[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 15.696881] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 17.604450] random: sshd: uninitialized urandom read (32 bytes read) [ 17.823499] random: sshd: uninitialized urandom read (32 bytes read) [ 18.619505] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.15.192' (ECDSA) to the list of known hosts. [ 24.086902] random: sshd: uninitialized urandom read (32 bytes read) 2018/07/07 16:42:08 fuzzer started [ 25.216546] random: cc1: uninitialized urandom read (8 bytes read) 2018/07/07 16:42:09 dialing manager at 10.128.0.26:33379 2018/07/07 16:42:16 syscalls: 1748 2018/07/07 16:42:16 code coverage: enabled 2018/07/07 16:42:16 comparison tracing: enabled 2018/07/07 16:42:16 setuid sandbox: enabled 2018/07/07 16:42:16 namespace sandbox: enabled 2018/07/07 16:42:16 fault injection: enabled 2018/07/07 16:42:16 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/07/07 16:42:16 net packed injection: enabled [ 39.026932] random: crng init done 16:43:22 executing program 0: 16:43:22 executing program 2: 16:43:22 executing program 7: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f00000006c0)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000700)=[{{r1, r2/1000+10000}, 0x10000, 0x800000010000, 0x4}, {{}, 0x84, 0x0, 0x1}, {{0x0, 0x2710}, 0xfffffffffffffff7, 0x7}, {{}, 0xffffffffffffff81, 0x400, 0xdf68}], 0x60) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) faccessat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x150, 0x400) r4 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x100000006, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = dup3(r4, r5, 0x80000) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80200000000002, &(0x7f0000000540)=0x82, 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r6, 0x0, 0x48a, &(0x7f00000004c0)={0x10001, 0x400, 0xe66b}, 0xc) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e22, @loopback=0x7f000001}}, 0x1, 0x2, 0x3, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0x2e2) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) ioctl$sock_inet_SIOCDELRT(r7, 0x890c, &(0x7f0000000380)={0x101, {0x2, 0x4e21, @rand_addr=0x80000000}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xd}}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x400}}, 0x100, 0xffffffffffffffc, 0xfffffffffffffffd, 0xffffffffffff0000, 0xb4f, &(0x7f0000000000)='erspan0\x00', 0x7fffffff}) sendto$inet(r7, &(0x7f0000a88f88), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x20004e23, @loopback=0x7f000001}, 0x10) getegid() setgroups(0x0, &(0x7f00000000c0)) getsockopt$bt_hci(r6, 0x0, 0x0, &(0x7f0000000400)=""/89, &(0x7f0000000180)=0x59) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000480)) openat$full(0xffffffffffffff9c, &(0x7f0000003a40)='/dev/full\x00', 0x0, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000680)=ANY=[], 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_LOCK(0x0, 0xb) recvmsg(r7, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000140)={0x40, 0x0, 0x0, 0x6}) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") 16:43:22 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) 16:43:22 executing program 4: 16:43:22 executing program 5: 16:43:22 executing program 1: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x1d, &(0x7f0000000000)) tgkill(r0, r1, 0x1e) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) read(r2, &(0x7f0000481000)=""/128, 0x80) 16:43:22 executing program 6: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) [ 98.908604] IPVS: ftp: loaded support on port[0] = 21 [ 98.913892] IPVS: ftp: loaded support on port[0] = 21 [ 98.935318] IPVS: ftp: loaded support on port[0] = 21 [ 98.937661] IPVS: ftp: loaded support on port[0] = 21 [ 98.971568] IPVS: ftp: loaded support on port[0] = 21 [ 98.983180] IPVS: ftp: loaded support on port[0] = 21 [ 98.997266] IPVS: ftp: loaded support on port[0] = 21 [ 99.019466] IPVS: ftp: loaded support on port[0] = 21 [ 100.597941] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.604357] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.615618] device bridge_slave_0 entered promiscuous mode [ 100.636908] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.643497] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.663771] device bridge_slave_0 entered promiscuous mode [ 100.687594] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.694044] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.702408] device bridge_slave_0 entered promiscuous mode [ 100.715794] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.722271] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.735080] device bridge_slave_0 entered promiscuous mode [ 100.746910] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.753296] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.764525] device bridge_slave_0 entered promiscuous mode [ 100.773385] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.779778] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.787649] device bridge_slave_0 entered promiscuous mode [ 100.794693] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.801056] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.809458] device bridge_slave_1 entered promiscuous mode [ 100.818262] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.824648] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.835224] device bridge_slave_1 entered promiscuous mode [ 100.842903] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.849270] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.857899] device bridge_slave_0 entered promiscuous mode [ 100.865934] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.872503] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.880946] device bridge_slave_0 entered promiscuous mode [ 100.888826] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.895200] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.903520] device bridge_slave_1 entered promiscuous mode [ 100.911972] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.918429] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.932550] device bridge_slave_1 entered promiscuous mode [ 100.943494] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.949885] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.957314] device bridge_slave_1 entered promiscuous mode [ 100.966099] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 100.973433] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.979813] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.991717] device bridge_slave_1 entered promiscuous mode [ 100.999746] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 101.007178] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 101.014932] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.021350] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.045066] device bridge_slave_1 entered promiscuous mode [ 101.058564] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.065000] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.077714] device bridge_slave_1 entered promiscuous mode [ 101.084488] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 101.093679] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 101.102841] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 101.110324] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 101.118556] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 101.125973] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 101.148395] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 101.179104] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 101.200233] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 101.229713] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 101.261260] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 101.270467] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 101.296190] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 101.424345] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 101.433615] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 101.452764] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 101.499375] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 101.541800] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 101.551204] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 101.567430] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 101.584826] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 101.596575] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 101.608959] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 101.622050] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 101.633315] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 101.696207] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 101.738317] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 101.748648] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 101.758343] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 102.076696] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 102.094592] team0: Port device team_slave_0 added [ 102.112914] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 102.122208] team0: Port device team_slave_0 added [ 102.129041] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 102.139474] team0: Port device team_slave_0 added [ 102.146343] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 102.155422] team0: Port device team_slave_0 added [ 102.175474] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 102.187731] team0: Port device team_slave_1 added [ 102.201518] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 102.216547] team0: Port device team_slave_1 added [ 102.235147] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 102.244411] team0: Port device team_slave_0 added [ 102.255816] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 102.272716] team0: Port device team_slave_0 added [ 102.287081] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 102.295554] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 102.303000] team0: Port device team_slave_1 added [ 102.316109] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 102.324876] team0: Port device team_slave_0 added [ 102.336442] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 102.348699] team0: Port device team_slave_1 added [ 102.358821] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 102.365894] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 102.378587] team0: Port device team_slave_0 added [ 102.383667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.393414] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.404496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.417575] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.425601] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 102.432695] team0: Port device team_slave_1 added [ 102.439577] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 102.446445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 102.459285] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 102.469005] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 102.476640] team0: Port device team_slave_1 added [ 102.483262] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 102.492669] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 102.499671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.510629] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.525687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 102.533826] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 102.542541] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 102.550891] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 102.563080] team0: Port device team_slave_1 added [ 102.570252] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 102.579585] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 102.595255] team0: Port device team_slave_1 added [ 102.605665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.617864] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.625639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.634198] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.643378] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 102.650661] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 102.659164] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 102.667763] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 102.676360] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 102.683980] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.711089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 102.727409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.735243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.742644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.750373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 102.758277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.765916] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.773386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 102.781078] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 102.789292] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 102.798052] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 102.806691] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 102.815596] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 102.823146] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 102.830504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 102.845276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 102.858383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 102.873884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 102.882601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.890710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 102.898499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 102.906225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 102.913608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 102.921362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 102.930094] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 102.937134] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 102.944077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 102.952711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 102.964536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.972387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.981350] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 102.988227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 102.995923] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 103.005084] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 103.012205] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.020121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.030464] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 103.037616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.056736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.074713] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 103.086594] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 103.094976] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 103.104215] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 103.111714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.132382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.155723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.166125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.173943] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.181806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.189996] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 103.197253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.205084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.215047] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 103.222335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.230592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.246421] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 103.256477] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 103.265851] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 103.288927] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 103.296281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.304247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.334396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.358563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.370466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.378698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.386509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.394484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.206252] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.212674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.219648] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.226032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.257547] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 104.268599] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.274983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.281628] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.287982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.297053] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 104.303731] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.316657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.328786] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.335203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.341814] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.348170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.355774] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 104.368069] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.374458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.381090] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.387453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.395283] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 104.418484] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.424887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.431526] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.437894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.471328] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 104.478944] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.485334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.491977] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.498349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.505680] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 104.516487] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.522889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.529535] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.535893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.543156] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 104.651762] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.658147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.665377] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.671729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.704212] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 105.311098] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.330143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.342400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.350412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.357646] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.364972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 108.155040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.286056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.325638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.354927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.368533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.385518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.548517] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 108.591117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.689587] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 108.701708] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 108.711717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.725713] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 108.734720] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 108.743269] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 108.933525] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 108.939742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 108.951118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.049718] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 109.055946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 109.063744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.086463] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 109.098044] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 109.104179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 109.112949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.127166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 109.145596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.161098] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 109.175551] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 109.182566] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 109.188758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 109.202818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.223913] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 109.240443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 109.260508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.347548] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.450671] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.478911] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.503325] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.542890] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.563812] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 109.571195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 109.583626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.605756] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 109.614084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 109.621916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.639831] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.911535] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.012337] 8021q: adding VLAN 0 to HW filter on device team0 16:43:35 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) 16:43:35 executing program 6: syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') 16:43:35 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x24000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x0, 0x0, 0x7fffffff, 0x0, 0x38, r0, 0x1}, 0x2c) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)="6c6f00966fd651b959a9034a2c005290f48e3b8610d3d2adc7d4970403dc0d5df50f615b6a838e42517ea5ec10b7456ece60d4bc035fbdcd2d9660abbfbb9c21b635591c0687f17f9b04046a300d") ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8923, &(0x7f0000000400)="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") 16:43:35 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) 16:43:35 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) 16:43:35 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x8) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f000000f740)=[{{&(0x7f0000009140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa}}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000000a540)}}, {{&(0x7f000000a600)=@sco={0x1f}, 0x80, &(0x7f000000a780), 0x0, &(0x7f000000a7c0)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0) [ 111.762109] Y4`Ҙ: renamed from lo 16:43:35 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) 16:43:35 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000000c0)=""/73) 16:43:35 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_sys\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000003c0)="025cc83d00005f8f762070") syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14}, @remote={0xac, 0x14, 0x223, 0xbb}, {[@rr={0xffffff94, 0x4}]}}, @icmp=@timestamp_reply={0xe}}}}}, &(0x7f0000000100)) 16:43:35 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x8) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f000000f740)=[{{&(0x7f0000009140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa}}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000000a540)}}, {{&(0x7f000000a600)=@sco={0x1f}, 0x80, &(0x7f000000a780), 0x0, &(0x7f000000a7c0)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0) 16:43:36 executing program 7: setuid(0xee01) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000400)=""/184) 16:43:36 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x24000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x0, 0x0, 0x7fffffff, 0x0, 0x38, r0, 0x1}, 0x2c) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)="6c6f00966fd651b959a9034a2c005290f48e3b8610d3d2adc7d4970403dc0d5df50f615b6a838e42517ea5ec10b7456ece60d4bc035fbdcd2d9660abbfbb9c21b635591c0687f17f9b04046a300d") ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8923, &(0x7f0000000400)="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") 16:43:36 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) 16:43:36 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x800) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000040)) 16:43:36 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000040)="240000001a0025f00485bc04fef7001c0a0b49ffed000000800008000800100001000000", 0x24) 16:43:36 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x8) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f000000f740)=[{{&(0x7f0000009140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa}}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000000a540)}}, {{&(0x7f000000a600)=@sco={0x1f}, 0x80, &(0x7f000000a780), 0x0, &(0x7f000000a7c0)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0) 16:43:36 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={[], 0x0, 0xff, 0x4000010001}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 16:43:36 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) 16:43:36 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") inotify_init1(0x0) 16:43:36 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) 16:43:36 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x8) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f000000f740)=[{{&(0x7f0000009140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa}}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000000a540)}}, {{&(0x7f000000a600)=@sco={0x1f}, 0x80, &(0x7f000000a780), 0x0, &(0x7f000000a7c0)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0) 16:43:36 executing program 0: r0 = mq_open(&(0x7f00000000c0)='-$\x00', 0x82, 0x0, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ftruncate(r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000340)="6e65742f6970365f666c6f776c6162656c006ec03114893458edc1c9d8dc4b0d8dae982640d0e6bb51d7ff596e1c92de0eaa319198e91f0a4d43697c2bcd77f017365af160acf33bd66432ebe50c0e8bdaf7fc39feff34ef27a1397193227f4733c145e66536c6c275112520e72b3097843b5cdac480c3b1384ebf592505f88589fcd2d7") r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000400)=""/248, 0xf8}, {&(0x7f00000007c0)=""/182, 0xb6}, {&(0x7f0000000880)=""/158, 0x9e}, {&(0x7f0000000940)=""/113, 0x71}], 0x4, 0x0) 16:43:36 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco={0x1f}, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2={0x1f}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x2, 0x0) 16:43:36 executing program 7: setuid(0xee01) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000400)=""/184) 16:43:36 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:43:36 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x24000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x0, 0x0, 0x7fffffff, 0x0, 0x38, r0, 0x1}, 0x2c) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)="6c6f00966fd651b959a9034a2c005290f48e3b8610d3d2adc7d4970403dc0d5df50f615b6a838e42517ea5ec10b7456ece60d4bc035fbdcd2d9660abbfbb9c21b635591c0687f17f9b04046a300d") ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8923, &(0x7f0000000400)="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") 16:43:36 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) 16:43:36 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x8) sendmmsg(r1, &(0x7f000000f740)=[{{&(0x7f0000009140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa}}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000000a540)}}, {{&(0x7f000000a600)=@sco={0x1f}, 0x80, &(0x7f000000a780), 0x0, &(0x7f000000a7c0)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0) 16:43:36 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x7, &(0x7f0000a9cff8)) dup(r0) 16:43:36 executing program 7: setuid(0xee01) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000400)=""/184) 16:43:37 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffffffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x1f361) r3 = accept4(r1, 0x0, &(0x7f0000000040)=0xfffffffffffffe6b, 0x0) close(r3) 16:43:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:43:37 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={[], 0x0, 0xff, 0x4000010001}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 16:43:37 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f000000f740)=[{{&(0x7f0000009140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa}}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000000a540)}}, {{&(0x7f000000a600)=@sco={0x1f}, 0x80, &(0x7f000000a780), 0x0, &(0x7f000000a7c0)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0) 16:43:37 executing program 7: setuid(0xee01) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000400)=""/184) 16:43:37 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) 16:43:37 executing program 0: shmget(0xffffffffffffffff, 0x1000, 0x800, &(0x7f0000ffe000/0x1000)=nil) 16:43:37 executing program 7: setuid(0xee01) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000400)=""/184) 16:43:37 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x24000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x0, 0x0, 0x7fffffff, 0x0, 0x38, r0, 0x1}, 0x2c) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)="6c6f00966fd651b959a9034a2c005290f48e3b8610d3d2adc7d4970403dc0d5df50f615b6a838e42517ea5ec10b7456ece60d4bc035fbdcd2d9660abbfbb9c21b635591c0687f17f9b04046a300d") ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8923, &(0x7f0000000400)="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") 16:43:37 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f000000f740)=[{{&(0x7f0000009140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa}}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000000a540)}}, {{&(0x7f000000a600)=@sco={0x1f}, 0x80, &(0x7f000000a780), 0x0, &(0x7f000000a7c0)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0) 16:43:37 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='bpf\x00', 0x0, &(0x7f0000000200)) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x104000, &(0x7f00000001c0)) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x2000, &(0x7f0000000140)=ANY=[]) 16:43:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:43:37 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) 16:43:37 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = gettid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x2) fcntl$dupfd(r3, 0x0, r1) dup3(r4, r3, 0x0) write(r3, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCXONC(r3, 0x540a, 0x2) tkill(r2, 0x1000000000016) 16:43:37 executing program 7: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000400)=""/184) 16:43:37 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x8) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f000000f740)=[{{&(0x7f0000009140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa}}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000000a540)}}, {{&(0x7f000000a600)=@sco={0x1f}, 0x80, &(0x7f000000a780), 0x0, &(0x7f000000a7c0)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0) 16:43:37 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000100), 0x0, 0x8000, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) close(r0) 16:43:37 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) 16:43:37 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000080), &(0x7f0000a25ffc), &(0x7f000039f000), &(0x7f0000000040)) waitid(0x0, 0x0, &(0x7f0000001ff0), 0xc1000006, 0x0) 16:43:37 executing program 7: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000400)=""/184) 16:43:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:43:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000a5f000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000010000034d564b0000000001"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:43:37 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) 16:43:37 executing program 6: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r0 = socket$inet_dccp(0x2, 0x6, 0x0) listen(0xffffffffffffffff, 0x8) connect$inet(r0, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r0, &(0x7f000000f740)=[{{&(0x7f0000009140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa}}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000000a540)}}, {{&(0x7f000000a600)=@sco={0x1f}, 0x80, &(0x7f000000a780), 0x0, &(0x7f000000a7c0)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0) 16:43:37 executing program 0: r0 = add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000680)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000180)="c6a34e987940ea478d9bd365b9e4621e334652733324b7773a3df8a7504d9e18e2e4a839fcd9030000000000000028945d12a9caae603ff81c4dc32ed3d70fb5d4c5b866305249060000005277822d0e0616a2e5b74c48e38b9936f298c6feec95ad327c724ec507bd34b94e99623f014bf81ea54900ac54a99aa04e1a7f000000e8d3bfa2f3abce9736aac3e0b19d5a697bc438cd49bc1cf3af72c2180bbee78e9a7237c02e10ac77e3a4fd8a6e2bdca6a9a1d7da1a3e559fdafb6703c73b3c4c10865302fb324f16327996273625d9f0a54ef16bdb08f22ed11fd80b74eb861aebe51b0912c0f79486c25c49524ffe4f00", 0xf2, r2) request_key(&(0x7f00000006c0)="646e735f7265736f6c7665720005083f7605beb89ebb55f56950196fd8b8a6ebddf637ee27ef0fabbbad7523dacb0ab4baaf14787b652566f6eaf50a9d4cff3e30f2d07fd0118cf06573e05f283ef26ec0cc75cf93fe4c95c7185cb70df302c4c08871883fc063c014d46b8b27fd88a01e760bee664a475d69d12e2fc7e3dc680e3bb87b71d301fbf92cadf5537bc8774141ee7d7152d16c9ee5ef389b527a9b31679b1560e4680fcfd95743ed5305a984645fb4371e5e363f7df35cb72f6d9c953cd2ea3167c037567f7f99399e92ba02db513f40a4d44e072bf5ea9495287934a503a032610a0235c3530cfc99e27a1e10e28ed49beb223bbe910fd417a48e64dbdf97edb9363e6b5853e1323d6f78d0fb80969de2f5fec97acbb11c1ae97f54cf4e3ef9d50e1fbc43cc27e537d18452001232814ac3970ee2938175a91f4e0ca28b803a350dbea3b68d6a71bc65b011a81834b809f86919e4499a53ff8a35993b333b9b2761a44bb4a888a90c078d0b923e28cdbf76aa3fb68394de930dddf27c48926ab9c66951b70ebd4063b510ae453059ff71853bcf5942b5140a111d4a2afbaf612c6415aceb9578cb0d1decc8001f6dfc9d6829dbed2a8dbbc4bc9391960c1bb3fb451d52778143fb3c2f4d17df3c295117e13889037aff061ff283cac330aa03e7d189f01bfd03e68532d5594ef0e4bf1d584c7eacfd53a7ae8ccecc1901c89f4db4a3f1925610f22dac4570169b7f9f4cbf3fa1376f0ce4ab31605a16aff95c1bda1b96b9ded911a38594c3d9b42e7712ac377f377cd30eda00efd15d718e20dba3e76c4850966353c04a178e3b857719f9d81dc0ef8776c46c47d38aad73498289bc0240", &(0x7f00000003c0)={0x73, 0x79, 0x7a, 0x3, 0x10000000}, &(0x7f00000002c0)="af2019dcc2380b460bdc8c7a581973a96d57452035fca47b18e7992f4c82e608a92c747d070000000000000083a3c1a4b05139b9b946a4a11d39b7873e5f3296185625d49ae13974d13940d0c01a5029b35aec2234864afd464800000000000000000000000000", 0x0) 16:43:37 executing program 7: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000400)=""/184) 16:43:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) 16:43:37 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) 16:43:37 executing program 6: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x8) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f000000f740)=[{{&(0x7f0000009140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa}}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000000a540)}}, {{&(0x7f000000a600)=@sco={0x1f}, 0x80, &(0x7f000000a780), 0x0, &(0x7f000000a7c0)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0) 16:43:38 executing program 7: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) write$binfmt_elf64(r0, &(0x7f00000017c0)=ANY=[@ANYRES16], 0x543) write$binfmt_script(r0, &(0x7f0000001040)=ANY=[@ANYBLOB="2321202e2f66696c65300af3264fb93ebc8b66ef2f4c4aae5bfafb785c7874b805ec8cfd732c6097d916cccf91ecd2074d3d3900d7eda8902a44756965686a0f2b432429744d120e7a0304d75db24e33472786f15c24d3cca943589ec6d45638f1c247ec7626b9a92647ad3c44f02a47d3a6aaafee963a7edb533414a4406961e7e746f940da389ef9df273db7"], 0x8d) syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000004ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000001480)=""/20, 0x14}, 0x0) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[], 0x0) 16:43:38 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = gettid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x2) fcntl$dupfd(r3, 0x0, r1) dup3(r4, r3, 0x0) write(r3, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCXONC(r3, 0x540a, 0x2) tkill(r2, 0x1000000000016) 16:43:38 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x8) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f000000f740)=[{{&(0x7f0000009140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa}}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000000a540)}}, {{&(0x7f000000a600)=@sco={0x1f}, 0x80, &(0x7f000000a780), 0x0, &(0x7f000000a7c0)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0) 16:43:38 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='clear_refs\x00') write$cgroup_pid(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="3441946363a9de950b5950bb1ddad5b85993b28a6321c6fa2cc7b8289b149f61b7a7ca9cb1a9daf76a6eecb298e91776939bd1d7104102c15b1be20513bdfa7780e31dab1e84b095503f9b6882ee767e921937fafd2092a2844b5937ac7e97586320b35517f5bd8c42256193e447922a7fbd4caf37186959d9eabc62bf99243f66f4730f786a561a4ba874a8d40fe4695bae5c5a68236023506f1b3bd9998b51b71a68c7ec29b627143d58b6a459a09dc1f9f947d9bbe7510280326be73c5d921e96fec7aa7eba04717358debb212dc0e5a83fb16896ed033ff9056c6cfef92beb9cb26e9af402e8e79f6606fe507d"], 0xef) 16:43:38 executing program 0: r0 = add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000680)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000180)="c6a34e987940ea478d9bd365b9e4621e334652733324b7773a3df8a7504d9e18e2e4a839fcd9030000000000000028945d12a9caae603ff81c4dc32ed3d70fb5d4c5b866305249060000005277822d0e0616a2e5b74c48e38b9936f298c6feec95ad327c724ec507bd34b94e99623f014bf81ea54900ac54a99aa04e1a7f000000e8d3bfa2f3abce9736aac3e0b19d5a697bc438cd49bc1cf3af72c2180bbee78e9a7237c02e10ac77e3a4fd8a6e2bdca6a9a1d7da1a3e559fdafb6703c73b3c4c10865302fb324f16327996273625d9f0a54ef16bdb08f22ed11fd80b74eb861aebe51b0912c0f79486c25c49524ffe4f00", 0xf2, r2) request_key(&(0x7f00000006c0)="646e735f7265736f6c7665720005083f7605beb89ebb55f56950196fd8b8a6ebddf637ee27ef0fabbbad7523dacb0ab4baaf14787b652566f6eaf50a9d4cff3e30f2d07fd0118cf06573e05f283ef26ec0cc75cf93fe4c95c7185cb70df302c4c08871883fc063c014d46b8b27fd88a01e760bee664a475d69d12e2fc7e3dc680e3bb87b71d301fbf92cadf5537bc8774141ee7d7152d16c9ee5ef389b527a9b31679b1560e4680fcfd95743ed5305a984645fb4371e5e363f7df35cb72f6d9c953cd2ea3167c037567f7f99399e92ba02db513f40a4d44e072bf5ea9495287934a503a032610a0235c3530cfc99e27a1e10e28ed49beb223bbe910fd417a48e64dbdf97edb9363e6b5853e1323d6f78d0fb80969de2f5fec97acbb11c1ae97f54cf4e3ef9d50e1fbc43cc27e537d18452001232814ac3970ee2938175a91f4e0ca28b803a350dbea3b68d6a71bc65b011a81834b809f86919e4499a53ff8a35993b333b9b2761a44bb4a888a90c078d0b923e28cdbf76aa3fb68394de930dddf27c48926ab9c66951b70ebd4063b510ae453059ff71853bcf5942b5140a111d4a2afbaf612c6415aceb9578cb0d1decc8001f6dfc9d6829dbed2a8dbbc4bc9391960c1bb3fb451d52778143fb3c2f4d17df3c295117e13889037aff061ff283cac330aa03e7d189f01bfd03e68532d5594ef0e4bf1d584c7eacfd53a7ae8ccecc1901c89f4db4a3f1925610f22dac4570169b7f9f4cbf3fa1376f0ce4ab31605a16aff95c1bda1b96b9ded911a38594c3d9b42e7712ac377f377cd30eda00efd15d718e20dba3e76c4850966353c04a178e3b857719f9d81dc0ef8776c46c47d38aad73498289bc0240", &(0x7f00000003c0)={0x73, 0x79, 0x7a, 0x3, 0x10000000}, &(0x7f00000002c0)="af2019dcc2380b460bdc8c7a581973a96d57452035fca47b18e7992f4c82e608a92c747d070000000000000083a3c1a4b05139b9b946a4a11d39b7873e5f3296185625d49ae13974d13940d0c01a5029b35aec2234864afd464800000000000000000000000000", 0x0) 16:43:38 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) 16:43:38 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000080), &(0x7f0000a25ffc), &(0x7f000039f000), &(0x7f0000000040)) waitid(0x0, 0x0, &(0x7f0000001ff0), 0xc1000006, 0x0) 16:43:38 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:43:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) 16:43:38 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x24000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x0, 0x0, 0x7fffffff, 0x0, 0x38, r0, 0x1}, 0x2c) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)="6c6f00966fd651b959a9034a2c005290f48e3b8610d3d2adc7d4970403dc0d5df50f615b6a838e42517ea5ec10b7456ece60d4bc035fbdcd2d9660abbfbb9c21b635591c0687f17f9b04046a300d") ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000400)="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") 16:43:38 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x8) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f000000f740)=[{{&(0x7f0000009140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa}}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000000a540)}}, {{&(0x7f000000a600)=@sco={0x1f}, 0x80, &(0x7f000000a780), 0x0, &(0x7f000000a7c0)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0) 16:43:38 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "6cb782e4ad88b89d1fd309169f44812107130ee55db70510420aaa96759ecbc36eb9bb12b6124793608dd0e7316d1d4f4dbac39806e4ac714b7ecefa8a934a"}, 0x60) sendmmsg$nfc_llcp(r1, &(0x7f0000002f00)=[{&(0x7f0000001cc0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "5d736fcc9497cec85546e85b369960cb30bbd59c3efc781f54c92c5c08db36668b70cfac595eae68362c7993b11b8511d10271010341da00fa3a99f6daaf62"}, 0x60, &(0x7f0000002dc0), 0x0, &(0x7f0000002e00)={0x10}, 0x10}], 0x1, 0x0) 16:43:38 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:43:38 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x3, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r0, 0x43) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) 16:43:38 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) 16:43:38 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000080), &(0x7f0000a25ffc), &(0x7f000039f000), &(0x7f0000000040)) waitid(0x0, 0x0, &(0x7f0000001ff0), 0xc1000006, 0x0) [ 114.655679] device lo entered promiscuous mode 16:43:38 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(0xffffffffffffffff, 0x8) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f000000f740)=[{{&(0x7f0000009140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa}}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000000a540)}}, {{&(0x7f000000a600)=@sco={0x1f}, 0x80, &(0x7f000000a780), 0x0, &(0x7f000000a7c0)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0) [ 114.724851] device lo left promiscuous mode [ 114.766186] device lo entered promiscuous mode 16:43:39 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x1}, 0xc) 16:43:39 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000001280)='cgroup.procs\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080), 0x9) dup3(r2, r1, 0x0) 16:43:39 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = gettid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x2) fcntl$dupfd(r3, 0x0, r1) dup3(r4, r3, 0x0) write(r3, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCXONC(r3, 0x540a, 0x2) tkill(r2, 0x1000000000016) 16:43:39 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:43:39 executing program 7: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000340)=0xe8) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000c33f70)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) 16:43:39 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f000000f740)=[{{&(0x7f0000009140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa}}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000000a540)}}, {{&(0x7f000000a600)=@sco={0x1f}, 0x80, &(0x7f000000a780), 0x0, &(0x7f000000a7c0)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0) 16:43:39 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) 16:43:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x7, &(0x7f0000000000)) timerfd_create(0x0, 0x0) dup(0xffffffffffffffff) 16:43:39 executing program 4: 16:43:39 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x8) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f000000f740)=[{{&(0x7f0000009140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa}}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000000a540)}}, {{&(0x7f000000a600)=@sco={0x1f}, 0x80, &(0x7f000000a780), 0x0, &(0x7f000000a7c0)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0) 16:43:39 executing program 7: 16:43:39 executing program 0: 16:43:39 executing program 2: 16:43:39 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:43:39 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) 16:43:39 executing program 4: 16:43:39 executing program 2: 16:43:40 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = gettid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x2) fcntl$dupfd(r3, 0x0, r1) dup3(r4, r3, 0x0) write(r3, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCXONC(r3, 0x540a, 0x2) tkill(r2, 0x1000000000016) 16:43:40 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x8) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f000000f740)=[{{&(0x7f0000009140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa}}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000000a540)}}, {{&(0x7f000000a600)=@sco={0x1f}, 0x80, &(0x7f000000a780), 0x0, &(0x7f000000a7c0)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0) 16:43:40 executing program 7: 16:43:40 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x2000400) r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) 16:43:40 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 16:43:40 executing program 2: 16:43:40 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) 16:43:40 executing program 4: 16:43:40 executing program 7: 16:43:40 executing program 2: 16:43:40 executing program 4: 16:43:40 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) 16:43:40 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x8) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14}}, 0x10) sendmmsg(r1, &(0x7f000000f740)=[{{&(0x7f0000009140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa}}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000000a540)}}, {{&(0x7f000000a600)=@sco={0x1f}, 0x80, &(0x7f000000a780), 0x0, &(0x7f000000a7c0)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0) 16:43:40 executing program 0: 16:43:40 executing program 2: 16:43:40 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 16:43:41 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) gettid() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) readv(r2, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x2) fcntl$dupfd(r2, 0x0, r1) dup3(r3, r2, 0x0) write(r2, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCXONC(r2, 0x540a, 0x2) 16:43:41 executing program 7: 16:43:41 executing program 4: 16:43:41 executing program 0: 16:43:41 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) 16:43:41 executing program 2: 16:43:41 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x8) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f000000f740)=[{{&(0x7f0000009140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa}}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000000a540)}}, {{&(0x7f000000a600)=@sco={0x1f}, 0x80, &(0x7f000000a780), 0x0, &(0x7f000000a7c0)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0) 16:43:41 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 16:43:41 executing program 2: 16:43:41 executing program 7: 16:43:41 executing program 4: 16:43:41 executing program 0: 16:43:41 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 16:43:41 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000140)="025cc83d6d345f8f762070") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) 16:43:41 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x8) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f000000f740)=[{{&(0x7f000000a600)=@sco={0x1f}, 0x80, &(0x7f000000a780), 0x0, &(0x7f000000a7c0)=[{0x10, 0x10d}], 0x10}}], 0x1, 0x0) 16:43:41 executing program 2: 16:43:42 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) gettid() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) readv(r2, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x2) fcntl$dupfd(r2, 0x0, r1) dup3(r3, r2, 0x0) write(r2, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCXONC(r2, 0x540a, 0x2) 16:43:42 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x2, 0x2d8, [0x0, 0x20000540, 0x20000570, 0x20000748], 0x0, &(0x7f0000000080), &(0x7f0000000540)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'irlan0\x00', 'veth0_to_bond\x00', 'bond_slave_0\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x178, 0x178, 0x1a8, [@physdev={'physdev\x00', 0x70, {{'veth1_to_bridge\x00', {}, 'ifb0\x00'}}}, @stp={'stp\x00', 0x48, {{0x0, {0x0, 0x0, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x0, 0x0, 0x0, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}}}]}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @random="6331f003b701", [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x350) 16:43:42 executing program 4: 16:43:42 executing program 0: 16:43:42 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000140)="025cc83d6d345f8f762070") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) 16:43:42 executing program 2: 16:43:42 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 16:43:42 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x8) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f000000f740)=[{{&(0x7f0000009140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa}}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000000a540)}}], 0x1, 0x0) 16:43:42 executing program 2: 16:43:42 executing program 0: 16:43:42 executing program 4: 16:43:42 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000140)="025cc83d6d345f8f762070") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) 16:43:42 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 16:43:42 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x8) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f000000f740)=[{{&(0x7f0000009140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa}}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000000a540)}}], 0x1, 0x0) [ 118.408339] x_tables: eb_tables: physdev.0 match: invalid size 72 (kernel) != (user) 112 16:43:42 executing program 2: 16:43:42 executing program 4: 16:43:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) gettid() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) readv(r2, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x2) fcntl$dupfd(r2, 0x0, r1) dup3(r3, r2, 0x0) write(r2, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCXONC(r2, 0x540a, 0x2) 16:43:43 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r0, r2, &(0x7f0000000000), 0x5) 16:43:43 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) 16:43:43 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = getpid() sched_setaffinity(r1, 0x1d5, &(0x7f0000d4b000)=0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0bc5310, &(0x7f0000000280)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000380)={{}, 'port1\x00'}) 16:43:43 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000001c0)={'filter\x00'}, &(0x7f00000000c0)=0x422) 16:43:43 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x8) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f000000f740)=[{{&(0x7f0000009140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa}}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000000a540)}}], 0x1, 0x0) 16:43:43 executing program 4: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) request_key(&(0x7f0000000180)='logon\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000000200)='loppp1posix_acl_accesscpuset@vboxnet1posix_acl_access]\x00', 0xfffffffffffffffb) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) 16:43:43 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:43:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000200), &(0x7f00000001c0), &(0x7f0000000080)) 16:43:43 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x8) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f000000f740)=[{{&(0x7f0000009140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa}}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000000a540)}}, {{&(0x7f000000a600)=@sco={0x1f}, 0x80, &(0x7f000000a780), 0x0, &(0x7f000000a7c0)}}], 0x2, 0x0) 16:43:43 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) 16:43:43 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:43:43 executing program 2: 16:43:43 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:43:43 executing program 2: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x0, 0x0, 0xff, 0x1}, 0x20) 16:43:43 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:43:44 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = gettid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x2) fcntl$dupfd(r3, 0x0, r1) dup3(r4, r3, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) tkill(r2, 0x1000000000016) 16:43:44 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) 16:43:44 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000272000)='net/mcfilter\x00') readv(r0, &(0x7f00000000c0)=[{&(0x7f0000120000)=""/4096, 0x1000}], 0x1) 16:43:44 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)) 16:43:44 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x8) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f000000f740)=[{{&(0x7f0000009140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa}}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000000a540)}}, {{&(0x7f000000a600)=@sco={0x1f}, 0x80, &(0x7f000000a780), 0x0, &(0x7f000000a7c0)}}], 0x2, 0x0) 16:43:44 executing program 2: msgrcv(0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0xa4a3ad41a879dddd) 16:43:44 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:43:44 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:43:44 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') pread64(r0, &(0x7f0000000000)=""/12, 0xc, 0x0) 16:43:44 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d34") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) 16:43:44 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r1, &(0x7f00000000c0)="040400000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035060f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046afd77fc7ae664f65bfc370ad30c2750", 0x7b, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 16:43:44 executing program 4: mq_open(&(0x7f0000000040)='-$\x00', 0x3, 0x0, &(0x7f0000000080)) 16:43:44 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d34") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) 16:43:44 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:43:44 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x8) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f000000f740)=[{{&(0x7f0000009140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa}}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000000a540)}}, {{&(0x7f000000a600)=@sco={0x1f}, 0x80, &(0x7f000000a780), 0x0, &(0x7f000000a7c0)}}], 0x2, 0x0) [ 120.461120] netlink: 'syz-executor7': attribute type 29 has an invalid length. [ 120.468606] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. 16:43:44 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) [ 120.536882] netlink: 'syz-executor7': attribute type 29 has an invalid length. [ 120.544485] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. [ 120.634041] netlink: 'syz-executor7': attribute type 29 has an invalid length. [ 120.641506] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. [ 120.650114] netlink: 'syz-executor7': attribute type 29 has an invalid length. [ 120.657507] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. 16:43:45 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x8) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f000000f740)=[{{&(0x7f0000009140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa}}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000000a540)}}, {{&(0x7f000000a600)=@sco={0x1f}, 0x80, &(0x7f000000a780), 0x0, &(0x7f000000a7c0)=[{0x10}], 0x10}}], 0x2, 0x0) 16:43:45 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:43:45 executing program 2: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f0000852ff8)={0x77359400}, &(0x7f0000000040), 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, &(0x7f00000017c0), &(0x7f0000000200), 0x0) 16:43:45 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d34") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) 16:43:45 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.weight\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000180)={[0x36]}, 0x1) 16:43:45 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:43:45 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = gettid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x2) fcntl$dupfd(r3, 0x0, r1) dup3(r4, r3, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) tkill(r2, 0x1000000000016) 16:43:45 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000680)={0x73, 0x79, 0x7a}, 0x0, 0x0, r2) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000180)="c6a34e987940ea478d9bd365b9e4621e334652733324b7773a3df8a7504d9e18e2e4a839fcd9030000000000000028945d12a9caae603ff81c4dc32ed3d70fb5d4c5b866305249060000005277822d0e0616a2e5b74c48e38b9936f298c6feec95ad327c724ec507bd34b94e99623f014bf81ea54900ac54a99aa04e1a7f000000e8d3bfa2f3abce9736aac3e0b19d5a697bc438cd49bc1cf3af72c2180bbee78e9a7237c02e10ac77e3a4fd8a6e2bdca6a9a1d7da1a3e559fdafb6703c73b3c4c10865302fb324f16327996273625d9f0a54ef16bdb08f22ed11fd80b74eb861aebe51b0912c0f79486c25c49524ffe4f00", 0xf2, r3) request_key(&(0x7f00000006c0)="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", &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3, 0x10000000}, &(0x7f00000004c0)="af2019dcc2380b4623dc8c7a581973a96d57452035fca47b18e7992f4c82e608a92c747d6e80519f2f5a436783ee4e3264245238b946a4a11d39b7873e5f3296185625d49ae13974d13940d0c01a5029b35aec2234864afd4648", 0x0) 16:43:45 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:43:45 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f76") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) 16:43:45 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cpuacct.stat\x00', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840), 0x0, &(0x7f0000001580)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) 16:43:45 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x8) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f000000f740)=[{{&(0x7f0000009140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa}}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000000a540)}}, {{&(0x7f000000a600)=@sco={0x1f}, 0x80, &(0x7f000000a780), 0x0, &(0x7f000000a7c0)=[{0x10}], 0x10}}], 0x2, 0x0) 16:43:45 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:43:45 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:43:45 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f76") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) 16:43:45 executing program 7: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x100000002, 0x1) accept(r0, &(0x7f0000000540)=@l2, &(0x7f0000000500)=0x1d7) 16:43:45 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x8) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f000000f740)=[{{&(0x7f0000009140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa}}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000000a540)}}, {{&(0x7f000000a600)=@sco={0x1f}, 0x80, &(0x7f000000a780), 0x0, &(0x7f000000a7c0)=[{0x10}], 0x10}}], 0x2, 0x0) 16:43:45 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:43:45 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f76") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) 16:43:45 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:43:45 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1=0xe0000001}, 0x4, 0x8}}, 0x2e) close(r0) 16:43:45 executing program 7: r0 = inotify_init() r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(r0, r1, 0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x200) 16:43:45 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = gettid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x2) fcntl$dupfd(r3, 0x0, r1) dup3(r4, r3, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) tkill(r2, 0x1000000000016) 16:43:45 executing program 6: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid\x00') 16:43:45 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = semget$private(0x0, 0x8, 0x0) semop(r1, &(0x7f0000000040)=[{0x0, 0x8001}, {0x0, 0x0, 0x1800}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) 16:43:45 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:43:45 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="025cc83d6d345f8f762070") unshare(0x40000) semop(0x0, &(0x7f0000000140)=[{0x0, 0x1000, 0x1800}, {0x0, 0xffff}], 0x2) unshare(0x40000) 16:43:45 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f7620") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) 16:43:45 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:43:45 executing program 7: r0 = socket$inet(0x2, 0x805, 0x0) sendto$inet(r0, &(0x7f0000000200)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 16:43:46 executing program 6: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x100, 0x0, 0xff, 0x1}, 0x20) 16:43:46 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f7620") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) 16:43:46 executing program 0: bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(r0, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:43:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:43:46 executing program 2: syz_emit_ethernet(0x1, &(0x7f0000015e15)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaa00ff86dd6076605100303aff0000000000000000ffff020000000000000000000000000001880090780010000060c5961e00000000ff010000000000001802000000000001ff02000000000000000000000000000100000000000000"], 0x0) 16:43:46 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') pread64(r0, &(0x7f0000000000)=""/12, 0xc, 0x0) 16:43:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001c00070f000000000000000007000000", @ANYBLOB="f00002000a000200cb6ee68bab8b999be3101578000000000000aaaaaa0000a0577baa81121af61c9a0bd9b3c8e2f6803de066cfe3bc464136399ab6eb8cc6aa9a26ec8f3be5ab10ebd6061ef758c519c5c62d74088c101563879e"], 0x2}, 0x1}, 0x0) 16:43:46 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x4000000008912, &(0x7f0000000280)="025cc83d0068458f762070") r1 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000040)=@fragment, 0x8) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000080)=@dstopts, 0x8) 16:43:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = gettid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r3, 0x2) fcntl$dupfd(r3, 0x0, r1) write(r3, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCXONC(r3, 0x540a, 0x2) tkill(r2, 0x1000000000016) 16:43:46 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f7620") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) 16:43:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:43:46 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:43:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)={[0x30]}, 0x1) 16:43:46 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv\x00', 0x3) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000040)) shutdown(r0, 0x1) 16:43:46 executing program 6: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc), 0x4) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x20000000080000) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000040)) 16:43:46 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = semget$private(0x0, 0x8, 0x0) semop(r1, &(0x7f0000000040)=[{0x0, 0x8001}, {0x0, 0x0, 0x1800}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) 16:43:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:43:46 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) 16:43:46 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) 16:43:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xb69, 0x2081) write$eventfd(r1, &(0x7f00000000c0), 0xffffff90) 16:43:46 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:43:47 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) ioctl(r0, 0x8912, &(0x7f0000000180)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x2}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 16:43:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:43:47 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) 16:43:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = gettid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r3, 0x2) fcntl$dupfd(r3, 0x0, r1) write(r3, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCXONC(r3, 0x540a, 0x2) tkill(r2, 0x1000000000016) 16:43:47 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x0, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:43:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmdt(r0) 16:43:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x200000000000009e, &(0x7f000039a000)=[{0x20}, {}]}, 0x10) 16:43:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:43:47 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002480)={0x1, 0x81, 0x4, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000ab2000), &(0x7f0000da1000)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0, &(0x7f0000068000)}, 0x10) 16:43:47 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f00000002c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0ad5c9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b9995cb0d1ca02162d89751eeaf110868df905091eb2cb42ffbead45c1908bb47750aeb173cb656debce392f277be3ed4c8097610c03ad61374ad3bb4d1dbe7d50cfa8c") ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x0, 0x0, [{r0, 0x0, 0xfffffffffffffffa}, {r1}, {r0}]}) 16:43:47 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = semget$private(0x0, 0x8, 0x0) semop(r1, &(0x7f0000000040)=[{0x0, 0x8001}, {0x0, 0x0, 0x1800}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) 16:43:47 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) ioctl(r0, 0x8912, &(0x7f0000000180)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 16:43:47 executing program 2: r0 = inotify_init() r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) r3 = inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x200) inotify_rm_watch(r1, r3) 16:43:47 executing program 3: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) close(r0) 16:43:47 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x0, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:43:47 executing program 6: mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='bpf\x00', 0x0, &(0x7f0000000080)=ANY=[]) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000000280)=ANY=[]) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x80000, &(0x7f0000000080)) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x20000, &(0x7f0000000200)) 16:43:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:43:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00') openat$cgroup_subtree(r0, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) 16:43:48 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x3, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r0, 0x43) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b20000)={0x1, &(0x7f0000d39000)=[{0x6, 0x0, 0x0, 0x3}]}, 0x10) shutdown(r1, 0x1) 16:43:48 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = gettid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r3, 0x2) fcntl$dupfd(r3, 0x0, r1) write(r3, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCXONC(r3, 0x540a, 0x2) tkill(r2, 0x1000000000016) 16:43:48 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x0, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:43:48 executing program 6: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x2, @multicast1=0xe0000001}}, 0x1e) 16:43:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:43:48 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x4000000008912, &(0x7f0000000280)="025cc83d0068458f762070") r1 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000040)=@fragment, 0x8) bind$inet6(r1, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f00007a8fff), 0x3a7, 0x20000000, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 16:43:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001800010000000000000000000a94000000000010000800006f0438c7018c3de7b712eb8be6d37691481c86ce3044a861900000"], 0x1}, 0x1}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 16:43:48 executing program 7: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x26e1, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0x4c000) [ 124.969267] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 16:43:48 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = semget$private(0x0, 0x8, 0x0) semop(r1, &(0x7f0000000040)=[{0x0, 0x8001}, {0x0, 0x0, 0x1800}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) 16:43:48 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f00000008c0), &(0x7f00000006c0), &(0x7f0000000940), &(0x7f0000001a00)) 16:43:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000040)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000180)="6263736630000000000000001100") 16:43:48 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:43:48 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) close(r1) close(r0) 16:43:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:43:48 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:43:49 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:43:49 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:43:49 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = gettid() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) readv(r2, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x2) dup3(r3, r2, 0x0) write(r2, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCXONC(r2, 0x540a, 0x2) tkill(r1, 0x1000000000016) 16:43:49 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:43:49 executing program 7: r0 = socket(0x1e, 0x805, 0x0) r1 = socket(0x1e, 0x5, 0x0) listen(r1, 0x0) accept$packet(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000180)=0x827ed4c11c9eccb9) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000300)=@req3={0x80000000}, 0x1c) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda) close(r1) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendmsg(r0, &(0x7f0000000140)={&(0x7f0000000740)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f00000018c0), 0x0, &(0x7f0000000600)=ANY=[]}, 0x0) 16:43:49 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:43:49 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x8000, 0x0, 0x0) ftruncate(r2, 0x280080) sendfile(r1, r2, &(0x7f0000d83ff8), 0x2008000fffffffe) 16:43:49 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) close(r1) close(r0) 16:43:49 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:43:49 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = semget$private(0x0, 0x8, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) 16:43:49 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000080)}}], 0x1, 0x0) 16:43:49 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000080)}}], 0x1, 0x0) 16:43:49 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000080)}}], 0x1, 0x0) 16:43:49 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = semget$private(0x0, 0x8, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) 16:43:49 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x0, &(0x7f0000000140)}}], 0x1, 0x0) 16:43:50 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x0, &(0x7f0000000140)}}], 0x1, 0x0) 16:43:52 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) close(r1) close(r0) 16:43:52 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x0, &(0x7f0000000140)}}], 0x1, 0x0) 16:43:52 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = semget$private(0x0, 0x8, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) 16:43:52 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) 16:43:52 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = gettid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) fcntl$dupfd(r3, 0x0, r1) dup3(0xffffffffffffffff, r3, 0x0) write(r3, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCXONC(r3, 0x540a, 0x2) tkill(r2, 0x1000000000016) 16:43:52 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x80, &(0x7f0000000080)=0x3f, &(0x7f0000001580)=0x1) 16:43:52 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:43:52 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:43:52 executing program 7: ioprio_set$pid(0x2, 0x0, 0x0) 16:43:52 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="025cc83d6d345f8f762070") unshare(0x400) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r1, 0x29, 0xcf, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0x28) 16:43:52 executing program 7: r0 = memfd_create(&(0x7f0000000480)='\x00', 0x0) write(r0, &(0x7f0000000040)="16", 0x1) sendfile(r0, r0, &(0x7f0000000080), 0xb516) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, &(0x7f0000000280)) readahead(r0, 0x0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000271000/0x4000)=nil, 0x6000) 16:43:52 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) close(r1) close(r0) 16:43:52 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137e637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0xc3, @time, 0x0, {0x0, 0x1}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000140)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) 16:43:52 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:43:52 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") semop(0x0, &(0x7f0000000040)=[{0x0, 0x8001}, {0x0, 0x0, 0x1800}], 0x2) semctl$IPC_RMID(0x0, 0x0, 0x0) 16:43:52 executing program 2: 16:43:52 executing program 2: 16:43:52 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:43:52 executing program 2: 16:43:52 executing program 2: 16:43:53 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = gettid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) fcntl$dupfd(r3, 0x0, r1) dup3(0xffffffffffffffff, r3, 0x0) write(r3, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCXONC(r3, 0x540a, 0x2) tkill(r2, 0x1000000000016) 16:43:53 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) [ 129.343666] FAT-fs (loop1): bogus number of reserved sectors [ 129.349588] FAT-fs (loop1): Can't find a valid FAT filesystem 16:43:53 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:43:53 executing program 2: 16:43:53 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000040)=[{0x0, 0x8001}, {0x0, 0x0, 0x1800}], 0x2) semctl$IPC_RMID(r0, 0x0, 0x0) 16:43:53 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) close(r1) 16:43:53 executing program 7: r0 = memfd_create(&(0x7f0000000480)='\x00', 0x0) write(r0, &(0x7f0000000040)="16", 0x1) sendfile(r0, r0, &(0x7f0000000080), 0xb516) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, &(0x7f0000000280)) readahead(r0, 0x0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000271000/0x4000)=nil, 0x6000) 16:43:53 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:43:53 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00') symlinkat(&(0x7f0000000240)='./file0\x00', r0, &(0x7f0000000280)='./file0\x00') 16:43:53 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'lo\x00@\x00', 0x101}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) 16:43:53 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000002240)={0x1, [0x0]}, &(0x7f0000003a40)=0x8) unshare(0x24020400) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={r2}, 0xc) [ 129.579780] FAT-fs (loop1): bogus number of reserved sectors [ 129.585789] FAT-fs (loop1): Can't find a valid FAT filesystem 16:43:53 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:43:53 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:43:53 executing program 2: [ 129.693812] FAT-fs (loop1): bogus number of reserved sectors [ 129.699805] FAT-fs (loop1): Can't find a valid FAT filesystem 16:43:53 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:43:53 executing program 2: [ 129.791424] FAT-fs (loop1): bogus number of reserved sectors [ 129.797361] FAT-fs (loop1): Can't find a valid FAT filesystem 16:43:54 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = gettid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) fcntl$dupfd(r3, 0x0, r1) dup3(0xffffffffffffffff, r3, 0x0) write(r3, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCXONC(r3, 0x540a, 0x2) tkill(r2, 0x1000000000016) 16:43:54 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:43:54 executing program 2: 16:43:54 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:43:54 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000040)=[{0x0, 0x8001}, {0x0, 0x0, 0x1800}], 0x2) semctl$IPC_RMID(r0, 0x0, 0x0) [ 130.380780] FAT-fs (loop1): bogus number of reserved sectors [ 130.386691] FAT-fs (loop1): Can't find a valid FAT filesystem 16:43:54 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) close(r1) 16:43:54 executing program 7: 16:43:54 executing program 2: 16:43:54 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:43:54 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) [ 130.584322] FAT-fs (loop1): bogus number of reserved sectors [ 130.590243] FAT-fs (loop1): Can't find a valid FAT filesystem 16:43:54 executing program 0: 16:43:54 executing program 2: 16:43:54 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:43:54 executing program 7: 16:43:54 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:43:54 executing program 2: [ 130.717834] FAT-fs (loop1): bogus number of reserved sectors [ 130.723889] FAT-fs (loop1): Can't find a valid FAT filesystem 16:43:55 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = gettid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) r4 = syz_open_pts(r3, 0x2) fcntl$dupfd(r3, 0x0, r1) dup3(r4, r3, 0x0) write(r3, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCXONC(r3, 0x540a, 0x2) tkill(r2, 0x1000000000016) 16:43:55 executing program 7: 16:43:55 executing program 0: 16:43:55 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:43:55 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:43:55 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) close(r1) 16:43:55 executing program 2: 16:43:55 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000040)=[{0x0, 0x8001}, {0x0, 0x0, 0x1800}], 0x2) semctl$IPC_RMID(r0, 0x0, 0x0) 16:43:55 executing program 0: 16:43:55 executing program 7: 16:43:55 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) [ 131.349105] FAT-fs (loop1): bogus number of reserved sectors [ 131.355101] FAT-fs (loop1): Can't find a valid FAT filesystem 16:43:55 executing program 7: 16:43:55 executing program 0: 16:43:55 executing program 2: 16:43:55 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:43:55 executing program 0: [ 131.508157] FAT-fs (loop1): bogus number of reserved sectors [ 131.514050] FAT-fs (loop1): Can't find a valid FAT filesystem 16:43:56 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = gettid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) r4 = syz_open_pts(r3, 0x2) fcntl$dupfd(r3, 0x0, r1) dup3(r4, r3, 0x0) write(r3, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCXONC(r3, 0x540a, 0x2) tkill(r2, 0x1000000000016) 16:43:56 executing program 7: 16:43:56 executing program 2: 16:43:56 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:43:56 executing program 0: 16:43:56 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) close(r0) 16:43:56 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400", 0xc}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) [ 132.345079] FAT-fs (loop1): bogus number of reserved sectors [ 132.350992] FAT-fs (loop1): Can't find a valid FAT filesystem 16:43:56 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000040)=[{0x0, 0x8001}, {0x0, 0x0, 0x1800}], 0x2) semctl$IPC_RMID(r0, 0x0, 0x0) 16:43:56 executing program 2: 16:43:56 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:43:56 executing program 7: 16:43:56 executing program 0: 16:43:56 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400", 0xc}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:43:56 executing program 7: 16:43:56 executing program 2: 16:43:56 executing program 0: [ 132.464039] FAT-fs (loop1): bogus number of reserved sectors [ 132.469944] FAT-fs (loop1): Can't find a valid FAT filesystem 16:43:57 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = gettid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) r4 = syz_open_pts(r3, 0x2) fcntl$dupfd(r3, 0x0, r1) dup3(r4, r3, 0x0) write(r3, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCXONC(r3, 0x540a, 0x2) tkill(r2, 0x1000000000016) 16:43:57 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:43:57 executing program 0: 16:43:57 executing program 2: 16:43:57 executing program 7: 16:43:57 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) close(r0) 16:43:57 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400", 0xc}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) [ 133.286758] FAT-fs (loop1): bogus number of reserved sectors [ 133.292778] FAT-fs (loop1): Can't find a valid FAT filesystem 16:43:57 executing program 2: 16:43:57 executing program 7: 16:43:57 executing program 0: 16:43:57 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000040)=[{0x0, 0x8001}, {0x0, 0x0, 0x1800}], 0x2) semctl$IPC_RMID(r0, 0x0, 0x0) 16:43:57 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200", 0x12}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:43:57 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:43:57 executing program 7: 16:43:57 executing program 2: 16:43:57 executing program 0: [ 133.404734] FAT-fs (loop1): invalid media value (0x00) [ 133.410177] FAT-fs (loop1): Can't find a valid FAT filesystem 16:43:58 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = gettid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x2) fcntl$dupfd(r3, 0x0, r1) dup3(r4, r3, 0x0) write(r3, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCXONC(r3, 0x540a, 0x2) tkill(r2, 0x1000000000016) 16:43:58 executing program 7: 16:43:58 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200", 0x12}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:43:58 executing program 2: 16:43:58 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:43:58 executing program 0: 16:43:58 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) close(r0) 16:43:58 executing program 2: 16:43:58 executing program 7: [ 134.260980] FAT-fs (loop1): invalid media value (0x00) [ 134.266381] FAT-fs (loop1): Can't find a valid FAT filesystem 16:43:58 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000040)=[{0x0, 0x8001}, {0x0, 0x0, 0x1800}], 0x2) semctl$IPC_RMID(r0, 0x0, 0x0) 16:43:58 executing program 0: 16:43:58 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:43:58 executing program 2: 16:43:58 executing program 7: 16:43:58 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200", 0x12}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:43:58 executing program 2: [ 134.411602] FAT-fs (loop1): invalid media value (0x00) [ 134.416989] FAT-fs (loop1): Can't find a valid FAT filesystem 16:43:58 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = gettid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x2) fcntl$dupfd(r3, 0x0, r1) dup3(r4, r3, 0x0) write(r3, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCXONC(r3, 0x540a, 0x2) tkill(r2, 0x1000000000016) 16:43:58 executing program 0: 16:43:58 executing program 7: 16:43:58 executing program 2: 16:43:58 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000", 0x15}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:43:58 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:43:58 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) close(r1) close(r0) 16:43:59 executing program 0: 16:43:59 executing program 7: [ 135.129284] FAT-fs (loop1): invalid media value (0x00) [ 135.134648] FAT-fs (loop1): Can't find a valid FAT filesystem 16:43:59 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = semget$private(0x0, 0x8, 0x0) semop(r1, &(0x7f0000000040)=[{0x0, 0x8001}, {0x0, 0x0, 0x1800}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) 16:43:59 executing program 2: 16:43:59 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) close(r1) close(r0) 16:43:59 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:43:59 executing program 0: 16:43:59 executing program 7: 16:43:59 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000", 0x15}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) [ 135.308973] FAT-fs (loop1): invalid media value (0x00) [ 135.314352] FAT-fs (loop1): Can't find a valid FAT filesystem 16:43:59 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = gettid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x2) fcntl$dupfd(r3, 0x0, r1) dup3(r4, r3, 0x0) write(r3, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCXONC(r3, 0x540a, 0x2) tkill(r2, 0x1000000000016) 16:43:59 executing program 7: 16:43:59 executing program 2: 16:43:59 executing program 0: 16:43:59 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) close(r1) close(r0) 16:43:59 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000", 0x15}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:43:59 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:43:59 executing program 0: 16:43:59 executing program 7: [ 136.002319] FAT-fs (loop1): invalid media value (0x00) [ 136.007704] FAT-fs (loop1): Can't find a valid FAT filesystem 16:44:00 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = semget$private(0x0, 0x8, 0x0) semop(r1, &(0x7f0000000040)=[{0x0, 0x8001}, {0x0, 0x0, 0x1800}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) 16:44:00 executing program 2: 16:44:00 executing program 7: 16:44:00 executing program 0: 16:44:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:44:00 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:44:00 executing program 7: [ 136.256784] FAT-fs (loop1): error, invalid access to FAT (entry 0x000006c0) [ 136.264115] FAT-fs (loop1): Filesystem has been set read-only 16:44:00 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = gettid() readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(0xffffffffffffffff, 0x2) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) dup3(r3, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) tkill(r2, 0x1000000000016) 16:44:00 executing program 7: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)="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", 0x2, 0x0) 16:44:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) 16:44:00 executing program 0: 16:44:00 executing program 2: 16:44:00 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) close(r1) close(r0) 16:44:00 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:44:00 executing program 2: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") socket(0x200000000000011, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) close(r1) close(r0) 16:44:00 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000080)=0xc) getrandom(&(0x7f0000000140)=""/210, 0xd2, 0x3) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010707031dfffd946fa283000a200a0009000100030000000c1baba20400ff7e", 0x24}], 0x1}, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x4000) r2 = dup(r0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000100)=r2) 16:44:00 executing program 1: 16:44:00 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:44:00 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = semget$private(0x0, 0x8, 0x0) semop(r1, &(0x7f0000000040)=[{0x0, 0x8001}, {0x0, 0x0, 0x1800}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) 16:44:00 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 16:44:00 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = gettid() readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(0xffffffffffffffff, 0x2) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) dup3(r3, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) tkill(r2, 0x1000000000016) 16:44:00 executing program 0: 16:44:00 executing program 2: 16:44:01 executing program 0: 16:44:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x18, 0x101, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}]}, 0x24}, 0x1}, 0x0) 16:44:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") unshare(0x400) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x0) 16:44:01 executing program 7: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000001dc0)='IPVS\x00') sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) request_key(&(0x7f0000000180)='logon\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000000200)='loppp1posix_acl_accesscpuset@vboxnet1posix_acl_access]\x00', 0xfffffffffffffffb) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) 16:44:01 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:44:01 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) close(r1) close(r0) 16:44:01 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = gettid() readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(0xffffffffffffffff, 0x2) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) dup3(r3, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) tkill(r2, 0x1000000000016) 16:44:01 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)="2f007e574d000330809022cfde26555dc9ecfe1974406edad38364782d63b6612854b9e49dbdcaef718197e37e870a308b1e3a798fa788a46d3025ef933e51828ab675064e2adbe9126423b4a73d68fbe99c6db2f160d49cb6cce76c27289a4f9d097354aaa5860d2383df87526baa184d90bb7729366c17bc33d765e9bc2f882a13f3a9c1f60660bd4fd2fa31d2c0a775242289bce0460e991ba6b38962d10d24ded5406918a66b2c75c43fe1ff458ae5cd9fec63039ba5a7b66a60ede5ccdabc3ee77660ef2358ccdff02226021384b0c235f114ed9ade92767aecc256acdeb610df42e7169f240357f735ae5fe29017e51e27252f48b95bfbbb3a865535298bdc36d71db635f41c57771db77aeaff883feb3dc3cc24bd3c036e396ad3af37945058839e9f2270bc40901fa654e7cc3292a82fc80c374dc07142a1c2e9d3e2528e4fdac32bcaefe910ebd3b948a3bfebef5fa8d82473c7fbf3ecd5f1a335db56f8ea5d18ecf73bd963e240733400a048febff7dddfd8104672dbee22a00130ab57d0", 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) 16:44:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:44:01 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') pread64(r0, &(0x7f0000000040)=""/12, 0x39, 0x0) 16:44:01 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, r0, 0x0, 0xffffffffffffffff, 0x0) 16:44:01 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = semget$private(0x0, 0x8, 0x0) semop(r1, &(0x7f0000000040)=[{0x0, 0x8001}, {0x0, 0x0, 0x1800}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) 16:44:01 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:44:01 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvfrom(r0, &(0x7f00000000c0)=""/251, 0x3f9, 0x0, &(0x7f0000000000)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8df0d47434cdbcd50af760189e41d163f0fc8a3fcd8091d7e462359ba12143866e68a9028c2ccc7c1fc5ae13c3f188e2e7d7b8b4d32be094067b9571df0821"}, 0x709000) sendto$inet6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 16:44:01 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) readv(r2, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x2) fcntl$dupfd(r2, 0x0, r1) dup3(r3, r2, 0x0) write(r2, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCXONC(r2, 0x540a, 0x2) tkill(0x0, 0x1000000000016) 16:44:01 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f00000002c0)="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") ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000000c0)={0x0, 0x0, 0x6, 0x0, 0x0, [{r0, 0x0, 0xfffffffffffffffa}, {r0}, {}, {r1}, {r1}, {r0}]}) 16:44:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = socket(0x400020000000010, 0x2, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x0, {0x7}}, 0x14}, 0x1}, 0x0) write(r1, &(0x7f00000001c0)="1f00000056000d6dfcffff05bc0203030701ff2104173f8100000002030039", 0x1f) 16:44:01 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, r0, 0x0, 0xffffffffffffffff, 0x0) 16:44:02 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) 16:44:02 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:44:02 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x80000000002, 0x0) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="5500000018007f7000fe01b2a4a280930a60000000a84302910000003900020023000c00020000000d0005000b0000000000c78b80082314e9030b9d566885b16732009b84e7b1df136ef75afb0000000000000000", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 16:44:02 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) close(r1) close(r0) 16:44:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424ada75af1f02acc7edbcd7a071fb35331ce39c5a00000000") fdatasync(r0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='/\x00'}, 0x10) 16:44:02 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, r0, 0x0, 0xffffffffffffffff, 0x0) 16:44:02 executing program 2: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) dup3(r0, r1, 0x0) 16:44:02 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:44:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000001980)={0x2, &(0x7f0000000580)=[{0x20, 0x0, 0x0, 0xf2cd}, {0x6}]}) 16:44:02 executing program 3: mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:44:02 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = semget$private(0x0, 0x8, 0x0) semop(r1, &(0x7f0000000040)=[{0x0, 0x8001}, {0x0, 0x0, 0x1800}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) [ 138.924173] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 16:44:02 executing program 1: r0 = socket$inet6(0xa, 0x100000002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xd}, 0x1c) 16:44:03 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) readv(r2, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x2) fcntl$dupfd(r2, 0x0, r1) dup3(r3, r2, 0x0) write(r2, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCXONC(r2, 0x540a, 0x2) tkill(0x0, 0x1000000000016) 16:44:03 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:44:03 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, r0, 0x0, 0xffffffffffffffff, 0x0) 16:44:03 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x0, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:44:03 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)="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", 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000000)='M', 0x1) 16:44:03 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000003) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000080)=ANY=[@ANYBLOB="0000003e6c31ff7f00000000000069fb7a6a4c6a4f6f8fee5c4e603e5be8b3b620058148e4f1f3ce682d70726170d8f4fba307a3989c33f9f2c6bc4a2ed533ac9f9bf6f11199d1b2577eebaeea296676b67d8e58be2c0bb494e70f7d541d641df2c23c"], 0x1) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 139.138317] hrtimer: interrupt took 35567 ns 16:44:03 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x0, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:44:03 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) close(r1) close(r0) 16:44:03 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x1, 0x7, 0x7, 0x200000002}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000ab2000), &(0x7f0000da1000)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, &(0x7f0000000380)="d1", &(0x7f0000000280)=""/198}, 0x18) 16:44:03 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:44:03 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='0'], 0x1) 16:44:03 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:44:03 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x0, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:44:03 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x50}, 0x1}, 0x0) 16:44:03 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = semget$private(0x0, 0x8, 0x0) semop(r1, &(0x7f0000000040)=[{0x0, 0x8001}, {0x0, 0x0, 0x1800}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) 16:44:03 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)="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", 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080)=0x2, 0x4) 16:44:04 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) readv(r2, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x2) fcntl$dupfd(r2, 0x0, r1) dup3(r3, r2, 0x0) write(r2, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCXONC(r2, 0x540a, 0x2) tkill(0x0, 0x1000000000016) 16:44:04 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f657865000008843d7909004bddd9f191be10eebf000ee9fffbc74ace7d000054fa07424adee916d2da75afe70b35a0fda071fb35331ce39b120bf9359c5a6568641006d7c020637405ab73e72926e3332653") flistxattr(r0, &(0x7f00000000c0)=""/8, 0x4) 16:44:04 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:44:04 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:44:04 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) ioctl(r0, 0x8912, &(0x7f0000000180)="025cc83d6d345f8f762070") socket$packet(0x11, 0x400000002, 0x300) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(0xffffffffffffffff) 16:44:04 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000040)=""/8, &(0x7f0000000000)=0x8) 16:44:04 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) madvise(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x9) 16:44:04 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) close(r1) close(r0) 16:44:04 executing program 0: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)="2f70726f632f34a77c3a1df76cf4697076342f76732f73796e635f7265747269657300f940168f54492ca4e6c17191a5b951230dd31501366455b1cd59aee138ac41dd", 0x2, 0x0) 16:44:04 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:44:04 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:44:04 executing program 0: r0 = socket(0x1e, 0x805, 0x0) r1 = socket(0x1e, 0x805, 0x0) listen(r1, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda) sendmsg(r0, &(0x7f0000000140)={&(0x7f0000000080)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000700)="10", 0x1}], 0x1, &(0x7f0000000380)=ANY=[]}, 0x0) accept4$packet(r1, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000001340)=0x14, 0x0) 16:44:04 executing program 7: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, r0, 0x0, 0xffffffffffffffff, 0x0) 16:44:04 executing program 7: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, r0, 0x0, 0xffffffffffffffff, 0x0) 16:44:04 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = semget$private(0x0, 0x8, 0x0) semop(r1, &(0x7f0000000040)=[{0x0, 0x8001}, {0x0, 0x0, 0x1800}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) 16:44:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 16:44:05 executing program 7: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, r0, 0x0, 0xffffffffffffffff, 0x0) 16:44:05 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:44:05 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000be3000/0x11000)=nil, 0x11000, 0x0, 0x13, r0, 0x0) 16:44:05 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r2 = dup(r1) sendmsg$nl_netfilter(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x14}, 0x14}, 0x1}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[]}, 0x1}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x201000000000016) 16:44:05 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) r2 = gettid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x2) fcntl$dupfd(r3, 0x0, r1) dup3(r4, r3, 0x0) write(r3, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCXONC(r3, 0x540a, 0x2) tkill(r2, 0x1000000000016) 16:44:05 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x153, 0x0) close(0xffffffffffffffff) close(r0) 16:44:05 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)="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", 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000800)) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000580)) 16:44:05 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000000080), 0x153, 0x0) close(r0) close(0xffffffffffffffff) 16:44:05 executing program 7: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, r0, 0x0, 0xffffffffffffffff, 0x0) 16:44:05 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)="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", 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000080)={'nat\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000040)}, 0x78) 16:44:05 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)="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", 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000140), 0x4) 16:44:05 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:44:05 executing program 6: r0 = socket(0x0, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) close(r1) close(r0) 16:44:05 executing program 7: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, r0, 0x0, 0xffffffffffffffff, 0x0) 16:44:05 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = semget$private(0x0, 0x8, 0x0) semop(r1, &(0x7f0000000040)=[{0x0, 0x8001}, {0x0, 0x0, 0x1800}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) 16:44:05 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x20005f) write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200002000000000000000000000001000000000000000000f8ffffff000005000000000000000000000000000000310ff3eec1b0000c085355be8847c22e30f56282c62c95723f068fe42d2796cc"], 0x78) close(r0) uselib(&(0x7f0000000000)='./file0\x00') 16:44:05 executing program 1: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xc0, 0x0) mount(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000500)='tmpfs\x00', 0x0, 0x0) 16:44:05 executing program 7: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, r0, 0x0, 0xffffffffffffffff, 0x0) 16:44:05 executing program 6: r0 = socket(0x1e, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) close(r1) close(r0) 16:44:05 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@ipv4={[], [0xff, 0xff], @rand_addr}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback=0x7f000001, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) 16:44:06 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x0, 0x4, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) close(r1) close(r0) 16:44:06 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:44:06 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, r0, 0x0, 0xffffffffffffffff, 0x0) 16:44:06 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000240), 0xc) 16:44:06 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) r2 = gettid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x2) fcntl$dupfd(r3, 0x0, r1) dup3(r4, r3, 0x0) write(r3, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCXONC(r3, 0x540a, 0x2) tkill(r2, 0x1000000000016) 16:44:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) 16:44:06 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000a94000/0x3000)=nil, 0x3000, 0x0, 0x8972, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000a95000/0x1000)=nil) 16:44:06 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = semget$private(0x0, 0x8, 0x0) semop(r1, &(0x7f0000000040)=[{0x0, 0x8001}, {0x0, 0x0, 0x1800}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) 16:44:06 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) close(r1) close(r0) 16:44:06 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r1, &(0x7f0000367fe4)=""/91, 0xa9) fdatasync(0xffffffffffffffff) 16:44:06 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, r0, 0x0, 0xffffffffffffffff, 0x0) 16:44:06 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="0047fc2f07d82c99") sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net\x00', 0x200002, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8000011) fallocate(r1, 0x0, 0x0, 0x10000) 16:44:06 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) close(r1) close(r0) 16:44:06 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:44:06 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000bab000)={0x1, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)={@multicast1=0xe0000001, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x2, [@multicast2=0xe0000002, @broadcast=0xffffffff]}, 0x18) dup2(r0, r1) 16:44:06 executing program 2: socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}}}, 0x2e) r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") connect$l2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1=0xe0000001}, 0x4, 0x8}}, 0x2e) close(r0) 16:44:06 executing program 0: r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) fallocate(r0, 0x0, 0x0, 0x1ff) 16:44:06 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, r0, 0x0, 0xffffffffffffffff, 0x0) 16:44:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) read(r2, &(0x7f0000001140)=""/20, 0x65) 16:44:07 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) r2 = gettid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x2) fcntl$dupfd(r3, 0x0, r1) dup3(r4, r3, 0x0) write(r3, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCXONC(r3, 0x540a, 0x2) tkill(r2, 0x1000000000016) 16:44:07 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) close(r1) close(r0) 16:44:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000003061f001cfffd946fa2830020200a000900010006e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) 16:44:07 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, r0, 0x0, 0xffffffffffffffff, 0x0) 16:44:07 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:44:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) read(r2, &(0x7f0000001140)=""/20, 0x65) 16:44:07 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x324, &(0x7f0000000340)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a, 0x1}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 16:44:07 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = semget$private(0x0, 0x8, 0x0) semop(r1, &(0x7f0000000040)=[{0x0, 0x8001}, {0x0, 0x0, 0x1800}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) 16:44:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) read(r2, &(0x7f0000001140)=""/20, 0x65) 16:44:07 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, r0, 0x0, 0xffffffffffffffff, 0x0) 16:44:07 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:44:07 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt(r1, 0x0, 0x0, &(0x7f0000000100)="86", 0x1) [ 143.967214] netlink: 'syz-executor2': attribute type 1 has an invalid length. [ 143.974567] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. 16:44:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) read(r2, &(0x7f0000001140)=""/20, 0x65) 16:44:07 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, r0, 0x0, 0xffffffffffffffff, 0x0) 16:44:07 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) stat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)) 16:44:07 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") unshare(0x400) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x1, &(0x7f0000000080)=0x5, 0x4) [ 144.019858] netlink: 'syz-executor2': attribute type 1 has an invalid length. [ 144.027217] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. 16:44:09 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = gettid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x2) fcntl$dupfd(r3, 0x0, r1) dup3(r4, r3, 0x0) write(r3, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCXONC(r3, 0x540a, 0x2) tkill(r2, 0x1000000000016) 16:44:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) read(0xffffffffffffffff, &(0x7f0000001140)=""/20, 0x65) 16:44:09 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:44:09 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80003, 0xfc) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000001340)=[{0x10}], 0x10}}], 0x1, 0x0) 16:44:09 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:44:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000140), 0x1bbf, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) r2 = accept(r0, &(0x7f00000001c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x16) sendmmsg$unix(r2, &(0x7f00000033c0)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002e80)=[{&(0x7f0000000180)="88", 0x1}], 0x1, &(0x7f0000000040)}], 0x1, 0x8040) close(r1) 16:44:09 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) close(r1) close(r0) 16:44:09 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = semget$private(0x0, 0x8, 0x0) semop(r1, &(0x7f0000000040)=[{0x0, 0x8001}, {0x0, 0x0, 0x1800}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) 16:44:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) read(r1, &(0x7f0000001140)=""/20, 0x65) 16:44:09 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x0, &(0x7f0000000040)="025cc83d6d345f8f762070") setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) close(r1) close(r0) 16:44:09 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:44:09 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0xde, &(0x7f00000000c0)="295ee1311f0df477671070") r2 = socket(0xa, 0x1, 0x0) unshare(0x40000000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000005700)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000056c0)={&(0x7f0000000080)=@setlink={0x34, 0x13, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x1fffff}, [@IFLA_IFNAME={0x14, 0x4, 'C\x00\x00\x001\x00'}]}, 0x34}, 0x1}, 0x0) r5 = socket$inet6(0xa, 0x802000000000001, 0x0) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000100)={0x0, @multicast2=0xe0000002, 0x4e20, 0x0, 'lblcr\x00', 0x1, 0x1, 0x62}, 0x2c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[{0x0, 0x7f83}, {0xa, 0x1f}, {0xa, 0x7}, {0x3, 0xd61}], 0x4) getsockopt$inet6_buf(r5, 0x29, 0x3, &(0x7f0000501000)=""/95, &(0x7f0000f12000)=0x5f) [ 145.361430] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:44:09 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:44:09 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "b7e720", 0x8, 0x32, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [0x3], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}}}, &(0x7f0000000000)) 16:44:09 executing program 1: socket$inet6(0xa, 0x1000000000003, 0x100000003) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) read(r1, &(0x7f0000001140)=""/20, 0x65) 16:44:09 executing program 0: [ 145.442555] IPVS: ftp: loaded support on port[0] = 21 [ 145.519164] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 145.526825] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20000 [ 145.541106] IPVS: ftp: loaded support on port[0] = 21 [ 145.551753] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 145.562566] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20000 16:44:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = gettid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x2) fcntl$dupfd(r3, 0x0, r1) dup3(r4, r3, 0x0) write(r3, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCXONC(r3, 0x540a, 0x2) tkill(r2, 0x1000000000016) 16:44:10 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:44:10 executing program 1: socket$inet6(0xa, 0x1000000000003, 0x100000003) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) read(r1, &(0x7f0000001140)=""/20, 0x65) 16:44:10 executing program 0: 16:44:10 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:44:10 executing program 2: 16:44:10 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x0, &(0x7f0000000040)="025cc83d6d345f8f762070") setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) close(r1) close(r0) 16:44:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = semget$private(0x0, 0x8, 0x0) semop(r1, &(0x7f0000000040)=[{0x0, 0x8001}, {0x0, 0x0, 0x1800}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) 16:44:10 executing program 0: 16:44:10 executing program 2: 16:44:10 executing program 1: socket$inet6(0xa, 0x1000000000003, 0x100000003) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) read(r1, &(0x7f0000001140)=""/20, 0x65) 16:44:10 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) read(r1, &(0x7f0000001140)=""/20, 0x65) 16:44:10 executing program 0: 16:44:10 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000006000)=[{{&(0x7f0000000040)=@in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80}}, 0x80, &(0x7f0000000880), 0x0, &(0x7f0000000480)}}], 0x1, 0x0) 16:44:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000002240)={0x1, [0x0]}, &(0x7f0000003a40)=0x8) unshare(0x24020400) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x7b, &(0x7f0000000040)={r2}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x1e, &(0x7f0000000200)=r3, 0x4) 16:44:10 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:44:12 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = gettid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x2) fcntl$dupfd(r3, 0x0, r1) dup3(r4, r3, 0x0) write(r3, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCXONC(r3, 0x540a, 0x2) tkill(r2, 0x1000000000016) 16:44:12 executing program 7: 16:44:12 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) read(r1, &(0x7f0000001140)=""/20, 0x65) 16:44:12 executing program 0: 16:44:12 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:44:12 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x0, &(0x7f0000000040)="025cc83d6d345f8f762070") setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) close(r1) close(r0) 16:44:12 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") r1 = semget$private(0x0, 0x8, 0x0) semop(r1, &(0x7f0000000040)=[{0x0, 0x8001}, {0x0, 0x0, 0x1800}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) 16:44:12 executing program 2: 16:44:12 executing program 0: 16:44:12 executing program 7: 16:44:12 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) read(r1, &(0x7f0000001140)=""/20, 0x65) 16:44:12 executing program 2: 16:44:12 executing program 0: 16:44:12 executing program 7: 16:44:12 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:44:12 executing program 2: 16:44:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = gettid() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) readv(r2, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x2) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) dup3(r3, r2, 0x0) write(r2, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCXONC(r2, 0x540a, 0x2) tkill(r1, 0x1000000000016) 16:44:13 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x100000003) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) read(r2, &(0x7f0000001140)=""/20, 0x65) 16:44:13 executing program 0: 16:44:13 executing program 7: 16:44:13 executing program 2: 16:44:13 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:44:13 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) close(r1) close(r0) 16:44:13 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") r1 = semget$private(0x0, 0x8, 0x0) semop(r1, &(0x7f0000000040)=[{0x0, 0x8001}, {0x0, 0x0, 0x1800}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) 16:44:13 executing program 7: 16:44:13 executing program 0: 16:44:13 executing program 2: 16:44:13 executing program 2: 16:44:13 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x100000003) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) read(r2, &(0x7f0000001140)=""/20, 0x65) 16:44:13 executing program 0: 16:44:13 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:44:13 executing program 7: r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000200000002000000dd00000100000000000000000800120002000200000000007d22000018000000030300000000030000000000000000bd03000000160000000301000000000000000000000000000000000000030005000000000002000000000000010000000000000000"], 0x80}, 0x1}, 0x0) 16:44:14 executing program 5: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = gettid() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) readv(r2, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x2) fcntl$dupfd(r2, 0x0, r0) dup3(r3, r2, 0x0) write(r2, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCXONC(r2, 0x540a, 0x2) tkill(r1, 0x1000000000016) 16:44:14 executing program 0: r0 = socket$inet6(0xa, 0x2000000802, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000080)=""/146, &(0x7f0000000140)=0x92) 16:44:14 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7001, &(0x7f0000000040)) 16:44:14 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x100000003) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) read(r2, &(0x7f0000001140)=""/20, 0x65) 16:44:14 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000340)={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x0, {0x2}, 'veth1_to_team\x00'}) 16:44:14 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:44:14 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) close(r1) close(r0) 16:44:14 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") r1 = semget$private(0x0, 0x8, 0x0) semop(r1, &(0x7f0000000040)=[{0x0, 0x8001}, {0x0, 0x0, 0x1800}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) 16:44:14 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="021000000a000000000000ebffffff000800120000000000000061e64dfa44f468783342f000260000000000008e31886500000000000000001000000000000000200000000000000000000000000000"], 0x50}, 0x1}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x33ab0eaa68c8dfc, 0x0) 16:44:14 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000680)={0x73, 0x79, 0x7a}, 0x0, 0x0, r2) 16:44:14 executing program 2: socket$inet6(0xa, 0x1000000000003, 0x100000003) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) read(r1, &(0x7f0000001140)=""/20, 0x65) 16:44:14 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="025cc83d6d34") setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) close(r1) close(r0) 16:44:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000003, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) read(r2, &(0x7f0000001140)=""/20, 0x65) 16:44:14 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:44:14 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = semget$private(0x0, 0x8, 0x0) semop(r1, &(0x7f0000000040)=[{0x0, 0x8001}, {0x0, 0x0, 0x1800}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) 16:44:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = gettid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x2) fcntl$dupfd(r3, 0x0, r1) dup3(r4, r3, 0x0) write(r3, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCXONC(r3, 0x540a, 0x2) tkill(r2, 0x1000000000016) 16:44:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000003, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) read(r2, &(0x7f0000001140)=""/20, 0x65) 16:44:15 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:44:15 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:44:15 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="025cc83d6d34") setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) close(r1) close(r0) 16:44:15 executing program 5: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = gettid() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) readv(r2, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x2) fcntl$dupfd(r2, 0x0, r0) dup3(r3, r2, 0x0) write(r2, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCXONC(r2, 0x540a, 0x2) tkill(r1, 0x1000000000016) 16:44:15 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:44:15 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:44:15 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") r1 = semget$private(0x0, 0x8, 0x0) semop(r1, &(0x7f0000000040)=[{0x0, 0x8001}, {0x0, 0x0, 0x1800}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) 16:44:15 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:44:15 executing program 7 (fault-call:2 fault-nth:0): perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, r0, 0x0, 0xffffffffffffffff, 0x0) 16:44:15 executing program 0 (fault-call:5 fault-nth:0): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:44:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000003, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) read(r2, &(0x7f0000001140)=""/20, 0x65) 16:44:15 executing program 2 (fault-call:4 fault-nth:0): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:44:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) read(r2, &(0x7f0000001140)=""/20, 0x65) [ 151.471900] FAULT_INJECTION: forcing a failure. [ 151.471900] name failslab, interval 1, probability 0, space 0, times 1 [ 151.483252] CPU: 0 PID: 8819 Comm: syz-executor0 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 151.491557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 151.500900] Call Trace: [ 151.503489] dump_stack+0x1c9/0x2b4 [ 151.507107] ? dump_stack_print_info.cold.2+0x52/0x52 [ 151.512289] ? __check_object_size+0x9d/0x5f2 [ 151.516772] ? perf_trace_lock+0xde/0x920 [ 151.520908] should_fail.cold.4+0xa/0x11 [ 151.524957] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 151.530047] ? perf_trace_lock+0xde/0x920 [ 151.534180] ? lock_release+0xa30/0xa30 [ 151.538138] ? zap_class+0x740/0x740 [ 151.541841] ? __f_unlock_pos+0x19/0x20 [ 151.545803] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 151.551345] ? lock_acquire+0x1e4/0x540 [ 151.555304] ? fs_reclaim_acquire+0x20/0x20 [ 151.559611] ? lock_downgrade+0x8f0/0x8f0 [ 151.563750] ? kasan_check_write+0x14/0x20 [ 151.567970] ? check_same_owner+0x340/0x340 [ 151.572275] ? vfs_write+0x2f3/0x560 [ 151.575975] ? rcu_note_context_switch+0x730/0x730 [ 151.580889] __should_failslab+0x124/0x180 [ 151.585107] should_failslab+0x9/0x14 [ 151.588899] kmem_cache_alloc+0x2af/0x760 [ 151.593040] getname_flags+0xd0/0x5a0 [ 151.596841] do_mkdirat+0xc5/0x310 [ 151.600367] ? __ia32_sys_mknod+0xb0/0xb0 [ 151.604500] ? syscall_slow_exit_work+0x500/0x500 [ 151.609343] __x64_sys_mkdirat+0x76/0xb0 [ 151.613393] do_syscall_64+0x1b9/0x820 [ 151.617272] ? finish_task_switch+0x1d3/0x870 [ 151.621755] ? syscall_return_slowpath+0x5e0/0x5e0 [ 151.626668] ? syscall_return_slowpath+0x31d/0x5e0 [ 151.631579] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 151.636576] ? prepare_exit_to_usermode+0x291/0x3b0 [ 151.641577] ? perf_trace_sys_enter+0xb10/0xb10 [ 151.646242] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 151.651074] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 151.656247] RIP: 0033:0x455ba9 16:44:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) read(r2, &(0x7f0000001140)=""/20, 0x65) 16:44:15 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:44:15 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, r0, 0x0, 0xffffffffffffffff, 0x0) 16:44:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) read(r2, &(0x7f0000001140)=""/20, 0x65) [ 151.659413] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 151.678699] RSP: 002b:00007fb6ea6f1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 151.686417] RAX: ffffffffffffffda RBX: 00007fb6ea6f26d4 RCX: 0000000000455ba9 [ 151.693680] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000014 [ 151.700933] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 151.708194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 151.715458] R13: 00000000004c0218 R14: 00000000004cf8f8 R15: 0000000000000000 16:44:15 executing program 0 (fault-call:5 fault-nth:1): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) [ 151.757793] FAULT_INJECTION: forcing a failure. [ 151.757793] name failslab, interval 1, probability 0, space 0, times 0 [ 151.769065] CPU: 1 PID: 8834 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 151.777365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 151.786797] Call Trace: [ 151.789380] dump_stack+0x1c9/0x2b4 [ 151.792991] ? dump_stack_print_info.cold.2+0x52/0x52 [ 151.798187] should_fail.cold.4+0xa/0x11 [ 151.802246] ? trace_hardirqs_on+0x10/0x10 [ 151.806468] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 151.811556] ? alloc_set_pte+0xaf6/0x1790 [ 151.815703] ? trace_hardirqs_on+0x10/0x10 [ 151.819924] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 151.824923] ? filemap_map_pages+0xca2/0x1990 [ 151.829404] ? trace_hardirqs_on+0x10/0x10 [ 151.833625] ? xa_set_tag+0x40/0x40 [ 151.837242] ? lock_acquire+0x1e4/0x540 [ 151.841198] ? fs_reclaim_acquire+0x20/0x20 [ 151.845503] ? lock_downgrade+0x8f0/0x8f0 [ 151.849640] ? check_same_owner+0x340/0x340 [ 151.853942] ? trace_hardirqs_on+0x10/0x10 [ 151.858178] ? rcu_note_context_switch+0x730/0x730 [ 151.863093] __should_failslab+0x124/0x180 [ 151.867310] should_failslab+0x9/0x14 [ 151.871091] __kmalloc+0x2c8/0x760 [ 151.874614] ? __might_fault+0x12b/0x1e0 [ 151.878657] ? lock_downgrade+0x8f0/0x8f0 [ 151.882787] ? lock_acquire+0x1e4/0x540 [ 151.886746] ? rw_copy_check_uvector+0x361/0x3e0 [ 151.891485] rw_copy_check_uvector+0x361/0x3e0 [ 151.896054] import_iovec+0xcf/0x470 [ 151.899753] ? dup_iter+0x270/0x270 [ 151.903359] ? _copy_from_user+0xdf/0x150 [ 151.907494] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 151.913017] copy_msghdr_from_user+0x3bc/0x580 [ 151.917591] ? move_addr_to_kernel.part.20+0x100/0x100 [ 151.922857] ? ksys_dup3+0x690/0x690 [ 151.926554] ___sys_sendmsg+0x11c/0x930 [ 151.930525] ? __check_object_size+0x9d/0x5f2 [ 151.935015] ? copy_msghdr_from_user+0x580/0x580 [ 151.939757] ? lock_acquire+0x1e4/0x540 [ 151.943721] ? lock_downgrade+0x8f0/0x8f0 [ 151.947856] ? __fget_light+0x2f7/0x440 [ 151.951813] ? fget_raw+0x20/0x20 [ 151.955264] ? proc_fail_nth_write+0x9e/0x210 [ 151.960189] ? proc_cwd_link+0x1d0/0x1d0 [ 151.964252] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 151.969784] ? sockfd_lookup_light+0xc5/0x160 [ 151.974307] __sys_sendmmsg+0x240/0x6f0 [ 151.978274] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 151.982577] ? fsnotify_first_mark+0x350/0x350 [ 151.987141] ? __fsnotify_parent+0xcc/0x420 [ 151.991448] ? fsnotify+0x14e0/0x14e0 [ 151.995239] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 152.000758] ? fput+0x130/0x1a0 [ 152.004021] ? ksys_write+0x1ae/0x260 [ 152.007804] ? __ia32_sys_read+0xb0/0xb0 [ 152.012295] __x64_sys_sendmmsg+0x9d/0x100 [ 152.016516] do_syscall_64+0x1b9/0x820 [ 152.020391] ? finish_task_switch+0x1d3/0x870 [ 152.024868] ? syscall_return_slowpath+0x5e0/0x5e0 [ 152.029792] ? syscall_return_slowpath+0x31d/0x5e0 [ 152.034704] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 152.039705] ? prepare_exit_to_usermode+0x291/0x3b0 [ 152.044714] ? perf_trace_sys_enter+0xb10/0xb10 [ 152.049375] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 152.054208] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 152.059383] RIP: 0033:0x455ba9 [ 152.062552] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 152.081795] RSP: 002b:00007f090f026c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 152.089489] RAX: ffffffffffffffda RBX: 00007f090f0276d4 RCX: 0000000000455ba9 [ 152.096739] RDX: 0000000000000002 RSI: 00000000200001c0 RDI: 0000000000000014 [ 152.103990] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 152.111240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 152.118492] R13: 00000000004c0e20 R14: 00000000004d0f60 R15: 0000000000000000 [ 152.164678] FAULT_INJECTION: forcing a failure. [ 152.164678] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 152.176540] CPU: 1 PID: 8838 Comm: syz-executor0 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 152.184837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 152.194193] Call Trace: [ 152.196769] dump_stack+0x1c9/0x2b4 [ 152.200384] ? dump_stack_print_info.cold.2+0x52/0x52 [ 152.205557] ? zap_class+0x740/0x740 [ 152.209295] ? dput.part.26+0x276/0x7a0 [ 152.213271] should_fail.cold.4+0xa/0x11 [ 152.217320] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 152.222673] ? perf_trace_lock+0xde/0x920 [ 152.226804] ? lock_acquire+0x1e4/0x540 [ 152.230760] ? __fdget_pos+0x1bb/0x200 [ 152.234632] ? zap_class+0x740/0x740 [ 152.238335] ? trace_hardirqs_on+0x10/0x10 [ 152.242558] ? perf_trace_lock+0xde/0x920 [ 152.246689] ? _kstrtoull+0x188/0x250 [ 152.250480] ? _parse_integer+0x190/0x190 [ 152.254619] ? zap_class+0x740/0x740 [ 152.258322] ? __check_object_size+0x9d/0x5f2 [ 152.262802] ? perf_trace_lock+0xde/0x920 [ 152.266934] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 152.272463] ? should_fail+0x246/0xd86 [ 152.276331] ? zap_class+0x740/0x740 [ 152.280028] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 152.285126] ? perf_trace_lock+0xde/0x920 [ 152.289282] __alloc_pages_nodemask+0x36e/0xdb0 [ 152.293935] ? zap_class+0x740/0x740 [ 152.297635] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 152.302635] ? __f_unlock_pos+0x19/0x20 [ 152.306594] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 152.312125] ? lock_acquire+0x1e4/0x540 [ 152.316083] ? fs_reclaim_acquire+0x20/0x20 [ 152.320391] ? lock_downgrade+0x8f0/0x8f0 [ 152.324537] ? lock_release+0xa30/0xa30 [ 152.328516] ? kasan_check_write+0x14/0x20 [ 152.332733] ? check_same_owner+0x340/0x340 [ 152.337038] ? vfs_write+0x2f3/0x560 [ 152.340739] cache_grow_begin+0x91/0x710 [ 152.344789] kmem_cache_alloc+0x689/0x760 [ 152.348937] getname_flags+0xd0/0x5a0 [ 152.352745] do_mkdirat+0xc5/0x310 [ 152.356283] ? __ia32_sys_mknod+0xb0/0xb0 [ 152.360418] ? syscall_slow_exit_work+0x500/0x500 [ 152.365263] __x64_sys_mkdirat+0x76/0xb0 [ 152.369309] do_syscall_64+0x1b9/0x820 [ 152.373175] ? finish_task_switch+0x1d3/0x870 [ 152.377667] ? syscall_return_slowpath+0x5e0/0x5e0 [ 152.382579] ? syscall_return_slowpath+0x31d/0x5e0 [ 152.387490] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 152.392489] ? prepare_exit_to_usermode+0x291/0x3b0 [ 152.397499] ? perf_trace_sys_enter+0xb10/0xb10 [ 152.402151] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 152.407076] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 152.412343] RIP: 0033:0x455ba9 [ 152.415543] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 152.434794] RSP: 002b:00007fb6ea6f1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 152.442509] RAX: ffffffffffffffda RBX: 00007fb6ea6f26d4 RCX: 0000000000455ba9 [ 152.449770] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000014 [ 152.457033] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 16:44:16 executing program 1: r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) read(r2, &(0x7f0000001140)=""/20, 0x65) [ 152.464373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 152.471645] R13: 00000000004c0218 R14: 00000000004cf8f8 R15: 0000000000000001 16:44:16 executing program 1: r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) read(r2, &(0x7f0000001140)=""/20, 0x65) 16:44:16 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="025cc83d6d34") setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) close(r1) close(r0) 16:44:16 executing program 2 (fault-call:4 fault-nth:1): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:44:16 executing program 0 (fault-call:5 fault-nth:2): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:44:16 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x0, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:44:16 executing program 5: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = gettid() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) readv(r2, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x2) fcntl$dupfd(r2, 0x0, r0) dup3(r3, r2, 0x0) write(r2, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCXONC(r2, 0x540a, 0x2) tkill(r1, 0x1000000000016) 16:44:16 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") r1 = semget$private(0x0, 0x8, 0x0) semop(r1, &(0x7f0000000040)=[{0x0, 0x8001}, {0x0, 0x0, 0x1800}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) 16:44:16 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x1000000000000, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 152.583341] FAULT_INJECTION: forcing a failure. [ 152.583341] name failslab, interval 1, probability 0, space 0, times 0 [ 152.594618] CPU: 0 PID: 8861 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 152.602914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 152.612246] Call Trace: [ 152.614825] dump_stack+0x1c9/0x2b4 [ 152.618436] ? dump_stack_print_info.cold.2+0x52/0x52 [ 152.623631] should_fail.cold.4+0xa/0x11 [ 152.627688] ? trace_hardirqs_on+0x10/0x10 [ 152.631924] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 152.637012] ? copy_msghdr_from_user+0x3bc/0x580 [ 152.641750] ? ___sys_sendmsg+0x11c/0x930 [ 152.645882] ? __sys_sendmmsg+0x240/0x6f0 [ 152.650022] ? __x64_sys_sendmmsg+0x9d/0x100 [ 152.654413] ? do_syscall_64+0x1b9/0x820 [ 152.658455] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 152.663814] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 152.668821] ? filemap_map_pages+0xca2/0x1990 [ 152.673299] ? xa_set_tag+0x40/0x40 [ 152.676917] ? lock_acquire+0x1e4/0x540 [ 152.680880] ? fs_reclaim_acquire+0x20/0x20 [ 152.685184] ? lock_acquire+0x1e4/0x540 [ 152.689149] ? fs_reclaim_acquire+0x20/0x20 [ 152.693458] ? lock_downgrade+0x8f0/0x8f0 [ 152.697598] ? check_same_owner+0x340/0x340 [ 152.701910] ? rcu_note_context_switch+0x730/0x730 [ 152.706820] __should_failslab+0x124/0x180 [ 152.711037] should_failslab+0x9/0x14 [ 152.714825] __kmalloc+0x2c8/0x760 [ 152.718343] ? hash_sendmsg+0xd9/0xac0 [ 152.722211] ? sock_kmalloc+0x156/0x1f0 [ 152.726169] sock_kmalloc+0x156/0x1f0 [ 152.729951] ? __sk_mem_schedule+0xe0/0xe0 [ 152.734168] ? kasan_check_write+0x14/0x20 [ 152.738383] ? memset+0x31/0x40 [ 152.741656] hash_alloc_result.part.4+0x99/0x120 [ 152.746393] hash_sendmsg+0x903/0xac0 [ 152.750177] ? move_addr_to_kernel.part.20+0x100/0x100 [ 152.755433] ? hash_recvmsg+0xa60/0xa60 [ 152.759384] sock_sendmsg+0xd5/0x120 [ 152.763078] ___sys_sendmsg+0x51d/0x930 [ 152.767033] ? __check_object_size+0x9d/0x5f2 [ 152.771508] ? copy_msghdr_from_user+0x580/0x580 [ 152.776250] ? lock_acquire+0x1e4/0x540 [ 152.780206] ? lock_downgrade+0x8f0/0x8f0 [ 152.784333] ? __fget_light+0x2f7/0x440 [ 152.788296] ? fget_raw+0x20/0x20 [ 152.791923] ? proc_fail_nth_write+0x9e/0x210 [ 152.796414] ? proc_cwd_link+0x1d0/0x1d0 [ 152.800467] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 152.805993] ? sockfd_lookup_light+0xc5/0x160 [ 152.810487] __sys_sendmmsg+0x240/0x6f0 [ 152.814443] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 152.818767] ? fsnotify_first_mark+0x350/0x350 [ 152.823414] ? __fsnotify_parent+0xcc/0x420 [ 152.827721] ? fsnotify+0x14e0/0x14e0 [ 152.831522] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 152.837227] ? fput+0x130/0x1a0 [ 152.840488] ? ksys_write+0x1ae/0x260 [ 152.844274] ? __ia32_sys_read+0xb0/0xb0 [ 152.848320] __x64_sys_sendmmsg+0x9d/0x100 [ 152.852540] do_syscall_64+0x1b9/0x820 [ 152.856408] ? finish_task_switch+0x1d3/0x870 [ 152.860892] ? syscall_return_slowpath+0x5e0/0x5e0 [ 152.865811] ? syscall_return_slowpath+0x31d/0x5e0 [ 152.870896] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 152.875891] ? prepare_exit_to_usermode+0x291/0x3b0 [ 152.880898] ? perf_trace_sys_enter+0xb10/0xb10 [ 152.885560] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 152.890396] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 152.895568] RIP: 0033:0x455ba9 [ 152.898734] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 152.917870] RSP: 002b:00007f090f026c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 152.925572] RAX: ffffffffffffffda RBX: 00007f090f0276d4 RCX: 0000000000455ba9 16:44:16 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x0, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:44:16 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f76") setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) close(r1) close(r0) [ 152.932825] RDX: 0000000000000002 RSI: 00000000200001c0 RDI: 0000000000000014 [ 152.940074] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 152.947331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 152.954581] R13: 00000000004c0e20 R14: 00000000004d0f60 R15: 0000000000000001 [ 152.971308] FAULT_INJECTION: forcing a failure. [ 152.971308] name failslab, interval 1, probability 0, space 0, times 0 16:44:16 executing program 1: r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) read(r2, &(0x7f0000001140)=""/20, 0x65) [ 152.982596] CPU: 0 PID: 8867 Comm: syz-executor0 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 152.990905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 153.000249] Call Trace: [ 153.002877] dump_stack+0x1c9/0x2b4 [ 153.006525] ? dump_stack_print_info.cold.2+0x52/0x52 [ 153.011744] ? perf_trace_lock+0xde/0x920 [ 153.016009] should_fail.cold.4+0xa/0x11 [ 153.020097] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 153.025730] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 153.031288] ? perf_trace_lock+0xde/0x920 [ 153.035455] ? perf_trace_lock+0xde/0x920 [ 153.039619] ? perf_trace_lock+0xde/0x920 [ 153.043955] ? zap_class+0x740/0x740 [ 153.047686] ? trace_hardirqs_on+0x10/0x10 [ 153.051967] ? path_parentat.isra.43+0x20/0x160 [ 153.056648] ? zap_class+0x740/0x740 [ 153.060382] ? lock_acquire+0x1e4/0x540 [ 153.064376] ? fs_reclaim_acquire+0x20/0x20 [ 153.068701] ? lock_downgrade+0x8f0/0x8f0 [ 153.072835] ? perf_trace_lock+0xde/0x920 [ 153.076971] ? check_same_owner+0x340/0x340 [ 153.081282] ? rcu_note_context_switch+0x730/0x730 [ 153.086199] __should_failslab+0x124/0x180 [ 153.090420] should_failslab+0x9/0x14 [ 153.094204] kmem_cache_alloc+0x2af/0x760 [ 153.098345] __d_alloc+0xc8/0xd50 [ 153.101786] ? shrink_dcache_for_umount+0x2b0/0x2b0 [ 153.106789] ? d_alloc_parallel+0x1ea0/0x1ea0 [ 153.111279] ? lock_release+0xa30/0xa30 [ 153.115239] ? lock_acquire+0x1e4/0x540 [ 153.119199] ? filename_create+0x1b2/0x5b0 [ 153.123416] ? mnt_want_write+0x3f/0xc0 [ 153.127380] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 153.132513] d_alloc+0x96/0x380 [ 153.135790] ? __d_lookup+0x9e0/0x9e0 [ 153.139592] ? __d_alloc+0xd50/0xd50 [ 153.143310] __lookup_hash+0xd9/0x190 [ 153.147100] filename_create+0x1e5/0x5b0 [ 153.151153] ? kern_path_mountpoint+0x40/0x40 [ 153.155651] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 153.161178] ? getname_flags+0x26e/0x5a0 [ 153.165241] do_mkdirat+0xda/0x310 [ 153.168791] ? __ia32_sys_mknod+0xb0/0xb0 [ 153.172934] ? syscall_slow_exit_work+0x500/0x500 [ 153.177769] __x64_sys_mkdirat+0x76/0xb0 [ 153.181818] do_syscall_64+0x1b9/0x820 [ 153.185697] ? finish_task_switch+0x1d3/0x870 [ 153.190195] ? syscall_return_slowpath+0x5e0/0x5e0 [ 153.195114] ? syscall_return_slowpath+0x31d/0x5e0 [ 153.200037] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 153.205041] ? prepare_exit_to_usermode+0x291/0x3b0 [ 153.210048] ? perf_trace_sys_enter+0xb10/0xb10 [ 153.214723] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 153.219574] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 153.224750] RIP: 0033:0x455ba9 [ 153.227927] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 153.247211] RSP: 002b:00007fb6ea6f1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 153.254910] RAX: ffffffffffffffda RBX: 00007fb6ea6f26d4 RCX: 0000000000455ba9 [ 153.262172] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000014 [ 153.269428] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 153.276684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 153.283938] R13: 00000000004c0218 R14: 00000000004cf8f8 R15: 0000000000000002 16:44:17 executing program 2 (fault-call:4 fault-nth:2): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:44:17 executing program 0 (fault-call:5 fault-nth:3): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:44:17 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x0, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:44:17 executing program 1: r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) read(r2, &(0x7f0000001140)=""/20, 0x65) [ 153.385585] FAULT_INJECTION: forcing a failure. [ 153.385585] name failslab, interval 1, probability 0, space 0, times 0 [ 153.386199] FAULT_INJECTION: forcing a failure. [ 153.386199] name failslab, interval 1, probability 0, space 0, times 0 [ 153.396999] CPU: 1 PID: 8894 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 153.416436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 153.425777] Call Trace: [ 153.428365] dump_stack+0x1c9/0x2b4 [ 153.431984] ? dump_stack_print_info.cold.2+0x52/0x52 [ 153.437167] should_fail.cold.4+0xa/0x11 [ 153.441218] ? trace_hardirqs_on+0x10/0x10 [ 153.445445] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 153.450537] ? bpf_prog_kallsyms_find+0xde/0x4c0 [ 153.455286] ? lock_acquire+0x1e4/0x540 [ 153.459249] ? is_bpf_text_address+0xae/0x170 [ 153.463739] ? lock_release+0xa30/0xa30 [ 153.467704] ? kasan_check_read+0x11/0x20 [ 153.471847] ? rcu_is_watching+0x8c/0x150 [ 153.476021] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 153.480687] ? lock_acquire+0x1e4/0x540 [ 153.484653] ? fs_reclaim_acquire+0x20/0x20 [ 153.488963] ? lock_downgrade+0x8f0/0x8f0 [ 153.493103] ? check_same_owner+0x340/0x340 [ 153.497411] ? __save_stack_trace+0x8d/0xf0 [ 153.501725] ? rcu_note_context_switch+0x730/0x730 [ 153.506647] __should_failslab+0x124/0x180 [ 153.510873] should_failslab+0x9/0x14 [ 153.514664] __kmalloc+0x2c8/0x760 [ 153.518192] ? __might_fault+0x12b/0x1e0 [ 153.522243] ? lock_downgrade+0x8f0/0x8f0 [ 153.526384] ? lock_acquire+0x1e4/0x540 [ 153.530347] ? rw_copy_check_uvector+0x361/0x3e0 [ 153.535098] rw_copy_check_uvector+0x361/0x3e0 [ 153.539669] import_iovec+0xcf/0x470 [ 153.543373] ? dup_iter+0x270/0x270 [ 153.546987] ? _copy_from_user+0xdf/0x150 [ 153.551135] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 153.556686] copy_msghdr_from_user+0x3bc/0x580 [ 153.561263] ? move_addr_to_kernel.part.20+0x100/0x100 [ 153.566529] ? trace_hardirqs_on+0xd/0x10 [ 153.570669] ___sys_sendmsg+0x11c/0x930 [ 153.574634] ? __check_object_size+0x9d/0x5f2 [ 153.579120] ? copy_msghdr_from_user+0x580/0x580 [ 153.583864] ? lock_acquire+0x1e4/0x540 [ 153.587828] ? lock_downgrade+0x8f0/0x8f0 [ 153.591966] ? lock_acquire+0x1e4/0x540 [ 153.595927] ? __might_fault+0x12b/0x1e0 [ 153.599985] ? proc_fail_nth_write+0x9e/0x210 [ 153.604468] ? rcu_note_context_switch+0x730/0x730 [ 153.609387] ? check_same_owner+0x340/0x340 [ 153.613701] __sys_sendmmsg+0x240/0x6f0 [ 153.617669] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 153.621979] ? fsnotify_first_mark+0x350/0x350 [ 153.626548] ? __fsnotify_parent+0xcc/0x420 [ 153.630857] ? fsnotify+0x14e0/0x14e0 [ 153.634658] ? syscall_slow_exit_work+0x500/0x500 [ 153.639488] __x64_sys_sendmmsg+0x9d/0x100 [ 153.643714] do_syscall_64+0x1b9/0x820 [ 153.647587] ? finish_task_switch+0x1d3/0x870 [ 153.652070] ? syscall_return_slowpath+0x5e0/0x5e0 [ 153.656999] ? syscall_return_slowpath+0x31d/0x5e0 [ 153.662116] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 153.667119] ? prepare_exit_to_usermode+0x291/0x3b0 [ 153.672124] ? perf_trace_sys_enter+0xb10/0xb10 [ 153.676784] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 153.681619] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 153.686801] RIP: 0033:0x455ba9 [ 153.689981] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 153.709192] RSP: 002b:00007f090f026c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 153.716895] RAX: ffffffffffffffda RBX: 00007f090f0276d4 RCX: 0000000000455ba9 [ 153.724150] RDX: 0000000000000002 RSI: 00000000200001c0 RDI: 0000000000000014 [ 153.731406] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 153.738669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 153.746015] R13: 00000000004c0e20 R14: 00000000004d0f60 R15: 0000000000000002 [ 153.753293] CPU: 0 PID: 8892 Comm: syz-executor0 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 153.761617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 153.770979] Call Trace: [ 153.773569] dump_stack+0x1c9/0x2b4 [ 153.777211] ? dump_stack_print_info.cold.2+0x52/0x52 [ 153.782412] ? lock_release+0xa30/0xa30 16:44:17 executing program 1: r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) read(r2, &(0x7f0000001140)=""/20, 0x65) 16:44:17 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x0, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:44:17 executing program 1: r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) read(r2, &(0x7f0000001140)=""/20, 0x65) [ 153.786395] should_fail.cold.4+0xa/0x11 [ 153.790465] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 153.795580] ? find_get_pages_contig+0x1890/0x1890 [ 153.800528] ? trace_hardirqs_on+0x10/0x10 [ 153.804764] ? update_curr+0x4e7/0xc00 [ 153.808665] ? lock_acquire+0x1e4/0x540 [ 153.812645] ? __find_get_block+0x7a1/0xe60 [ 153.816974] ? lock_downgrade+0x8f0/0x8f0 [ 153.821133] ? kasan_check_write+0x14/0x20 [ 153.825371] ? __brelse+0x104/0x180 [ 153.829000] ? block_commit_write+0x30/0x30 [ 153.833328] ? do_raw_spin_lock+0xc1/0x200 16:44:17 executing program 1: r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) read(r2, &(0x7f0000001140)=""/20, 0x65) 16:44:17 executing program 1: r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) read(r2, &(0x7f0000001140)=""/20, 0x65) [ 153.837574] ? __find_get_block+0x36d/0xe60 [ 153.841908] __should_failslab+0x124/0x180 [ 153.846147] should_failslab+0x9/0x14 [ 153.849952] kmem_cache_alloc+0x47/0x760 [ 153.854017] ? rcu_note_context_switch+0x730/0x730 [ 153.858952] ? check_same_owner+0x340/0x340 [ 153.863274] ? mempool_free+0x370/0x370 [ 153.867252] mempool_alloc_slab+0x44/0x60 [ 153.871399] mempool_alloc+0x193/0x4b0 [ 153.875291] ? mempool_destroy+0x30/0x30 [ 153.879359] ? __find_get_block+0xe60/0xe60 [ 153.883677] ? __getblk_gfp+0x10a/0xb10 [ 153.887660] bio_alloc_bioset+0x39c/0x6f0 [ 153.891814] ? bvec_alloc+0x2d0/0x2d0 [ 153.895613] ? check_same_owner+0x340/0x340 [ 153.899942] submit_bh_wbc+0x14b/0x790 [ 153.903835] __bread_gfp+0x13f/0x310 [ 153.907550] fat12_ent_bread+0x14e/0x3d0 [ 153.911607] ? fat12_ent_blocknr+0xb4/0x1f0 [ 153.915929] ? fat12_ent_set_ptr+0x2a0/0x2a0 [ 153.920341] fat_alloc_clusters+0x8ce/0x16e0 [ 153.924755] ? lock_acquire+0x1e4/0x540 [ 153.928722] ? fat_ent_write+0x1b0/0x1b0 [ 153.932766] ? kasan_check_write+0x14/0x20 [ 153.936992] ? __mutex_lock+0x6c4/0x1680 [ 153.941042] ? lock_release+0xa30/0xa30 [ 153.945002] ? vfat_mkdir+0xf6/0x6e2 [ 153.948704] ? mutex_trylock+0x2b0/0x2b0 [ 153.952745] ? is_bpf_text_address+0xd7/0x170 [ 153.957220] ? kernel_text_address+0x79/0xf0 [ 153.961619] ? __kernel_text_address+0xd/0x40 [ 153.966097] ? current_time+0x72/0x1b0 [ 153.969968] fat_alloc_new_dir+0x121/0xfc0 [ 153.974181] ? lock_release+0xa30/0xa30 [ 153.978142] ? fat_add_new_entries+0xc00/0xc00 [ 153.982703] ? save_stack+0x43/0xd0 [ 153.986309] ? __kasan_slab_free+0x11a/0x170 [ 153.990697] ? kasan_slab_free+0xe/0x10 [ 153.994649] ? kmem_cache_free+0x86/0x2d0 [ 153.998780] ? putname+0xf2/0x130 [ 154.002216] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 154.007213] ? ktime_get_coarse_real_ts64+0x243/0x3a0 [ 154.012388] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 154.017904] ? timespec64_trunc+0xea/0x180 [ 154.022116] ? init_special_inode+0x210/0x210 [ 154.026677] ? kasan_check_write+0x14/0x20 [ 154.030893] ? current_time+0x131/0x1b0 [ 154.034845] ? timespec64_trunc+0x180/0x180 [ 154.041491] ? vfat_lookup+0x174/0x640 [ 154.045361] vfat_mkdir+0x134/0x6e2 [ 154.048968] ? quarantine_put+0x10d/0x1b0 [ 154.053094] ? vfat_rename+0x15b0/0x15b0 [ 154.057394] ? map_id_up+0x19e/0x3e0 [ 154.061086] ? make_kprojid+0x30/0x30 [ 154.064866] ? putname+0xf7/0x130 [ 154.068299] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 154.073816] ? security_inode_permission+0xd2/0x100 [ 154.078812] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 154.084335] ? security_inode_mkdir+0xe8/0x120 [ 154.088897] vfs_mkdir+0x42e/0x6b0 [ 154.092418] do_mkdirat+0x27b/0x310 [ 154.096033] ? __ia32_sys_mknod+0xb0/0xb0 [ 154.100165] ? syscall_slow_exit_work+0x500/0x500 [ 154.104990] __x64_sys_mkdirat+0x76/0xb0 [ 154.109039] do_syscall_64+0x1b9/0x820 [ 154.112914] ? finish_task_switch+0x1d3/0x870 [ 154.117388] ? syscall_return_slowpath+0x5e0/0x5e0 [ 154.122299] ? syscall_return_slowpath+0x31d/0x5e0 [ 154.127212] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 154.132207] ? prepare_exit_to_usermode+0x291/0x3b0 [ 154.137289] ? perf_trace_sys_enter+0xb10/0xb10 [ 154.141940] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 154.146771] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 154.151942] RIP: 0033:0x455ba9 [ 154.155542] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 154.175442] RSP: 002b:00007fb6ea6f1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 154.183137] RAX: ffffffffffffffda RBX: 00007fb6ea6f26d4 RCX: 0000000000455ba9 16:44:18 executing program 5: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = gettid() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) readv(r2, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x2) fcntl$dupfd(r2, 0x0, r0) dup3(r3, r2, 0x0) write(r2, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCXONC(r2, 0x540a, 0x2) tkill(r1, 0x1000000000016) 16:44:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) read(r2, &(0x7f0000001140)=""/20, 0x65) 16:44:18 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") r1 = semget$private(0x0, 0x8, 0x0) semop(r1, &(0x7f0000000040)=[{0x0, 0x8001}, {0x0, 0x0, 0x1800}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) 16:44:18 executing program 2 (fault-call:4 fault-nth:3): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:44:18 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x200000000000000, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, r0, 0x0, 0xffffffffffffffff, 0x0) 16:44:18 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f76") setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) close(r1) close(r0) [ 154.190388] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000014 [ 154.197638] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 154.204885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 154.212134] R13: 00000000004c0218 R14: 00000000004cf8f8 R15: 0000000000000003 16:44:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) read(r2, &(0x7f0000001140)=""/20, 0x65) 16:44:18 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:44:18 executing program 0 (fault-call:5 fault-nth:4): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:44:18 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x2000000, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, r0, 0x0, 0xffffffffffffffff, 0x0) 16:44:18 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x0, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:44:18 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x17b}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:44:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) read(r2, &(0x7f0000001140)=""/20, 0x65) [ 154.393595] FAULT_INJECTION: forcing a failure. [ 154.393595] name failslab, interval 1, probability 0, space 0, times 0 [ 154.404985] CPU: 0 PID: 8943 Comm: syz-executor0 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 154.413299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 154.422646] Call Trace: [ 154.425243] dump_stack+0x1c9/0x2b4 [ 154.428854] ? dump_stack_print_info.cold.2+0x52/0x52 [ 154.434042] ? alloc_page_buffers+0x1cd/0x680 [ 154.438537] should_fail.cold.4+0xa/0x11 [ 154.442582] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 154.447669] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 154.453205] ? perf_trace_lock+0xde/0x920 [ 154.457344] ? trace_hardirqs_on+0x10/0x10 [ 154.461565] ? zap_class+0x740/0x740 [ 154.465274] ? lock_acquire+0x1e4/0x540 [ 154.469241] ? __find_get_block+0x7a1/0xe60 [ 154.473562] ? lock_downgrade+0x8f0/0x8f0 [ 154.477702] ? perf_trace_lock+0xde/0x920 [ 154.481840] ? mem_cgroup_id_get_many+0x160/0x160 [ 154.486665] ? check_same_owner+0x340/0x340 [ 154.490972] ? rcu_note_context_switch+0x730/0x730 [ 154.495889] ? __unlock_page_memcg+0x53/0x100 [ 154.500376] __should_failslab+0x124/0x180 [ 154.504614] should_failslab+0x9/0x14 [ 154.508399] kmem_cache_alloc_trace+0x2cb/0x780 [ 154.513064] ? lock_page_memcg+0xf2/0x300 [ 154.517198] vfat_add_entry+0x356/0x4be0 [ 154.521255] ? lock_acquire+0x1e4/0x540 [ 154.525214] ? mark_buffer_dirty_inode+0x42c/0x5d0 [ 154.530127] ? lock_downgrade+0x8f0/0x8f0 [ 154.534266] ? kasan_check_read+0x11/0x20 [ 154.538399] ? do_raw_spin_unlock+0xa7/0x2f0 [ 154.542800] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 154.547369] ? vfat_revalidate_ci+0xe0/0xe0 [ 154.551673] ? do_raw_spin_lock+0xc1/0x200 [ 154.555908] ? _raw_spin_unlock+0x22/0x30 [ 154.560048] ? mark_buffer_dirty_inode+0x15f/0x5d0 [ 154.564972] ? kasan_check_write+0x14/0x20 [ 154.569224] ? __brelse+0x104/0x180 [ 154.572843] ? block_commit_write+0x30/0x30 [ 154.577158] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 154.582168] ? fat_zeroed_cluster.constprop.24+0x3df/0x650 [ 154.587785] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 154.593307] ? fat_alloc_new_dir+0x13c/0xfc0 [ 154.597712] ? fat_add_new_entries+0xc00/0xc00 [ 154.602276] ? save_stack+0x43/0xd0 [ 154.605889] ? __kasan_slab_free+0xf0/0x170 [ 154.610189] ? kasan_slab_free+0xe/0x10 [ 154.614157] ? kmem_cache_free+0x86/0x2d0 [ 154.618297] ? putname+0xf2/0x130 [ 154.621745] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 154.626743] ? ktime_get_coarse_real_ts64+0x243/0x3a0 [ 154.631933] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 154.637459] ? timespec64_trunc+0xea/0x180 [ 154.641681] ? init_special_inode+0x210/0x210 [ 154.646167] ? kasan_check_write+0x14/0x20 [ 154.650401] ? timespec64_trunc+0x180/0x180 [ 154.654714] ? vfat_lookup+0x174/0x640 [ 154.658595] vfat_mkdir+0x17a/0x6e2 [ 154.662217] ? quarantine_put+0x10d/0x1b0 [ 154.666345] ? vfat_rename+0x15b0/0x15b0 [ 154.670386] ? map_id_up+0x19e/0x3e0 [ 154.674080] ? make_kprojid+0x30/0x30 [ 154.677867] ? putname+0xf7/0x130 [ 154.681314] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 154.686851] ? security_inode_permission+0xd2/0x100 [ 154.691855] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 154.697389] ? security_inode_mkdir+0xe8/0x120 [ 154.701966] vfs_mkdir+0x42e/0x6b0 [ 154.705496] do_mkdirat+0x27b/0x310 [ 154.709134] ? __ia32_sys_mknod+0xb0/0xb0 [ 154.713279] ? syscall_slow_exit_work+0x500/0x500 [ 154.718112] __x64_sys_mkdirat+0x76/0xb0 [ 154.722177] do_syscall_64+0x1b9/0x820 [ 154.726054] ? syscall_slow_exit_work+0x500/0x500 [ 154.730878] ? syscall_return_slowpath+0x5e0/0x5e0 [ 154.735786] ? syscall_return_slowpath+0x31d/0x5e0 [ 154.740697] ? prepare_exit_to_usermode+0x291/0x3b0 [ 154.745701] ? perf_trace_sys_enter+0xb10/0xb10 [ 154.750361] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 154.755187] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 154.760365] RIP: 0033:0x455ba9 [ 154.763532] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 154.782664] RSP: 002b:00007fb6ea6f1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 16:44:18 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x15000000, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 154.790535] RAX: ffffffffffffffda RBX: 00007fb6ea6f26d4 RCX: 0000000000455ba9 [ 154.797792] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000014 [ 154.805059] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 154.812315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 154.819565] R13: 00000000004c0218 R14: 00000000004cf8f8 R15: 0000000000000004 16:44:18 executing program 0 (fault-call:5 fault-nth:5): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:44:18 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x1500, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 154.939354] FAULT_INJECTION: forcing a failure. [ 154.939354] name failslab, interval 1, probability 0, space 0, times 0 [ 154.950792] CPU: 0 PID: 8970 Comm: syz-executor0 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 154.959205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 154.968559] Call Trace: [ 154.971141] dump_stack+0x1c9/0x2b4 [ 154.974760] ? dump_stack_print_info.cold.2+0x52/0x52 [ 154.979939] ? __kernel_text_address+0xd/0x40 [ 154.984422] ? perf_trace_lock+0xde/0x920 [ 154.988563] should_fail.cold.4+0xa/0x11 [ 154.992873] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 154.997972] ? save_stack+0xa9/0xd0 [ 155.001585] ? save_stack+0x43/0xd0 [ 155.005196] ? kasan_kmalloc+0xc4/0xe0 [ 155.009081] ? kmem_cache_alloc_trace+0x152/0x780 [ 155.013917] ? vfat_add_entry+0x356/0x4be0 [ 155.018139] ? vfat_mkdir+0x17a/0x6e2 [ 155.021924] ? vfs_mkdir+0x42e/0x6b0 [ 155.025623] ? do_mkdirat+0x27b/0x310 [ 155.029420] ? do_syscall_64+0x1b9/0x820 [ 155.033476] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 155.038825] ? lock_acquire+0x1e4/0x540 [ 155.042785] ? __find_get_block+0x7a1/0xe60 [ 155.047092] ? lock_downgrade+0x8f0/0x8f0 [ 155.051238] ? lock_acquire+0x1e4/0x540 [ 155.055197] ? fs_reclaim_acquire+0x20/0x20 [ 155.059504] ? lock_downgrade+0x8f0/0x8f0 [ 155.063645] ? check_same_owner+0x340/0x340 [ 155.067988] ? rcu_note_context_switch+0x730/0x730 [ 155.072912] __should_failslab+0x124/0x180 [ 155.077141] should_failslab+0x9/0x14 [ 155.080928] kmem_cache_alloc+0x2af/0x760 [ 155.085059] ? lock_page_memcg+0xf2/0x300 [ 155.089206] vfat_add_entry+0x467/0x4be0 [ 155.093274] ? mark_buffer_dirty_inode+0x42c/0x5d0 [ 155.098189] ? lock_downgrade+0x8f0/0x8f0 [ 155.102337] ? do_raw_spin_unlock+0xa7/0x2f0 [ 155.106733] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 155.111305] ? vfat_revalidate_ci+0xe0/0xe0 [ 155.115610] ? do_raw_spin_lock+0xc1/0x200 [ 155.119833] ? _raw_spin_unlock+0x22/0x30 [ 155.123976] ? mark_buffer_dirty_inode+0x15f/0x5d0 [ 155.128895] ? kasan_check_write+0x14/0x20 [ 155.133118] ? __brelse+0x104/0x180 [ 155.136741] ? block_commit_write+0x30/0x30 [ 155.141056] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 155.146064] ? fat_zeroed_cluster.constprop.24+0x3df/0x650 [ 155.151697] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 155.157251] ? fat_alloc_new_dir+0x13c/0xfc0 [ 155.161657] ? fat_add_new_entries+0xc00/0xc00 [ 155.166228] ? save_stack+0x43/0xd0 [ 155.169847] ? __kasan_slab_free+0xf0/0x170 [ 155.174164] ? kasan_slab_free+0xe/0x10 [ 155.178125] ? kmem_cache_free+0x86/0x2d0 [ 155.182276] ? putname+0xf2/0x130 [ 155.185722] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 155.190729] ? ktime_get_coarse_real_ts64+0x243/0x3a0 [ 155.195906] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 155.201436] ? timespec64_trunc+0xea/0x180 [ 155.205672] ? init_special_inode+0x210/0x210 [ 155.210160] ? kasan_check_write+0x14/0x20 [ 155.214387] ? timespec64_trunc+0x180/0x180 [ 155.218694] ? vfat_lookup+0x174/0x640 [ 155.222571] vfat_mkdir+0x17a/0x6e2 [ 155.226184] ? quarantine_put+0x10d/0x1b0 [ 155.230324] ? vfat_rename+0x15b0/0x15b0 [ 155.234461] ? map_id_up+0x19e/0x3e0 [ 155.238162] ? make_kprojid+0x30/0x30 [ 155.241954] ? putname+0xf7/0x130 [ 155.245404] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 155.250928] ? security_inode_permission+0xd2/0x100 [ 155.255938] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 155.261464] ? security_inode_mkdir+0xe8/0x120 [ 155.266040] vfs_mkdir+0x42e/0x6b0 [ 155.269572] do_mkdirat+0x27b/0x310 [ 155.273193] ? __ia32_sys_mknod+0xb0/0xb0 [ 155.277332] ? syscall_slow_exit_work+0x500/0x500 [ 155.282174] __x64_sys_mkdirat+0x76/0xb0 [ 155.286226] do_syscall_64+0x1b9/0x820 [ 155.290116] ? finish_task_switch+0x1d3/0x870 [ 155.294707] ? syscall_return_slowpath+0x5e0/0x5e0 [ 155.299638] ? syscall_return_slowpath+0x31d/0x5e0 [ 155.304582] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 155.309605] ? prepare_exit_to_usermode+0x291/0x3b0 [ 155.314614] ? perf_trace_sys_enter+0xb10/0xb10 [ 155.319273] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 155.324109] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 155.329298] RIP: 0033:0x455ba9 [ 155.332469] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 155.351753] RSP: 002b:00007fb6ea6f1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 155.359461] RAX: ffffffffffffffda RBX: 00007fb6ea6f26d4 RCX: 0000000000455ba9 [ 155.366721] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000014 [ 155.373998] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 155.381266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 16:44:19 executing program 5: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = gettid() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) readv(r2, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x2) fcntl$dupfd(r2, 0x0, r0) dup3(r3, r2, 0x0) write(r2, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCXONC(r2, 0x540a, 0x2) tkill(r1, 0x1000000000016) 16:44:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) read(r2, &(0x7f0000001140)=""/20, 0x65) [ 155.388521] R13: 00000000004c0218 R14: 00000000004cf8f8 R15: 0000000000000005 16:44:19 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") r1 = semget$private(0x0, 0x8, 0x0) semop(r1, &(0x7f0000000040)=[{0x0, 0x8001}, {0x0, 0x0, 0x1800}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) 16:44:19 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x30a}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:44:19 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x0, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:44:19 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f76") setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) close(r1) close(r0) 16:44:19 executing program 0 (fault-call:5 fault-nth:6): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:44:19 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x15, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, r0, 0x0, 0xffffffffffffffff, 0x0) 16:44:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) read(r2, &(0x7f0000001140)=""/20, 0x65) [ 155.539302] FAULT_INJECTION: forcing a failure. [ 155.539302] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 155.551159] CPU: 0 PID: 8992 Comm: syz-executor0 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 155.559573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 155.568949] Call Trace: [ 155.571578] dump_stack+0x1c9/0x2b4 [ 155.575404] ? dump_stack_print_info.cold.2+0x52/0x52 [ 155.580615] should_fail.cold.4+0xa/0x11 [ 155.584701] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 155.589822] ? lock_acquire+0x1e4/0x540 [ 155.593818] ? is_bpf_text_address+0xae/0x170 [ 155.598311] ? lock_downgrade+0x8f0/0x8f0 [ 155.602452] ? lock_release+0xa30/0xa30 [ 155.606414] ? trace_hardirqs_on+0x10/0x10 [ 155.610734] ? rcu_is_watching+0x8c/0x150 [ 155.614867] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 155.619533] ? is_bpf_text_address+0xd7/0x170 [ 155.624043] ? kernel_text_address+0x79/0xf0 [ 155.628467] ? __kernel_text_address+0xd/0x40 [ 155.632989] ? perf_trace_lock+0xde/0x920 [ 155.637169] ? __save_stack_trace+0x8d/0xf0 [ 155.641491] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 155.647035] ? should_fail+0x246/0xd86 [ 155.650931] ? zap_class+0x740/0x740 [ 155.654647] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 155.659764] __alloc_pages_nodemask+0x36e/0xdb0 [ 155.664424] ? kasan_kmalloc+0xc4/0xe0 [ 155.668306] ? kmem_cache_alloc_trace+0x152/0x780 [ 155.673312] ? vfat_add_entry+0x356/0x4be0 [ 155.677548] ? vfat_mkdir+0x17a/0x6e2 [ 155.681338] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 155.686350] ? lock_acquire+0x1e4/0x540 [ 155.690310] ? __find_get_block+0x7a1/0xe60 [ 155.694631] ? lock_downgrade+0x8f0/0x8f0 [ 155.698774] ? lock_acquire+0x1e4/0x540 [ 155.702737] ? fs_reclaim_acquire+0x20/0x20 [ 155.707050] ? lock_downgrade+0x8f0/0x8f0 [ 155.711190] ? lock_release+0xa30/0xa30 [ 155.715151] ? check_same_owner+0x340/0x340 [ 155.719462] cache_grow_begin+0x91/0x710 [ 155.723509] kmem_cache_alloc+0x689/0x760 [ 155.727639] ? lock_page_memcg+0xf2/0x300 [ 155.731774] vfat_add_entry+0x467/0x4be0 [ 155.735820] ? mark_buffer_dirty_inode+0x42c/0x5d0 [ 155.740736] ? lock_downgrade+0x8f0/0x8f0 [ 155.744869] ? do_raw_spin_unlock+0xa7/0x2f0 [ 155.749260] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 155.753825] ? vfat_revalidate_ci+0xe0/0xe0 [ 155.758127] ? do_raw_spin_lock+0xc1/0x200 [ 155.762344] ? _raw_spin_unlock+0x22/0x30 [ 155.766488] ? mark_buffer_dirty_inode+0x15f/0x5d0 [ 155.771412] ? kasan_check_write+0x14/0x20 [ 155.775628] ? __brelse+0x104/0x180 [ 155.779240] ? block_commit_write+0x30/0x30 [ 155.783554] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 155.788555] ? fat_zeroed_cluster.constprop.24+0x3df/0x650 [ 155.794174] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 155.799702] ? fat_alloc_new_dir+0x13c/0xfc0 [ 155.804107] ? fat_add_new_entries+0xc00/0xc00 [ 155.808671] ? save_stack+0x43/0xd0 [ 155.812281] ? __kasan_slab_free+0x154/0x170 [ 155.816667] ? kasan_slab_free+0xe/0x10 [ 155.820628] ? kmem_cache_free+0x86/0x2d0 [ 155.824778] ? putname+0xf2/0x130 [ 155.828222] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 155.833245] ? ktime_get_coarse_real_ts64+0x243/0x3a0 [ 155.838434] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 155.844216] ? timespec64_trunc+0xea/0x180 [ 155.848434] ? init_special_inode+0x210/0x210 [ 155.852922] ? kasan_check_write+0x14/0x20 [ 155.857151] ? timespec64_trunc+0x180/0x180 [ 155.861478] ? vfat_lookup+0x174/0x640 [ 155.865356] vfat_mkdir+0x17a/0x6e2 [ 155.868970] ? quarantine_put+0x10d/0x1b0 [ 155.873102] ? vfat_rename+0x15b0/0x15b0 [ 155.877157] ? map_id_up+0x19e/0x3e0 [ 155.880857] ? make_kprojid+0x30/0x30 [ 155.884649] ? putname+0xf7/0x130 [ 155.888093] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 155.893612] ? security_inode_permission+0xd2/0x100 [ 155.898630] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 155.904154] ? security_inode_mkdir+0xe8/0x120 [ 155.908719] vfs_mkdir+0x42e/0x6b0 [ 155.912243] do_mkdirat+0x27b/0x310 [ 155.915855] ? __ia32_sys_mknod+0xb0/0xb0 [ 155.919997] ? syscall_slow_exit_work+0x500/0x500 [ 155.924835] __x64_sys_mkdirat+0x76/0xb0 [ 155.928884] do_syscall_64+0x1b9/0x820 [ 155.932752] ? finish_task_switch+0x1d3/0x870 [ 155.937228] ? syscall_return_slowpath+0x5e0/0x5e0 [ 155.942141] ? syscall_return_slowpath+0x31d/0x5e0 [ 155.947060] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 155.952061] ? prepare_exit_to_usermode+0x291/0x3b0 [ 155.957066] ? perf_trace_sys_enter+0xb10/0xb10 [ 155.961727] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 155.966556] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 155.971728] RIP: 0033:0x455ba9 16:44:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) read(r2, &(0x7f0000001140)=""/20, 0x65) 16:44:19 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x0, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:44:19 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x7ffffffff000}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:44:19 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 155.974904] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 155.994080] RSP: 002b:00007fb6ea6f1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 156.001774] RAX: ffffffffffffffda RBX: 00007fb6ea6f26d4 RCX: 0000000000455ba9 [ 156.009042] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000014 [ 156.016301] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 156.023557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 156.030827] R13: 00000000004c0218 R14: 00000000004cf8f8 R15: 0000000000000006 16:44:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) read(r2, &(0x7f0000001140)=""/20, 0x65) 16:44:19 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:44:19 executing program 0 (fault-call:5 fault-nth:7): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) [ 156.170778] FAULT_INJECTION: forcing a failure. [ 156.170778] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 156.182645] CPU: 1 PID: 9029 Comm: syz-executor0 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 156.191019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 156.200536] Call Trace: [ 156.203138] dump_stack+0x1c9/0x2b4 [ 156.206950] ? dump_stack_print_info.cold.2+0x52/0x52 [ 156.212138] ? save_stack+0xa9/0xd0 [ 156.215761] ? __kasan_slab_free+0x11a/0x170 [ 156.220170] should_fail.cold.4+0xa/0x11 [ 156.224217] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 156.229567] ? lock_acquire+0x1e4/0x540 [ 156.233525] ? percpu_ref_tryget_live+0x143/0x440 [ 156.238356] ? lock_downgrade+0x8f0/0x8f0 [ 156.242491] ? lock_release+0xa30/0xa30 [ 156.246457] ? trace_hardirqs_off+0xd/0x10 [ 156.250674] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 156.255767] ? percpu_ref_tryget_live+0x15b/0x440 [ 156.260683] ? mem_cgroup_id_get_many+0x160/0x160 [ 156.265521] ? get_mem_cgroup_from_mm+0x1ea/0x440 [ 156.270361] ? lock_downgrade+0x8f0/0x8f0 [ 156.274532] ? lock_release+0xa30/0xa30 [ 156.278526] ? trace_hardirqs_on+0xd/0x10 [ 156.282663] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 156.288458] ? should_fail+0x246/0xd86 [ 156.292333] ? lock_acquire+0x1e4/0x540 [ 156.296304] ? rcu_read_unlock+0x16/0x70 [ 156.300382] __alloc_pages_nodemask+0x36e/0xdb0 [ 156.305061] ? lock_release+0xa30/0xa30 [ 156.309050] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 156.314091] ? vfat_revalidate_ci+0xe0/0xe0 [ 156.318468] ? do_raw_spin_lock+0xc1/0x200 [ 156.322721] ? rcu_read_unlock+0x35/0x70 [ 156.326873] ? mem_cgroup_handle_over_high+0x130/0x130 [ 156.332168] ? __brelse+0x104/0x180 [ 156.335777] ? block_commit_write+0x30/0x30 [ 156.340082] ? check_same_owner+0x340/0x340 [ 156.344397] cache_grow_begin+0x91/0x710 [ 156.348452] kmem_cache_alloc+0x689/0x760 [ 156.352587] ? lock_downgrade+0x8f0/0x8f0 [ 156.356717] ? fat_i_callback+0x30/0x30 [ 156.360673] fat_alloc_inode+0x1b/0x70 [ 156.364549] alloc_inode+0x63/0x190 [ 156.368161] new_inode_pseudo+0x71/0x1a0 [ 156.372209] ? prune_icache_sb+0x1b0/0x1b0 [ 156.376432] ? _raw_spin_unlock+0x22/0x30 [ 156.380570] new_inode+0x1c/0x40 [ 156.383933] fat_build_inode+0x1c5/0x3ed [ 156.387981] ? fat_fill_inode+0x18d0/0x18d0 [ 156.392313] vfat_mkdir+0x2d4/0x6e2 [ 156.395941] ? vfat_rename+0x15b0/0x15b0 [ 156.400006] ? map_id_up+0x19e/0x3e0 [ 156.403730] ? putname+0xf7/0x130 [ 156.407174] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 156.412701] ? security_inode_permission+0xd2/0x100 [ 156.417716] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 156.423235] ? security_inode_mkdir+0xe8/0x120 [ 156.427887] vfs_mkdir+0x42e/0x6b0 [ 156.431417] do_mkdirat+0x27b/0x310 [ 156.435034] ? __ia32_sys_mknod+0xb0/0xb0 [ 156.439179] ? syscall_slow_exit_work+0x500/0x500 [ 156.444032] __x64_sys_mkdirat+0x76/0xb0 [ 156.448094] do_syscall_64+0x1b9/0x820 [ 156.451963] ? finish_task_switch+0x1d3/0x870 [ 156.456443] ? syscall_return_slowpath+0x5e0/0x5e0 [ 156.461353] ? syscall_return_slowpath+0x31d/0x5e0 [ 156.466272] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 156.471271] ? prepare_exit_to_usermode+0x291/0x3b0 [ 156.476274] ? perf_trace_sys_enter+0xb10/0xb10 [ 156.480937] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 156.485801] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 156.490972] RIP: 0033:0x455ba9 [ 156.494151] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 156.513280] RSP: 002b:00007fb6ea6f1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 16:44:20 executing program 5: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = gettid() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) readv(r2, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x2) fcntl$dupfd(r2, 0x0, r0) dup3(r3, r2, 0x0) write(r2, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCXONC(r2, 0x540a, 0x2) tkill(r1, 0x1000000000016) 16:44:20 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 156.520978] RAX: ffffffffffffffda RBX: 00007fb6ea6f26d4 RCX: 0000000000455ba9 [ 156.528236] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000014 [ 156.535492] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 156.542742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 156.550158] R13: 00000000004c0218 R14: 00000000004cf8f8 R15: 0000000000000007 16:44:20 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") r1 = semget$private(0x0, 0x8, 0x0) semop(r1, &(0x7f0000000040)=[{0x0, 0x8001}, {0x0, 0x0, 0x1800}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) 16:44:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) read(r2, &(0x7f0000001140)=""/20, 0x65) 16:44:20 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x0, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:44:20 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:44:20 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f7620") setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) close(r1) close(r0) 16:44:20 executing program 0 (fault-call:5 fault-nth:8): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:44:20 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x1500000000000000, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 156.639626] FAULT_INJECTION: forcing a failure. [ 156.639626] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 156.651528] CPU: 0 PID: 9056 Comm: syz-executor0 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 156.659845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 156.669193] Call Trace: [ 156.671785] dump_stack+0x1c9/0x2b4 [ 156.675407] ? dump_stack_print_info.cold.2+0x52/0x52 [ 156.680586] ? save_stack+0xa9/0xd0 [ 156.684200] ? __kasan_slab_free+0x11a/0x170 [ 156.688606] should_fail.cold.4+0xa/0x11 [ 156.692659] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 156.697748] ? lock_acquire+0x1e4/0x540 [ 156.701708] ? percpu_ref_tryget_live+0x143/0x440 [ 156.706538] ? lock_downgrade+0x8f0/0x8f0 [ 156.710677] ? lock_release+0xa30/0xa30 [ 156.714638] ? trace_hardirqs_off+0xd/0x10 [ 156.718867] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 156.723969] ? percpu_ref_tryget_live+0x15b/0x440 [ 156.728816] ? mem_cgroup_id_get_many+0x160/0x160 [ 156.733741] ? get_mem_cgroup_from_mm+0x1ea/0x440 [ 156.738572] ? lock_downgrade+0x8f0/0x8f0 [ 156.742706] ? lock_release+0xa30/0xa30 [ 156.746669] ? trace_hardirqs_on+0xd/0x10 [ 156.750808] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 156.756331] ? should_fail+0x246/0xd86 [ 156.760212] ? lock_acquire+0x1e4/0x540 [ 156.764175] ? rcu_read_unlock+0x16/0x70 [ 156.768229] __alloc_pages_nodemask+0x36e/0xdb0 [ 156.772978] ? lock_release+0xa30/0xa30 [ 156.776946] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 156.781965] ? vfat_revalidate_ci+0xe0/0xe0 [ 156.786285] ? do_raw_spin_lock+0xc1/0x200 [ 156.790515] ? rcu_read_unlock+0x35/0x70 [ 156.794568] ? mem_cgroup_handle_over_high+0x130/0x130 [ 156.799840] ? __brelse+0x104/0x180 [ 156.803470] ? block_commit_write+0x30/0x30 [ 156.807795] ? check_same_owner+0x340/0x340 [ 156.812111] cache_grow_begin+0x91/0x710 [ 156.816164] kmem_cache_alloc+0x689/0x760 [ 156.820301] ? lock_downgrade+0x8f0/0x8f0 [ 156.824453] ? fat_i_callback+0x30/0x30 [ 156.828417] fat_alloc_inode+0x1b/0x70 [ 156.832294] alloc_inode+0x63/0x190 [ 156.835911] new_inode_pseudo+0x71/0x1a0 [ 156.839966] ? prune_icache_sb+0x1b0/0x1b0 [ 156.844193] ? _raw_spin_unlock+0x22/0x30 [ 156.848328] new_inode+0x1c/0x40 [ 156.851771] fat_build_inode+0x1c5/0x3ed [ 156.855854] ? fat_fill_inode+0x18d0/0x18d0 [ 156.860170] ? vfat_lookup+0x174/0x640 [ 156.864050] vfat_mkdir+0x2d4/0x6e2 [ 156.867665] ? vfat_rename+0x15b0/0x15b0 [ 156.871713] ? map_id_up+0x19e/0x3e0 [ 156.875417] ? putname+0xf7/0x130 [ 156.878866] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 156.884398] ? security_inode_permission+0xd2/0x100 [ 156.889407] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 156.894928] ? security_inode_mkdir+0xe8/0x120 [ 156.899511] vfs_mkdir+0x42e/0x6b0 [ 156.903043] do_mkdirat+0x27b/0x310 [ 156.906661] ? __ia32_sys_mknod+0xb0/0xb0 [ 156.910808] ? syscall_slow_exit_work+0x500/0x500 [ 156.915640] __x64_sys_mkdirat+0x76/0xb0 [ 156.919687] do_syscall_64+0x1b9/0x820 [ 156.923567] ? finish_task_switch+0x1d3/0x870 [ 156.928058] ? syscall_return_slowpath+0x5e0/0x5e0 [ 156.932975] ? syscall_return_slowpath+0x31d/0x5e0 [ 156.937891] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 156.942902] ? prepare_exit_to_usermode+0x291/0x3b0 [ 156.947910] ? perf_trace_sys_enter+0xb10/0xb10 [ 156.952580] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 156.957426] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 156.962603] RIP: 0033:0x455ba9 [ 156.965776] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 16:44:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000001140)=""/20, 0x65) 16:44:20 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:44:20 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) close(r1) close(r0) [ 156.985067] RSP: 002b:00007fb6ea6f1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 156.992771] RAX: ffffffffffffffda RBX: 00007fb6ea6f26d4 RCX: 0000000000455ba9 [ 157.000033] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000014 [ 157.007306] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 157.014570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 157.021836] R13: 00000000004c0218 R14: 00000000004cf8f8 R15: 0000000000000008 16:44:20 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x0, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:44:20 executing program 0 (fault-call:5 fault-nth:9): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:44:21 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100), 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) close(r1) close(r0) 16:44:21 executing program 1: 16:44:21 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = gettid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x2) fcntl$dupfd(r3, 0x0, r1) dup3(r4, r3, 0x0) write(r3, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCXONC(r3, 0x540a, 0x2) tkill(r2, 0x1000000000016) 16:44:21 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:44:21 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x400000000000000, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, r0, 0x0, 0xffffffffffffffff, 0x0) 16:44:21 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") r1 = semget$private(0x0, 0x8, 0x0) semop(r1, &(0x7f0000000040)=[{0x0, 0x8001}, {0x0, 0x0, 0x1800}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) 16:44:21 executing program 1: 16:44:21 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 16:44:21 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) close(r1) close(r0) 16:44:21 executing program 3: 16:44:21 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:44:22 executing program 3: 16:44:22 executing program 1: 16:44:22 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000), 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) close(r1) close(r0) 16:44:22 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x4000000, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, r0, 0x0, 0xffffffffffffffff, 0x0) 16:44:22 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:44:22 executing program 3: 16:44:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='//file0\x00', 0x0) 16:44:22 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x153, 0x0) close(r1) close(r0) 16:44:22 executing program 1: 16:44:22 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x20000330, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, r0, 0x0, 0xffffffffffffffff, 0x0) 16:44:22 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f0000000040)=[{0x0, 0x8001}, {0x0, 0x0, 0x1800}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) 16:44:22 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:44:22 executing program 3: 16:44:22 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = gettid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x2) fcntl$dupfd(r3, 0x0, r1) dup3(r4, r3, 0x0) write(r3, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCXONC(r3, 0x540a, 0x2) tkill(r2, 0x1000000000016) 16:44:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='p/file0\x00', 0x0) 16:44:22 executing program 1: 16:44:22 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) close(0xffffffffffffffff) close(r0) 16:44:22 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, r0, 0x0, 0xffffffffffffffff, 0x0) 16:44:22 executing program 1: 16:44:22 executing program 3: 16:44:22 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:44:22 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, r0, 0x0, 0xffffffffffffffff, 0x0) 16:44:22 executing program 1: 16:44:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='.pfile0\x00', 0x0) 16:44:22 executing program 3: 16:44:22 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, r0, 0x0, 0xffffffffffffffff, 0x0) 16:44:23 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = semget$private(0x0, 0x8, 0x0) semop(0x0, &(0x7f0000000040)=[{0x0, 0x8001}, {0x0, 0x0, 0x1800}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) 16:44:23 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:44:23 executing program 1: 16:44:23 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = gettid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x2) fcntl$dupfd(r3, 0x0, r1) dup3(r4, r3, 0x0) write(r3, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCXONC(r3, 0x540a, 0x2) tkill(r2, 0x1000000000016) 16:44:23 executing program 3: 16:44:23 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, r0, 0x0, 0xffffffffffffffff, 0x0) 16:44:23 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='.//ile0\x00', 0x0) 16:44:23 executing program 1: 16:44:23 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:44:23 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = semget$private(0x0, 0x8, 0x0) semop(0x0, &(0x7f0000000040)=[{0x0, 0x8001}, {0x0, 0x0, 0x1800}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) 16:44:23 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) close(0xffffffffffffffff) close(r0) 16:44:23 executing program 1: 16:44:23 executing program 3: 16:44:23 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:44:23 executing program 1: 16:44:23 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, r0, 0x0, 0xffffffffffffffff, 0x0) 16:44:23 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./"ile0\x00', 0x0) 16:44:23 executing program 3: 16:44:23 executing program 1: 16:44:24 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = gettid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x2) fcntl$dupfd(r3, 0x0, r1) dup3(r4, r3, 0x0) write(r3, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCXONC(r3, 0x540a, 0x2) tkill(r2, 0x1000000000016) 16:44:24 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:44:24 executing program 3: 16:44:24 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x15000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, r0, 0x0, 0xffffffffffffffff, 0x0) 16:44:24 executing program 1: 16:44:24 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./ 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 163.101901] RSP: 002b:00007f5a00840c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 163.109599] RAX: ffffffffffffffda RBX: 00007f5a008416d4 RCX: 0000000000455ba9 [ 163.116870] RDX: 0000000020000280 RSI: 00000000200000c0 RDI: 0000000020000000 [ 163.124141] RBP: 000000000072bea0 R08: 0000000020000180 R09: 0000000000000000 [ 163.131403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 163.138666] R13: 00000000004c218e R14: 00000000004cfa78 R15: 0000000000000000 16:44:27 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000140)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = gettid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x2) fcntl$dupfd(r3, 0x0, r1) dup3(r4, r3, 0x0) write(r3, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCXONC(r3, 0x540a, 0x2) tkill(r2, 0x1000000000016) 16:44:27 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = semget$private(0x0, 0x8, 0x0) semop(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}], 0x1) semctl$IPC_RMID(r1, 0x0, 0x0) 16:44:27 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:44:27 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x1500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, r0, 0x0, 0xffffffffffffffff, 0x0) 16:44:27 executing program 3 (fault-call:4 fault-nth:0): r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) read(r2, &(0x7f0000001140)=""/20, 0x65) 16:44:27 executing program 1 (fault-call:8 fault-nth:1): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:44:27 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./f~le0\x00', 0x0) 16:44:27 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) close(r1) close(0xffffffffffffffff) [ 163.642828] FAULT_INJECTION: forcing a failure. [ 163.642828] name failslab, interval 1, probability 0, space 0, times 0 [ 163.654138] CPU: 1 PID: 9492 Comm: syz-executor3 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 163.662459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 163.671818] Call Trace: [ 163.674414] dump_stack+0x1c9/0x2b4 [ 163.678052] ? dump_stack_print_info.cold.2+0x52/0x52 [ 163.683252] should_fail.cold.4+0xa/0x11 [ 163.687323] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 163.692432] ? mutex_trylock+0x2b0/0x2b0 [ 163.696483] ? mnt_get_count+0x150/0x150 [ 163.700535] ? dput.part.26+0x276/0x7a0 [ 163.704501] ? shrink_dcache_sb+0x350/0x350 [ 163.708811] ? chown_common+0x730/0x730 [ 163.712774] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 163.718311] ? security_inode_permission+0xd2/0x100 [ 163.723326] ? lock_acquire+0x1e4/0x540 [ 163.727310] ? fs_reclaim_acquire+0x20/0x20 [ 163.731623] ? lock_downgrade+0x8f0/0x8f0 [ 163.735777] ? check_same_owner+0x340/0x340 [ 163.740125] ? rcu_note_context_switch+0x730/0x730 [ 163.745048] __should_failslab+0x124/0x180 [ 163.749276] should_failslab+0x9/0x14 [ 163.753078] kmem_cache_alloc_node_trace+0x26f/0x770 [ 163.758171] ? lock_release+0xa30/0xa30 [ 163.762150] __kmalloc_node+0x33/0x70 [ 163.765946] kvmalloc_node+0x65/0xf0 [ 163.769653] seq_read+0x957/0x10e0 [ 163.773192] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 163.778061] kernfs_fop_read+0x146/0x6a0 [ 163.782113] ? kernfs_vma_page_mkwrite+0x230/0x230 [ 163.787039] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 163.792565] __vfs_read+0x117/0xa80 [ 163.796180] ? __fget_light+0x2f7/0x440 [ 163.800140] ? kernfs_vma_page_mkwrite+0x230/0x230 [ 163.805054] ? vfs_copy_file_range+0xba0/0xba0 [ 163.809635] ? vfs_write+0x2f3/0x560 [ 163.813338] ? fsnotify+0x14e0/0x14e0 [ 163.817127] ? lock_release+0xa30/0xa30 [ 163.821099] ? fsnotify_first_mark+0x350/0x350 [ 163.825751] ? __fsnotify_parent+0xcc/0x420 [ 163.830064] ? security_file_permission+0x1c2/0x230 [ 163.835066] ? rw_verify_area+0x118/0x360 [ 163.839212] vfs_read+0x17f/0x3c0 [ 163.842664] ksys_read+0x101/0x260 [ 163.846192] ? kernel_write+0x120/0x120 [ 163.850159] __x64_sys_read+0x73/0xb0 [ 163.854043] do_syscall_64+0x1b9/0x820 [ 163.857918] ? finish_task_switch+0x1d3/0x870 [ 163.862409] ? syscall_return_slowpath+0x5e0/0x5e0 [ 163.867341] ? syscall_return_slowpath+0x31d/0x5e0 [ 163.872260] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 163.877269] ? prepare_exit_to_usermode+0x291/0x3b0 [ 163.882276] ? perf_trace_sys_enter+0xb10/0xb10 [ 163.886933] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 163.891767] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 163.896938] RIP: 0033:0x455ba9 [ 163.900107] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 163.919391] RSP: 002b:00007f9298d89c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 163.927198] RAX: ffffffffffffffda RBX: 00007f9298d8a6d4 RCX: 0000000000455ba9 [ 163.934537] RDX: 0000000000000065 RSI: 0000000020001140 RDI: 0000000000000015 16:44:27 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./f.le0\x00', 0x0) [ 163.941796] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 163.949050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 163.956312] R13: 00000000004c00c1 R14: 00000000004d0948 R15: 0000000000000000 16:44:27 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) [ 163.988465] FAULT_INJECTION: forcing a failure. [ 163.988465] name failslab, interval 1, probability 0, space 0, times 0 [ 164.000715] CPU: 1 PID: 9494 Comm: syz-executor1 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 164.009046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 164.018426] Call Trace: [ 164.021034] dump_stack+0x1c9/0x2b4 [ 164.024681] ? dump_stack_print_info.cold.2+0x52/0x52 [ 164.029900] ? __kernel_text_address+0xd/0x40 16:44:27 executing program 6 (fault-call:6 fault-nth:0): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) close(r1) close(r0) 16:44:27 executing program 3 (fault-call:4 fault-nth:1): r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) read(r2, &(0x7f0000001140)=""/20, 0x65) 16:44:27 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:44:27 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./fi~e0\x00', 0x0) [ 164.034410] ? unwind_get_return_address+0x61/0xa0 [ 164.039352] should_fail.cold.4+0xa/0x11 [ 164.043426] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 164.048548] ? save_stack+0xa9/0xd0 [ 164.052187] ? save_stack+0x43/0xd0 [ 164.055818] ? kasan_kmalloc+0xc4/0xe0 [ 164.059719] ? __kmalloc_track_caller+0x14a/0x760 [ 164.064574] ? memdup_user+0x2c/0xa0 [ 164.068303] ? strndup_user+0x77/0xd0 [ 164.072113] ? ksys_mount+0x3c/0x140 [ 164.075837] ? do_syscall_64+0x1b9/0x820 [ 164.079915] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 164.085293] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 164.090840] ? proc_fail_nth_write+0x9e/0x210 [ 164.095357] ? proc_cwd_link+0x1d0/0x1d0 [ 164.099433] ? lock_acquire+0x1e4/0x540 [ 164.103423] ? lock_acquire+0x1e4/0x540 [ 164.107451] ? fs_reclaim_acquire+0x20/0x20 [ 164.110598] FAULT_INJECTION: forcing a failure. [ 164.110598] name failslab, interval 1, probability 0, space 0, times 0 [ 164.111795] ? lock_downgrade+0x8f0/0x8f0 [ 164.111815] ? check_same_owner+0x340/0x340 [ 164.111839] ? lock_release+0xa30/0xa30 [ 164.135419] ? rcu_note_context_switch+0x730/0x730 [ 164.140337] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 164.145360] __should_failslab+0x124/0x180 [ 164.149586] should_failslab+0x9/0x14 [ 164.153387] __kmalloc_track_caller+0x2c4/0x760 [ 164.158045] ? strncpy_from_user+0x510/0x510 [ 164.162530] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 164.168071] ? strndup_user+0x77/0xd0 [ 164.171871] memdup_user+0x2c/0xa0 [ 164.175414] strndup_user+0x77/0xd0 [ 164.179031] ksys_mount+0x73/0x140 [ 164.182564] __x64_sys_mount+0xbe/0x150 [ 164.186534] do_syscall_64+0x1b9/0x820 [ 164.190419] ? finish_task_switch+0x1d3/0x870 [ 164.194915] ? syscall_return_slowpath+0x5e0/0x5e0 [ 164.199835] ? syscall_return_slowpath+0x31d/0x5e0 [ 164.204757] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 164.209765] ? prepare_exit_to_usermode+0x291/0x3b0 [ 164.214771] ? perf_trace_sys_enter+0xb10/0xb10 [ 164.219444] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 164.224284] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 164.229465] RIP: 0033:0x455ba9 [ 164.232639] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 164.251855] RSP: 002b:00007f5a00840c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 164.259650] RAX: ffffffffffffffda RBX: 00007f5a008416d4 RCX: 0000000000455ba9 [ 164.266906] RDX: 0000000020000280 RSI: 00000000200000c0 RDI: 0000000020000000 [ 164.274163] RBP: 000000000072bea0 R08: 0000000020000180 R09: 0000000000000000 [ 164.281432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 164.288688] R13: 00000000004c218e R14: 00000000004cfa78 R15: 0000000000000001 [ 164.295957] CPU: 0 PID: 9518 Comm: syz-executor3 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 164.304301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 164.313679] Call Trace: [ 164.316277] dump_stack+0x1c9/0x2b4 [ 164.319918] ? dump_stack_print_info.cold.2+0x52/0x52 [ 164.325117] ? kasan_check_write+0x14/0x20 [ 164.329361] ? do_raw_spin_lock+0xc1/0x200 [ 164.333600] should_fail.cold.4+0xa/0x11 [ 164.337661] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 164.342771] ? lock_downgrade+0x8f0/0x8f0 [ 164.346933] ? lock_acquire+0x1e4/0x540 [ 164.350911] ? seq_read+0x6e/0x10e0 [ 164.354543] ? percpu_ref_tryget_live+0x15b/0x440 [ 164.359382] ? mem_cgroup_id_get_many+0x160/0x160 [ 164.364257] ? get_mem_cgroup_from_mm+0x1ea/0x440 [ 164.369090] ? lock_downgrade+0x8f0/0x8f0 [ 164.373217] ? lock_release+0xa30/0xa30 [ 164.377194] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 164.382722] ? lock_acquire+0x1e4/0x540 [ 164.386677] ? rcu_read_unlock+0x16/0x70 [ 164.390723] ? lock_downgrade+0x8f0/0x8f0 [ 164.394850] __should_failslab+0x124/0x180 [ 164.399066] should_failslab+0x9/0x14 [ 164.402847] kmem_cache_alloc_trace+0x4b/0x780 [ 164.407418] memcg_kmem_get_cache+0x42c/0x9d0 [ 164.411892] ? mem_cgroup_handle_over_high+0x130/0x130 [ 164.417148] ? fs_reclaim_acquire+0x20/0x20 [ 164.421452] ? lock_downgrade+0x8f0/0x8f0 [ 164.425589] ? lock_release+0xa30/0xa30 [ 164.429543] ? check_same_owner+0x340/0x340 [ 164.433858] ? rcu_note_context_switch+0x730/0x730 [ 164.438771] kmem_cache_alloc_node_trace+0x1a4/0x770 [ 164.443852] ? lock_release+0xa30/0xa30 [ 164.447817] __kmalloc_node+0x33/0x70 [ 164.451599] kvmalloc_node+0x65/0xf0 [ 164.455293] seq_read+0x957/0x10e0 [ 164.458814] ? __schedule+0x884/0x1ed0 [ 164.462681] kernfs_fop_read+0x146/0x6a0 [ 164.466719] ? kernfs_vma_page_mkwrite+0x230/0x230 [ 164.471629] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 164.477159] __vfs_read+0x117/0xa80 [ 164.480768] ? __fget_light+0x2f7/0x440 [ 164.484721] ? kernfs_vma_page_mkwrite+0x230/0x230 [ 164.489635] ? vfs_copy_file_range+0xba0/0xba0 [ 164.494193] ? vfs_write+0x2f3/0x560 [ 164.497895] ? fsnotify+0x14e0/0x14e0 [ 164.501674] ? lock_release+0xa30/0xa30 [ 164.505632] ? security_file_permission+0x1c2/0x230 [ 164.510626] ? rw_verify_area+0x118/0x360 [ 164.514775] vfs_read+0x17f/0x3c0 [ 164.518209] ksys_read+0x101/0x260 [ 164.521727] ? kernel_write+0x120/0x120 [ 164.525682] ? syscall_slow_exit_work+0x500/0x500 [ 164.530510] __x64_sys_read+0x73/0xb0 [ 164.534288] do_syscall_64+0x1b9/0x820 [ 164.538153] ? finish_task_switch+0x1d3/0x870 [ 164.542627] ? syscall_return_slowpath+0x5e0/0x5e0 [ 164.547541] ? syscall_return_slowpath+0x31d/0x5e0 [ 164.552449] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 164.557445] ? prepare_exit_to_usermode+0x291/0x3b0 [ 164.562444] ? perf_trace_sys_enter+0xb10/0xb10 [ 164.567092] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 164.571915] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 164.577082] RIP: 0033:0x455ba9 [ 164.580245] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 164.599368] RSP: 002b:00007f9298d89c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 164.607059] RAX: ffffffffffffffda RBX: 00007f9298d8a6d4 RCX: 0000000000455ba9 [ 164.614311] RDX: 0000000000000065 RSI: 0000000020001140 RDI: 0000000000000015 [ 164.621558] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 164.628805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 16:44:28 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) close(r1) close(r0) 16:44:28 executing program 1 (fault-call:8 fault-nth:2): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) [ 164.636059] R13: 00000000004c00c1 R14: 00000000004d0948 R15: 0000000000000001 16:44:28 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000140)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = gettid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x2) fcntl$dupfd(r3, 0x0, r1) dup3(r4, r3, 0x0) write(r3, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCXONC(r3, 0x540a, 0x2) tkill(r2, 0x1000000000016) 16:44:28 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = semget$private(0x0, 0x8, 0x0) semop(r1, &(0x7f0000000040)=[{}, {0x0, 0x0, 0x1800}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) 16:44:28 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, r0, 0x0, 0xffffffffffffffff, 0x0) 16:44:28 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:44:28 executing program 3 (fault-call:4 fault-nth:2): r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) read(r2, &(0x7f0000001140)=""/20, 0x65) 16:44:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) read(r2, &(0x7f0000001140)=""/20, 0x65) [ 164.755733] FAULT_INJECTION: forcing a failure. [ 164.755733] name failslab, interval 1, probability 0, space 0, times 0 [ 164.767094] CPU: 0 PID: 9537 Comm: syz-executor1 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 164.775418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 164.784773] Call Trace: [ 164.787383] dump_stack+0x1c9/0x2b4 [ 164.791029] ? dump_stack_print_info.cold.2+0x52/0x52 [ 164.796240] ? __kernel_text_address+0xd/0x40 [ 164.800750] ? perf_trace_lock+0xde/0x920 [ 164.804907] should_fail.cold.4+0xa/0x11 [ 164.808987] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 164.814091] ? zap_class+0x740/0x740 [ 164.817805] ? save_stack+0xa9/0xd0 [ 164.821423] ? kasan_kmalloc+0xc4/0xe0 [ 164.825313] ? __kmalloc_track_caller+0x14a/0x760 [ 164.830146] ? memdup_user+0x2c/0xa0 [ 164.833843] ? strndup_user+0x77/0xd0 [ 164.837629] ? ksys_mount+0x73/0x140 [ 164.841328] ? __x64_sys_mount+0xbe/0x150 [ 164.845464] ? do_syscall_64+0x1b9/0x820 [ 164.849519] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 164.855054] ? proc_fail_nth_write+0x9e/0x210 [ 164.859543] ? lock_acquire+0x1e4/0x540 [ 164.863514] ? lock_acquire+0x1e4/0x540 [ 164.867474] ? fs_reclaim_acquire+0x20/0x20 [ 164.871787] ? lock_downgrade+0x8f0/0x8f0 [ 164.875938] ? check_same_owner+0x340/0x340 [ 164.880245] ? lock_release+0xa30/0xa30 [ 164.884207] ? check_same_owner+0x340/0x340 [ 164.888524] ? rcu_note_context_switch+0x730/0x730 [ 164.893457] ? __check_object_size+0x9d/0x5f2 [ 164.897945] __should_failslab+0x124/0x180 [ 164.902178] should_failslab+0x9/0x14 [ 164.905966] kmem_cache_alloc_trace+0x2cb/0x780 [ 164.910628] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 164.916153] ? _copy_from_user+0xdf/0x150 [ 164.920295] copy_mount_options+0x5f/0x380 [ 164.924525] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 164.930050] ksys_mount+0xd0/0x140 [ 164.933585] __x64_sys_mount+0xbe/0x150 [ 164.937553] do_syscall_64+0x1b9/0x820 [ 164.941432] ? finish_task_switch+0x1d3/0x870 [ 164.945915] ? syscall_return_slowpath+0x5e0/0x5e0 [ 164.950837] ? syscall_return_slowpath+0x31d/0x5e0 [ 164.955760] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 164.960762] ? prepare_exit_to_usermode+0x291/0x3b0 [ 164.965768] ? perf_trace_sys_enter+0xb10/0xb10 [ 164.970425] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 164.975433] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 164.980614] RIP: 0033:0x455ba9 [ 164.983787] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 16:44:28 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./fi.e0\x00', 0x0) 16:44:28 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = semget$private(0x0, 0x8, 0x0) semop(r1, &(0x7f0000000040)=[{}, {0x0, 0x0, 0x1800}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) 16:44:28 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) [ 165.003062] RSP: 002b:00007f5a00840c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 165.010765] RAX: ffffffffffffffda RBX: 00007f5a008416d4 RCX: 0000000000455ba9 [ 165.018020] RDX: 0000000020000280 RSI: 00000000200000c0 RDI: 0000000020000000 [ 165.025276] RBP: 000000000072bea0 R08: 0000000020000180 R09: 0000000000000000 [ 165.032531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 165.039795] R13: 00000000004c218e R14: 00000000004cfa78 R15: 0000000000000002 16:44:28 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, r0, 0x0, 0xffffffffffffffff, 0x0) 16:44:28 executing program 1 (fault-call:8 fault-nth:3): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:44:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) read(r2, &(0x7f0000001140)=""/20, 0x200011a5) 16:44:29 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./fiLe0\x00', 0x0) [ 165.179513] FAULT_INJECTION: forcing a failure. [ 165.179513] name failslab, interval 1, probability 0, space 0, times 0 [ 165.190956] CPU: 1 PID: 9576 Comm: syz-executor1 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 165.199350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 165.208707] Call Trace: [ 165.211311] dump_stack+0x1c9/0x2b4 [ 165.214951] ? dump_stack_print_info.cold.2+0x52/0x52 [ 165.220161] ? trace_hardirqs_on+0xd/0x10 [ 165.224327] should_fail.cold.4+0xa/0x11 16:44:29 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) [ 165.228403] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 165.233518] ? lock_repin_lock+0x430/0x430 [ 165.237771] ? kasan_check_write+0x14/0x20 [ 165.242018] ? __schedule+0x884/0x1ed0 [ 165.245918] ? __sched_text_start+0x8/0x8 [ 165.250077] ? kernel_text_address+0x79/0xf0 [ 165.254498] ? lock_acquire+0x1e4/0x540 [ 165.258480] ? fs_reclaim_acquire+0x20/0x20 [ 165.262808] ? lock_downgrade+0x8f0/0x8f0 [ 165.266966] ? check_same_owner+0x340/0x340 [ 165.271294] ? save_stack+0xa9/0xd0 [ 165.274951] ? kasan_kmalloc+0xc4/0xe0 [ 165.278844] ? kmem_cache_alloc_trace+0x152/0x780 [ 165.284216] ? copy_mount_options+0x5f/0x380 [ 165.288635] __should_failslab+0x124/0x180 [ 165.292879] should_failslab+0x9/0x14 [ 165.296688] kmem_cache_alloc+0x2af/0x760 [ 165.300841] ? lock_acquire+0x1e4/0x540 [ 165.304825] getname_flags+0xd0/0x5a0 [ 165.308638] ? lock_acquire+0x1e4/0x540 [ 165.312619] user_path_at_empty+0x2d/0x50 [ 165.316789] do_mount+0x180/0x1fb0 [ 165.320331] ? kasan_check_read+0x11/0x20 [ 165.324484] ? do_raw_spin_unlock+0xa7/0x2f0 [ 165.328902] ? copy_mount_string+0x40/0x40 [ 165.333175] ? retint_kernel+0x10/0x10 [ 165.340376] ? copy_mount_options+0x1f0/0x380 [ 165.344878] ? copy_mount_options+0x1fa/0x380 [ 165.349374] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 165.354910] ? copy_mount_options+0x285/0x380 [ 165.359395] ksys_mount+0x12d/0x140 [ 165.363005] __x64_sys_mount+0xbe/0x150 [ 165.366978] do_syscall_64+0x1b9/0x820 [ 165.370856] ? finish_task_switch+0x1d3/0x870 [ 165.375346] ? syscall_return_slowpath+0x5e0/0x5e0 [ 165.380269] ? syscall_return_slowpath+0x31d/0x5e0 [ 165.385195] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 165.390209] ? prepare_exit_to_usermode+0x291/0x3b0 [ 165.395208] ? perf_trace_sys_enter+0xb10/0xb10 [ 165.399859] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 165.404706] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 165.409876] RIP: 0033:0x455ba9 16:44:29 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x3) close(r1) close(r0) 16:44:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) read(r2, &(0x7f0000001140)=""/20, 0x65) ioctl$TCSBRK(r2, 0x5409, 0x8) [ 165.413043] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 165.432176] RSP: 002b:00007f5a00840c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 165.439874] RAX: ffffffffffffffda RBX: 00007f5a008416d4 RCX: 0000000000455ba9 [ 165.447138] RDX: 0000000020000280 RSI: 00000000200000c0 RDI: 0000000020000000 [ 165.454389] RBP: 000000000072bea0 R08: 0000000020000180 R09: 0000000000000000 [ 165.461657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 165.468928] R13: 00000000004c218e R14: 00000000004cfa78 R15: 0000000000000003 16:44:29 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000140)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = gettid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x2) fcntl$dupfd(r3, 0x0, r1) dup3(r4, r3, 0x0) write(r3, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCXONC(r3, 0x540a, 0x2) tkill(r2, 0x1000000000016) 16:44:29 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./fil.0\x00', 0x0) 16:44:29 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:44:29 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = semget$private(0x0, 0x8, 0x0) semop(r1, &(0x7f0000000040)=[{}, {0x0, 0x0, 0x1800}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) 16:44:29 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x15000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, r0, 0x0, 0xffffffffffffffff, 0x0) 16:44:29 executing program 1 (fault-call:8 fault-nth:4): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:44:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000000)=0x6) read(r2, &(0x7f0000001140)=""/20, 0x65) [ 165.684503] FAULT_INJECTION: forcing a failure. [ 165.684503] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 165.696351] CPU: 1 PID: 9615 Comm: syz-executor1 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 165.704670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 165.714027] Call Trace: [ 165.716614] dump_stack+0x1c9/0x2b4 [ 165.720231] ? dump_stack_print_info.cold.2+0x52/0x52 [ 165.725413] should_fail.cold.4+0xa/0x11 [ 165.729473] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 165.734563] ? perf_sched_cb_inc+0x2e0/0x2e0 [ 165.738973] ? finish_task_switch+0x1d3/0x870 [ 165.743459] ? lock_downgrade+0x8f0/0x8f0 [ 165.747593] ? finish_task_switch+0x18a/0x870 [ 165.752080] ? kasan_check_read+0x11/0x20 [ 165.756214] ? do_raw_spin_unlock+0xa7/0x2f0 [ 165.760609] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 165.765178] ? compat_start_thread+0x80/0x80 [ 165.769578] ? trace_hardirqs_on+0xd/0x10 [ 165.773718] ? _raw_spin_unlock_irq+0x27/0x70 [ 165.778205] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 165.783735] ? should_fail+0x246/0xd86 [ 165.787627] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 165.792737] __alloc_pages_nodemask+0x36e/0xdb0 [ 165.797398] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 165.802407] ? __sched_text_start+0x8/0x8 [ 165.806542] ? kernel_text_address+0x79/0xf0 [ 165.810940] ? lock_acquire+0x1e4/0x540 [ 165.814901] ? fs_reclaim_acquire+0x20/0x20 [ 165.819211] ? lock_downgrade+0x8f0/0x8f0 [ 165.823349] ? lock_release+0xa30/0xa30 [ 165.827310] ? check_same_owner+0x340/0x340 [ 165.831619] ? save_stack+0xa9/0xd0 [ 165.835238] cache_grow_begin+0x91/0x710 [ 165.839291] kmem_cache_alloc+0x689/0x760 [ 165.843428] ? lock_acquire+0x1e4/0x540 [ 165.847397] getname_flags+0xd0/0x5a0 [ 165.851187] user_path_at_empty+0x2d/0x50 [ 165.855325] do_mount+0x180/0x1fb0 [ 165.858851] ? check_same_owner+0x340/0x340 [ 165.863163] ? copy_mount_string+0x40/0x40 [ 165.867386] ? retint_kernel+0x10/0x10 [ 165.871261] ? copy_mount_options+0x213/0x380 [ 165.875744] ? write_comp_data+0x6c/0x70 [ 165.879793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 165.885313] ? copy_mount_options+0x285/0x380 [ 165.889795] ksys_mount+0x12d/0x140 [ 165.893413] __x64_sys_mount+0xbe/0x150 [ 165.897379] do_syscall_64+0x1b9/0x820 [ 165.905087] ? finish_task_switch+0x1d3/0x870 [ 165.909568] ? syscall_return_slowpath+0x5e0/0x5e0 [ 165.914482] ? syscall_return_slowpath+0x31d/0x5e0 [ 165.919407] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 165.924409] ? prepare_exit_to_usermode+0x291/0x3b0 [ 165.929411] ? perf_trace_sys_enter+0xb10/0xb10 [ 165.934068] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 165.938909] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 165.944086] RIP: 0033:0x455ba9 [ 165.947254] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 165.966525] RSP: 002b:00007f5a00840c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 165.974221] RAX: ffffffffffffffda RBX: 00007f5a008416d4 RCX: 0000000000455ba9 16:44:29 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:44:29 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, r0, 0x0, 0xffffffffffffffff, 0x0) 16:44:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) read(r2, &(0x7f0000001140)=""/20, 0x65) 16:44:29 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./filE0\x00', 0x0) 16:44:29 executing program 1 (fault-call:8 fault-nth:5): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) [ 165.981476] RDX: 0000000020000280 RSI: 00000000200000c0 RDI: 0000000020000000 [ 165.988731] RBP: 000000000072bea0 R08: 0000000020000180 R09: 0000000000000000 [ 165.996747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 166.004017] R13: 00000000004c218e R14: 00000000004cfa78 R15: 0000000000000004 16:44:29 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:44:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) r3 = msgget$private(0x0, 0x142) msgrcv(r3, &(0x7f0000000100)={0x0, ""/253}, 0x105, 0x3, 0x2000) read(r2, &(0x7f0000001140)=""/20, 0x65) [ 166.168367] FAULT_INJECTION: forcing a failure. [ 166.168367] name failslab, interval 1, probability 0, space 0, times 0 [ 166.179708] CPU: 1 PID: 9655 Comm: syz-executor1 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 166.188063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 166.197423] Call Trace: [ 166.200039] dump_stack+0x1c9/0x2b4 [ 166.203672] ? dump_stack_print_info.cold.2+0x52/0x52 [ 166.208871] ? putname+0xf2/0x130 [ 166.212325] ? filename_lookup+0x397/0x510 [ 166.216544] ? user_path_at_empty+0x40/0x50 [ 166.220852] ? do_mount+0x180/0x1fb0 [ 166.224556] ? __x64_sys_mount+0xbe/0x150 [ 166.228694] should_fail.cold.4+0xa/0x11 [ 166.232828] ? do_raw_spin_unlock+0xa7/0x2f0 [ 166.237223] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 166.242406] ? kasan_check_write+0x14/0x20 [ 166.246628] ? do_raw_spin_lock+0xc1/0x200 [ 166.250849] ? trace_hardirqs_off+0xd/0x10 [ 166.255082] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 166.260176] ? debug_check_no_obj_freed+0x30b/0x595 [ 166.265201] ? path_lookupat.isra.45+0x27d/0xbf0 [ 166.269962] ? trace_hardirqs_off+0xd/0x10 [ 166.274186] ? quarantine_put+0x10d/0x1b0 [ 166.278329] ? lock_acquire+0x1e4/0x540 [ 166.282300] ? fs_reclaim_acquire+0x20/0x20 [ 166.286613] ? lock_downgrade+0x8f0/0x8f0 [ 166.290765] ? check_same_owner+0x340/0x340 [ 166.295087] ? lock_downgrade+0x8f0/0x8f0 [ 166.299226] ? rcu_note_context_switch+0x730/0x730 [ 166.304140] __should_failslab+0x124/0x180 [ 166.308361] should_failslab+0x9/0x14 [ 166.312156] kmem_cache_alloc_trace+0x2cb/0x780 [ 166.316824] ? kasan_check_write+0x14/0x20 [ 166.321050] ? do_raw_read_unlock+0x3f/0x60 [ 166.325368] vfs_new_fs_context+0x5a/0x700 [ 166.329599] do_mount+0x5cf/0x1fb0 [ 166.333122] ? kasan_check_read+0x11/0x20 [ 166.337254] ? do_raw_spin_unlock+0xa7/0x2f0 [ 166.341646] ? copy_mount_string+0x40/0x40 [ 166.345876] ? kasan_kmalloc+0xc4/0xe0 [ 166.349754] ? kmem_cache_alloc_trace+0x318/0x780 [ 166.354591] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 166.360112] ? copy_mount_options+0x285/0x380 [ 166.364602] ksys_mount+0x12d/0x140 [ 166.368212] __x64_sys_mount+0xbe/0x150 [ 166.372169] do_syscall_64+0x1b9/0x820 [ 166.376040] ? finish_task_switch+0x1d3/0x870 [ 166.380525] ? syscall_return_slowpath+0x5e0/0x5e0 [ 166.385446] ? syscall_return_slowpath+0x31d/0x5e0 [ 166.390360] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 166.395362] ? prepare_exit_to_usermode+0x291/0x3b0 [ 166.400367] ? perf_trace_sys_enter+0xb10/0xb10 [ 166.405030] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 166.409874] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 166.415055] RIP: 0033:0x455ba9 [ 166.418221] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 166.437352] RSP: 002b:00007f5a00840c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 166.445052] RAX: ffffffffffffffda RBX: 00007f5a008416d4 RCX: 0000000000455ba9 [ 166.452319] RDX: 0000000020000280 RSI: 00000000200000c0 RDI: 0000000020000000 [ 166.459574] RBP: 000000000072bea0 R08: 0000000020000180 R09: 0000000000000000 16:44:30 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x5201000000000000) close(r1) close(r0) 16:44:30 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 166.466835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 166.474094] R13: 00000000004c218e R14: 00000000004cfa78 R15: 0000000000000005 16:44:30 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = gettid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x2) fcntl$dupfd(r3, 0x0, r1) dup3(r4, r3, 0x0) write(r3, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCXONC(r3, 0x540a, 0x2) tkill(r2, 0x1000000000016) 16:44:30 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:44:30 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = semget$private(0x0, 0x8, 0x0) semop(r1, &(0x7f0000000040)=[{0x0, 0x8001}], 0x1) semctl$IPC_RMID(r1, 0x0, 0x0) 16:44:30 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./fil~0\x00', 0x0) 16:44:30 executing program 1 (fault-call:8 fault-nth:6): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:44:30 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, r0, 0x0, 0xffffffffffffffff, 0x0) 16:44:30 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 166.740791] FAULT_INJECTION: forcing a failure. [ 166.740791] name failslab, interval 1, probability 0, space 0, times 0 [ 166.752224] CPU: 0 PID: 9681 Comm: syz-executor1 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 166.760544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 166.769897] Call Trace: [ 166.772480] dump_stack+0x1c9/0x2b4 [ 166.776112] ? dump_stack_print_info.cold.2+0x52/0x52 [ 166.781299] ? putname+0xf2/0x130 [ 166.784741] ? filename_lookup+0x397/0x510 [ 166.788962] ? user_path_at_empty+0x40/0x50 [ 166.793270] ? do_mount+0x180/0x1fb0 [ 166.796972] ? __x64_sys_mount+0xbe/0x150 [ 166.801154] should_fail.cold.4+0xa/0x11 [ 166.805203] ? do_raw_spin_unlock+0xa7/0x2f0 [ 166.809599] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 166.814710] ? kasan_check_write+0x14/0x20 [ 166.818949] ? do_raw_spin_lock+0xc1/0x200 [ 166.823175] ? trace_hardirqs_off+0xd/0x10 [ 166.827395] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 166.832522] ? debug_check_no_obj_freed+0x30b/0x595 [ 166.837525] ? path_lookupat.isra.45+0x27d/0xbf0 [ 166.842275] ? trace_hardirqs_off+0xd/0x10 [ 166.846495] ? quarantine_put+0x10d/0x1b0 [ 166.850638] ? lock_acquire+0x1e4/0x540 [ 166.854597] ? fs_reclaim_acquire+0x20/0x20 [ 166.858904] ? lock_downgrade+0x8f0/0x8f0 [ 166.863042] ? check_same_owner+0x340/0x340 [ 166.867353] ? lock_downgrade+0x8f0/0x8f0 [ 166.871486] ? rcu_note_context_switch+0x730/0x730 [ 166.876406] __should_failslab+0x124/0x180 [ 166.880639] should_failslab+0x9/0x14 [ 166.884429] kmem_cache_alloc_trace+0x2cb/0x780 [ 166.889088] ? kasan_check_write+0x14/0x20 [ 166.893309] ? do_raw_read_unlock+0x3f/0x60 [ 166.897620] vfs_new_fs_context+0x5a/0x700 [ 166.901847] do_mount+0x5cf/0x1fb0 [ 166.905388] ? kasan_check_write+0x14/0x20 [ 166.909616] ? copy_mount_string+0x40/0x40 [ 166.913849] ? kasan_kmalloc+0xc4/0xe0 [ 166.917729] ? kmem_cache_alloc_trace+0x318/0x780 [ 166.922562] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 166.928091] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 166.933619] ? copy_mount_options+0x285/0x380 [ 166.938103] ksys_mount+0x12d/0x140 [ 166.942243] __x64_sys_mount+0xbe/0x150 [ 166.946205] do_syscall_64+0x1b9/0x820 [ 166.950080] ? finish_task_switch+0x1d3/0x870 [ 166.954573] ? syscall_return_slowpath+0x5e0/0x5e0 [ 166.959488] ? syscall_return_slowpath+0x31d/0x5e0 [ 166.964438] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 166.969444] ? prepare_exit_to_usermode+0x291/0x3b0 [ 166.974455] ? perf_trace_sys_enter+0xb10/0xb10 [ 166.979121] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 166.983956] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 166.989150] RIP: 0033:0x455ba9 [ 166.992322] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 167.011687] RSP: 002b:00007f5a00840c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 167.019385] RAX: ffffffffffffffda RBX: 00007f5a008416d4 RCX: 0000000000455ba9 [ 167.026644] RDX: 0000000020000280 RSI: 00000000200000c0 RDI: 0000000020000000 [ 167.033903] RBP: 000000000072bea0 R08: 0000000020000180 R09: 0000000000000000 16:44:30 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file.\x00', 0x0) 16:44:30 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:44:30 executing program 1 (fault-call:8 fault-nth:7): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) [ 167.041174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 167.048433] R13: 00000000004c218e R14: 00000000004cfa78 R15: 0000000000000006 16:44:30 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:44:30 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, r0, 0x0, 0xffffffffffffffff, 0x0) 16:44:31 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file~\x00', 0x0) [ 167.186135] FAULT_INJECTION: forcing a failure. [ 167.186135] name failslab, interval 1, probability 0, space 0, times 0 [ 167.197496] CPU: 1 PID: 9717 Comm: syz-executor1 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 167.205807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 167.215182] Call Trace: [ 167.217783] dump_stack+0x1c9/0x2b4 [ 167.221426] ? dump_stack_print_info.cold.2+0x52/0x52 [ 167.226627] ? __kernel_text_address+0xd/0x40 [ 167.231133] ? unwind_get_return_address+0x61/0xa0 16:44:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) ioctl(r0, 0x9, &(0x7f0000000040)="b21b3c525626df95808ffe1ffb542f82516df9ecbca07ebe338499e01b5dd3c61ce562d0cb96d7b79d5294a01899eb2b02bd11815de3a647a0c3b9026b3096cea6") get_thread_area(&(0x7f0000000100)={0x5, 0xffffffff, 0xffffffff, 0x39e3, 0x1, 0x200, 0x6, 0x0, 0x5de, 0xca65}) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/20, 0x14) [ 167.236072] should_fail.cold.4+0xa/0x11 [ 167.240141] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 167.245249] ? save_stack+0xa9/0xd0 [ 167.248881] ? kasan_kmalloc+0xc4/0xe0 [ 167.252775] ? kmem_cache_alloc_trace+0x152/0x780 [ 167.257623] ? sysfs_init_fs_context+0xb8/0x200 [ 167.262291] ? vfs_new_fs_context+0x2ba/0x700 [ 167.266811] ? do_mount+0x5cf/0x1fb0 [ 167.270521] ? ksys_mount+0x12d/0x140 [ 167.274324] ? __x64_sys_mount+0xbe/0x150 [ 167.278480] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 167.283850] ? ksys_mount+0x12d/0x140 [ 167.287657] ? __x64_sys_mount+0xbe/0x150 [ 167.291818] ? do_syscall_64+0x1b9/0x820 [ 167.295891] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 167.301278] ? lock_acquire+0x1e4/0x540 [ 167.305271] ? fs_reclaim_acquire+0x20/0x20 [ 167.309607] ? lock_downgrade+0x8f0/0x8f0 [ 167.313764] ? check_same_owner+0x340/0x340 [ 167.318089] ? rcu_note_context_switch+0x730/0x730 [ 167.323023] __should_failslab+0x124/0x180 [ 167.327269] should_failslab+0x9/0x14 [ 167.331106] __kmalloc_track_caller+0x2c4/0x760 16:44:31 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x100000000000000) close(r1) close(r0) 16:44:31 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) [ 167.335787] ? vfs_set_fs_source+0x67/0x180 [ 167.340117] kmemdup_nul+0x31/0xa0 [ 167.343677] vfs_set_fs_source+0x67/0x180 [ 167.347843] do_mount+0x61b/0x1fb0 [ 167.351392] ? kasan_check_read+0x11/0x20 [ 167.355563] ? do_raw_spin_unlock+0xa7/0x2f0 [ 167.360765] ? copy_mount_string+0x40/0x40 [ 167.365029] ? kasan_kmalloc+0xc4/0xe0 [ 167.369021] ? kmem_cache_alloc_trace+0x318/0x780 [ 167.373882] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 167.379429] ? copy_mount_options+0x285/0x380 [ 167.383935] ksys_mount+0x12d/0x140 [ 167.387616] __x64_sys_mount+0xbe/0x150 [ 167.391603] do_syscall_64+0x1b9/0x820 [ 167.395493] ? finish_task_switch+0x1d3/0x870 [ 167.399996] ? syscall_return_slowpath+0x5e0/0x5e0 [ 167.404928] ? syscall_return_slowpath+0x31d/0x5e0 [ 167.409851] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 167.414859] ? prepare_exit_to_usermode+0x291/0x3b0 [ 167.419859] ? perf_trace_sys_enter+0xb10/0xb10 [ 167.424513] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 167.429338] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 167.434512] RIP: 0033:0x455ba9 [ 167.437685] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 167.456843] RSP: 002b:00007f5a00840c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 167.464542] RAX: ffffffffffffffda RBX: 00007f5a008416d4 RCX: 0000000000455ba9 [ 167.471800] RDX: 0000000020000280 RSI: 00000000200000c0 RDI: 0000000020000000 [ 167.479055] RBP: 000000000072bea0 R08: 0000000020000180 R09: 0000000000000000 [ 167.486318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 167.493583] R13: 00000000004c218e R14: 00000000004cfa78 R15: 0000000000000007 16:44:31 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = gettid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x2) fcntl$dupfd(r3, 0x0, r1) dup3(r4, r3, 0x0) write(r3, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCXONC(r3, 0x540a, 0x2) tkill(r2, 0x1000000000016) 16:44:31 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x1500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, r0, 0x0, 0xffffffffffffffff, 0x0) 16:44:31 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = semget$private(0x0, 0x8, 0x0) semop(r1, &(0x7f0000000040)=[{0x0, 0x8001}], 0x1) semctl$IPC_RMID(r1, 0x0, 0x0) 16:44:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) read(r2, &(0x7f0000000240)=""/20, 0x1fa) 16:44:31 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:44:31 executing program 1 (fault-call:8 fault-nth:8): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:44:31 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file<\x00', 0x0) 16:44:31 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 167.968511] FAULT_INJECTION: forcing a failure. [ 167.968511] name failslab, interval 1, probability 0, space 0, times 0 [ 167.979874] CPU: 0 PID: 9761 Comm: syz-executor1 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 167.988201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 167.997558] Call Trace: [ 168.000146] dump_stack+0x1c9/0x2b4 [ 168.003763] ? dump_stack_print_info.cold.2+0x52/0x52 [ 168.008939] ? __kernel_text_address+0xd/0x40 [ 168.013426] ? perf_trace_lock+0xde/0x920 [ 168.017564] should_fail.cold.4+0xa/0x11 [ 168.021612] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 168.026705] ? zap_class+0x740/0x740 [ 168.030419] ? kasan_kmalloc+0xc4/0xe0 [ 168.034299] ? kmem_cache_alloc_trace+0x152/0x780 [ 168.039129] ? sysfs_init_fs_context+0xb8/0x200 [ 168.043785] ? vfs_new_fs_context+0x2ba/0x700 [ 168.048356] ? do_mount+0x5cf/0x1fb0 [ 168.052058] ? ksys_mount+0x12d/0x140 [ 168.055854] ? __x64_sys_mount+0xbe/0x150 [ 168.059991] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 168.065345] ? __x64_sys_mount+0xbe/0x150 [ 168.069481] ? do_syscall_64+0x1b9/0x820 [ 168.073535] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 168.078897] ? lock_acquire+0x1e4/0x540 [ 168.082879] ? fs_reclaim_acquire+0x20/0x20 [ 168.087185] ? lock_downgrade+0x8f0/0x8f0 [ 168.091332] ? check_same_owner+0x340/0x340 [ 168.095643] ? rcu_note_context_switch+0x730/0x730 [ 168.100564] __should_failslab+0x124/0x180 [ 168.104894] should_failslab+0x9/0x14 [ 168.108683] __kmalloc_track_caller+0x2c4/0x760 [ 168.113346] ? vfs_set_fs_source+0x67/0x180 [ 168.117666] kmemdup_nul+0x31/0xa0 [ 168.121197] vfs_set_fs_source+0x67/0x180 [ 168.125345] do_mount+0x61b/0x1fb0 [ 168.128895] ? kasan_check_write+0x14/0x20 [ 168.133127] ? copy_mount_string+0x40/0x40 [ 168.137347] ? kasan_kmalloc+0xc4/0xe0 [ 168.141233] ? kmem_cache_alloc_trace+0x318/0x780 [ 168.146066] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 168.151594] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 168.157126] ? copy_mount_options+0x285/0x380 [ 168.161614] ksys_mount+0x12d/0x140 [ 168.166175] __x64_sys_mount+0xbe/0x150 [ 168.170143] do_syscall_64+0x1b9/0x820 [ 168.174023] ? finish_task_switch+0x1d3/0x870 [ 168.178506] ? syscall_return_slowpath+0x5e0/0x5e0 [ 168.183426] ? syscall_return_slowpath+0x31d/0x5e0 [ 168.188343] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 168.193360] ? prepare_exit_to_usermode+0x291/0x3b0 [ 168.198364] ? perf_trace_sys_enter+0xb10/0xb10 [ 168.203042] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 168.207877] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 168.213054] RIP: 0033:0x455ba9 [ 168.216324] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 168.235603] RSP: 002b:00007f5a00840c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 168.243307] RAX: ffffffffffffffda RBX: 00007f5a008416d4 RCX: 0000000000455ba9 [ 168.250647] RDX: 0000000020000280 RSI: 00000000200000c0 RDI: 0000000020000000 [ 168.257910] RBP: 000000000072bea0 R08: 0000000020000180 R09: 0000000000000000 16:44:32 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:44:32 executing program 3: socket$inet6(0xa, 0x80002, 0x100000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000100)=""/132) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @rand_addr=0x100}, 0x10) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) read(r1, &(0x7f0000001140)=""/20, 0x65) epoll_create(0x7f) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000000280)) 16:44:32 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, r0, 0x0, 0xffffffffffffffff, 0x0) 16:44:32 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000001d80)="2e2f66696c65302f66692e4530eb00", &(0x7f0000001dc0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)="2e2f66696c653004", 0x0) [ 168.265172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 168.272428] R13: 00000000004c218e R14: 00000000004cfa78 R15: 0000000000000008 16:44:32 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0xeffdffff) close(r1) close(r0) 16:44:32 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x3f}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci={0x1f}, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci={0x1f}, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 16:44:32 executing program 1 (fault-call:8 fault-nth:9): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000180)) 16:44:32 executing program 3: syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x7ff, 0x0) r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)="632ee3406412c0c20983707573657465737356a4da8fae06704b190b3ee0aa2a7bb9fb29d5016c42e866726500f40f3e03daa20399c637ded66b03d01f304f2f3c81673a3e1a19271bfb264d93b3f9f007ce6f76bbf82b4927d1d2b5312359665d348fa599242093fd1ef04afc1148791ed6396677843a28ec4fc3aed060c4c77167869a160b623c77dabf7355d8c874850ab3a7974f8716597510e959c14fd6d9d57a", 0x0, 0x0) read(r2, &(0x7f0000001140)=""/20, 0x65) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x7, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000040)={'vlan0\x00', {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}) [ 168.469137] FAULT_INJECTION: forcing a failure. [ 168.469137] name failslab, interval 1, probability 0, space 0, times 0 [ 168.480442] CPU: 1 PID: 9805 Comm: syz-executor1 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 168.488762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 168.498117] Call Trace: [ 168.500707] dump_stack+0x1c9/0x2b4 [ 168.504316] ? dump_stack_print_info.cold.2+0x52/0x52 [ 168.509499] ? legitimize_mnt+0x240/0x240 [ 168.513650] should_fail.cold.4+0xa/0x11 [ 168.517698] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 168.522783] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 168.527781] ? bpf_prog_kallsyms_find+0xde/0x4c0 [ 168.532525] ? trace_hardirqs_on+0x10/0x10 [ 168.536743] ? lock_downgrade+0x8f0/0x8f0 [ 168.540898] ? lock_release+0xa30/0xa30 [ 168.544857] ? kasan_check_read+0x11/0x20 [ 168.548987] ? lock_acquire+0x1e4/0x540 [ 168.552943] ? fs_reclaim_acquire+0x20/0x20 [ 168.557243] ? lock_downgrade+0x8f0/0x8f0 [ 168.561384] ? check_same_owner+0x340/0x340 [ 168.565697] ? unwind_get_return_address+0x61/0xa0 [ 168.570613] ? rcu_note_context_switch+0x730/0x730 [ 168.575532] __should_failslab+0x124/0x180 [ 168.579758] should_failslab+0x9/0x14 [ 168.583549] kmem_cache_alloc_trace+0x2cb/0x780 [ 168.588196] ? save_stack+0xa9/0xd0 [ 168.591813] ? save_stack+0x43/0xd0 [ 168.595422] ? kasan_kmalloc+0xc4/0xe0 [ 168.599287] ? kmem_cache_alloc_trace+0x152/0x780 [ 168.604107] ? kernfs_get_tree+0xde/0xba0 [ 168.608239] alloc_super+0xd4/0xb10 [ 168.611850] ? destroy_unused_super.part.11+0x110/0x110 [ 168.617192] ? sget_fc+0x261/0x960 [ 168.620715] ? lock_downgrade+0x8f0/0x8f0 [ 168.624848] ? kasan_check_read+0x11/0x20 [ 168.628979] ? do_raw_spin_unlock+0xa7/0x2f0 [ 168.633370] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 168.637944] ? kasan_check_write+0x14/0x20 [ 168.642159] ? do_raw_spin_lock+0xc1/0x200 [ 168.646384] ? kernfs_sop_show_options+0x190/0x190 [ 168.651295] sget_fc+0x269/0x960 [ 168.654654] ? kernfs_sop_show_path+0x1b0/0x1b0 [ 168.659313] ? alloc_super+0xb10/0xb10 [ 168.663194] ? kmem_cache_alloc_trace+0x318/0x780 [ 168.668037] ? lock_release+0xa30/0xa30 [ 168.672006] kernfs_get_tree+0x229/0xba0 [ 168.676078] ? kasan_unpoison_shadow+0x35/0x50 [ 168.680645] ? kasan_kmalloc+0xc4/0xe0 [ 168.684544] ? kernfs_super_ns+0x70/0x70 [ 168.688595] ? __kmalloc_track_caller+0x311/0x760 [ 168.693420] ? generic_parse_monolithic+0xfd/0x180 [ 168.698331] sysfs_get_tree+0x40/0x120 [ 168.702203] vfs_get_tree+0x1cb/0x5c0 [ 168.705989] do_mount+0x6c1/0x1fb0 [ 168.709522] ? check_same_owner+0x340/0x340 [ 168.713836] ? lock_release+0xa30/0xa30 [ 168.717794] ? copy_mount_string+0x40/0x40 [ 168.722016] ? retint_kernel+0x10/0x10 [ 168.725907] ? copy_mount_options+0x1f0/0x380 [ 168.730393] ? copy_mount_options+0x202/0x380 [ 168.734889] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 168.740413] ? copy_mount_options+0x285/0x380 [ 168.744908] ksys_mount+0x12d/0x140 [ 168.748525] __x64_sys_mount+0xbe/0x150 [ 168.752506] do_syscall_64+0x1b9/0x820 [ 168.756405] ? syscall_return_slowpath+0x5e0/0x5e0 [ 168.761322] ? syscall_return_slowpath+0x31d/0x5e0 [ 168.766238] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 168.771254] ? prepare_exit_to_usermode+0x291/0x3b0 [ 168.776253] ? perf_trace_sys_enter+0xb10/0xb10 [ 168.780918] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 168.785746] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 168.790920] RIP: 0033:0x455ba9 [ 168.794086] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 168.813244] RSP: 002b:00007f5a00840c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 168.821114] RAX: ffffffffffffffda RBX: 00007f5a008416d4 RCX: 0000000000455ba9 [ 168.828372] RDX: 0000000020000280 RSI: 00000000200000c0 RDI: 0000000020000000 [ 168.835633] RBP: 000000000072bea0 R08: 0000000020000180 R09: 0000000000000000 [ 168.842892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 168.850144] R13: 00000000004c218e R14: 00000000004cfa78 R15: 0000000000000009 [ 168.857535] Filesystem sysfs get_tree() didn't set fc->root [ 168.863365] ------------[ cut here ]------------ [ 168.868115] kernel BUG at fs/super.c:1761! [ 168.872410] invalid opcode: 0000 [#1] SMP KASAN [ 168.877079] CPU: 1 PID: 9805 Comm: syz-executor1 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 168.885385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 168.894738] RIP: 0010:vfs_get_tree.cold.21+0x4f/0x60 [ 168.899818] Code: 37 00 48 c1 e0 2a 48 89 da 48 c1 ea 03 80 3c 02 00 74 08 48 89 df e8 30 f0 f4 ff 48 8b 33 48 c7 c7 a0 5a f3 87 e8 05 36 9d ff <0f> 0b 4c 89 ef e8 17 f0 f4 ff eb c0 90 90 90 90 90 55 48 89 e5 53 [ 168.918996] RSP: 0018:ffff880196607be0 EFLAGS: 00010286 [ 168.924354] RAX: 000000000000002f RBX: ffffffff8906e5e0 RCX: ffffc90003618000 [ 168.931623] RDX: 0000000000000000 RSI: ffffffff81634381 RDI: 0000000000000001 [ 168.938880] RBP: ffff880196607c10 R08: ffff8801ab9fe300 R09: ffffed003b5e4fc0 [ 168.946135] R10: ffffed003b5e4fc0 R11: ffff8801daf27e07 R12: 0000000000000000 [ 168.953403] R13: ffff8801d7058ac8 R14: 0000000000000020 R15: ffff8801d7058ad8 [ 168.960660] FS: 00007f5a00841700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 168.968878] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 168.974742] CR2: 00007ffd27325c7c CR3: 00000001c8c50000 CR4: 00000000001406e0 [ 168.981996] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 168.989252] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 168.996501] Call Trace: [ 168.999081] do_mount+0x6c1/0x1fb0 [ 169.003047] ? check_same_owner+0x340/0x340 [ 169.007366] ? lock_release+0xa30/0xa30 [ 169.011322] ? copy_mount_string+0x40/0x40 [ 169.015539] ? retint_kernel+0x10/0x10 [ 169.019410] ? copy_mount_options+0x1f0/0x380 [ 169.023887] ? copy_mount_options+0x202/0x380 [ 169.028364] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 169.033881] ? copy_mount_options+0x285/0x380 [ 169.038361] ksys_mount+0x12d/0x140 [ 169.041974] __x64_sys_mount+0xbe/0x150 [ 169.045945] do_syscall_64+0x1b9/0x820 [ 169.049821] ? syscall_return_slowpath+0x5e0/0x5e0 [ 169.054743] ? syscall_return_slowpath+0x31d/0x5e0 [ 169.059657] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 169.064665] ? prepare_exit_to_usermode+0x291/0x3b0 [ 169.069672] ? perf_trace_sys_enter+0xb10/0xb10 [ 169.074324] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 169.079152] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 169.084330] RIP: 0033:0x455ba9 [ 169.087496] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 169.106667] RSP: 002b:00007f5a00840c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 169.114362] RAX: ffffffffffffffda RBX: 00007f5a008416d4 RCX: 0000000000455ba9 [ 169.121615] RDX: 0000000020000280 RSI: 00000000200000c0 RDI: 0000000020000000 [ 169.128873] RBP: 000000000072bea0 R08: 0000000020000180 R09: 0000000000000000 [ 169.136133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 169.143733] R13: 00000000004c218e R14: 00000000004cfa78 R15: 0000000000000009 [ 169.151001] Modules linked in: [ 169.154185] Dumping ftrace buffer: [ 169.157704] (ftrace buffer empty) [ 169.162784] ---[ end trace 133cda8412d244f8 ]--- [ 169.167585] RIP: 0010:vfs_get_tree.cold.21+0x4f/0x60 [ 169.172702] Code: 37 00 48 c1 e0 2a 48 89 da 48 c1 ea 03 80 3c 02 00 74 08 48 89 df e8 30 f0 f4 ff 48 8b 33 48 c7 c7 a0 5a f3 87 e8 05 36 9d ff <0f> 0b 4c 89 ef e8 17 f0 f4 ff eb c0 90 90 90 90 90 55 48 89 e5 53 [ 169.191970] RSP: 0018:ffff880196607be0 EFLAGS: 00010286 [ 169.197373] RAX: 000000000000002f RBX: ffffffff8906e5e0 RCX: ffffc90003618000 [ 169.204699] RDX: 0000000000000000 RSI: ffffffff81634381 RDI: 0000000000000001 [ 169.212087] RBP: ffff880196607c10 R08: ffff8801ab9fe300 R09: ffffed003b5e4fc0 [ 169.219380] R10: ffffed003b5e4fc0 R11: ffff8801daf27e07 R12: 0000000000000000 [ 169.226665] R13: ffff8801d7058ac8 R14: 0000000000000020 R15: ffff8801d7058ad8 [ 169.233959] FS: 00007f5a00841700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 169.242492] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 169.248388] CR2: 00007ffd27325c7c CR3: 00000001c8c50000 CR4: 00000000001406e0 [ 169.255683] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 169.262969] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 169.270257] Kernel panic - not syncing: Fatal exception [ 169.276082] Dumping ftrace buffer: [ 169.279601] (ftrace buffer empty) [ 169.283288] Kernel Offset: disabled [ 169.286892] Rebooting in 86400 seconds..