0f294d0f8dbef5ab82cce3beb11dbad41e6a17b9742c20088dce4a16344bc"], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:09:04 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) r2 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x4, 0x10040) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) 15:09:04 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:09:04 executing program 3: shmget$private(0x0, 0xa000, 0x1016, &(0x7f0000ff6000/0xa000)=nil) shmget(0x3, 0x4000, 0x20, &(0x7f0000ff9000/0x4000)=nil) shmget(0x0, 0x2000, 0x0, &(0x7f0000ff5000/0x2000)=nil) r0 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ff6000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x3, 0xc4000) setsockopt$llc_int(r1, 0x10c, 0x0, &(0x7f0000000140)=0x3ff, 0x4) r2 = shmget$private(0x0, 0x3000, 0x1040, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000000)=""/87) r3 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x800000003, 0x4) mknodat(r3, &(0x7f00000000c0)='./file0\x00', 0x104, 0x1) 15:09:04 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2000, 0x0) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000080)={0x3, 0x10001, 0x81, 0x800, 0xffffffffffffff9c}) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r1, r1, &(0x7f0000000100), 0x12) 15:09:04 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:09:04 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) dup2(r1, r0) clock_getres(0x6, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) [ 730.726431] device nr0 entered promiscuous mode 15:09:04 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xffff, 0x40000) dup2(r1, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f0000000080)) r5 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) keyctl$reject(0x13, 0x0, 0x0, 0x9, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x401, 0x2, 0x0, 0x54}, 0x98) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x5, 0xe6, 0x2, 0x4, 0x5}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @addr}], 0x30) 15:09:04 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x78000902, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) 15:09:04 executing program 2 (fault-call:3 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") r1 = getpid() process_vm_writev(r1, &(0x7f0000001600)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, &(0x7f0000001ac0)=[{&(0x7f00000016c0)=""/202, 0xca}, {&(0x7f00000017c0)=""/67, 0x43}, {&(0x7f0000001840)=""/54, 0x36}, {&(0x7f0000001940)=""/118, 0x76}], 0x4, 0x0) 15:09:04 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x3}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x20200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002dc0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000100)={0xba, 0xffff, 0x4, 0xd9, [], [], [], 0xfff, 0xffffffffffffff7f, 0x3, 0x3, "4e3d1c4822bd34f9efad58337e61641d"}) shmctl$SHM_LOCK(0x0, 0xb) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f0000000040)={0x2, 0xc38}) r3 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f00000002c0)='dns_resolver\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)='/selinux/policy\x00', r3) 15:09:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x80, 0x0) accept4$llc(r1, &(0x7f0000000240)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000280)=0x10, 0x80800) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) ioctl(r0, 0x5, &(0x7f0000000140)="a460f11af6604adca460af666196d2d74b72bb600948504c6b3b33e2ddaa3232714baac08c54adaa0d49546965b9c816088389769861831d626daf0abdcc222c83fba9e35098c199c0112cf3e24d27922d637afb3d256468b2661a25b998bb55608432f96c58ef40ede7ca2ce7a3c9725ce08c59d65a9123b1a7711cbd286907d388be902b26b06eeea86103a13bc02fb4c47c54aeebead795fcee5716de4ae83a8b271394bf112ef886f7232f6be1fdbe16b60261849cc4d64a006e8f71ed8983a2f4d9e88de3b2235d1b31c48e3f2134c72305056322e4") execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:09:04 executing program 3 (fault-call:8 fault-nth:0): clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) clone(0x800101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) 15:09:04 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="2818fb0600033b818092bbb5d4b3d19fbe291bdfa944ac3adbfdf5a51621929ae193c4b9eeb0f5349916bd39b1bf0a83d83dd13b982187686ef6b1b0d8d45015fd24eaf5e8a9f8496be5dd42f96c7473f101b97a205c9843cdf4231deb04516142f454aceb39c01b63c4a783e3227e6f3dc7de5236713383def4c83697a75fbeb44b23457d3124ce1433267e5608cf445e3beecf328a8df1c1a96861a07c527948c19368a6a1602e71be1ba55eea573ce8500000000000000000"], 0x6) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f00000001c0)={0x0, 0x9}) r3 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x200, 0x0) connect$caif(r3, &(0x7f00000002c0)=@rfm={0x25, 0x8f37, "181b6096cbdd299502176622f60071c9"}, 0x18) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="8dbea0058e995384ce932ff200"], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:09:04 executing program 4 (fault-call:2 fault-nth:0): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = dup(r0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, 0x0, 0x0) 15:09:05 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = dup(r0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000000)) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0x5, 0x8, 0xc38b, 0x40, 0xffffffffffffff04}) 15:09:05 executing program 2: r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0xfffffffffffffffa, 0x440801) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000100)={0x7fffffff, 0x11, 0x2, 0x8001, "f9bfb1f850bf332bbbf1f024ef1509259d924da3cc0e26e00b05c914c362f8d5"}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="1adc1f123c123f31d57764") r2 = getpid() r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x40000, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r3, 0x80044326, &(0x7f0000000140)) process_vm_writev(r2, &(0x7f0000001600)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, &(0x7f0000001ac0)=[{&(0x7f00000016c0)=""/202, 0xca}, {&(0x7f00000017c0)=""/67, 0x43}, {&(0x7f0000001840)=""/54, 0x36}, {&(0x7f0000001940)=""/118, 0x76}], 0x4, 0x0) 15:09:05 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x400000, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x27, &(0x7f0000000200)={@rand_addr, @broadcast, 0x0}, &(0x7f0000000240)=0xc) accept4$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14, 0x80000) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000300)={@empty, @initdev, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000480)=0xe8) recvmmsg(0xffffffffffffffff, &(0x7f0000005600)=[{{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/161, 0xa1}, {&(0x7f00000006c0)=""/150, 0x96}, {&(0x7f0000000780)=""/44, 0x2c}, {&(0x7f00000007c0)=""/255, 0xff}, {&(0x7f00000008c0)}, {&(0x7f0000000900)=""/243, 0xf3}, {&(0x7f0000000a00)=""/128, 0x80}], 0x8, &(0x7f0000000b00)=""/64, 0x40}, 0x7}, {{&(0x7f0000000b40)=@sco, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000bc0)=""/165, 0xa5}, {&(0x7f0000000c80)=""/206, 0xce}, {&(0x7f0000000d80)=""/116, 0x74}, {&(0x7f0000000e00)=""/35, 0x23}, {&(0x7f0000000e40)=""/62, 0x3e}, {&(0x7f0000000e80)=""/188, 0xbc}], 0x6}, 0x4}, {{&(0x7f0000000fc0)=@caif=@util, 0x80, &(0x7f00000012c0)=[{&(0x7f0000001040)=""/31, 0x1f}, {&(0x7f0000001080)=""/154, 0x9a}, {&(0x7f0000001140)=""/180, 0xb4}, {&(0x7f0000001200)=""/169, 0xa9}], 0x4, &(0x7f0000001300)=""/208, 0xd0}, 0x34b3e88f}, {{&(0x7f0000001400)=@ax25={{0x3, @default}, [@rose, @rose, @remote, @default, @bcast, @default, @default, @null]}, 0x80, &(0x7f0000001980)=[{&(0x7f0000001480)=""/223, 0xdf}, {&(0x7f0000001580)=""/240, 0xf0}, {&(0x7f0000001680)=""/105, 0x69}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/86, 0x56}, {&(0x7f0000001800)=""/100, 0x64}, {&(0x7f0000001880)=""/68, 0x44}, {&(0x7f0000001900)=""/55, 0x37}, {&(0x7f0000001940)=""/27, 0x1b}], 0x9, &(0x7f0000001a40)=""/47, 0x2f}, 0x3ff}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001a80)=""/232, 0xe8}, {&(0x7f0000001b80)=""/121, 0x79}, {&(0x7f0000001c00)=""/5, 0x5}], 0x3}, 0x4}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/77, 0x4d}, {&(0x7f0000002d00)=""/110, 0x6e}], 0x3, &(0x7f0000002dc0)=""/50, 0x32}, 0xed7}, {{0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/66, 0x42}, {&(0x7f0000002ec0)=""/4096, 0x1000}, {&(0x7f0000003ec0)=""/126, 0x7e}, {&(0x7f0000003f40)=""/6, 0x6}], 0x5}, 0x7}, {{&(0x7f0000004000)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000004100)=[{&(0x7f0000004080)=""/127, 0x7f}], 0x1, &(0x7f0000004140)=""/58, 0x3a}, 0x7cba}, {{&(0x7f0000004180)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000004580)=[{&(0x7f0000004200)=""/2, 0x2}, {&(0x7f0000004240)=""/42, 0x2a}, {&(0x7f0000004280)=""/88, 0x58}, {&(0x7f0000004300)=""/73, 0x49}, {&(0x7f0000004380)=""/182, 0xb6}, {&(0x7f0000004440)=""/124, 0x7c}, {&(0x7f00000044c0)=""/143, 0x8f}], 0x7, &(0x7f0000004600)=""/4096, 0x1000}, 0x800}], 0x9, 0x40010040, &(0x7f0000005840)={0x77359400}) getpeername$packet(0xffffffffffffff9c, &(0x7f00000059c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000005a00)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000005a40)={0x0, @dev}, &(0x7f0000005a80)=0xc) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000005ac0)={0x0, @dev, @initdev}, &(0x7f0000005b00)=0xc) accept$packet(0xffffffffffffff9c, &(0x7f0000005b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000005b80)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000006040)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@local}}, &(0x7f0000006140)=0xe8) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f0000006180)={@remote, @empty, 0x0}, &(0x7f00000061c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000006200)={@local, 0x0}, &(0x7f0000006240)=0x14) accept$packet(0xffffffffffffffff, &(0x7f0000007940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000007980)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f00000079c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000007a00)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000007a40)={{{@in=@multicast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000007b40)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000007b80)={'vcan0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000007c80)={{{@in, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000007d80)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000007dc0)={@empty, 0x0}, &(0x7f0000007e00)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000007e40)={0x0, @broadcast, @broadcast}, &(0x7f0000007e80)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000007ec0)={'team0\x00', 0x0}) accept$packet(0xffffffffffffffff, &(0x7f0000007f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000007f40)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000007f80)={'vcan0\x00', 0x0}) getsockname$packet(0xffffffffffffff9c, &(0x7f0000007fc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000008000)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008040)={'ip_vti0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000008140)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000008240)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008280)={'lapb0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000008380)={{{@in6, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @initdev}}, 0x0, @in6=@mcast1}}, &(0x7f0000008480)=0xe8) getsockname(0xffffffffffffff9c, &(0x7f0000008540)=@can={0x1d, 0x0}, &(0x7f00000085c0)=0x80) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000008600)={{{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000008700)=0xe8) accept(0xffffffffffffff9c, &(0x7f0000008740)=@can={0x1d, 0x0}, &(0x7f00000087c0)=0x80) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000008800)={0x0, @dev, @local}, &(0x7f0000008840)=0xc) accept4$packet(0xffffffffffffffff, &(0x7f0000008880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000088c0)=0x14, 0x800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008900)={'veth0_to_team\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000009380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000009340)={&(0x7f0000008940)={0x9fc, r1, 0x110, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r3}, {0x164, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r6}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0x6, 0x2d089e50, 0x7ff, 0x4}, {0xffffffffffffffff, 0xfffffffffffffff9, 0x10000, 0xfffffffffffff800}, {0x528, 0x6, 0x2, 0xffffffffffffffff}, {0xef32, 0x100000001, 0x3, 0x6}, {0x7, 0x0, 0x8, 0x3275}, {0x6, 0x401, 0x7, 0xffffffffffff8001}]}}}]}}, {{0x8, 0x1, r7}, {0x7c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x921}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x22c, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x30000000}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r11}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r16}, {0x44, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r17}}, {0x8}}}]}}, {{0x8, 0x1, r18}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r19}}}]}}, {{0x8, 0x1, r20}, {0x148, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r21}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x7c0000000, 0x200, 0xf134, 0x4}, {0xfff, 0x1000, 0x4bc3385e, 0xef4b}, {0x1, 0x9, 0x8, 0x3}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r22}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r23}}}]}}, {{0x8, 0x1, r24}, {0x84, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x60000000}}, {0x8, 0x6, r25}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r26}}}]}}, {{0x8, 0x1, r27}, {0x90, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r28}}, {0x8}}}]}}, {{0x8, 0x1, r29}, {0x270, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r30}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r31}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffe00}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r32}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffff9}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r33}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r34}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x9b}}, {0x8, 0x6, r35}}}]}}]}, 0x9fc}, 0x1, 0x0, 0x0, 0x4}, 0x20008000) r36 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r36, 0xffffffffffffffff, &(0x7f0000000000), 0x12) 15:09:05 executing program 3: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) clone(0x800101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x200202, 0x0) ioctl$RTC_AIE_ON(r2, 0x7001) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) 15:09:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") r1 = getpid() process_vm_writev(r1, &(0x7f0000001600)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, &(0x7f0000001ac0)=[{&(0x7f00000016c0)=""/202, 0xca}, {&(0x7f00000017c0)=""/67, 0x43}, {&(0x7f0000001840)=""/54, 0x36}, {&(0x7f0000001940)=""/118, 0x76}], 0x4, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x2, 0x400) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) 15:09:05 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002640)='cpuset.memory_pressure\x00', 0x0, 0x0) r1 = dup(r0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000023c0)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f00000024c0)=0xe8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x9, 0x6, &(0x7f0000002300)=[{&(0x7f0000000080)="20307578f4e7b7147e975dfe03472dc55c6a6034f4bdf29caf8db60cae86c9552aae6a9fa2e4f4b65beb514d54cef1c4ce1cd793b3614b6803503463669a448f0d739a41cac0fca74ed93ff29773135de929445bfdacde47c8569839417f4c29413a146bd7e01bba9a0c3cc4f386ba51d0d66e2d1420653e964ff13084c3", 0x7e, 0x5}, {&(0x7f0000000100)="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", 0x1000, 0x7f}, {&(0x7f0000001100)="190bbc564ebe0fe688a4448cc1b6a5975fe58ff98af2e30347b21925ae577a9b5e937ff988b1bf97e4309f722e7602dc1644e520ae56cc3a794329e5ce0297077a9c20dfbc69f3e00d187a63db04ff06c9d50110f980414f4bf801faf70674f348567c96e68b15ac22580985e47c91c975d21d495c8315d9c2b258c4594eb55d41fe09286a2ba6b39cabd4ae8213e0026e3cd8a67f98145ab5a3a419ca76d098b0e43e17486137bfb22c9e4474aca19f1cb566e4c5eb76ad73be582ae647c5caa9ad1152aa354d759807d581f3ea7d91f537db6bc8139f9418875045", 0xdc, 0x967b}, {&(0x7f0000001200)="4d02c03a838a7aea463b2809f6a813127d12cefd8008769058bb19229f006882373702e24d22bdb5a7ed71d4df387cff5d9a1ee5886b75089527b36ece0ea879a1984ee768da39cd257c716300759deb8dcf247271f8cb7697d4480a484521ee35129628fb28ff2dae2b69e3a1862a11a3d621592b00b2137f54ed47e676acd061d28ecf105c765249b08ab14de19ed9d6784f5929ede057de41ebae26e192e3a13e", 0xa2, 0x2}, {&(0x7f00000012c0)="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", 0x1000, 0x9}, {&(0x7f00000022c0)="b99f34892e908a08ba27ab95381599c68bb165c33328f30f577d4e16f5a3ad3410e0dd1278233be53426c1a0faf13d", 0x2f, 0xff}], 0x4000, &(0x7f0000002500)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xffff}}, {@stripe={'stripe'}}, {@nombcache='nombcache'}, {@noacl='noacl'}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@jqfmt_vfsold='jqfmt=vfsold'}, {@nouser_xattr='nouser_xattr'}, {@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@lazytime='lazytime'}, {@auto_da_alloc='auto_da_alloc'}], [{@seclabel='seclabel'}, {@permit_directio='permit_directio'}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x30, 0x34, 0x77, 0x0, 0x79, 0x32, 0x77], 0x2d, [0x65, 0x77, 0x0, 0x33], 0x2d, [0x67, 0x38, 0x77, 0x32], 0x2d, [0x39, 0x77, 0x77, 0x33], 0x2d, [0x0, 0x38, 0x63, 0x32, 0x30, 0x63, 0x66, 0x37]}}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\xa8[vmnet0'}}, {@uid_gt={'uid>', r2}}]}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, 0x0, 0x0) 15:09:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) ioctl$FICLONE(r0, 0x40049409, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x101, 0x0) getpeername$llc(r2, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000180)=0x10) write$binfmt_aout(r1, &(0x7f0000001000)={{0xcc, 0x6, 0xffffffff, 0x384, 0xa9, 0x7ff, 0x1e, 0x7fff}, "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", [[]]}, 0x1120) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:09:05 executing program 5 (fault-call:5 fault-nth:0): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x8000, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000140)=&(0x7f0000000040)) bind$llc(r0, &(0x7f0000000080)={0x1a, 0x1, 0x0, 0x0, 0x6}, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000000540), 0x4aa, 0x0) 15:09:05 executing program 1: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0x4) fcntl$getown(r0, 0x9) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r2 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r1, r2, &(0x7f0000000000), 0x12) 15:09:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/mls\x00', 0x0, 0x0) sendmsg$can_raw(r1, &(0x7f00000002c0)={&(0x7f0000000200), 0x10, &(0x7f0000000280)={&(0x7f0000000240)=@can={{0x2, 0x80, 0x7, 0xf8}, 0x3, 0x3, 0x0, 0x0, "98921555a3f717de"}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x0) mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:09:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") r1 = getpid() openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x400000, 0x4) process_vm_writev(r1, &(0x7f0000001600)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, &(0x7f0000001ac0)=[{&(0x7f0000000000)=""/202, 0xca}, {&(0x7f00000017c0)=""/67, 0x43}, {&(0x7f0000001840)=""/54, 0x36}, {&(0x7f0000001940)=""/118, 0x76}], 0x4, 0x0) 15:09:05 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x22200, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x100, 0x70bd29, 0x25dfdbfd, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x6}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x40) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x6971}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000240)={r3, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x8, 0x4, 0x6, 0x4}, &(0x7f0000000300)=0x98) r4 = dup(r2) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, 0x0, 0x0) ioctl$RTC_PLL_SET(r4, 0x40207012, &(0x7f0000000000)={0xffffffff, 0xfffffffffffffffb, 0x1f, 0x100000001, 0x3, 0x1f, 0x400}) 15:09:05 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080)) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r2 = dup(r1) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x640c0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000040)={0x664, 0x0, 0x10001, 0xb}) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000100)) 15:09:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect$rxrpc(r0, &(0x7f0000001180)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}}, 0x24) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") r1 = getpid() getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'broute\x00', 0x0, 0x3, 0x28, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000040)=""/40}, &(0x7f0000000140)=0x78) process_vm_writev(r1, &(0x7f0000001600)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, &(0x7f0000001ac0)=[{&(0x7f00000016c0)=""/202, 0xca}, {&(0x7f00000017c0)=""/67, 0x43}, {&(0x7f0000001840)=""/54, 0x36}, {&(0x7f0000001940)=""/118, 0x76}], 0x4, 0x0) [ 731.966316] Unknown ioctl 1074310916 15:09:05 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[], 0x2) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) [ 732.009710] FAULT_INJECTION: forcing a failure. [ 732.009710] name failslab, interval 1, probability 0, space 0, times 0 [ 732.045836] CPU: 1 PID: 2002 Comm: syz-executor.5 Not tainted 4.14.113 #3 [ 732.052999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 732.053006] Call Trace: [ 732.053029] dump_stack+0x138/0x19c [ 732.053051] should_fail.cold+0x10f/0x159 [ 732.073002] should_failslab+0xdb/0x130 [ 732.077015] kmem_cache_alloc_node+0x28a/0x780 [ 732.081631] __alloc_skb+0x9c/0x500 [ 732.085289] ? skb_scrub_packet+0x4b0/0x4b0 [ 732.089664] ? avc_has_perm+0x273/0x4b0 [ 732.093668] alloc_skb_with_frags+0x86/0x4b0 [ 732.098099] ? trace_hardirqs_on+0x10/0x10 [ 732.102495] ? retint_kernel+0x2d/0x2d [ 732.106443] sock_alloc_send_pskb+0x5db/0x740 [ 732.111030] ? check_preemption_disabled+0x3c/0x250 [ 732.116113] ? retint_kernel+0x2d/0x2d [ 732.116129] ? sock_wmalloc+0xf0/0xf0 [ 732.116146] ? __local_bh_enable_ip+0xc9/0x1a0 [ 732.116160] sock_alloc_send_skb+0x32/0x40 [ 732.123864] llc_ui_sendmsg+0x2ed/0xfe0 [ 732.123879] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 732.123895] ? llc_ui_autobind.isra.0+0x480/0x480 [ 732.123912] ? sock_sendmsg+0x65/0x110 [ 732.150528] ? llc_ui_autobind.isra.0+0x480/0x480 [ 732.155427] sock_sendmsg+0xd0/0x110 [ 732.159171] ___sys_sendmsg+0x349/0x850 [ 732.163176] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 732.167963] ? check_preemption_disabled+0x3c/0x250 [ 732.173105] ? find_held_lock+0x35/0x130 [ 732.177182] ? __fget+0x210/0x370 [ 732.180658] ? lock_downgrade+0x6e0/0x6e0 [ 732.184834] ? __fget+0x237/0x370 [ 732.188394] ? __fget_light+0x172/0x1f0 [ 732.192386] ? __fdget+0x1b/0x20 [ 732.195787] ? sockfd_lookup_light+0xb4/0x160 [ 732.200327] __sys_sendmmsg+0x152/0x3a0 [ 732.204418] ? SyS_sendmsg+0x50/0x50 [ 732.208155] ? lock_downgrade+0x6e0/0x6e0 [ 732.212327] ? __mutex_unlock_slowpath+0x71/0x800 [ 732.217188] ? check_preemption_disabled+0x3c/0x250 [ 732.222228] ? wait_for_completion+0x420/0x420 [ 732.227301] ? __sb_end_write+0xc1/0x100 [ 732.231667] ? SyS_write+0x10b/0x180 [ 732.235612] SyS_sendmmsg+0x35/0x60 [ 732.239293] ? __sys_sendmmsg+0x3a0/0x3a0 [ 732.243744] do_syscall_64+0x1eb/0x630 [ 732.248006] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 732.252958] entry_SYSCALL_64_after_hwframe+0x42/0xb7 15:09:06 executing program 3: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) clone(0x800101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) syz_execute_func(&(0x7f0000000040)="c462f3f5810000000066430f3a14a30c00000022f20f0e0f6a1b666765f341ff6359660fe7002666470f380162ff4271b9f044293df7d200008f883885fda0") ptrace$setopts(0x4206, r1, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = socket(0x75297b51dc68e5e2, 0x800, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) ptrace(0x10, r0) 15:09:06 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = dup(r0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, 0x0, 0x0) 15:09:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") r1 = getpid() r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000000)={0x7, "f73fc54965ba745845ac100a52ff445174062edb8b264b799282a6d9a83f0b49", 0x2, 0xffff, 0x3, 0x1000000, 0x4, 0x6}) process_vm_writev(r1, &(0x7f0000001600)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, &(0x7f0000001ac0)=[{&(0x7f00000016c0)=""/202, 0xca}, {&(0x7f00000017c0)=""/67, 0x43}, {&(0x7f0000001840)=""/54, 0x36}, {&(0x7f0000001940)=""/118, 0x76}], 0x4, 0x0) 15:09:06 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x800, 0x0) getsockname(r0, &(0x7f0000000240)=@can={0x1d, 0x0}, &(0x7f0000000100)=0x80) sendto$packet(r2, &(0x7f00000001c0)="0ae3cf723e31973a975cdb0405e6683bb27d88531041744b1b07783250fc0756de1a79e999cf7aea1ba996c9e7c3e248792a758d65ae8dc9f4dbdcbddd067ecce949f417b257b3f70e4463c2b2ff2b41a07a7101504f64fb502849cda9ebb0a42209f2a8", 0x64, 0x20000800, &(0x7f00000002c0)={0x11, 0x17, r3, 0x1, 0x4010, 0x6, @remote}, 0x14) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000440)={r2, r2}) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="002b4cea3461ee3abbf4f26a88c5522ce41b342f266d73120334cf4e060a8c966e100308eb5f491157f0725e67249cc2ea0b6f63055fced8e52096df2550a65320b63968972960e72eb538f155120f126d05e63ea4dd66049a06cf04c60aab60b0eacfee62107016962bcbb10c030c4051286c0962ef53e9f3ca8b41d175848432c47438160bebb229dff1108087f79611c094a4f079fcb9b996198d759afc406f32c85961f2d7c30ea0d9368749fdc40952bde856001b273440570421dfad331f8626382e0dd13f004bd6c2809cb36e684b46f58eb4e5ba2c32ab62672b24e4e0c4888735ab7cc8f6b9e33182d33d485579e29107"], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) getsockname$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000400)=0x1c) [ 732.258289] RIP: 0033:0x458c29 [ 732.261649] RSP: 002b:00007f653de0cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 732.269655] RAX: ffffffffffffffda RBX: 00007f653de0cc90 RCX: 0000000000458c29 [ 732.276927] RDX: 00000000000004aa RSI: 0000000020000540 RDI: 0000000000000004 [ 732.284193] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 732.291461] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f653de0d6d4 [ 732.299162] R13: 00000000004c5e19 R14: 00000000004da5e0 R15: 0000000000000006 15:09:06 executing program 5 (fault-call:5 fault-nth:1): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x8000, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000140)=&(0x7f0000000040)) bind$llc(r0, &(0x7f0000000080)={0x1a, 0x1, 0x0, 0x0, 0x6}, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000000540), 0x4aa, 0x0) 15:09:06 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x200, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x2, 0x0) sendto$x25(r2, &(0x7f0000000240)="317ab6115a232a831dc99b493865baa4032d08f0b4ee8b87a218b8355366eb9b4d79e649c313ec07bc123d6840877fcb2402d778cdd403cf9ab10dd3739be2e843bb84900a08a14b03d63ae2339d85a19ad6a4fdc47de1c4262e784eb3da9a7c21ec37a2a2011f454c42e0d48dc74cba012a9ef30d0695b4f42c1d472ed937b66f6a8054d1f4ff4946c5fd58f95355f1a465285f9e693d9659baadccde452feb3023c7a0beb72f1b97dab72be2a3cd63fa34366cd6a84a5660", 0xb9, 0x0, &(0x7f0000000300)={0x9, @null=' \x00'}, 0x12) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x100, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) write$cgroup_pid(r3, &(0x7f00000001c0)=r4, 0x12) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:09:06 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/hci\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x4e22, @local}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e21, 0x10000, @empty, 0x9}, @in={0x2, 0x4e24, @rand_addr=0x8}], 0x4c) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x3, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) getpid() r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000040)) 15:09:06 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = dup(r0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000180)=0x5) connect$ax25(r1, &(0x7f0000000000)={{0x3, @default, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast]}, 0x48) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f00000000c0)={0xfc7, 0x8, 0x2, 'queue1\x00', 0xd78}) 15:09:06 executing program 0: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0) r1 = accept4$llc(0xffffffffffffffff, &(0x7f0000000940)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000980)=0x10, 0x800) mount$9p_fd(0x0, &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f00000009c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client='access=client'}, {@fscache='fscache'}, {@aname={'aname'}}, {@uname={'uname', 0x3d, 'security.selinux\x00'}}, {@version_L='version=9p2000.L'}, {@aname={'aname', 0x3d, '@('}}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@smackfsdef={'smackfsdef'}}]}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000700)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, &(0x7f0000000740)="66baa100b034ee460f01ca460f23d38f89789755003636f3420f533f420fc71fc74424000b000000c7442402c77f0000c7442406000000000f011c2448b885270000000000000f23c00f21f835020008000f23f8420f518104800000450f30", 0x5f}], 0x1, 0x54, &(0x7f0000000800)=[@cr0={0x0, 0x40000010}, @cstype0={0x4, 0x7}], 0x2) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x800, 0x0) ioctl$KVM_ENABLE_CAP(r4, 0x4068aea3, &(0x7f0000000080)={0xfd, 0x0, [0x8, 0x6, 0x8, 0x6415]}) lsetxattr$security_selinux(&(0x7f00000006c0)='./file0/file0\x00', &(0x7f0000000240)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:hugetlbfs_t:s0\x00', 0xfffffffffffffe53, 0x1000000000) r5 = geteuid() ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000640)={0x1, 0x800}) ioctl$TIOCGPTLCK(r4, 0x80045439, &(0x7f0000000840)) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000540)=0xe8) syz_mount_image$f2fs(&(0x7f0000000280)='f2fs\x00', &(0x7f00000002c0)='./file0\x00', 0x3, 0x2, &(0x7f0000000400)=[{&(0x7f0000000300)="04b16ce8511fc28fa33a94cd8b9ee6e9829fc7e9a2c6b3cadadf107d053d633459", 0x21, 0xb56}, {&(0x7f0000000340)="098b860d332cac6b4c95eb4bd8d6f874eb10e7ef200a14195d8c9854e127da31f12b07d2fd56f506cee0495d36e1d37f1d027aa52173eb7dd4b25782aacff1533b696a261bc37e01cfc552c41e464b4a6bc71673e1fbea364b7708e4c712d69466eb8b213282f4e2fd8993946b150992a8f1b8b8d567026abea1160d59d3fc3fb9d852ccaf0288a9c3fafdade60bbbe63a2efa565c50916786bd6f8cf7a9c83589a7860e6a", 0xa5, 0x9}], 0x1, &(0x7f0000000580)={[{@acl='acl'}, {@usrjquota={'usrjquota', 0x3d, 'system_u:object_r:hugetlbfs_t:s0\x00'}}, {@adaptive_mode='mode=adaptive'}], [{@euid_eq={'euid', 0x3d, r5}}, {@smackfsroot={'smackfsroot', 0x3d, 'security.selinux\x00'}}, {@uid_eq={'uid', 0x3d, r6}}, {@subj_role={'subj_role', 0x3d, 'security.selinux\x00'}}]}) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000680)=[@text32={0x20, &(0x7f0000000140)="0f0fa7fc8062f2a7660fae7707c4e119143fea89a700002801f26fc4e17c534d0066b831000f00d8c4c3896c2e0bc4c2a59cd4c4c1596103", 0x38}], 0x1, 0x48, &(0x7f0000000700), 0x0) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, &(0x7f00000001c0)={r7, &(0x7f0000000180)=""/46}) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x23) [ 732.472675] Unknown ioctl 1074310916 15:09:06 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) r2 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000100)) 15:09:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) rt_sigreturn() 15:09:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001680)='/dev/vsock\x00', 0x4000, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000001880)={{0xa, 0x4e21, 0xbd84, @mcast2}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0xa}, 0x1890cdd9}, 0x2, [0x4, 0x3f, 0x0, 0x4, 0x0, 0x1, 0xfffffffffffffffa, 0x3]}, 0x5c) r2 = getpid() process_vm_writev(r2, &(0x7f0000001600)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, &(0x7f0000001ac0)=[{&(0x7f00000016c0)=""/202, 0xca}, {&(0x7f00000017c0)=""/67, 0x43}, {&(0x7f0000001840)=""/54, 0x36}, {&(0x7f0000001940)=""/118, 0x76}], 0x4, 0x0) [ 732.494345] FAULT_INJECTION: forcing a failure. [ 732.494345] name failslab, interval 1, probability 0, space 0, times 0 [ 732.563051] CPU: 0 PID: 2052 Comm: syz-executor.5 Not tainted 4.14.113 #3 [ 732.570143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 732.579517] Call Trace: [ 732.582135] dump_stack+0x138/0x19c [ 732.585787] should_fail.cold+0x10f/0x159 [ 732.589967] should_failslab+0xdb/0x130 [ 732.594054] kmem_cache_alloc_node_trace+0x283/0x770 [ 732.599224] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 732.604716] __kmalloc_node_track_caller+0x3d/0x80 [ 732.609686] __kmalloc_reserve.isra.0+0x40/0xe0 [ 732.614404] __alloc_skb+0xcf/0x500 [ 732.618056] ? skb_scrub_packet+0x4b0/0x4b0 [ 732.622503] alloc_skb_with_frags+0x86/0x4b0 [ 732.627022] ? trace_hardirqs_on+0x10/0x10 [ 732.631291] ? trace_hardirqs_on+0x10/0x10 [ 732.635559] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 732.640378] sock_alloc_send_pskb+0x5db/0x740 [ 732.644892] ? find_held_lock+0x35/0x130 [ 732.648977] ? release_sock+0x14c/0x1c0 [ 732.653063] ? sock_wmalloc+0xf0/0xf0 [ 732.656914] ? __local_bh_enable_ip+0x99/0x1a0 [ 732.661522] ? trace_hardirqs_on_caller+0x400/0x590 [ 732.666554] ? release_sock+0x14c/0x1c0 [ 732.670634] ? trace_hardirqs_on+0xd/0x10 [ 732.674969] sock_alloc_send_skb+0x32/0x40 [ 732.679352] llc_ui_sendmsg+0x2ed/0xfe0 [ 732.683523] ? dup_iter+0x260/0x260 [ 732.687224] ? llc_ui_autobind.isra.0+0x480/0x480 [ 732.692289] ? selinux_socket_sendmsg+0x36/0x40 [ 732.696990] ? security_socket_sendmsg+0x8f/0xc0 [ 732.701754] ? llc_ui_autobind.isra.0+0x480/0x480 [ 732.707091] sock_sendmsg+0xd0/0x110 [ 732.710816] ___sys_sendmsg+0x349/0x850 [ 732.714887] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 732.719642] ? check_preemption_disabled+0x3c/0x250 [ 732.724665] ? find_held_lock+0x35/0x130 [ 732.728739] ? __fget+0x210/0x370 [ 732.732287] ? retint_kernel+0x2d/0x2d [ 732.736304] ? trace_hardirqs_on_caller+0x400/0x590 [ 732.741363] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 732.746152] ? check_preemption_disabled+0x3c/0x250 [ 732.751170] ? retint_kernel+0x2d/0x2d [ 732.755055] ? __sys_sendmmsg+0x10d/0x3a0 [ 732.759211] __sys_sendmmsg+0x152/0x3a0 [ 732.763197] ? SyS_sendmsg+0x50/0x50 [ 732.766927] ? lock_downgrade+0x6e0/0x6e0 [ 732.771081] ? __mutex_unlock_slowpath+0x71/0x800 [ 732.775920] ? check_preemption_disabled+0x3c/0x250 [ 732.780961] ? wait_for_completion+0x420/0x420 [ 732.785555] ? __sb_end_write+0xc1/0x100 [ 732.789627] ? SyS_write+0x10b/0x180 [ 732.793338] SyS_sendmmsg+0x35/0x60 [ 732.796954] ? __sys_sendmmsg+0x3a0/0x3a0 [ 732.801414] do_syscall_64+0x1eb/0x630 [ 732.806078] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 732.811723] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 732.817763] RIP: 0033:0x458c29 [ 732.820967] RSP: 002b:00007f653de0cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 732.828716] RAX: ffffffffffffffda RBX: 00007f653de0cc90 RCX: 0000000000458c29 [ 732.836142] RDX: 00000000000004aa RSI: 0000000020000540 RDI: 0000000000000004 [ 732.843625] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 732.851294] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f653de0d6d4 [ 732.858725] R13: 00000000004c5e19 R14: 00000000004da5e0 R15: 0000000000000006 15:09:07 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x200, 0x0) write$sndseq(r0, &(0x7f0000000100)=[{0x2, 0x1, 0x3, 0xffff, @time={0x77359400}, {0x9, 0x1}, {0x40, 0x400}, @connect={{0x0, 0xfffffffffffffffe}, {0x7ff, 0x8000}}}, {0x29b, 0x10001, 0xffff, 0x5, @tick=0x9c4, {0x3, 0x5}, {0x37, 0x7}, @connect={{0x7f, 0x2}, {0x8001, 0x6}}}], 0x60) clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000280)='./file0\x00', 0x800, 0x1) mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) clone(0x800101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10004}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x900, 0x70bd2c, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8840}, 0x4000000) ptrace(0x10, r1) 15:09:07 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x100000000, 0x6}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x20) mq_timedreceive(r1, &(0x7f0000000080), 0x0, 0x6, &(0x7f00000000c0)={0x0, 0x989680}) r2 = dup(r0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f0000000000)={0x0, 0x0, 0x102, 0x2, {0x0, 0x7, 0x3f, 0xfffffffffffffffc}}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, 0x0, 0xfdcd) ioctl$SIOCX25SENDCALLACCPT(r2, 0x89e9) 15:09:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") write$binfmt_aout(r0, &(0x7f00000001c0)={{0x10b, 0x4, 0x8, 0x1e8, 0xb2, 0xffffffffffffffff, 0x206, 0x3}, "95abf75a1a871434c4b2a7a728236378b99b4471a417e49343bd8387be194cfbfadccf6b72f98169ead3d4df2094dce7650ccce78f456fe5ee143e38eac9ac6719724820086d2f31f704c35dc5f959212f9f370305365dd60acd797464e971bf888a0a1c41c704f06964f903ab4d6d140214c1417279cd8570ce8584a801976418d6b73c726a3e135522037faa33a66a1964d64cceb7fe828aaaf542fa40e892b128230504e4ebfb6e5b98aae127173fe12da35e9cb8253e0b80b83f7227620b25eac6dfae23deb6917c8011a44fbec381326211445903d00c755ebeab81f14463cc1da7db6fb394a238af", [[], [], [], [], [], [], []]}, 0x80b) mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000a00)=0x4) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000140)={0x401, [0x4, 0x5, 0xffffffff, 0x1, 0x4, 0x2, 0xf7f8, 0x80, 0x4, 0x7, 0x3, 0x10000, 0x6, 0x1, 0x5, 0x81, 0x1, 0x392, 0x7fff, 0x5, 0x4, 0x7fffffff, 0x78, 0x0, 0x9, 0x6, 0x2, 0xffff, 0x4, 0x1c6, 0x7, 0x1000, 0x5, 0x8, 0x466807f, 0xfff, 0xf497, 0x9, 0x3, 0x80, 0x8000, 0x5, 0x100000001, 0x1, 0x800, 0x2, 0x7fffffff, 0x9], 0xf}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000b00)={0x0, 0x84, &(0x7f0000000a40)=[@in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e21, @rand_addr=0x8000}, @in6={0xa, 0x4e22, 0xfffffffffffffff8, @dev={0xfe, 0x80, [], 0x29}, 0x401}, @in6={0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x7fffffff, @empty, 0x2}]}, &(0x7f0000000b40)=0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000b80)={r2, @in6={{0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xffffffff}}}, &(0x7f0000000c40)=0x84) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:09:07 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x400000002000, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="28187b060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:09:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") r1 = getpid() process_vm_writev(r1, &(0x7f0000001600), 0x0, &(0x7f0000001ac0)=[{&(0x7f00000016c0)=""/202, 0xca}, {&(0x7f00000017c0)=""/67, 0x43}, {&(0x7f0000001840)=""/54, 0x36}, {&(0x7f0000001940)=""/118, 0x76}], 0x4, 0x0) 15:09:07 executing program 5 (fault-call:5 fault-nth:2): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x8000, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000140)=&(0x7f0000000040)) bind$llc(r0, &(0x7f0000000080)={0x1a, 0x1, 0x0, 0x0, 0x6}, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000000540), 0x4aa, 0x0) 15:09:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x22002, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x0, &(0x7f0000000140)}, 0x10) r1 = msgget(0x1, 0x0) msgrcv(r1, &(0x7f00000001c0)={0x0, ""/215}, 0xdf, 0x0, 0x1000) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 733.175734] Unknown ioctl 1074310916 15:09:07 executing program 3: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) clone(0x800101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = shmget(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) r2 = getuid() stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000280)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000080)=0xe8) fstat(0xffffffffffffff9c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000400)={{0x3, r2, r3, r4, r5, 0x88, 0xffffffff80000001}, 0x8000, 0x80000001, 0x2, 0x6, r0, r0, 0x7}) gettid() r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000480)='/dev/audio\x00', 0x14000, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f00000004c0)={0x1, 0x0, [{0x0, 0x5, 0x0, 0x7f, 0x20, 0x9, 0xffffffffffff24f3}]}) ptrace$setopts(0x4206, r0, 0xf293, 0x10) r7 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) ioctl(r7, 0xb00e, &(0x7f0000000100)="3b1ed9941883c9293a95415e82082b3a6f01b9aaee46a03232649109d88ac50186a74fc37a2d4ed9f8e9cee636b7b0c39a9c64c2fb26a7ba2a83bbc179b449b5e0e3c89db882deda8bb9e4f76e69087cef8fcd96336b8af7d49a3ea54b707158327bab03ad6e7f8fc11dee633ebe769c3154afce7a4341551fca88fadb2893ba38d9f10e6d09e277a4b1a212bb7ff223c732eaa3eb58fbcd4dbaa075def9c1b335fc40c20ed9e09f5d0600b5e25038fc47262575fcb2deb41d51ad53089789e1731d4e916a2d1afbb4d7b5fd26cb660a04f67cc45cd5df977ca35a310e3c3046d430a266fa325e5033df3e73") 15:09:07 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = dup(r0) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, 0x0, 0x0) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000000)) 15:09:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) prlimit64(r1, 0x4, &(0x7f0000001180)={0x482, 0x4e}, 0x0) r2 = getpid() r3 = dup3(r0, r0, 0x80000) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x8, 0xfff}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000080)={r4, 0x10000}, &(0x7f00000000c0)=0x8) process_vm_writev(r2, &(0x7f0000001600)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x4a, &(0x7f0000000140), 0x4, 0x0) [ 733.208657] FAULT_INJECTION: forcing a failure. [ 733.208657] name failslab, interval 1, probability 0, space 0, times 0 [ 733.259437] CPU: 1 PID: 2086 Comm: syz-executor.5 Not tainted 4.14.113 #3 [ 733.266511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 733.275887] Call Trace: [ 733.278601] dump_stack+0x138/0x19c [ 733.282287] should_fail.cold+0x10f/0x159 [ 733.286591] should_failslab+0xdb/0x130 [ 733.290600] kmem_cache_alloc_node+0x28a/0x780 [ 733.295208] ? __dev_queue_xmit+0xd39/0x25f0 [ 733.299735] ? retint_kernel+0x2d/0x2d [ 733.303658] __alloc_skb+0x9c/0x500 [ 733.307324] ? skb_scrub_packet+0x4b0/0x4b0 [ 733.311852] alloc_skb_with_frags+0x86/0x4b0 [ 733.316326] ? trace_hardirqs_on_caller+0x19b/0x590 [ 733.321421] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 733.326211] sock_alloc_send_pskb+0x5db/0x740 [ 733.330750] ? find_held_lock+0x35/0x130 [ 733.334849] ? release_sock+0x14c/0x1c0 [ 733.338848] ? sock_wmalloc+0xf0/0xf0 [ 733.342672] ? __local_bh_enable_ip+0x99/0x1a0 [ 733.347369] ? trace_hardirqs_on_caller+0x400/0x590 [ 733.352408] ? release_sock+0x14c/0x1c0 15:09:07 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000000253b5a19eacd86000000"], 0x6) r2 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x7fffffff00, 0x100) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@loopback, @local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x101, 0x7, 0x1, 0x500, 0x2, 0x0, r3}) r4 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x2, 0x800) mkdirat(r4, &(0x7f0000000100)='./file0\x00', 0x1) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="00120913479592548f21a8e8bdfc5d124c4c3848d5abd384039de7deef754493c01d4c6fe0dabc28edc3643d4fa4e81f671a072fbda616f45375e3c84b63ba951bb35a6bd8e253ec1c165cd6c410c454e786490d22bde8358421800d866bd6f590b983dfc63e49b19cc0d99506c45965098debe893a16af2567ef0ab1eed524ff7c38c661033096a13cbf4ac4ed6693492949f9c7c4dcdc4ce47fe5d5c29d02bc177cb67d8c5ea9f22b05e362f006fdbf0adee753bf54318dfcd97c56a4c8524c092bc34bcac3a30c912c971abe80e35bb26089c14a3c777f7ff6b5dd6cd08822c6a40e200"/248], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:09:07 executing program 3: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x28) r1 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) clone(0x800101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x141000, 0x0) r3 = accept(r2, &(0x7f00000001c0)=@ax25={{}, [@null, @bcast, @null, @bcast, @bcast, @remote, @bcast, @rose]}, &(0x7f0000000240)=0x80) r4 = gettid() wait4(r4, 0x0, 0x1, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000280)) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x8000, 0x0) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000100)={'filter\x00'}, &(0x7f0000000080)=0x44) ptrace(0x10, r1) 15:09:07 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\xec\xd6q\x1b~\x90\xdb\xd2\x04\x9f\xa9.\xf7J\x1c\x00', 0x3) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[], 0x2c1) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2) sendfile(r0, r1, &(0x7f0000000000), 0x12) [ 733.356401] ? trace_hardirqs_on+0xd/0x10 [ 733.360577] sock_alloc_send_skb+0x32/0x40 [ 733.364845] llc_ui_sendmsg+0x2ed/0xfe0 [ 733.368841] ? dup_iter+0x260/0x260 [ 733.372495] ? llc_ui_autobind.isra.0+0x480/0x480 [ 733.377374] ? selinux_socket_sendmsg+0x36/0x40 [ 733.382067] ? security_socket_sendmsg+0x8f/0xc0 [ 733.386852] ? llc_ui_autobind.isra.0+0x480/0x480 [ 733.391750] sock_sendmsg+0xd0/0x110 [ 733.395598] ___sys_sendmsg+0x349/0x850 [ 733.399680] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 733.404473] ? trace_hardirqs_on+0x10/0x10 [ 733.408783] ? save_trace+0x290/0x290 [ 733.412662] ? retint_kernel+0x2d/0x2d [ 733.416614] ? __might_fault+0x110/0x1d0 [ 733.420714] ? find_held_lock+0x35/0x130 [ 733.424792] ? __might_fault+0x110/0x1d0 [ 733.428907] __sys_sendmmsg+0x152/0x3a0 [ 733.432912] ? SyS_sendmsg+0x50/0x50 [ 733.432930] ? lock_downgrade+0x6e0/0x6e0 [ 733.432948] ? __mutex_unlock_slowpath+0x71/0x800 [ 733.432959] ? check_preemption_disabled+0x3c/0x250 [ 733.432969] ? wait_for_completion+0x420/0x420 [ 733.432979] ? __sb_end_write+0xc1/0x100 [ 733.432996] ? SyS_write+0x10b/0x180 [ 733.433011] SyS_sendmmsg+0x35/0x60 [ 733.433020] ? __sys_sendmmsg+0x3a0/0x3a0 [ 733.433039] do_syscall_64+0x1eb/0x630 [ 733.455342] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 733.455364] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 733.455373] RIP: 0033:0x458c29 [ 733.455379] RSP: 002b:00007f653de0cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 733.455390] RAX: ffffffffffffffda RBX: 00007f653de0cc90 RCX: 0000000000458c29 15:09:07 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x8fd, 0x40000) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r5 = geteuid() mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0xc, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r2}}, {@msize={'msize', 0x3d, 0x6}}], [{@smackfshat={'smackfshat', 0x3d, '^:ppp1GPLsystem}'}}, {@fowner_lt={'fowner<', r3}}, {@fowner_gt={'fowner>', r4}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@fowner_lt={'fowner<', r5}}, {@fsuuid={'fsuuid', 0x3d, {[0x7f, 0x33, 0x30, 0x3b, 0x33, 0x0, 0x39, 0x30], 0x2d, [0x31, 0x33, 0x31, 0x35], 0x2d, [0x7f, 0x61, 0x36, 0x38], 0x2d, [0x77, 0x62, 0x75, 0x33], 0x2d, [0x31, 0x7f, 0x61, 0x39, 0x77, 0x37, 0x65, 0x36]}}}]}}) r6 = dup(r0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r6, 0x28, 0x2, 0x0, 0x0) 15:09:07 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) r1 = getpid() process_vm_writev(r1, &(0x7f0000001600)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, &(0x7f0000001ac0)=[{&(0x7f00000016c0)=""/202, 0xca}, {&(0x7f00000017c0)=""/67, 0x43}, {&(0x7f0000001840)=""/54, 0x36}, {&(0x7f0000001940)=""/118, 0x76}], 0x4, 0x0) [ 733.455400] RDX: 00000000000004aa RSI: 0000000020000540 RDI: 0000000000000004 [ 733.485119] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 733.485126] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f653de0d6d4 [ 733.485132] R13: 00000000004c5e19 R14: 00000000004da5e0 R15: 0000000000000006 15:09:07 executing program 3: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x840, 0x101) clone(0x800101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x1, 0x2) r2 = syz_open_procfs(r0, &(0x7f0000000080)='net/if_inet6\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000140)={{0x4, 0x1, 0x2, 0x1, 'syz1\x00', 0x7f}, 0x4, 0x20, 0x8, r1, 0x5, 0x616, 'syz1\x00', &(0x7f0000000100)=['keyring\x00', '/dev/video#\x00', 'vmnet1ppp1*lo{eth0#\x00', 'ppp1\x00', '/dev/video#\x00'], 0x39, [], [0x0, 0x3, 0x0, 0xffffffffffff3842]}) ptrace(0x10, r0) 15:09:07 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = dup(r0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r2, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x917}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8090}, 0x80) 15:09:07 executing program 5 (fault-call:5 fault-nth:3): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x8000, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000140)=&(0x7f0000000040)) bind$llc(r0, &(0x7f0000000080)={0x1a, 0x1, 0x0, 0x0, 0x6}, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000000540), 0x4aa, 0x0) 15:09:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:09:07 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYPTR, @ANYRES64=r0]], 0x8) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:09:07 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = dup(r0) faccessat(r1, &(0x7f0000000000)='./file0\x00', 0x20, 0x400) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000140)={r2}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, 0x0, 0x0) getrlimit(0xf, &(0x7f0000000080)) 15:09:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") r1 = getpid() process_vm_writev(r1, &(0x7f0000001600)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)=""/202, 0xca}, {&(0x7f00000017c0)=""/67, 0xffffffffffffff5b}, {&(0x7f0000001840)=""/54, 0x36}, {&(0x7f0000001940)=""/118, 0x76}], 0x4, 0x0) fstatfs(r0, &(0x7f0000000000)=""/22) 15:09:07 executing program 3: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r1, &(0x7f0000000100)="d6d1e953783b9e6704ff85fd1c679af0bd2dc1831852342eccdefcb965b298682547aefba79e918332f2c446c745fedd125e5dfc1e1546ba1020014faceb69cd8d3b3347c9818171bba71ac6434c1e24785e8a950fed440a330e00d5dcb502466757d76395098d94df15e1847f858d8dfb094c8150402610cc2057d498e83b9fb77e36f2f16860a5ef493cf81abfcbdde24e92bc62315d9ccddbd5e1cf2758c2852282404638daa841907dedaa713a97bc83ee1a310260ce874d5271d87fdb02d32889f1b18b8f3256ba5626176758f3c17930f4a2ff6c27e974e355c4ca98be81527e84b98172c602e6e2384a24073d4d71c828", &(0x7f0000000200)=""/216}, 0x18) mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) clone(0x800101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x400000, 0x0) eventfd2(0x8, 0x80801) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) setfsuid(r3) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) r4 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000480)="3d295740ba29b827ec546f071d91f0a29b6f51d6af78696c2aab182147df0502fb0fb5b5a1ab27d6bff0a89b40d42fd109d87b9d89507f4dcddfd2150541d02ae4fd191e066f7b38483b85f8b160cd68a33ac577642faff76210af34eca48aad8979a26ebe6e3183d315fe41bb2142cccfeaf412d86b258cf25a7d750e8b8217ac9e6cadd5fcadc180d49a5ec73a122287617c25ed8cb9cfff5f425183aac638e871190a76698823f89ae2cdd86cf4e08806de84a3c159bbdb5d2d43f1fe45c3a1fbb872770f11ea78664852dda01fb6044399f4fcf5196633161e397e547bc0a19e") 15:09:07 executing program 3: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) clone(0x800101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x0) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) 15:09:07 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = dup(r0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, 0x0, 0x10000023d) write$binfmt_misc(r1, &(0x7f0000000000)={'syz0', "9324cf1ba63276accd20b74e5c37de653316fde114ac4be3f5969ec71c2d458864218e2c888ad083a40fee85b5ee46500b59f4f21683d4f04bab6bd04b8acf9aa16f113f30e17ee9b4107f8d1ba13b3b7d7bd8945667f2339facaf10a678704cfd5fde70107cc68705a2000d9c01c5d6a5a8cba54c6986a38f087d253a3f0950e99b6a11b2446850dd1e801f7161265b6b1f8c1add034b3c03d369"}, 0x9f) connect$netlink(r1, &(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x10}, 0xc) [ 733.787513] Unknown ioctl 1074310916 15:09:07 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0xfff, 0x10000) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000400)=0x5, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x1b, &(0x7f0000000100)=""/24, &(0x7f00000001c0)=0x18) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000004c0)={{{@in, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f00000005c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000600)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f0000000700)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0}, &(0x7f0000000780)=0xc) r6 = geteuid() r7 = geteuid() getresgid(&(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)=0x0) fstat(r2, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000900)=[0xee01]) getgroups(0x6, &(0x7f0000000940)=[0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xee01, 0xee00, 0xee01]) r12 = getgid() r13 = getgid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000980)={0x0, 0x0, 0x0}, &(0x7f00000009c0)=0xc) setxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='system.posix_acl_default\x00', &(0x7f0000000a00)={{}, {0x1, 0x5}, [{0x2, 0x2, r3}, {0x2, 0x1, r4}, {0x2, 0x0, r5}, {0x2, 0x1, r6}, {0x2, 0x5, r7}], {0x4, 0x2}, [{0x8, 0x4, r8}, {0x8, 0x2, r9}, {0x8, 0x4, r10}, {0x8, 0x1, r11}, {0x8, 0x6, r12}, {0x8, 0x2, r13}, {0x8, 0x3, r14}], {0x10, 0x6}, {0x20, 0x2}}, 0x84, 0x1) mount$9p_tcp(&(0x7f0000000240)='127.0.0.1\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x800004, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@debug={'debug', 0x3d, 0x395}}, {@afid={'afid', 0x3d, 0xf6a}}, {@cache_mmap='cache=mmap'}, {@debug={'debug', 0x3d, 0x3}}, {@aname={'aname'}}, {@aname={'aname', 0x3d, '/dev/snd/pcmC#D#p\x00'}}, {@debug={'debug', 0x3d, 0x89a}}], [{@seclabel='seclabel'}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}}) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000200)={0x5}) 15:09:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008913, &(0x7f0000000100)="0adc1f123c123f319bd070") r1 = getpid() process_vm_writev(r1, &(0x7f0000001600)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, &(0x7f0000001ac0)=[{&(0x7f00000016c0)=""/202, 0xca}, {&(0x7f00000017c0)=""/67, 0x43}, {&(0x7f0000001840)=""/54, 0x36}, {&(0x7f0000001940)=""/118, 0x76}], 0x4, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101002, 0x0) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000040)=0x5) perf_event_open(&(0x7f0000000080)={0x625a8f52303c26e6, 0x70, 0xffffffff, 0x4, 0x200, 0xfffffffffffffff7, 0x0, 0x1, 0x5240, 0x4, 0x8, 0x8, 0x2, 0x5, 0x80, 0xfffffffffffffffd, 0xfff, 0x1, 0x28, 0x1f, 0x0, 0x7, 0x6, 0xffffffffffffffc0, 0x20, 0x8000, 0x3, 0x4cf76de5, 0x100, 0xddfc, 0x81, 0x6, 0xfffffffffffff800, 0x3, 0x9, 0x3ff, 0x7, 0x1000, 0x0, 0x637bfb3f, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x9, 0x3ff, 0x2, 0x3, 0x1, 0x40}, r1, 0x1, r2, 0x0) [ 733.829388] FAULT_INJECTION: forcing a failure. [ 733.829388] name failslab, interval 1, probability 0, space 0, times 0 [ 733.875458] CPU: 1 PID: 2169 Comm: syz-executor.5 Not tainted 4.14.113 #3 [ 733.882475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 733.882482] Call Trace: [ 733.882505] dump_stack+0x138/0x19c [ 733.882526] should_fail.cold+0x10f/0x159 [ 733.882543] should_failslab+0xdb/0x130 [ 733.882558] kmem_cache_alloc_node_trace+0x283/0x770 [ 733.882573] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 733.882592] __kmalloc_node_track_caller+0x3d/0x80 [ 733.882610] __kmalloc_reserve.isra.0+0x40/0xe0 [ 733.882625] __alloc_skb+0xcf/0x500 [ 733.882637] ? skb_scrub_packet+0x4b0/0x4b0 [ 733.882653] alloc_skb_with_frags+0x86/0x4b0 [ 733.882668] ? trace_hardirqs_on+0x10/0x10 [ 733.882683] sock_alloc_send_pskb+0x5db/0x740 [ 733.939088] ? find_held_lock+0x35/0x130 [ 733.939104] ? release_sock+0x14c/0x1c0 [ 733.939117] ? sock_wmalloc+0xf0/0xf0 [ 733.939130] ? __local_bh_enable_ip+0x99/0x1a0 [ 733.939144] ? trace_hardirqs_on_caller+0x400/0x590 [ 733.959753] ? release_sock+0x14c/0x1c0 [ 733.959768] ? trace_hardirqs_on+0xd/0x10 [ 733.959781] sock_alloc_send_skb+0x32/0x40 [ 733.959806] llc_ui_sendmsg+0x2ed/0xfe0 [ 733.985958] ? llc_ui_autobind.isra.0+0x480/0x480 [ 733.990835] ? selinux_socket_sendmsg+0x36/0x40 [ 733.995527] ? security_socket_sendmsg+0x8f/0xc0 [ 734.000321] ? llc_ui_autobind.isra.0+0x480/0x480 [ 734.005186] sock_sendmsg+0xd0/0x110 [ 734.008920] ___sys_sendmsg+0x349/0x850 [ 734.012908] ? retint_kernel+0x2d/0x2d [ 734.016822] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 734.021605] ? trace_hardirqs_on+0x10/0x10 15:09:07 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) write$binfmt_misc(r0, &(0x7f0000000080)={'syz1', "1cd9e8982e161d65fc02fc0f817a7bbd006533fe53282acd2275bb0e87508f3dfe281fb77631d88dadc9940bdcc1a3aa15d2d511ad53eec3a67cfee31bc7d23301e1224c6a7454d6affab3c1866b4bd3a2c747fff7f4632ac0544cca34667b6f747f4f27a1577c7afe5942a7379cd1056601e2a1cadce85af4bb40e992663f99391ea8c7d0050925166eb587ea6e8ef8a2740f4f6959f219245ea27c44debbc4276d06b8fa9489817d9901568e63cdeb306f982f102349c1cd70f4dee8088cdc91524d5e94f1"}, 0xca) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r2 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="2618fb0200230cd48fcad384bb626dba4aa990020816b4c89f70dffb38c10ef09c33b077c87ee6e9158f3575a66c38d660feedb45a4b27022ae41d503c4681372e2f3c8265a371cfb7b47b"], 0x6) write$binfmt_elf64(r2, &(0x7f0000000480)=ANY=[], 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20ncci\x00', 0x2080, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000300)={@nfc_llcp={0x27, 0x1, 0x1, 0x7, 0x5, 0x211a, "4747f4b5135944dd35ad225afd4523b066ac10d6cdbc70ec741fa16a7db1d8f59df2db5ccb747ff933d42afc69d775fe4836dab24d8dd4ceb29e1e5b5ba287", 0xd}, {&(0x7f0000000280)=""/61, 0x3d}, &(0x7f00000002c0), 0x4}, 0xa0) sendfile(r1, r2, &(0x7f0000000000), 0x12) [ 734.025864] ? save_trace+0x290/0x290 [ 734.029698] ? __might_fault+0x110/0x1d0 [ 734.033793] ? find_held_lock+0x35/0x130 [ 734.038181] ? __might_fault+0x110/0x1d0 [ 734.042289] __sys_sendmmsg+0x152/0x3a0 [ 734.042309] ? SyS_sendmsg+0x50/0x50 [ 734.050553] ? lock_downgrade+0x6e0/0x6e0 [ 734.050570] ? trace_hardirqs_on_caller+0x400/0x590 [ 734.050582] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 734.050597] ? check_preemption_disabled+0x3c/0x250 [ 734.050609] ? retint_kernel+0x2d/0x2d [ 734.050622] ? __sys_sendmmsg+0x3a0/0x3a0 [ 734.050636] SyS_sendmmsg+0x35/0x60 [ 734.050646] ? __sys_sendmmsg+0x3a0/0x3a0 [ 734.050657] do_syscall_64+0x1eb/0x630 [ 734.050667] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 734.050682] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 734.050690] RIP: 0033:0x458c29 [ 734.050701] RSP: 002b:00007f653de0cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 734.110727] RAX: ffffffffffffffda RBX: 00007f653de0cc90 RCX: 0000000000458c29 [ 734.118009] RDX: 00000000000004aa RSI: 0000000020000540 RDI: 0000000000000004 15:09:08 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0xe40, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)={0x5, 0x0, [{0x6, 0x5, 0x5, 0x7, 0x2, 0x8, 0x6}, {0x2, 0x5, 0x0, 0xfffffffffffffff8, 0x6, 0x4, 0x3}, {0xc0000001, 0x7fffffff, 0x7, 0xa2, 0x6, 0x1, 0xfffffffffffffddd}, {0x40000000, 0x1, 0x7, 0x1, 0x0, 0x5, 0x7fff}, {0x5, 0x1, 0x5, 0x0, 0x361a, 0x906, 0x10000}]}) sendfile(r0, r1, &(0x7f0000000000), 0x12) [ 734.125299] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 734.132584] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f653de0d6d4 [ 734.132596] R13: 00000000004c5e19 R14: 00000000004da5e0 R15: 0000000000000006 15:09:08 executing program 5 (fault-call:5 fault-nth:4): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x8000, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000140)=&(0x7f0000000040)) bind$llc(r0, &(0x7f0000000080)={0x1a, 0x1, 0x0, 0x0, 0x6}, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000000540), 0x4aa, 0x0) 15:09:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x302e1463fd97cf3, 0x0) r2 = getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f0000000380)=0xe8) getgroups(0x3, &(0x7f00000003c0)=[0xffffffffffffffff, 0xee01, 0x0]) sendmmsg$unix(r1, &(0x7f00000007c0)=[{&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f00000001c0)="ef47b6c02e9a381b5c0f5525e3467f53a562af73117bec2d3d5e", 0x1a}, {&(0x7f0000000200)="2a13ba077d17efa936fea3150af7faa43bca3b2ed1a2b69dec15740ea652a85371168f", 0x23}], 0x2, &(0x7f0000000400)=[@cred={0x20, 0x1, 0x2, r2, r3, r5}], 0x20}, {&(0x7f0000000440)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000740)=[{&(0x7f00000004c0)="429af9c20b582da27f00bf870ba83abe7b57d6311206bbdacec93727dcf067e59aa5a40fbfd478e5d49a793e7e96ba308f3e5aaf0306ea5b37694012eb7bb0f0bc15f8f46029098b00d1be02d6a64508400e7fade476bc2243ca311f50406d1fc78bacda6642dce011ecb1834f8552c69bfb097c3d41dff1c96aee0c3e5bbccdd7b08d2eca36f17c9edc85682b34a1ba903b0f97da0790466a46129cfa81d16207b3b39b07d576ce3a4eff446688ea5e6d097570f258e9106f8d8f74476df953cbcc68ae0b7390dd1b7207af1eee15a47ced059291b495a16a2b116339fc966279d3d62a", 0xe4}, {&(0x7f0000001000)="e78bd9cdea2a56758c0c92911116fa7c6f70c981fd3859da9eeaf54049f9f1e1ad38e2d7990273eeacb2120d33979d6e48e65e55ec97e0e5075dfaa09c7a8e5dc001785d771138451cf7179405093b54d78bf3144b11322b08197691e9b724e90a9d3fdef55b9f8d52e5bbc28b27a987daab50d96006374c9211f7ac217f4d85fdce608ae0bf31eaa960dd46d505dd0274458e28d6c3b18f2052c57a67650113305b2419f752f1057ca3c8910c03aeccaad7ca665df536f1268f48dc8c1314b8a94f66914f252e4cefb3496f1350d0a681531a3fe8de07e5dae73106432781162e13b5ec3d0d378f17647984fa51c94eeb30218df7f7d4ae443eb50962a1e6da79e8e97eb6c5e86fa8dd66011488b42db9129e93d56742451ec30b35a61c0ef420ab3a04b0cfdb10778bff694ef04c99351e4e71d0993b665366328928969092fd1cc6811abdbf9ab718bafc7020dc56b0c005f25c2bf41504bddc6864879993bb9b3ee075ad2955a544179a1c6388f23444518f73b31283cfecde7dcee3554b07db6ad7e50841f5c7e9e829bf273a2853c6068866d12616854e04ec05aa7dc2d60ebfcda66c7de11f5fad747e6e4f5d4b9a9c36057302e2c2919bbcf2350c3acc7c96cd3c043b3e32350ff5c102cf37fb748086e28f924e137a5f24d5552cb1b86d049d8f6d31cd81d6f1ad43840672e09901c22b99ca0466c8f2a74e314346edc8b589b92b998f3e7f4e4ce46a312d44c0fa857938974b775b910109e9fe82680711e3fa5d51a0b327387b28fe061e64ad3baf4b1ec82edb44f3ae74c28029b5a726fe8fbeaee0e3416cc51bdc2b32fc282d29ba175421148befe4c3fbb6c4e1898eef1db3a08021964eee7f5e030904841d3c18cf87c73f9a8560940d44362a161ceb91e6a1bf36e2fa11156b529d326630566ec5ee4953c28985a34d85fa29cb237d999e17430d9de20af641fe554eca220bded89786fb95f0972ba2575afa8a789192a40055c77d5426e49bbde7e51c56f7d47450cd502ae231740e88cc065cff6145147a3baef0c03529b358a0f74796da6040fc511f47515813459836ce05b3f9141c9e46a82f59feaafdfded1db82e137fef1dc01f875cda5ff922db7cab5249aaa78486fec0cba552d99080d58247f9c201432b88e42d7ca2a91535321a9a78bc83ade09254c8eeff3e116b59d6341df6646cf31f984bcf6701b7a51ae5a7e4efa387fcfe7a8d036c78296fd6801d63565ff8be442dccf40a8e5324b43f88ce0bf4dfff533f04d350e0a779557887ec84cd4cf425696c22a7a6fd50b9f8e74b142d5fa6610dbff9a680a436bb2ebe80a88db41b00ea0547928fd4baf18cab98b8072e3cca12300cfab4948b9e4c1aec44a428d042a5fb230a3ae7c5c24ff33bff156a18b63953a159af36db930ce465326c2a008ab3ddc6e0a7752fafb6143c47de221bb1cdbbcfc763a2e4d16a3bb86c17fe61d843ec4b33b737ca6ab3866b17ba2e4ff52e7c1ddd2f301e4ffd3135d93df598005ee5a0fb7e8b48eeda1fd666f4cec40279927101a81cf6ce33dcc512868814a885fc171f4284fe330f5fed498ff4ab726de52f39992ffb65156a201c86eefe58907c96ed6bfb9177e86417c0a700ace57da8f4f311acb7d2efeed4ecd422bb4346ed7996d10a5c217c7717ab33ad2f35922e87ffd3d8fa78e722a262694f743150f182f55c4486c0491edb33490ed6b24fd885a59598d93e0ec8c36740cf6ed74f72c41a3febbfa2bb37abd2e5635eb23cb7118e5dd7192bf2a66201ee5fbdda40bff7efdeaa60a7b78a7d044aaf389d6cbed307defcc4fad1c1f215df641db1a164e7711fbd9d6f49fbcd5d6d6dc6de2d6ad0e7f09e1de6c0aa5bdf68887f79d75ff12c65fb377a4f5f77495479a489c1940f53531f828f84b580176345ee0b53d2a5b699dfeafb822df1e2b1cd30430283a6151d30a1b76223dfdd664f1332cf4845285c74aca7b85f15c8a10cedbe2335ce707decd114bfe1271804d3889013f94a9e0846ded26c68aa5799b5b50f0c34edb7a73d6332569a6d7c1826ccc880619689b678f2df20cb1145e9654eeebe545efb1ecc1b06ddad743a2c0752037e43e313f9ba4d18c7ddd4b7464022addb23c3a5c1b940382aa7bc781fda89c71f5f5eb78cad9111123dbb8f6195c1cb993965779415658f6537330bb865b022a3b45063dc99ee50a5697afa441c2f30e1ae5e9c06ab5be989354072853daf6bda50740aceb6606cdafcaa7149813fb8cd79b9a062418f435fb492e373540357668874b6c982ce38a4c1fc5f3a7ef6bbc7229a08597eb055363a9909e012a6742f4eb75e4de79a553ecd3b9a0bb54541afed2674597ac4a9d9ed3853be3a0c4ca4c3304dfbc6daab3495481be7c8d5022385faf3bafe1412af327a31dfad5e3a0b24542f3ba670739244e3fd70c39939aeb09b2fb8b2de074a41e79834e8bdde6b5541caf6b043036bf56e1c3ad8edd0ab7337f4c0b18c3c069cc9a9da0183699b54b995af1ddabcaf4152ef254e0f1cf6a65e328f86267834b5a024ded5c611bd1c2fc2bb1ad5afad406b7c198e17fffb2859e5fbb5d8fc1969d1bac9b2f37ea2a6c89e87c54d1621340826d6e4f0eb23ebdfd1e2e7e153133cfd99d0075b7f77c468984ac3e846cddcb9dc93acf270153a8f53b38d7ca0fa97d6dcc35830981faf94b9c6f7edfa5104980676a6f1d3deff35a8fc6ace5b0099ada3228a2f1ca1a1198b7090f5130950368dcc62c3cee0b317846d7d565e61b4adab60d6d429d5c93c94d2a5fa973fa0142cff10f061bdb23a7160dd5ed3977121494d83f66982f3d9f7a464599767600989a421a7e1133ac5bfb6c7c402e4920d72f0c36900c9f5123f3a9f83f9a5b0f4635e8f11909d890b61d2135031561cbd6a16f117907e8d2f14ab8266464446fa8a8a2dc485661b184d8ed721b35c227a98846c919643de3c53a048ce9fdaee2018faec60cfa2664b8a57c8fd77bedead270060ac0f4a81a26b7f73f9f491cecc5f2e91d2f5b8dd3bfdadb0524d7e01e7724143cf9524659d6ceca1de220a75911bf8f38811477e4c9b6421e1763091771d442512cb24530a045e5dd7a858ab0af6246143fd965a417ccd00d454c89b34aae1cfb92a565569e0073bb6fa1f5d13e82a57929c4b6fd1951383fa31d1d9a9f53ea58420af75118758fb329ca0d20b2dff92c5a656a8683272690e33849fb3c8c3b16d4ba54488c1869073f9982caef53ac5c58d86c4e9cc3e4fb1322c20e2d410bdca1db4f1b947084287e275391a2d2eb02bc54119bce8c78a8ab1872cde2e72480b30dba7e50efed1da8ca8ca3eb571713c3d0a7ad3fc042c85d43ca497fb1a7e55fc235cfbfba73284adb811ced376107ca3b6a9b432f2a5ec2da932f3ab34f5a38f12e89ff717825f008ee97d01015943cabe7e4b9822c49ef88bdb2f5bcdec722bb8101cd460b13802ab38b74d02351135b70325eceb3fb1eae55544dafd80e0bbc1fef28c3fb546a2318277c756d43fcf65e6a81d6e84dcb191f63ad7405af0b24ce028978d007d4c3569e01f9c2f796220e51d0df2265633354d762eb82eaf67477034d9c3687c1883ba2d7f2b877f4efebcc9f53fdcefd4ad46d80fcc0fef9a56c259bc7238e6f1d3414ce1e4011e88d0ee63192466151e54978367b02519aeb91a11614d2121f11191b5834f19291f6aa0679bd6c3d3bf1fb63c2e78da7206331cb90d9b88262a853007f68b2b0ef3852fbecd0ff763dbc9767ce4c58da0fa30e6be5fb558eb3074a3bc7dd8f97b09ab2a352dce3836bb220981026d92ef86a9fad1ebe1f06479e6acf32a482dbb1491039a749c5e28f7e1595fb8aeaf455cb75a6ea460e53342b9b2b5736ccf769999fdfba03c9202c4a319f4b90b25696434025295bf4ca6e626231132cac96c3730987b8cb96e77adddad872545aefb9db62ae97b6bc9cfaede40449a90fb2b45c289ec01d997bd45b3b7650e4fe5b2d5a3689dd031f5d70f32c12e02665eac3b0a28586c3f6d69b8cb7c368a876822cdfde176bb145702b6f060c482fa76cb7057214c83ca5c54a591c55a7935bd65ce64f262ed2c49bc6ceccdab77f43e68f8ca1ce9f85d4dba524b670418b35549c3e53e76c61097dad915e4a4aa95f153e114edcf85e93f09735c53d22fc5e42956b1903934ffa9c5de8660bef273aacff9007cf7d61866c5a01d7ea70da89d2ade718dff41a6210be108af2cd5c82a52fb056b8d60494c13dd74ac5ee9680f5f888138f513239b9291ae211bf5124eef28e2809b755a5e4531c1567fdf1e3df424474d6cdc3df27123e595fa8a5a56e4b2a0db17d5ba1cb4b504231b411b71b7ed44b5152cb72039eec82a7fbbe28eb417bb4c860b540da768056c986f5d5610f81b32c0e56dbdb99f22ac9cd3ba00cb42b31aef68e26b8a3804668f7cb1a9dd13e08bfb10eb4774d760be448500b40c638b2de8a1c91b1d6ab2c4dc7787e3d8beba24d85b31443f8d939749e91ad1dd1ab248589a2c26b52f70984b55d0ae9f0cfc254e1da60a311b0512d62249ee0394f7182c0ff8d268e494c38f36cde6b00215ba8a925e3e914ad124753239b791af0e2f5a0f390afcd5588593f163692583e2c3ca42b9357c8781312a37e3e4190ab3b766c34c5957b59a3023888801d59922b36c7d66bed72cddb580c70dda528628e2c1083a66ea527c454ea839a0b29c0c0f7f77bbee5f6e68ba968711910a50eb405552bfbae4dd08bce38be14cf2e9190ee14558faf3cd8c179f6338c98e409196be7a53e46a974caad1e182b59d816d9d955b32b21a687948011f78ddef9f9ccc8dd5a7a88c278fc5cd936ab28ab0cb28fd1a96a02a502be1c743d6331ee2e6129018c99afc0b0aca22d0523c9fdbfc28046df22fdca690351b46cb9b1ef62e49a81879fab0c2e05f8b0be0aebd678759065959b43f54b2403a837435de7a1fffb3e7e01890ddb2d63c2987837b76ee84f56aa614e411b9fc3029e2b64a3970b148b481c3a8d9da5361f01b0c3aca9becec656d1137de155823973258fbd5151a8984e42c5ff4aa84c3296537b9c3132724682a4648f301a81b16d38c9cb8079970c8c4cecbd31bc6a4ff97711a8c89e05478ed514b93fe23b2f6d9d074d56ab5843ba49d2cb5240bf6bea12dedd68dfe73fc6dc407502d47342c3866673e5c84735077e7671f8c948a1d9030cb3454b2f945f5e19754520f81b0221fc946fc523351273e0930bcc450249ae62c3a15a7f8fed583391fb7a69ddcd01d7e52f5eb91e7d87c68e00d1fb2ccf0a8afff822a59945feed2118025e58bc0ec1148946ffacf75771ef2188eb8c2674df4999ff75be42c20a62474fbbf57fa659d2dbf461f22905c4454aa055100d881c3465ebfceefbfb2dfaeebb175aadf1fa031e3c8fce438d5f6cca1a58ff07de25b11909fade8c27576311920b7fce1f6e7c7f26d375e72261ca178959a7f7ff80f7e7bd2dc29fd41554c0545fd87e4b07bce44efa4a0d24507e5c322ac3af8af6a9789d632ebfa7bc9096aa4d20498f3b316b94f06ae63571784967bf06ecdeb02744ddbfc2e3ed656cfd9231c9baf9b80b674a904b8ffdabe9f11369a62fc1508e355de978b4c1b0c96485b2889ee2827bed1d4214be2401b86c9898820926e9fecef8b46c499f3e5e1280f3e2aaadf484bcb10ff013cec1662d74db9503e4b9cdd70918991709fc74ad3e0d18ef68630dbac3010247e292bb1ee97cb11939a419a55c3b311516d03", 0x1000}, {&(0x7f00000005c0)="4b1d9cf778f18f06d748e97075bf0e77bd55599c86278ae92155997729a80cdc2803265b5d7a1043878d005352290755493f805c6cd54ce8d8dd725738d69da8be7c36ca328030c4875deda61a30a0663619931e7a17ba305411b109231d3de6b9de92f3857fb1135a1617596f748e2ece373b51b6c63dddb731f4ac4a182cb191c3fa69a30a0ebda4c1fc0aaa71967d23b30dc9270a96c822f2094a6dbdc3c32c743371ea7298d91a3b2978d130a13f19c9b6dcffb5bc44d08e10ea9048cdfeb6c087f9ac", 0xc5}, {&(0x7f00000006c0)="dbbeab01137176b22cce5b75139cfdc455f4e2d441687158fedc6f0891992fa4e3b1cf7ad0830f24056b7523c04582a42ee5a7b848e3588c749c2f12ec3685e7ab8c8eba4d10f33c923cc64bf6fb1be99b3736bc81f5e5f3037e426be51b9785b996", 0x62}], 0x4, &(0x7f0000000780)=[@rights={0x20, 0x1, 0x1, [r0, r0, r0]}], 0x20, 0x40}], 0x2, 0x4008001) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) chown(&(0x7f0000000840)='./file0\x00', r3, r4) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:09:08 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = dup(r0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r2, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x8001}, 0x20040004) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, 0x0, 0x0) 15:09:08 executing program 3: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() timer_create(0x6, &(0x7f0000000200)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000000240)=0x0) timer_getoverrun(r1) mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x200, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000001c0)={0x2}, 0x1) clone(0x800101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f00000002c0)={r4, 0x9}) ptrace$setopts(0x4206, r3, 0x0, 0x0) r5 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x84000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r5, 0x40bc5311, &(0x7f0000000100)={0xffff, 0x2, 'client1\x00', 0x6, "a586c83a2f1f2a98", "d0ffd1975bcc86cf07f75c761a2584c1f2585c87475d4b36353076f9be2eb031", 0x4, 0x3}) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$netrom_NETROM_T1(r5, 0x103, 0x1, &(0x7f0000000300), 0x4) ptrace(0x10, r0) 15:09:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x400000012, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="01634040"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0x40046208, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") process_vm_writev(0x0, &(0x7f0000001600)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, &(0x7f0000001ac0)=[{&(0x7f00000016c0)=""/202, 0xca}, {&(0x7f00000017c0)=""/67, 0x43}, {&(0x7f0000001840)=""/54, 0x36}, {&(0x7f0000001940)=""/118, 0x76}], 0x4, 0x0) 15:09:08 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x400100, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x0, &(0x7f00000000c0)=0x6, 0x4) sendfile(r0, r1, &(0x7f0000000000), 0x12) 15:09:08 executing program 3: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x80, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4240002}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa8, r2, 0x700, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x26}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x29}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffffd}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x82}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0xa8}, 0x1, 0x0, 0x0, 0x44}, 0x40) clone(0x800101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) modify_ldt$read_default(0x2, &(0x7f0000000280)=""/4096, 0x1000) [ 734.299041] Unknown ioctl 1074310916 15:09:08 executing program 0: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000200)={0xffffffffffffff9c}) r1 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000240)={r1, 0x2, 0x3, "a173539f0cbafaf178ebe678c7302fccdb1018df37adf3949ce1921aa4ef1025c23f116ce0ac060acffedcc2ccab447f739c762031673c1b0e96c10c1bead7244d1e58439e4341c9df4856ad2016293694023d220853951682f6a12d8290a6ddd959665ff0d940dee5b8e0efce7d5cd73c8b35a8270d448d77eba19717479db6858b627e9f6b6ab1bf5bda47000dae03104fe2a1ebd1fe931f681659a7ecfc71dfb792dedd85ab0c9af764920d52ae8190e7eb6b6c4366dbee8b18e46448d4481d82f716edae9825dea0539d4d4c1a"}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f0000000140)={0xc2, 0x3, 'client0\x00', 0x1, "2d2218a934753b2a", "c3aec73011bc0ae81fddeae6a2025256afb79404076388986cf93b68f437112f", 0x3, 0x3}) mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 734.329442] FAULT_INJECTION: forcing a failure. [ 734.329442] name failslab, interval 1, probability 0, space 0, times 0 [ 734.341184] kauditd_printk_skb: 2 callbacks suppressed [ 734.341192] audit: type=1400 audit(1555945748.263:120): avc: denied { map } for pid=2212 comm="syz-executor.2" path="/dev/binder0" dev="devtmpfs" ino=15621 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 [ 734.357502] binder: undelivered TRANSACTION_COMPLETE [ 734.403560] CPU: 1 PID: 2214 Comm: syz-executor.5 Not tainted 4.14.113 #3 [ 734.410546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 734.419925] Call Trace: [ 734.422543] dump_stack+0x138/0x19c [ 734.426241] should_fail.cold+0x10f/0x159 [ 734.427243] binder: undelivered transaction 604, process died. [ 734.430422] should_failslab+0xdb/0x130 [ 734.430437] kmem_cache_alloc_node+0x28a/0x780 [ 734.430458] __alloc_skb+0x9c/0x500 [ 734.430469] ? skb_scrub_packet+0x4b0/0x4b0 [ 734.430480] ? mark_held_locks+0xb1/0x100 [ 734.430491] ? retint_kernel+0x2d/0x2d [ 734.430504] alloc_skb_with_frags+0x86/0x4b0 [ 734.430515] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 734.430530] sock_alloc_send_pskb+0x5db/0x740 [ 734.430543] ? find_held_lock+0x35/0x130 [ 734.430552] ? release_sock+0x14c/0x1c0 [ 734.430563] ? sock_wmalloc+0xf0/0xf0 [ 734.430574] ? __local_bh_enable_ip+0x99/0x1a0 [ 734.430588] ? trace_hardirqs_on_caller+0x400/0x590 [ 734.496654] ? release_sock+0x14c/0x1c0 [ 734.500653] ? trace_hardirqs_on+0xd/0x10 [ 734.504907] sock_alloc_send_skb+0x32/0x40 [ 734.509177] llc_ui_sendmsg+0x2ed/0xfe0 [ 734.513188] ? dup_iter+0x260/0x260 [ 734.516843] ? llc_ui_autobind.isra.0+0x480/0x480 [ 734.521702] ? selinux_socket_sendmsg+0x36/0x40 [ 734.526563] ? security_socket_sendmsg+0x8f/0xc0 [ 734.531332] ? llc_ui_autobind.isra.0+0x480/0x480 [ 734.536377] sock_sendmsg+0xd0/0x110 [ 734.540108] ___sys_sendmsg+0x349/0x850 [ 734.544112] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 734.548887] ? mark_held_locks+0xb1/0x100 [ 734.553056] ? trace_hardirqs_on+0x10/0x10 [ 734.557314] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 734.562093] ? save_trace+0x290/0x290 [ 734.565938] ? __might_fault+0x110/0x1d0 [ 734.570040] ? find_held_lock+0x35/0x130 [ 734.574126] ? __might_fault+0x110/0x1d0 [ 734.578231] __sys_sendmmsg+0x152/0x3a0 [ 734.582225] ? SyS_sendmsg+0x50/0x50 [ 734.585951] ? retint_kernel+0x2d/0x2d [ 734.589876] ? trace_hardirqs_on_caller+0x400/0x590 [ 734.594917] ? check_preemption_disabled+0x3c/0x250 [ 734.600208] ? retint_kernel+0x2d/0x2d [ 734.604123] ? SyS_write+0x14c/0x180 [ 734.607980] ? SyS_write+0x10b/0x180 [ 734.611709] SyS_sendmmsg+0x35/0x60 [ 734.615439] ? __sys_sendmmsg+0x3a0/0x3a0 [ 734.619615] do_syscall_64+0x1eb/0x630 [ 734.623776] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 734.628682] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 734.633980] RIP: 0033:0x458c29 [ 734.637172] RSP: 002b:00007f653de0cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 734.644900] RAX: ffffffffffffffda RBX: 00007f653de0cc90 RCX: 0000000000458c29 15:09:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000040)={0x2b, 0x9, 0x5, 0x16, 0x9, 0x2, 0x0, 0x12e, 0xffffffffffffffff}) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:09:08 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$FICLONE(r0, 0x40049409, r0) r1 = dup(r0) getsockopt$inet_int(r1, 0x0, 0x3b, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, 0x0, 0xfffffe1e) [ 734.652177] RDX: 00000000000004aa RSI: 0000000020000540 RDI: 0000000000000004 [ 734.659458] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 734.666844] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f653de0d6d4 [ 734.674211] R13: 00000000004c5e19 R14: 00000000004da5e0 R15: 0000000000000006 15:09:08 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl(r0, 0x7fe, &(0x7f0000000040)="0adc1f123c123f319bd07097cbb86166b602bb923924ffdc1dc3ea7e6edc764379b428b02e51b33d76b107844013f9bc2124aaaaeb4d42baebdb58b219e4375c52dce505f151083e2c2f883388cd3971bd4f433bc84f5e47fdce49849d5725a8920c84cb79795110b058dcf407e2892d597b13eefccbd8944bd4dab2d943adff5575bf96a6ca55aadd1816321e85c5736682ceea5706b8c829853102f65fd109c0c14ef5e0decbe5ccc501867150c1a1adbca7e24d970472a091c3") r1 = getpid() process_vm_writev(r1, &(0x7f0000001600)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, &(0x7f0000000100)=[{&(0x7f0000001180)=""/202, 0x344}, {&(0x7f00000017c0)=""/67, 0x43}, {&(0x7f0000001840)=""/54, 0x36}, {&(0x7f0000001940)=""/118, 0xfffffffffffffefc}], 0x1341, 0x0) [ 734.726624] binder: undelivered TRANSACTION_COMPLETE [ 734.766365] audit: type=1400 audit(1555945748.273:121): avc: denied { set_context_mgr } for pid=2212 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 15:09:08 executing program 2: r0 = socket(0xa, 0xa, 0x8) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") r2 = getpid() process_vm_writev(r2, &(0x7f0000001600)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, &(0x7f0000001ac0)=[{&(0x7f00000016c0)=""/202, 0xca}, {&(0x7f00000017c0)=""/67, 0x43}, {&(0x7f0000001840)=""/54, 0x36}, {&(0x7f0000001940)=""/118, 0x76}], 0x4, 0x0) [ 734.807739] audit: type=1400 audit(1555945748.273:122): avc: denied { call } for pid=2212 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 15:09:08 executing program 5 (fault-call:5 fault-nth:5): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x8000, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000140)=&(0x7f0000000040)) bind$llc(r0, &(0x7f0000000080)={0x1a, 0x1, 0x0, 0x0, 0x6}, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000000540), 0x4aa, 0x0) 15:09:08 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0xffffffffffffff9d, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x5, 0x1, 0x4, 0x7ff, 0x3}, 0xc) r2 = dup(r0) r3 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x6, 0x20000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, 0x0, 0x106dcf890feb0810) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000140)={0x1, 0x0, {0x8, 0x7eae, 0x200b, 0x0, 0xe, 0x3, 0x0, 0x7}}) recvfrom$inet6(r2, &(0x7f0000000000)=""/99, 0x63, 0x40, 0x0, 0x0) 15:09:08 executing program 1: r0 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) flistxattr(r0, &(0x7f00000001c0)=""/140, 0x8c) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="28c051a9c94d1101"], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") madvise(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0xc) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x12) 15:09:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") r1 = getpid() socket$alg(0x26, 0x5, 0x0) process_vm_writev(r1, &(0x7f0000001600)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, &(0x7f0000001ac0)=[{&(0x7f00000016c0)=""/202, 0xca}, {&(0x7f00000017c0)=""/67, 0x43}, {&(0x7f0000001840)=""/54, 0x36}, {&(0x7f0000001940)=""/118, 0x76}], 0x4, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) 15:09:08 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x1, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0xff, @null, @netrom={'nr', 0x0}, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @bcast]}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f00000001c0), &(0x7f0000000200)=0x4) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) fstat(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r2, r3) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/context\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) ioctl$TCSETXW(r0, 0x5435, &(0x7f0000000240)={0xfffffffffffffffc, 0x8, [0x8, 0x5, 0x3f, 0x1, 0x1], 0x2}) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:09:08 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2818fb060003"], 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x12) r2 = dup3(r1, r0, 0x80000) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000080)={0x7ff, 0x17, 0x8}) [ 735.028378] Unknown ioctl 1074310916 [ 735.077558] FAULT_INJECTION: forcing a failure. [ 735.077558] name failslab, interval 1, probability 0, space 0, times 0 [ 735.108788] CPU: 0 PID: 2279 Comm: syz-executor.5 Not tainted 4.14.113 #3 [ 735.115886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 735.125276] Call Trace: [ 735.128000] dump_stack+0x138/0x19c [ 735.131655] should_fail.cold+0x10f/0x159 [ 735.131677] should_failslab+0xdb/0x130 [ 735.131697] kmem_cache_alloc_node_trace+0x283/0x770 [ 735.139842] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 735.139860] __kmalloc_node_track_caller+0x3d/0x80 [ 735.139875] __kmalloc_reserve.isra.0+0x40/0xe0 [ 735.139891] __alloc_skb+0xcf/0x500 [ 735.150630] ? skb_scrub_packet+0x4b0/0x4b0 [ 735.150646] ? avc_has_perm+0x273/0x4b0 [ 735.150661] alloc_skb_with_frags+0x86/0x4b0 [ 735.150673] ? retint_kernel+0x2d/0x2d [ 735.150688] ? trace_hardirqs_on_caller+0x19b/0x590 [ 735.150705] sock_alloc_send_pskb+0x5db/0x740 [ 735.160343] ? find_held_lock+0x35/0x130 [ 735.160356] ? release_sock+0x14c/0x1c0 [ 735.160369] ? sock_wmalloc+0xf0/0xf0 [ 735.160381] ? __local_bh_enable_ip+0x99/0x1a0 [ 735.160392] ? trace_hardirqs_on_caller+0x400/0x590 [ 735.160401] ? release_sock+0x14c/0x1c0 [ 735.160409] ? trace_hardirqs_on+0xd/0x10 [ 735.160421] sock_alloc_send_skb+0x32/0x40 [ 735.160436] llc_ui_sendmsg+0x2ed/0xfe0 15:09:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") r1 = getpid() process_vm_writev(r1, &(0x7f0000001600)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, &(0x7f0000001ac0)=[{&(0x7f00000016c0)=""/202, 0xca}, {&(0x7f00000017c0)=""/67, 0x43}, {&(0x7f0000001840)=""/54, 0x36}, {&(0x7f0000001940)=""/118, 0x76}], 0x4, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={r0}) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) 15:09:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8901, 0xffffffffffffffff) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x10001, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000140)={"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"}) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) execve(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) [ 735.172459] ? check_preemption_disabled+0x3c/0x250 [ 735.172481] ? llc_ui_autobind.isra.0+0x480/0x480 [ 735.172495] ? selinux_socket_sendmsg+0x36/0x40 [ 735.172507] ? security_socket_sendmsg+0x8f/0xc0 [ 735.172518] ? llc_ui_autobind.isra.0+0x480/0x480 [ 735.172532] sock_sendmsg+0xd0/0x110 [ 735.180836] ___sys_sendmsg+0x349/0x850 [ 735.180850] ? retint_kernel+0x2d/0x2d [ 735.180863] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 735.180874] ? mark_held_locks+0xb1/0x100 [ 735.180884] ? retint_kernel+0x2d/0x2d 15:09:09 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = dup(r0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f0000000040)={0x5, 0x1}) sendmsg$rds(r1, &(0x7f0000001840)={&(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1, &(0x7f0000001740)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000000c0)=""/33, 0x21}, &(0x7f0000000100), 0x2}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x1}, @cswp={0x58, 0x114, 0x7, {{0x40, 0x2b1}, &(0x7f0000000140)=0x100000001, 0xffffffffffffffff, 0x81, 0x1, 0x3, 0xf90, 0x20, 0x8}}, @rdma_args={0x48, 0x114, 0x1, {{0x27e3, 0x6}, {&(0x7f0000000180)=""/4096, 0x1000}, &(0x7f00000016c0)=[{&(0x7f0000001180)=""/247, 0xf7}, {&(0x7f0000001280)=""/65, 0x41}, {&(0x7f0000001300)=""/253, 0xfd}, {&(0x7f0000001400)=""/214, 0xd6}, {&(0x7f0000001500)=""/105, 0x69}, {&(0x7f0000001580)=""/253, 0xfd}, {&(0x7f0000001680)=""/17, 0x11}], 0x7, 0x41, 0x875}}], 0xe8, 0x20004000}, 0x80) 15:09:09 executing program 3: setxattr$security_smack_transmute(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000280)='TRUE', 0x4, 0x1) clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) clone(0x800101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = creat(&(0x7f0000000100)='./file0\x00', 0x8) getsockopt$inet_dccp_buf(r1, 0x21, 0xcd, &(0x7f0000000140)=""/88, &(0x7f00000001c0)=0x58) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0x4207, r0) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000080)={0x6964267bee3d1477}) [ 735.180896] ? trace_hardirqs_on_caller+0x400/0x590 [ 735.180909] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 735.180921] ? save_trace+0x290/0x290 [ 735.190589] ? check_preemption_disabled+0x3c/0x250 [ 735.190604] ? __might_fault+0x110/0x1d0 [ 735.190617] ? find_held_lock+0x35/0x130 [ 735.190629] ? __might_fault+0x110/0x1d0 [ 735.190656] __sys_sendmmsg+0x152/0x3a0 [ 735.198699] ? SyS_sendmsg+0x50/0x50 [ 735.198716] ? lock_downgrade+0x6e0/0x6e0 [ 735.198734] ? __mutex_unlock_slowpath+0x71/0x800 15:09:09 executing program 5 (fault-call:5 fault-nth:6): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x8000, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000140)=&(0x7f0000000040)) bind$llc(r0, &(0x7f0000000080)={0x1a, 0x1, 0x0, 0x0, 0x6}, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000000540), 0x4aa, 0x0) [ 735.198749] ? check_preemption_disabled+0x3c/0x250 [ 735.207124] ? wait_for_completion+0x420/0x420 [ 735.207138] ? __sb_end_write+0xc1/0x100 [ 735.207154] ? SyS_write+0x10b/0x180 [ 735.216172] SyS_sendmmsg+0x35/0x60 [ 735.216184] ? __sys_sendmmsg+0x3a0/0x3a0 [ 735.216199] do_syscall_64+0x1eb/0x630 [ 735.216212] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 735.224684] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 735.233789] RIP: 0033:0x458c29 [ 735.233795] RSP: 002b:00007f653de0cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 15:09:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7, 0x100) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x100, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000001180)={0x10000, &(0x7f00000000c0), 0x0, r2, 0x8}) process_vm_writev(0x0, &(0x7f0000001600)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, &(0x7f0000001ac0)=[{&(0x7f00000016c0)=""/202, 0xca}, {&(0x7f00000017c0)=""/67, 0x43}, {&(0x7f0000001840)=""/54, 0x36}, {&(0x7f0000001940)=""/118, 0x76}], 0x4, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xca) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000000080)) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000001280)=""/232) 15:09:09 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = dup(r0) getsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000340), &(0x7f0000000100)=0xffffffffffffff04) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0xa1, "8fe335f593001abee34d81a30799a69a33fc4b17e3892019fde7bd37e58924909a704e2f9850715ded6242cf2050fa59d1eed383d13bd0397992577b290c08ce139e4fd351a45baf1dca347798dd6d655002cebc2e9ae373de2d58df0c1d77bd89fa0fc2a756c8b944a00554775615931aaabddc481130d19bfec80cc15917a9178e4c7207a2b362fb9b9534b493947cd643126b4b2034a182079f65b82aafb9f4"}, &(0x7f0000000200)=0xa9) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={r2, 0xffff, 0x9}, &(0x7f0000000040)=0x7) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={r3, 0x6}, 0x8) [ 735.233808] RAX: ffffffffffffffda RBX: 00007f653de0cc90 RCX: 0000000000458c29 [ 735.233814] RDX: 00000000000004aa RSI: 0000000020000540 RDI: 0000000000000004 [ 735.233820] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 735.233826] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f653de0d6d4 [ 735.233831] R13: 00000000004c5e19 R14: 00000000004da5e0 R15: 0000000000000006 15:09:09 executing program 3: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) clone(0x800101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) futex(0x0, 0xb, 0x0, &(0x7f0000005ff0)={0x77359400}, &(0x7f0000000000), 0x0) ptrace(0x10, r0) [ 735.428523] Unknown ioctl 1074310916 15:09:09 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) r2 = dup(r0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, 0x0, 0x0) mq_open(&(0x7f0000000240)='+em1.vboxnet0^\x00', 0x840, 0x10, &(0x7f0000000280)={0x200, 0x7, 0x3, 0x13bd, 0x6da, 0x7ff, 0x1, 0x2}) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x1, 0x1, 0xff}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000000)={r3, 0x2}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000080)={r4, 0x800, 0x2e, "ccb27f73ae79c69345657bed5a8b03bf2de86f5fb0c1fbed0afc4730071fb35b05fc25005648ad59be46168a544f"}, 0x36) [ 735.455524] FAULT_INJECTION: forcing a failure. [ 735.455524] name failslab, interval 1, probability 0, space 0, times 0 [ 735.471964] CPU: 0 PID: 2313 Comm: syz-executor.5 Not tainted 4.14.113 #3 [ 735.478994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 735.488363] Call Trace: [ 735.490972] dump_stack+0x138/0x19c [ 735.494621] should_fail.cold+0x10f/0x159 [ 735.498881] should_failslab+0xdb/0x130 [ 735.502897] kmem_cache_alloc_node+0x28a/0x780 [ 735.507508] ? __dev_queue_xmit+0xd39/0x25f0 [ 735.512049] __alloc_skb+0x9c/0x500 [ 735.515688] ? skb_scrub_packet+0x4b0/0x4b0 [ 735.520110] ? avc_has_perm+0x273/0x4b0 [ 735.520129] alloc_skb_with_frags+0x86/0x4b0 [ 735.520144] ? trace_hardirqs_on+0x10/0x10 [ 735.520155] ? trace_hardirqs_on+0x10/0x10 [ 735.520167] sock_alloc_send_pskb+0x5db/0x740 [ 735.520180] ? find_held_lock+0x35/0x130 [ 735.520190] ? release_sock+0x14c/0x1c0 [ 735.520202] ? sock_wmalloc+0xf0/0xf0 [ 735.532837] ? __local_bh_enable_ip+0x99/0x1a0 [ 735.532853] ? trace_hardirqs_on_caller+0x400/0x590 [ 735.532864] ? release_sock+0x14c/0x1c0 [ 735.532874] ? trace_hardirqs_on+0xd/0x10 [ 735.532888] sock_alloc_send_skb+0x32/0x40 [ 735.532903] llc_ui_sendmsg+0x2ed/0xfe0 [ 735.532915] ? dup_iter+0x260/0x260 [ 735.532930] ? llc_ui_autobind.isra.0+0x480/0x480 [ 735.549778] ? selinux_socket_sendmsg+0x36/0x40 [ 735.549793] ? security_socket_sendmsg+0x8f/0xc0 [ 735.549807] ? llc_ui_autobind.isra.0+0x480/0x480 [ 735.549821] sock_sendmsg+0xd0/0x110 [ 735.549833] ___sys_sendmsg+0x349/0x850 [ 735.571456] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 735.571478] ? trace_hardirqs_on+0x10/0x10 [ 735.571492] ? save_trace+0x290/0x290 [ 735.571502] ? trace_hardirqs_on_caller+0x400/0x590 [ 735.571516] ? __might_fault+0x110/0x1d0 [ 735.571526] ? find_held_lock+0x35/0x130 [ 735.571537] ? __might_fault+0x110/0x1d0 [ 735.571561] __sys_sendmmsg+0x152/0x3a0 [ 735.579821] ? SyS_sendmsg+0x50/0x50 [ 735.579837] ? lock_downgrade+0x6e0/0x6e0 [ 735.579855] ? __mutex_unlock_slowpath+0x71/0x800 [ 735.579868] ? check_preemption_disabled+0x3c/0x250 [ 735.579880] ? wait_for_completion+0x420/0x420 [ 735.579891] ? __sb_end_write+0xc1/0x100 [ 735.579908] ? SyS_write+0x10b/0x180 [ 735.599492] ================================================================== [ 735.602764] SyS_sendmmsg+0x35/0x60 [ 735.602780] ? __sys_sendmmsg+0x3a0/0x3a0 [ 735.606764] BUG: KASAN: global-out-of-bounds in strscpy+0x20e/0x2c0 [ 735.610834] do_syscall_64+0x1eb/0x630 [ 735.615600] Read of size 8 at addr ffffffff8677b0b8 by task syz-executor.2/2328 [ 735.619841] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 735.623624] [ 735.628656] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 735.726881] RIP: 0033:0x458c29 [ 735.730069] RSP: 002b:00007f653de0cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 735.737915] RAX: ffffffffffffffda RBX: 00007f653de0cc90 RCX: 0000000000458c29 [ 735.745194] RDX: 00000000000004aa RSI: 0000000020000540 RDI: 0000000000000004 15:09:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") r1 = fcntl$getown(r0, 0x9) r2 = geteuid() r3 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000580)=0x0) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getgid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000009c0)=0x0) r8 = geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000a00)={0x0, 0x0, 0x0}, &(0x7f0000000a40)=0xc) fcntl$getownex(r0, 0x10, &(0x7f0000005300)={0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000ac0)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f0000000bc0)=0xe8) stat(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000cc0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000d00)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000e00)=0xe8) getresgid(&(0x7f0000000e40), &(0x7f0000000e80)=0x0, &(0x7f0000000ec0)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000f00)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000f40)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@empty}}, &(0x7f0000001040)=0xe8) fstat(r0, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001100)={0x0}, &(0x7f0000001140)=0xc) getresuid(&(0x7f0000001180)=0x0, &(0x7f00000011c0), &(0x7f0000001200)) getresgid(&(0x7f0000001240)=0x0, &(0x7f0000001280), &(0x7f00000012c0)) r22 = fcntl$getown(r0, 0x9) r23 = getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001300)={0x0, 0x0, 0x0}, &(0x7f0000001340)=0xc) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001380)=0x0) lstat(&(0x7f00000013c0)='./file0\x00', &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r28 = syz_open_dev$radio(&(0x7f0000001540)='/dev/radio#\x00', 0x0, 0x2) ioctl$TIOCGSID(r28, 0x5429, &(0x7f0000000a80)=0x0) fstat(r0, &(0x7f00000038c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003940)={0x0, 0x0, 0x0}, &(0x7f0000003980)=0xc) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000039c0)=0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000003a00)={0x0, 0x0}, &(0x7f0000003a40)=0xc) getgroups(0x9, &(0x7f0000003a80)=[0xffffffffffffffff, 0xee00, 0xee00, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0xee01, 0x0]) r35 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003ac0)={{{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000003bc0)=0xe8) getgroups(0xa, &(0x7f0000003c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xee00, 0xffffffffffffffff, 0xee01, 0xee00, 0x0]) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003c80)={0x0, 0xffffffffffffff9c, 0x0, 0xd, &(0x7f0000003c40)='em0+bdevem1)\x00'}, 0x30) r39 = geteuid() fstat(r0, &(0x7f0000003cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000004f40)=0x0) stat(&(0x7f0000005000)='./file0\x00', &(0x7f0000005500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r43 = gettid() r44 = getuid() r45 = getgid() ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000050c0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000005100)={{{@in=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000005200)=0xe8) fstat(r0, &(0x7f0000005240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 735.752478] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 735.759758] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f653de0d6d4 [ 735.767041] R13: 00000000004c5e19 R14: 00000000004da5e0 R15: 0000000000000006 [ 735.775061] CPU: 1 PID: 2328 Comm: syz-executor.2 Not tainted 4.14.113 #3 [ 735.782013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 735.791385] Call Trace: [ 735.793990] dump_stack+0x138/0x19c [ 735.797640] ? strscpy+0x20e/0x2c0 [ 735.801200] print_address_description.cold+0x5/0x1dc [ 735.806411] ? strscpy+0x20e/0x2c0 [ 735.806425] kasan_report.cold+0xaf/0x2b5 [ 735.806440] __asan_report_load8_noabort+0x14/0x20 [ 735.806448] strscpy+0x20e/0x2c0 [ 735.806464] prepare_error_buf+0x94/0x1aa0 [ 735.814690] ? save_trace+0x290/0x290 [ 735.814704] ? __lock_acquire+0x5f9/0x45e0 [ 735.814719] ? scnprintf_le_key+0x600/0x600 [ 735.814731] ? __lock_acquire+0x5f9/0x45e0 [ 735.814744] __reiserfs_warning+0x9f/0xb0 [ 735.823067] ? reiserfs_printk+0xd0/0xd0 [ 735.823084] ? trace_hardirqs_on+0x10/0x10 sendmmsg$unix(r0, &(0x7f0000005340)=[{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000140)="9ff13ce8555cb2e8cd072ffca320a4afc314aa8da00cffce60a621a49d0ddb266832f2cfe8a0fb8980fcebeac085cbd7658dac76e409c9bd3a24aad60ad6725fc3699eeac0e440cdb48e7cced8c412f43d32810891048e085d7d8792350ce7f3aeaea1a8ff80c43071aefd2ce759c92816f6fc9af6d76077531c702fb6ef0f514074c67349b98f129bd55fc530b8503973c20c365f95b8859372a3554ca3503d49388ab4ceb247609d09667a1790e6724092e1a18a641a25faba334d6563cef8ec8084b17caf764f3b20d8f0b68fe13a727e", 0xd2}, {&(0x7f0000000240)="7f24142d6b0cda668d4ae7a185cf9023a244507c33334ef68faebda95792a1a4b93a7e499b1921feaa632772d0e2308efebaa814f8fbbfc235393f94eee71dc720417eaecf8ea14d64c2516b6bf7f724a47fa05f249136d5e9ab5f3af79d29b2fb25737fea927c2e29f9d4011b37a21ee0b8ab68ecdb0b12fd3510ac03891e2900c7023016d756e02ddbd1c28ba7063b0d8ba981e69d6f4f0c1476a1c67c37c3f3ac4afed44769bbcfb7667fdc3552099e", 0xb1}, {&(0x7f0000000080)="e5d686509b403432feccf97a36b96e73eefdf3c594519af25eaea1d905b668249014f7138dd52a65c2227a58dab8988be467ece17a43c444033ec95fa531dafe5eb8c0f700a1862c27a53d6471876130927519fe764e7b957a8cecaec0488f3342a4b76e82b2d7c66a06401d9864f604", 0x70}, {&(0x7f0000000300)="d815f35c99598fee7d9d846c7d0e34437e3848a16f5afd3360e06a91fc675765f8699b337e4e2516312bf5d097805491bddb8b3332ffc3c1a7294cd821d4d674e53e1d435b35d101b9532caa5a8263776cef1afbccdaa47c949d6e7fa4314f3e3b92d0d502e9ecdf7adbe8950960137a7684dc9fe66c1947133bdbeb4fa28b3a7c2a337ca8939664d8bf7d2d47", 0x8d}, {&(0x7f00000003c0)="ee87a71cf42b53", 0x7}, {&(0x7f0000000400)="5cb63d1abce15dc3fb049ed1e98dddbb046dfcf0bdd6b7d8898ecd73663fa6670d14e6ab234a03fa8184d9066b22fa1d0a294789104e46aaa35abb409d35a1c01d84f66e8d6fb00752e1faf29beef7f38423369057a6d14fafc13ea2b0eb826745dc02d797f15bbec0fb0f501ed4f265f902ff6a587c1dbf8734ef7afa1a5298c27f26b05c99a64c303521f30c79e2d72fa6b2d4580ef4d9a30eb28983d796553f223ca45aba1e08c22db80290e763ec79c90b5522cd0494fbc69aedd675baf3d2764673a46122cf168cccaf0b327a4f4682", 0xd2}], 0x6, &(0x7f0000000680)=[@cred={0x20, 0x1, 0x2, r1, r2, r3}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r4, r5, r6}], 0x58, 0x10}, {&(0x7f0000000700)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000780)="92d4a80828ef128da4bd3483d3469e0493aa4b1a747aa24c31108ffa831a72561870224b553e2e16a76708fd8ef2cc1efd112237f093a6d41cd98e6accf5de0bf13b84dfc7eb1525b162f81233831d3a22eaa11fec438af138d0696c17ceaa7e30e926bd32cb77afabfd85e667573af76184cc372e445abf8472c1dddf71549a47d35c5cc73170eb6938603828ed5684425439893e753297dfe57364e15bc83dd1e08897be42ae7fc8e37ea771e3fbe2f7f0951f2adb54123f5f4f857ab6239a6a7086e7c9e26c12e5e142eace05e87b0fa850b4e9ff38def58cf117b929", 0xde}, {&(0x7f0000000880)="6b0948cd9e0c67396bfd0fe655be9e406ae4a34546769c8ca88d7f7b51d3dc4be42884dca8630f699423f6f2586161af67d691f4076aed7639c794974ebd23e03290b833bc8ddd271d603286be969c8a9518b5e1ba16ee93d4aef2bc95e153c51a054d8a0aef7930d217a8", 0x6b}, {&(0x7f0000000900)="a106f5d956c854c9d0291e5fe8cf0a3bf6c3b1b715862be9f1fe4cb7159061d2a4ffb5c22d2855c594bad5440ef7b59de49abc3f0dd563e51add0968306a4e225bec29ce4ff7b629636f8d6ff090cebfa633", 0x52}], 0x3, &(0x7f0000005580)=ANY=[@ANYBLOB="20000000000000000100000002000000fd2e2504ab73534c0c7dfbfa20b77ec57600225b46a722484c12ff80b8bad5a5f3635bcbfe9a06aab06f49c8ac9ce96f88ac6be479bbad0f51a7d9f153d4e961d1", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r16, @ANYRES32=r17, @ANYRES32=r18, @ANYBLOB="000000001000000000000000010000000100000020000000000000000100000002000000", @ANYRES32=r19, @ANYRES32=r20, @ANYRES32=r21, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r22, @ANYRES32=r23, @ANYRES32=r24, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r25, @ANYRES32=r26, @ANYRES32=r27, @ANYBLOB='\x00\x00\x00\x00'], 0x118}, {&(0x7f0000001680)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000003840)=[{&(0x7f0000001700)="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", 0x1000}, {&(0x7f0000002700)="d22d435682e3ec8c4db62e39d0355960888acec86647b6293b178fb2436bc2d38c94f2907b2e113f43303bf2fb6bfb440d0ba390842f6d7f9e9f51cd0e4431a2dfba09374e20f54f14042bc1ca58234b9b630b", 0x53}, {&(0x7f0000002780)="8af37634b1c5562624882e0a592461ef4dc36299f983394366bd2706aadd29e2492d992fb96de4c189b6216137fc845b81f9770b4238fd724f892917db1fa645745ca82a8671215789865a84ccf17355879ad3191399d9d2482b02d7c48b63f227e8b6eb433b38e8ec5a1ee8a09f2adc1c5e1c25e096f901d8e21a568295f95514f37c90eb681e12059ec21bdad040a5fd0beaadd320a79cdb56c3ee73b4e5e6b252da0a", 0xa4}, {&(0x7f0000002840)="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", 0x1000}], 0x4, &(0x7f0000005700)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r29, @ANYRES32=r30, @ANYRES32=r31, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r32, @ANYRES32=r33, @ANYRES32=r34, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r35, @ANYRES32=r36, @ANYRES32=r37, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r38, @ANYRES32=r39, @ANYRES32=r40, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="f5ffffc2c0be7e288da9c43b13fc7aa85ff9793a9b4c316395d7427bd14d110613d0b8475cce3d7e66c9ce79cabd6ae2cabd49bc42b28c5161154bd8f0ea67dec734211173ca2060130bbffb40137db7da015f3c1d4b3c7cff6dd18fe8485e4f1ce27d1585dd51447f9521670072f0bbede2b0dd3f"], 0x108, 0x80}, {&(0x7f0000003e80)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000004f00)=[{&(0x7f0000003f00)="22ad1caeb7128e3dd91c2f5ecf27fe9bf163ff66897444f1a47f4b11b90fa6571bf5c98101546197feebd041a66ea0549ab1e33452ba3f6183e6c38e4e37915bfa82b078af3821e5c311518aaec14408db8aec5114541f524358c78a44e185352d04fe07e232423fa1af13e75982c03ea346c770e6360372dd875b02698833f186a299d93b0bab163c24829eb18fa374d0da8b225d55f7d60f116dba9692c511f9e803ad4556f9b48486577777fd64895fce6248123cb8280aeaf48721817344f0b951969165948b128c436f7edf664c842d78460b35b1d3d2468332a37a7a3d5b2c5c3866a383ce8fa53db9b5e58902264ee54fec9bfe0306524e91a4a30013a8db7da176b762e27a615e5bc315bd1ca3116df3c7a81b6e0d389b946089b5912d67214d804886cb9b2c1b5fb2899b53543a7654b64ce7bfab01d2fa22c5efca2a9542a433e82ef9e9d6dd3de116789cd1b14ac1b098a18448e9d2fc7f82034012afafb11b167575ad76d76b1474e483fdc069060c9d446685c08903280e3dfd31361ef5a8f568514be44567e050c089cfd733b094c6a7993852f3127d17651d3dd40b2305b3ca0f73dc6e004340b91740d6a3357ac9a088c43fab9ba9110b8aec1fd37d73b38173017a1036dbbe75f3463e4d7c5dafe077d748089d464f3a798530aec6e080f312cc06e5114111fdaf1de8772cb714b071d747ea731528f4e7d32d982a74f285057dbc95bdd45d63fe1bd43420c12b784db2e37683ffeef7d6e1ec8fa489abbbbdd86bc4aa087fa3bf7ff936a3e174b20b58db157b8fdff34b159a7a26c6d9a4ebe9cc9d7baa6f8918a958dc33c67d86de53b207af85f4d29b4aee5f02d33fd67aa17748a2247d1df5a4111638255f0819f4f988917abbccff78c6416b5b6d35425255022f72c962d8ae146a70afe857ec380f73949f72acbb0b804fe3e8b6ac6bab89dca2d4c11f41a729251f7725060e673b67b2e1c976e71c3edd8668bd084238d726041e6a4fafd1b38fb9b476265ffa5c7d79bf0fb0fb95e018898708c61d9b5ae7ba2ceac40a5411530c1bd857022439c07ba30623f6982196bd82b0c935f82ebe617179b254b63676aa662c1b90ef7144b73f47a153b76c6ac58655b78bd9f652f462653a7c045a339bda3b7f8d035c9e682483bcffecdb319c47654341b19694cb6119e11a99fbe966c1c4ddab3e385d421fab8231f427fa53eb28600040b20ecac5431076acb7e126abefade3b23d0ca82cd90f4a5cc65f9681ab2aa3460f583b1a150f203aee1bf7b8422de143244f24f461938c6ef1b99d59dde241c3164c54aa180e7d6c5641007c893bf4557e855b24d80232f157da4036ed9ab3853fa67c27c54c74a78545ea24ac238e02c1db4f125c6880e5efa938af1cc8714340c45dca7f987fd2c990ad4f2fa2fe6f8f6c64d1920801df5f3459bfe5e7cade923a04bc5d1e63cc3b57118723398d74a3ca68727d039e7389b3ea5de89f1c0affa81f76b43be79204e8c87467cd8fd3e19399439cdec0acb320141ccd4d4b94e86ddf7a2133dae86408e8b1f7d61a889b09aaf35501b54731265e5947ca5a67d4f5329f82a99e052847bc7f647513e4b7350db8bc1af2633c5c6ad266ac864f77e71528d0988e439369410a33b7827f5c8be81a0d6024bbb415e1d05c2e17ade1a0fa937e7a3de54b257f1bdfbc36f3cac6d2497db3596bcb59143f5203dd6c9d20a9d941cda6440790ffa03e078fac0dd02037f3c5c43ae8f1a05859ee75e304f04d1874341795505f582106090080b6d463cf763aa40022ad7864fc9a4d874c314125f1d4b02a057eac7ec5f34f0546441bce33443aa2aac2bfce906572659aa7e8d3c12cd4520343686083479a798779672e26b0d1c8aa8d70d13b8568e9ba9cc08407a733d200bf3bed73cf7184556411e69d18cbfc7f228b997a2cce4947fc7a23a6a9b7ebbedc8d8a74d7b9cbac8b347a40d6600a70eece1237ef4f0937ab9773f3391e4d96d836a551f4b0e2eddf0c98e5d0856a752fb0a64e7468181427ec01fc27fa20a51bd6a6ad076c4f0b23bfa516af6f64e09e11a87ce0fde902958b155af360104cf20404ed36b61a78464d83e88c2a6da49d11abcae24e9f0549ea364713ffb356e0a9e3853a319a3329e5afac01a2084eedb9360448cc17cd0b7f7cdef4a7fa412329029ff0f0cb0da756192723c6070546b4991979788eacc26ce11aa7ecc0e794e66cf21e683440eaba443b4211c4fb3cf28429f48bda3ee544e7c7a6829b5857dd9f7339f4f7561f6d538c09869207597f20d43eae04bf59216e0501e5075490a9aed308a17213b06ef727441d409fa839752991e1b974cb01e9b6286865f3386335dfc6c3309dd1ef3452b4e6d16dabf403f39d889850cc592eccbfb9e9725de1a87d68fd0321be1b4202b16f2c4603741d70086f40443ec2414fb4b498ac9c1e751d8fc4b41e104e482f4d579d6cb7c56bb074852d028d6e1d1c77d0bdd6e6a845634c61aa2aed63f8976ccfb4c837b106129ce8133a2ebd632ae9e7ee2ece0999f23a3b97dda054fc2f3760735356627c057d5d8eecb78198e7ce68ce9805e6f3a0a926865eccfa5fa6dee2d4b288ed3f5a68026d258d022f7952d76124535ef98d297541aea2b5bb226ba6a548d1bcd93ac1c1412997445e283c348c11b3d845142443f449da2754b33fa390c9135f3914456d3b19fb832f23fc9621840709bdbdc40a6932dbfa279987f013f364099eba47af7ecd5e55f7db8586e691a89867d26422ddfd61b3f74797bc380bfef65cd54cb145009ce2c1ebba9c2e09d38de9f42ad41bcc79b80218b0bf24867bae55656c99fc60b68342814e9aed75a35d175f6057730d0f2653eea1e245ed878cf6b9cc6576d217ef5f20918c74d09fde5e0e7eebf336f9d3d312994dc78c3f768679ef233e2c68b5afef9048ac66585a50b2bb98d5d4393a6a25113b0d6caab1b0d5ef482bcf48024173a59238b45b6c727a8c0335960a3dae301c5b264fdd8962415a41434c2d1e94afc966e8c872d35bca2a8ccfe980b06c82ef4439d2c54df1be8db2f0b7b5bb42fc9f008b25af8051587c7aae26d440be7134c1915d768c32b2489e484f77c2c2cd1c23496bd0037cd8af3f059e3ab1e20062178e4011c96da58069e1371ed0b8f82c9f10c8b4adc96476bec4f56e930a0609fb3bd64349b77ad6e348e7cd626f2a8015b35de9b08d1b299d36cd4febd5f66720079969a651b4e8f9a740673df313a78a55a2cf300a5fb7d08734ed59f2108fbed27744bc4f677ebf3032f83b2388c732fa64aab594153ea4424e7ab1e5fc462db5642bc30bc438e99a63435756e1f5cf12f315ef15fd37997319334199ae425a5a7065627e0f629f3d63536e6798180a89f558767c9d7df11ee3a12a4dcc0f3dba3e2beed9d927b879866a18973aeabddd3eb8b8ee9ae41411bcb2146121de74b31312efdbba5ae99f3b2803ba114996e5e5bc70195c288a4dea0532e42e74c16b1b27aa3e3d9af1689de298da1f35ee29421856de91e975b2bb5f7384f89bbc682428eec10fd2b2d8c0799eb7069d2a7f43e000067b85401623e2f5fcf71b94081767876bd5cba86a942347c65b7d4db1b031d179b6d6c5f609f35e848bd0df9653992b055610fcd02317ae44acadbdc8a6042eb1793b998baaebfb53d347ecb87512001a01af3a04f9d2bc32339734a258c243236b1babf6a98a9746f7c43abd9a800ba8e163ad6b8a0992612b3ab62afa4ec470fdfa56d63737278101e5df97c86bdef06cc1bb1d8799501add14bca312997ba09571fd8db2c1d43da976f82987f0698edde310e45abff48707b317280e80846a67bd907faa79d734d66c70e5c36f1eb1749d6bd67b099ae1ad945c8addee837569ca69dae84e4f1ac9636ec0ef8f0a156c44d92c6777a16f23f827e218a479473d8980d8ac013810ecc72e88f5cf12b24f19ce908de5a5c3181a64ffd91ae4601b14d146a546054829730b8ec3799f77fa1fb8fc15daab56b12ae0a84a0063907c14d5f23eb721b54ea7e9940befbca8885d8381590d5a25d4e8fa4aa226a01b449fe50753e4a8b39a549ece0cff13f80b65c3eb5ee77eaaed8219dd8cca8a6b60b1eae258e3fba3f1ea0d2d6fb69d2beebc2b88ce725ab04933df43427d00f42e10030a98387e4d610bca21cfd5a440d87e0b61d10a17b6337989eb3e760567c577562a179b58a2c9620e878e71fe93cc07faf3d318e06f4ce1f6653e3aebbb2f65bc4e78a55666f1ea4e9bb5cbc85c9c2143f04401e58a058741ad79a87ea4fa805696de7bd9c24e98ab3bf4087f33a12628bc01b0bc495982ad144466e96fdad966b995bfc9d337da867f26835922fa0d7d6e293d20257d179c4da6195731606fd1735b885ea3f26e9304d039c172622fec966bdc6e275278262c740bf6372dc973a6644e09514068f111b1299276e6ed097a2b9bab0330e8054e00de79c9cfd05bcddebc6b097acd186c76b8d0e07b5c820ef90728a751afb2b3319d6817668848d573cac62df735eb5556429801a36814fddc546bb2e496ae22e312f9105c8475b5ec68500f7a6d36236b4a1fe6ca73e2e033aafc84dc7f8c08d653e1fb8e23de322bfb9ae1552c78bfd11d2a587ceb8243e7c9bf347bad8e6034316c5dcd9aaff6b1193f8f00fdb0c89de3365c880a64b055d203e07665c1babb7972e7f131a6d335d9e492b6ca68708362185d0c46b0e1c22fa177679465636eaaf8c2ec63e766bc7858ea89ebd88bddb02ec3753a9c38ebfdf7829c1950aca94a80fffce2089898a3ec5aef81001cfb87be4551fc59018c0912226ba568ca2c958aad8ab733afc031e3d4763c76c9c89f5573e887cd71a78a131d335b76636dda484df4514ec0c51bbc764f3a43bda3ed45f174ea0aa1e2ceef9a16f2808d7bf75ddda0897068e1840805068364bb22f70a0475206fd49c6a133e92934bc3edf6b57f98b4563bc42f4eee6eeaacfbbf747fd0b7baabada585abe314356fbb3cd112586980f51b7c6617204045ce5d36d97244dcd9fb8001c9cf720889e9ef3fa24afcd3de357c4cae74cc4384ed4f2cb90d3fefeb257aeb16483174ac2fa7aa6f1e47c2c894298619969262b6301b2f370695e330532c67a2025e71ca9952335c552844cbd17ab4c4bf461a485544b5297e2226259e094854ec46dd9d954482e5f6991eb7b5efc056dc4afdf1258f4d85b784ba08265cece15660eb138a1ce220d1b6e3b9fa29f9052d058bc760469d2f4daa7ce1e7b99d33420fee7566b8c9992573bae8906ef0ec1f3003080431b70d6d44caaa049b048c8839ee0cd264999bc0d9d5d1ed4e9008738d0bab00c27bbed631dc1ac24f43ecd69f9d209dde99288ce659ff901f776bb3a319008ac6fdd5d2b6c07d7dd270e718fcb6ee68b26f2fe9cec9528ee8e852d94ae03fad553a5f89156fb6bf68274832514ccf8dc3a30eb49b62cd1e507585f79e5ded6c01c5d4c89b32450c7cf2464e113ff017644c9b95d32f93270545a631035c229237356ab8dd33a97c264db7a535abdb0310bd27116f54cdf8d4e32de7a311450d19a79b4203dfcf99771f62cd44de625594394647a4e7a26ee2d545ccdf4cc49f67cc11e346f17ff2e626f188c91fdb740a911e2e498d8579805c8a8e3290ef92623f87de767014ea1c77020e8bd66bd231c641bbf8fbfe59c5cce761ff7564d59a04ef0fa960a24294d9a425a7e9810e6d9cc40bcb832adb886a006225d9e1de", 0x1000}], 0x1, &(0x7f0000005440)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r41, @ANYRES32, @ANYRES32=r42, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r43, @ANYRES32=r44, @ANYRES32=r45, @ANYBLOB="00193a8c46117a36882f89bc68b726c80900000020", @ANYRES32=r46, @ANYRES32=r47, @ANYRES32=r48, @ANYBLOB='\x00\x00\x00\x00'], 0x80, 0x8000}], 0x4, 0x4000000) getpid() 15:09:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x1, 0x6, &(0x7f0000001400)=[{&(0x7f0000000080)="4dc99e1c97735541f22d22d0c98ce35359cacb33fc0e26eb400449e09f402da3d92eb868c3e8d37e48946e986e74a5cc9287ce239b7b760999d24ddf263f01ec84323612b5ab7270615b596d721e264c8a4365eda4e518148036d294eeb59f1aa4448ec5d99a0e", 0x67, 0x2}, {&(0x7f0000001b00)="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", 0x1000, 0x4793}, {&(0x7f0000001180)="fbf36fa4fd29f3c7fbb2a39537299ffb977bcb56fb856e4175158b1ebac4717403af0ca555d742d4b8c3895b984890aa25b2392b2774e317fd7bf0438c872a0e79a01054f99b64e5fc41d30065562f13377050efd8f68bb408", 0x59, 0x2}, {&(0x7f0000001200)="e3cb407cc3376c8d373ab706cbd5e2836ce09c40e399991495f9af0186726136076d7f805edb5a1b365911bd992009daba966f84304408cd77079a9145f7cae614c1f826de494f2084bf6350ce73a2af146bd104ef636d0747ee27ce7f6a0dce17b03b82219257d0a5e72d4a45a67c80ed2a251d5e749e29148c3116abe92726b9775311846d8a39c383e771d8832aea3835bb1bbada917f0835ba74ccdc431d8f7a0c0e962112a1d88bd6bfd014e4b285f6a824f659a5f893286c4b", 0xbc, 0x95}, {&(0x7f00000012c0)="566b9e364b73eefa3b72559e39b3f8d90291643e8dd2ead3be07483c7779cbf03977b271a96f47a370d9a01fcc82e266be93be530df9694fd8cf53122d47515c728c889823701877e5f2dceb6d040475c850e7ae4948", 0x56}, {&(0x7f0000001340)="23b6b345774a9c64e4b2ec134d9a668b71c3c7264b81bfda4a2e20070ff2bb6f43d1a74455cad6a315e884df32f6f83c44d45ec14979944f7ad0bd07186a75401479b3b65e35bcff15ad687935d9530c38169af9a40d5b78c2bced63f67cfdea52ec62f44b496020d17c43689773e19c0795b2c1e77a5fd499d6a92c7eb7d4ed000a83ed968958882c9e164eb6d16c3364aa9495ec0f6e575be11f9de7ab47efaf10bd7c127719a1f8aa72b5694e6e3c74b83ce2c552fa6050aeb146d3", 0xbd, 0x7}], 0x40, &(0x7f0000000140)={[{@noattrs='noattrs'}], [{@hash='hash'}, {@obj_role={'obj_role', 0x3d, 'vmnet1]/#(\'bdev'}}, {@dont_hash='dont_hash'}]}) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") r1 = getpid() process_vm_writev(r1, &(0x7f0000001600)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, &(0x7f0000001ac0)=[{&(0x7f00000016c0)=""/202, 0xca}, {&(0x7f00000017c0)=""/67, 0x43}, {&(0x7f0000001840)=""/54, 0x36}, {&(0x7f0000001940)=""/118, 0x76}], 0x4, 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vfio/vfio\x00', 0x8000, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000015c0)={@remote, @local, 0x0}, &(0x7f0000001640)=0xc) recvfrom$packet(r2, &(0x7f0000001500)=""/157, 0x9d, 0x1, &(0x7f0000001680)={0x11, 0x1a, r3, 0x1, 0x0, 0x6, @remote}, 0x14) [ 735.823099] reiserfs_parse_options+0xa16/0x1820 [ 735.823116] ? reiserfs_sync_fs+0xe0/0xe0 [ 735.823129] ? trace_hardirqs_on+0x10/0x10 [ 735.831356] ? workqueue_sysfs_register+0x3c0/0x3c0 [ 735.831372] ? lockdep_init_map+0x9/0x10 [ 735.831380] ? debug_mutex_init+0x2d/0x5a [ 735.831395] reiserfs_fill_super+0x461/0x2b20 [ 735.831412] ? finish_unfinished+0x1010/0x1010 [ 735.831430] ? snprintf+0xa5/0xd0 [ 735.836660] kobject: 'loop4' (ffff8880a4a332a0): kobject_uevent_env [ 735.840071] ? set_blocksize+0x270/0x300 [ 735.840083] ? ns_test_super+0x50/0x50 [ 735.840098] mount_bdev+0x2c1/0x370 [ 735.840110] ? finish_unfinished+0x1010/0x1010 [ 735.840121] get_super_block+0x35/0x40 [ 735.840130] mount_fs+0x9d/0x2a7 [ 735.840145] vfs_kern_mount.part.0+0x5e/0x3d0 [ 735.840158] do_mount+0x417/0x27d0 [ 735.840168] ? copy_mount_options+0x5c/0x2f0 [ 735.840184] ? rcu_read_lock_sched_held+0x110/0x130 [ 735.844616] kobject: 'loop4' (ffff8880a4a332a0): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 735.848618] ? copy_mount_string+0x40/0x40 [ 735.848633] ? copy_mount_options+0x1fe/0x2f0 [ 735.848648] SyS_mount+0xab/0x120 [ 735.848658] ? copy_mnt_ns+0x8c0/0x8c0 [ 735.848675] do_syscall_64+0x1eb/0x630 [ 735.853711] kobject: 'loop2' (ffff8880a49800a0): kobject_uevent_env [ 735.856977] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 735.856996] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 735.857005] RIP: 0033:0x45b69a [ 735.857011] RSP: 002b:00007fbae6638a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 735.857022] RAX: ffffffffffffffda RBX: 00007fbae6638b40 RCX: 000000000045b69a [ 735.857033] RDX: 00007fbae6638ae0 RSI: 0000000020000040 RDI: 00007fbae6638b00 [ 735.862057] kobject: 'loop2' (ffff8880a49800a0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 735.865980] RBP: 0000000000000006 R08: 00007fbae6638b40 R09: 00007fbae6638ae0 [ 735.865987] R10: 0000000000000040 R11: 0000000000000206 R12: 0000000000000004 [ 735.865992] R13: 00000000004c782d R14: 00000000004dd880 R15: 00000000ffffffff [ 735.866008] [ 735.866012] The buggy address belongs to the variable: [ 735.866046] __func__.31266+0x798/0x3a60 [ 735.866052] [ 735.871261] kobject: 'loop4' (ffff8880a4a332a0): kobject_uevent_env [ 735.875311] Memory state around the buggy address: [ 735.875324] ffffffff8677af80: fa fa fa fa 00 02 fa fa fa fa fa fa 00 02 fa fa [ 735.875330] ffffffff8677b000: fa fa fa fa 06 fa fa fa fa fa fa fa 07 fa fa fa [ 735.875336] >ffffffff8677b080: fa fa fa fa 00 00 00 02 fa fa fa fa 00 03 fa fa [ 735.875341] ^ [ 735.875347] ffffffff8677b100: fa fa fa fa 00 00 03 fa fa fa fa fa 00 03 fa fa [ 735.875355] ffffffff8677b180: fa fa fa fa 00 03 fa fa fa fa fa fa 00 00 00 00 [ 735.875358] ================================================================== [ 735.875362] Disabling lock debugging due to kernel taint [ 735.875618] Kernel panic - not syncing: panic_on_warn set ... [ 735.875618] [ 735.879573] kobject: 'loop4' (ffff8880a4a332a0): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 735.883593] CPU: 1 PID: 2328 Comm: syz-executor.2 Tainted: G B 4.14.113 #3 [ 735.883599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 735.883602] Call Trace: [ 735.883620] dump_stack+0x138/0x19c [ 735.883629] ? strscpy+0x20e/0x2c0 [ 735.883638] panic+0x1f2/0x438 [ 735.883645] ? add_taint.cold+0x16/0x16 [ 735.883661] kasan_end_report+0x47/0x4f [ 735.883673] kasan_report.cold+0x136/0x2b5 [ 735.888881] kobject: 'loop2' (ffff8880a49800a0): kobject_uevent_env [ 735.892794] __asan_report_load8_noabort+0x14/0x20 [ 735.892811] strscpy+0x20e/0x2c0 [ 735.892822] prepare_error_buf+0x94/0x1aa0 [ 735.892831] ? save_trace+0x290/0x290 [ 735.892841] ? __lock_acquire+0x5f9/0x45e0 [ 735.892849] ? scnprintf_le_key+0x600/0x600 [ 735.892859] ? __lock_acquire+0x5f9/0x45e0 [ 735.892871] __reiserfs_warning+0x9f/0xb0 [ 735.896584] kobject: 'loop2' (ffff8880a49800a0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 735.902860] ? reiserfs_printk+0xd0/0xd0 [ 735.902876] ? trace_hardirqs_on+0x10/0x10 [ 735.902885] reiserfs_parse_options+0xa16/0x1820 [ 735.902896] ? reiserfs_sync_fs+0xe0/0xe0 [ 735.902904] ? trace_hardirqs_on+0x10/0x10 [ 735.902943] ? workqueue_sysfs_register+0x3c0/0x3c0 [ 735.902952] ? lockdep_init_map+0x9/0x10 [ 735.902960] ? debug_mutex_init+0x2d/0x5a [ 735.902970] reiserfs_fill_super+0x461/0x2b20 [ 735.902982] ? finish_unfinished+0x1010/0x1010 [ 735.902997] ? snprintf+0xa5/0xd0 [ 736.282851] ? set_blocksize+0x270/0x300 [ 736.286923] ? ns_test_super+0x50/0x50 [ 736.290914] mount_bdev+0x2c1/0x370 [ 736.294555] ? finish_unfinished+0x1010/0x1010 [ 736.299181] get_super_block+0x35/0x40 [ 736.303081] mount_fs+0x9d/0x2a7 [ 736.306476] vfs_kern_mount.part.0+0x5e/0x3d0 [ 736.311003] do_mount+0x417/0x27d0 [ 736.314559] ? copy_mount_options+0x5c/0x2f0 [ 736.318983] ? rcu_read_lock_sched_held+0x110/0x130 [ 736.324015] ? copy_mount_string+0x40/0x40 [ 736.328273] ? copy_mount_options+0x1fe/0x2f0 [ 736.332814] SyS_mount+0xab/0x120 [ 736.336283] ? copy_mnt_ns+0x8c0/0x8c0 [ 736.340183] do_syscall_64+0x1eb/0x630 [ 736.344082] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 736.348947] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 736.354144] RIP: 0033:0x45b69a [ 736.357339] RSP: 002b:00007fbae6638a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 736.365056] RAX: ffffffffffffffda RBX: 00007fbae6638b40 RCX: 000000000045b69a [ 736.372328] RDX: 00007fbae6638ae0 RSI: 0000000020000040 RDI: 00007fbae6638b00 [ 736.379610] RBP: 0000000000000006 R08: 00007fbae6638b40 R09: 00007fbae6638ae0 [ 736.386985] R10: 0000000000000040 R11: 0000000000000206 R12: 0000000000000004 [ 736.394286] R13: 00000000004c782d R14: 00000000004dd880 R15: 00000000ffffffff [ 736.402869] Kernel Offset: disabled [ 736.406738] Rebooting in 86400 seconds..