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"}, 0x1058) listen(r0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x10) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x80401, 0x0) listen(r0, 0x0) [ 256.663759] attempt to access beyond end of device [ 256.669976] loop5: rw=4096, want=136, limit=2 [ 256.674566] gfs2: error 10 reading superblock 22:40:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) r4 = syz_open_pts(r0, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000001c0)=0x36) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000200)={0x17}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000240)={0x4, 0x8f, 0x3ff, {0x77359400}, 0x5fa7, 0xa19}) creat(&(0x7f0000000000)='./file0\x00', 0x20) 22:40:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x7, 0x8, 0x5, 0x15a4965e}, 0x10) recvmmsg(r0, &(0x7f0000008880), 0x372, 0x44000102, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x800000004e20, 0x0, @mcast1}, 0x1c) 22:40:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x200, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) r4 = syz_open_pts(r0, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f00000001c0)=0x36) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x480000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r5, 0x20, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4139f9221ca4ae8b}, 0x4000001) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) r6 = getuid() getresuid(&(0x7f0000000480), &(0x7f00000004c0)=0x0, &(0x7f0000000500)) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000900)={0xffffffff, 0xdc84, 0xffffffffffff89c2}) fstat(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f00000005c0)=0x0, &(0x7f0000000640), &(0x7f0000000680)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f00000007c0)=0xe8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0, 0x0}, &(0x7f0000000840)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000010002000000000002000700", @ANYRES32=r6, @ANYBLOB="7c83e190fe523b510339d7a35542b6749c0c5acf7281e0b67d0e3014a147d928ee4c50b641f95daf8aeaf676a93f70d412c93f740392580b6a2d96353ca65d3878d8bc5eb62206993d300a762635facb69b5bdb9a63d2395f1fcbff16b1ca4c2658f091531cecdfffffffffffffffba86e0f797d9c6f441240fb24f1c60e93d457795584765f043a904311d4a097a8c20a8780bc799d91c5fe212e4ad536a59b1c8c0d59b5eb3a343b3b0ae76555ecd2bede41853325bea26605ca7ca84a0b7378af368e80989e1e1f75ed757276a856", @ANYRES32=r7, @ANYBLOB="02002e64", @ANYRES32=r8, @ANYBLOB="02000200", @ANYRES32=r9, @ANYBLOB="02000100", @ANYRES32=r10, @ANYBLOB="040003000000000008000200", @ANYRES32=r11, @ANYBLOB="10000200000000002000040000000000"], 0x54, 0x2) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r1) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000200)={0x17}) creat(&(0x7f0000000000)='./file0\x00', 0x20) [ 256.742598] attempt to access beyond end of device [ 256.758252] loop5: rw=4096, want=136, limit=2 [ 256.764768] gfs2: error 10 reading superblock 22:40:39 executing program 5: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000400)='.\x00', 0x400, 0x1bf, 0x0, 0x0, 0x0) 22:40:39 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r1, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x31}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6c}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xf}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}]}, 0x68}, 0x1, 0x0, 0x0, 0xac5a972fc61a112}, 0x4090) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r2) r6 = syz_open_pts(r2, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f00000001c0)) write$binfmt_aout(r2, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$KVM_GET_REGS(r3, 0x8090ae81, &(0x7f0000000380)) ioctl$TCSETSF(r6, 0x5412, &(0x7f0000000200)={0x17}) creat(0x0, 0x20) 22:40:39 executing program 4: r0 = getpgrp(0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1c000000000000010000400200007b49b2ecf17c81999db0f1ebcf03872b4c8d3831b643343b4e40763d188200", @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x32, 0x2}, 0x40) unshare(0x2040400) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = accept(0xffffffffffffffff, &(0x7f0000000300)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000000)=0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) ioctl$sock_ifreq(r3, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f0000000140)={0xb48, 0x2}) 22:40:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@dev, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000440)=0xe8) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', r1, r2, 0x1000) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000002c0)={0x54, 0x9, 0x6, {0x4, 0x400}, {0x5, 0x8}, @const={0x80000001, {0x10000, 0x0, 0x1f, 0x3e8d}}}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0xa, 0x0, 0x5) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r5, @ANYBLOB="000225bd7000fcdbdf250e000000080005004000000014000300080003000200000008000300030000001c000200080004008000000008000b0000000000080003000400000020000300150002006270713000000000000000000000000008000500000000041400010008000500040000000800080000000080"], 0x80}, 0x1, 0x0, 0x0, 0x8fc30993d9b4e1d8}, 0x4000) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00122c868adb8f9883d664000000000c00020008000400ffffffff"], 0x3c}}, 0x0) 22:40:39 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose, @rose, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0xfffffffffffffe03) listen(r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x200) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f00000000c0)={0x0, 0x8, 0x7fffffff, 0x1, 0x1c0000000000000}) 22:40:39 executing program 5: syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f0000000400)='.\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x6, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000140)={0x4, &(0x7f0000000040)=[{}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000000c0)={r1, 0x9}) r2 = getpgid(0xffffffffffffffff) r3 = geteuid() ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000c00)=0x100000000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000003c0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@local}}, &(0x7f0000000540)=0xe8) stat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000640)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000780)=0xe8) bind$vsock_dgram(r0, &(0x7f0000000bc0)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000007c0)={0x0, 0x0, 0x0}, &(0x7f0000000800)=0xc) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000840)=0x0) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r0, &(0x7f0000000b80)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000280)="fbdff8c36b8cefad8376548894154a1c5ff064aaeee85e4d1d5827c82940fedcda30aec46559efb05289cad6f56811626748db3dde9459a05c96616e63be97918549cec124db158e4b6f7f34043dee2f85e368c80e4bd599255fc326efda90f736ecfa799e61d012438d271c9e1e06523a51c468d43fc2a59fa3794e1cd5db9a5e1f24e57b6178f4ddc521135291bb4a8a1a66e5ffdab0eb5f638f1003d73b915e9145e01b879565f8e36089", 0xac}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="24000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="00020000000000000000e942fbf5000800000000", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x8000}, 0x8000) prctl$PR_GET_THP_DISABLE(0x2a) [ 257.014588] audit: type=1400 audit(1566772839.384:70): avc: denied { ioctl } for pid=13311 comm="syz-executor.4" path="socket:[46406]" dev="sockfs" ino=46406 ioctlcmd=0x8991 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 22:40:39 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='eth0\x00', 0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) keyctl$get_keyring_id(0x0, r1, 0x7) r3 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x9, 0x280000) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r3, 0x111, 0x4, 0x1, 0x4) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x10) listen(r0, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 22:40:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) r4 = syz_open_pts(r0, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000001c0)=0x36) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000002c0)={r5, 0x7, 0x200}, 0x8) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) ioctl$KVM_GET_CLOCK(r3, 0x8030ae7c, &(0x7f0000000300)) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000200)={0x17, 0x401, 0x0, 0x2}) creat(&(0x7f0000000000)='./file0\x00', 0x20) [ 257.093843] attempt to access beyond end of device [ 257.108245] loop5: rw=4096, want=136, limit=64 [ 257.123294] gfs2: error 10 reading superblock [ 257.160254] QAT: Invalid ioctl [ 257.177817] QAT: Invalid ioctl [ 257.189535] QAT: Invalid ioctl 22:40:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfe47bf070") r1 = userfaultfd(0x0) r2 = memfd_create(&(0x7f0000000040)='\x00', 0x0) pwritev(r2, &(0x7f0000000280)=[{&(0x7f0000000080)='\r', 0x1}], 0x1, 0x40000) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x12, r2, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) fgetxattr(r2, &(0x7f0000000000)=@random={'user.', '\x00'}, &(0x7f00000000c0)=""/187, 0xbb) [ 257.211816] QAT: Invalid ioctl [ 257.218240] bond0: Releasing backup interface bond_slave_1 [ 257.236906] QAT: Invalid ioctl [ 257.240973] QAT: Invalid ioctl [ 257.247962] QAT: Invalid ioctl [ 257.289188] attempt to access beyond end of device [ 257.307620] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 257.326251] QAT: Invalid ioctl [ 257.332042] QAT: Invalid ioctl 22:40:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000280)=""/123) r4 = syz_open_pts(r0, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r3, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000240)=0x4) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000001c0)) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000200)={0x17}) creat(0x0, 0x20) [ 257.344592] QAT: Invalid ioctl [ 257.348363] bond0: Releasing backup interface bond_slave_1 [ 257.352228] loop5: rw=4096, want=136, limit=64 [ 257.357648] QAT: Invalid ioctl [ 257.362249] QAT: Invalid ioctl [ 257.369155] QAT: Invalid ioctl [ 257.388789] gfs2: error 10 reading superblock 22:40:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x800000000000007c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) r3 = syz_open_pts(r0, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f00000001c0)=0x36) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000200)={0x17}) creat(&(0x7f0000000000)='./file0\x00', 0x20) [ 257.402838] QAT: Invalid ioctl 22:40:39 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x10) listen(r0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000001080)='/dev/midi#\x00', 0x1, 0x200000) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f00000010c0)) recvfrom$netrom(r0, &(0x7f0000000080)=""/4096, 0x1000, 0x10041, 0x0, 0x0) 22:40:39 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='eth0\x00', 0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) keyctl$get_keyring_id(0x0, r1, 0x7) r3 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x9, 0x280000) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r3, 0x111, 0x4, 0x1, 0x4) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x10) listen(r0, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 22:40:39 executing program 5: syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f0000000400)='.\x00', 0x400, 0x0, 0x0, 0x0, 0x0) r0 = dup(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x4, 0x1000, 0x4a1b}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r1, 0x0, 0x0, 0x1, 0x8, 0x10000}, 0x14) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r2 = getpgrp(0xffffffffffffffff) write$cgroup_pid(r0, &(0x7f0000000000)=r2, 0x12) sendmmsg(r0, &(0x7f0000002440)=[{{&(0x7f0000000100)=@nfc={0x27, 0x0, 0x0, 0x5}, 0x80, &(0x7f0000000540)=[{&(0x7f00000001c0)="738a3abb9fc5e0b9fc44fa010f8823e26ddc3c894c2cd58dc83d21b9d31cd76a2395d574f2ce886bea76d9d55ce7698150d5e4e162b9f5afc1223fbf31740d8652eec28c85d972d4785916ae7cac32ab94c4f77b0606885dab53a0028bcf4ff6f6c7858c90cc581021ec5b25e9cf373b65c8e1503ea8c0017c1868b9f9a6cd822867e0f8bf72173c2095554aea396a1c275f05769f308d7ab67006cfc0606ff22947c52fec41b6cea06446eb960ce083cda7e910402d5b5f19aa2299fc4914378807847aa74e2f46", 0xc8}, {&(0x7f00000002c0)="e7946aefd4592930b98b7694e9048b0622d0a6711195ddd901e7b635615c7e84accbd7cd3cc01491bb5ddd819354f4472f3da9fb8b2479321d00b5927fbff4d06399b8f1b912ab79fc716577b4fc06ec50eb5b36085c57", 0x57}, {&(0x7f0000000340)="8c5a9c681a392b082977105ccae73dfdfa0d6c3f494cd37d023f1a5dd1831803868484628d0325090bfe3874f03560a41595b9f29f38ef0cf8c02037cb87587a9e66b51cfddee09c175e8b2b0e23f2a598f8375972fe74cd4645f691fbbb1b12e92df411b66674fe71aee7aa8f8df644a30fe05b98250703", 0x78}, {&(0x7f0000000440)="025fd8e4e25dbddac87eaa11b6e21774d117341839e18dc890662ef23c56103070412070bef018b87d488962827e97cb2c22636782df97890a6b024b719509b974d7e5ffbddb00b1057983079c6ba28e15a17a0a2418171589e9a04f4be8ed", 0x5f}, {&(0x7f00000004c0)="66e8ad6f39d89c5c0612c2f3aaa30ae57775af165bf38c9f74a9a0324bb3d90cf491697589b341fd2cee6ef37ca7c1da9daefdd37c41b5fa493bd0b9715b80aead397413944f33c0a401c6e71423bbe6d5a8a1af4065", 0x56}], 0x5, &(0x7f00000005c0)=[{0xe8, 0x0, 0x0, "2585cf91fdeca0487830db2dfc7454d484502b2ef23db6b1fd74818121018315c02e03e3ae32475b5b37c795cc76dc1ed50898ee16507697e80bf801d56d1b13d0b777873a7246a1b436a30124f9dadeea6bba692d698135e105d90e3c57a3c4e592f1afb4ec8b17c1739276f851925f197ef195d1e50183084f00c0320d1a22d99a1cb71e5fb5ec85dbb231187a4d84304a56b7210c4844670b5dccd6dad1674cdbe7b77ad0d4365b2b6cba74ee66a71508cf5283bff6025bd62b32ab8e601ec4df5cdb9de38608139007a4dd09c68007fe5e8e3e"}, {0xb0, 0x104, 0x0, "dc84653334d8c039a714129ef63170126a0a17f6a6e8437af0e2abc173389ced04d65e342fff592e95528e5fb6e61d3bab1d3a9d3acb97e93d8ca4ae3838854312cd60dfed93482b69bfda7584dd4c093e8010ce9a422cfb06c55e9a5125674f8ee0a45a8dfb7c197680a2e7446cf10bcdc02865706a267362539a7456dbccac52557d5020d7660c4a1e4d4091041c6049495cdec94a21b36159"}], 0x198}}, {{&(0x7f0000000780)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e20, 0x80}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000800)="f23bb490f05f30e1ee241f35cb1efe277f802fe30af30a48d9a3781ea8c2108d6c5cdcfc955f25972ec04c9b0c217881f3a258540ef6e2fe5b686747a02ff79e1d497c7bc209845b08af6407c24fbc68386e1ab2ffa5009c7c48bdc16089f2fd006bfb88d6fa177a50ce43454a8db3d555657d1e1463b4ecb928bb9ecdd83585d91390f212cd1493c4507cc9c4d8ab7f2056f91322f210a0dd20a28e91673a784cd0058cf942b294a51dce03d1fccdac73bd0d0b3cf73090e4bfec2d35efe47d7659061b9de1f246f8f66e56c7bbda8375a1534f2180d7a5a87f13151cbd4792cfc2b206", 0xe4}, {&(0x7f00000003c0)="775fc1787d690fbc90", 0x9}], 0x2}}, {{&(0x7f0000000940)=@pptp={0x18, 0x2, {0x1, @empty}}, 0x80, &(0x7f0000001c80)=[{&(0x7f00000009c0)="edb80c186bd4d3173d70", 0xa}, {&(0x7f0000000a00)="e41bf087f35fae6acf499b9c575288b6010004008dbd8687ced89c3a895864aabf84841fe2552e8ef579a389c391319c902ac782b3d4656f31cf7d1a1387c6fd8db4d3514e61f7c9463acfb2c0d0714f06b7c8c60444f48367f1dc8434c28d9596e51e69bae0eaef7e102049a351023b4de9890188100b7e3227944895c59e25d6ebc68d7df19ab992d512f2528ec4e9c16d8b8432dc", 0x96}, {&(0x7f0000000ac0)="5743d5b5e1dc35a579d86f7e4018f6045aa83a8d6149f3b3a78f1fac5afa10125665bfe4191ac3877d44345c7742c6bb1c9081c38e5794536089bcae279761efe1b6933cc73f7edb98bc17ad0ebb442086d712a2ee73842e6d57e24a0486292f779c3bddb1a3ca4271294e5aaa18e62bfc3988a896294de97f8f4763c00b00bf4d9abc74bd5ed2d44e409505aa1dd0d02bb66685aa0bc5031c8bef4354099b333ebf178c0fc98b", 0xa7}, {&(0x7f0000000b80)="fe2d029569cff7b8f89363ca2eb671a70e05de5256f92828f4d1f59c8f4e2e3748f5e74ee78eafcb7ffc526a50a623517a46b7754a14153fe1953f5e24b3cedc2c5adc1f02613183fcb0dc66ce1d75090f09f9b3a33deeddc2565a5014a629a5f99ee5db3af044d48b9276416627a379446b0617130e7faa777ed3abd6a689fdf49dca6e5ec4ff0f8d7a83e7f2f90d5758c54f890fdb4ee0e0fd8d52303fd380e0b5c149897190bed736ca59a6b854e48d1d3908fdf7b42bf5e0a5bf6f52dbe015ef56407e5abf5c5b270be792afc0e882557648f9d872f430f6fe5ee4286df431", 0xe1}, {&(0x7f0000000c80)="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", 0x1000}], 0x5, &(0x7f0000001d00)=[{0xd8, 0x0, 0x3, "386429f327427eae52e8649454e9f94e262efe5e395e6e76867fe5cf608409829d171b51c31f1310fc22cc556419384fb750fc69520c6bf7e328b522cfa4b54f2458d39c0fe9ed1a82dbb82c5b907e8d9d4ef5a3c6200295a1c5df9a429eec30ab6672138611c31361328ad16b5a84a8b3478ba569810268c2d5e65715bde2d4164e89eece5bd1b5a5020dc1e24f1fdf8bde7ecf7003206b12566021b53b1b99359660a122bccdb2ab194b94482d5fd10d874e80a82fa5f996285fe84d09268fa16a42a93e"}, {0x88, 0x113, 0x10001, "9f6dda9e1a88fa5ff966d493b3481931e34b2cb8793002c6b11138d8ee58accc3fcc814e8a5c7cb2bc3a01a2de709b65323fb9fa6dc306e9482314b87d56036a9cb495ea09cf5739e803bcc188c4b48c0d19209653c4fa932ca5869f74f15b926b38d65c8b331a7369e39199185de25daa2e"}, {0xd8, 0x116, 0x442, "9db09355939a93ea4fe224fdb3801f5341c9051171f050dcaadfbc334851c0be4b041d26204390e1127427884bd7b806f81198b98f28e89b5eeb02c1db05127ba22084a67ee5ad8e7f7e64f4acb60a40b24169621904778ac8306b2d7e5ce7dff2181c66cf5eead53e1ffe85726d32517a4df5bc34306fa79de04b89cbccdb641609ce61df3f3a46f285c30987173aeedc916fa6e2185e7d95290e8eccd75915cc2ab48486502348aaa73049f9c0a890361ef5c1d14a09ad0098365635eecd8f34ab827ffbe9"}, {0x18, 0x116, 0x7, '5g\t'}], 0x250}}, {{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000001f80)="c4edce49f1bf3ca703074238fd183a2b7624ae5e560f02", 0x17}, {&(0x7f0000001fc0)}], 0x2, &(0x7f0000002040)=[{0xc8, 0x104, 0x9, "987682ea4d0d849cba0a163ffd531795ecdd8bd515bd49badd1298a2ca8992086918a167f70470aa4ebf52315ea203a9d5ca41e91c3878e362a3f20f96f3deaff1f156b0629422e23554924213b8e3aaaac8cac77858428dce9ba9015a1c21084789ce508f5f05e0257a206af64bc8c0fbd40f9e7f8f7a5670ade89f518856dec8b6fa2e9480619eb1710f60b631e1e189be392d585850ae9a0cfc9887d0cb6a675ace686fee75531c7ee9a7806faf811275af01c01425a9"}, {0x78, 0x0, 0xcf, "43a544417a7aafa796c0953f82f8f31fd516c528394297a4c135c3d7148582a70776ec8ab5353e77be53a3dca50755d8e7536ef176493cf22835e7374467af8624cc6d59ede14142a8c3505dc82933dbb4290707f15fc0f35f63110b94ebef472789"}, {0x30, 0x10a, 0x3b, "cc1ea5ae81179bc36f48537fd6e442779a305cac22f29503177c17"}, {0x10, 0x119, 0xb66e}, {0x80, 0x6, 0x0, "47795e1d0cf2d6781e7dceff0d9c405c8852d462014f56bdcf59dd9e3f9c897f47d82dc49fd20a38832110289d600fe4c1c892e724a949390f5d12219137f35c2cdebdd3d63dfd3d198a608c3487d6aa1a9b38ca89f3eddee5af55d5fecc9761048dcb689073107e4c11f9db32e90f93"}, {0x108, 0x119, 0x7f, "208c611be60ffcee36f504637f351d68cbbcda1202621416ad5904e933ca68854c207a36bbd3808d6bd9bf15bff3e322712fa8e0d59dcd7ce59db8629be2da78fff83f2b585ddf5e3425f1ba9cad122d9b3b080fc953f959142457eb694e2119cb974687c3cf25e8e77f30d5efe66d01dd2df445307f3049b684775a9303056617dce0266d8fbd9c0e6355392b876d31aac766d4e0fc1c8e1b66c6cfe811c0475792150659fef04ad9d2ac9d160f00b880a1e87253c030f4653c8335ae2a92b804074d51013b712b270907de9ecc5271ca053ce1bc27f3571616640c98e61be47cae3dcf5f796a2a97d06a1867fe4fa6a09d"}, {0xd0, 0x111, 0x100, "66ec62813210b2c68e96ead76079252331774524016debd9203c544786a49f6f7bcda4399726426cd1ca840423ac20681c72e8f5fca18cab6ad541a19183cd06ba48a49e4e7195e837e173c02718321142789b0d3e7b381e7832f5235d5e3452416f48f0734f8e91705a70459fda8d2ae00c75bca83d4ddd9cb67857d9f67912e10ea3e914715cf4b7a3fcb70f72599cd5acc9b775a50a594944e7a31555b5f91ee6d043b65b52c32824a539c3b85003349266cea2aee225feac726274"}, {0x28, 0x10f, 0x2, "83a3b06d52e7fa3f9ab1c58685e091fe5a254f3c51e4a62b"}], 0x400}}], 0x4, 0x4000) 22:40:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) r4 = syz_open_pts(r0, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000001c0)=0x36) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000002c0)={r5, 0x7, 0x200}, 0x8) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) ioctl$KVM_GET_CLOCK(r3, 0x8030ae7c, &(0x7f0000000300)) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000200)={0x17, 0x401, 0x0, 0x2}) creat(&(0x7f0000000000)='./file0\x00', 0x20) 22:40:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7ffffffd, 0x2) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) r3 = syz_open_pts(r0, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f00000001c0)) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000200)={0x17}) creat(0x0, 0x20) [ 257.546055] attempt to access beyond end of device [ 257.551543] loop5: rw=4096, want=136, limit=2 [ 257.579638] gfs2: error 10 reading superblock 22:40:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) r4 = syz_open_pts(r0, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000001c0)=0x36) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000002c0)={r5, 0x7, 0x200}, 0x8) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) ioctl$KVM_GET_CLOCK(r3, 0x8030ae7c, &(0x7f0000000300)) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000200)={0x17, 0x401, 0x0, 0x2}) creat(&(0x7f0000000000)='./file0\x00', 0x20) 22:40:40 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={'rose', 0x0}, 0x3ff, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null]}) listen(r0, 0x0) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0xec4c, 0x80000) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x10) listen(r0, 0x0) [ 257.669004] attempt to access beyond end of device [ 257.675557] loop5: rw=4096, want=136, limit=2 [ 257.685936] gfs2: error 10 reading superblock 22:40:40 executing program 5: syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f0000000400)='.\x00', 0x400, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000040)=0x1) 22:40:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000240)=""/173, &(0x7f0000000300)=0xad) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, &(0x7f0000000340)={0x40, 0x6}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x14000, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r1) r5 = syz_open_pts(r1, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f00000001c0)=0x36) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x5e0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000200)={0x17}) creat(&(0x7f0000000000)='./file0\x00', 0x20) 22:40:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) r4 = syz_open_pts(r0, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000001c0)=0x36) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000002c0)={r5, 0x7, 0x200}, 0x8) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) ioctl$KVM_GET_CLOCK(r3, 0x8030ae7c, &(0x7f0000000300)) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000200)={0x17, 0x401, 0x0, 0x2}) creat(&(0x7f0000000000)='./file0\x00', 0x20) 22:40:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) r4 = syz_open_pts(r0, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000001c0)) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000200)={0x17}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) creat(0x0, 0x20) 22:40:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x800000000000007c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) r3 = syz_open_pts(r0, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f00000001c0)=0x36) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000200)={0x17}) creat(&(0x7f0000000000)='./file0\x00', 0x20) [ 257.901214] attempt to access beyond end of device [ 257.906190] loop5: rw=4096, want=136, limit=2 [ 257.919997] gfs2: error 10 reading superblock 22:40:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0x9, 0xffffffffffffff81, 0x4, 0x100, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x3, 0x6, 0x100}) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) r4 = syz_open_pts(r0, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000001c0)) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f00000002c0)) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000200)={0x17}) creat(0x0, 0x20) [ 257.998565] attempt to access beyond end of device [ 258.015246] loop5: rw=4096, want=136, limit=2 22:40:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000240)=""/173, &(0x7f0000000300)=0xad) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, &(0x7f0000000340)={0x40, 0x6}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x14000, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r1) r5 = syz_open_pts(r1, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f00000001c0)=0x36) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x5e0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000200)={0x17}) creat(&(0x7f0000000000)='./file0\x00', 0x20) 22:40:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x800000000000007c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) r3 = syz_open_pts(r0, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f00000001c0)=0x36) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000200)={0x17}) creat(&(0x7f0000000000)='./file0\x00', 0x20) 22:40:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x4000, 0x10) connect$netrom(r0, &(0x7f0000000280)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @null]}, 0x48) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0xfff, 0xff, 0x9, 0x2}, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) r3 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r6, 0x4c00, r1) r7 = syz_open_pts(r1, 0x0) ioctl$NBD_DISCONNECT(r2, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r5, 0x894c, &(0x7f00000001c0)=0x36) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, 0x0) ioctl$TCSETSF(r7, 0x5412, &(0x7f0000000200)={0x17}) creat(&(0x7f0000000300)='./file0\x00', 0x20) 22:40:40 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0xc36, 0x40) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000180)={0x1, 0x35, &(0x7f0000000140)="932b856bcce2d928a3e8bc8f4098a0ef3d6800371e87b7f56f41b41dbe95fd85b4cf19abbcf61fe55b1afd64245c79a2dc1d753897"}) syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x200000) listen(r0, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x7, 0x101002) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) [ 258.054397] gfs2: error 10 reading superblock 22:40:40 executing program 5: syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f0000000400)='.\x00', 0x400, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) 22:40:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x800000000000007c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) r3 = syz_open_pts(r0, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f00000001c0)=0x36) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000200)={0x17}) creat(&(0x7f0000000000)='./file0\x00', 0x20) 22:40:40 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) write$binfmt_elf64(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x9, 0x80, 0x0, 0x1ff, 0x2, 0x0, 0x100, 0x216, 0x40, 0x26, 0x7ff, 0x8001, 0x38, 0x2, 0x6, 0x9, 0x8}, [{0x5, 0x7, 0x8, 0xa1, 0x2, 0x5, 0x80, 0x4}, {0x6, 0x6, 0xfff, 0x9, 0x7ff, 0xff, 0x1fffffffe00000, 0x5}], "5745295bfbf6de08d40ae82e424cb81a809f0af3ee95de154d765f4b68efe8fdbd52b253e21092cc2ee76961e23df95cfb396ef9a8f1a96b3b591235f2cac07402877e3f37149ac5cb64f0bae26615dab985"}, 0x102) r4 = syz_open_pts(r1, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000001c0)) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x5e0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) select(0x40, &(0x7f0000000000)={0x0, 0xe0, 0x4, 0x4, 0x401, 0x800, 0x1b, 0x7}, &(0x7f0000000380)={0x3, 0x7fffffff, 0x10000, 0x80b3, 0x3, 0x0, 0x68ec, 0x100}, &(0x7f00000003c0)={0x20, 0x587, 0x2, 0x7, 0x2e0bb40, 0x7f, 0x5, 0xffffffff}, &(0x7f0000000440)={r5, r6/1000+30000}) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000200)={0x17}) creat(0x0, 0x20) 22:40:40 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b400000000000000bc00000063814800000000009500000000000000e6ad6f4da62afcc11599f8c1c7affaf4ebdbf46bd2c0eacd6ee63aa113320f41b90bd7483844c5d1eaf3d0b020c116a7e3ce780a210886d653c842888a3c4dc7223e9a95761929662577260e52fe4bed67c155e9a6328b36860410fc4d00e448716cbcb6576f66c975680ad192494985eaa48e74ba4af66fee7472b9"], &(0x7f0000000080)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1c0}, 0x48) r0 = getpid() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/141, 0x8d}], 0x1, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/78, 0x4e}], 0x1, 0x0) [ 258.235385] audit: type=1800 audit(1566772840.644:71): pid=13441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=16529 res=0 22:40:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) r4 = syz_open_pts(r0, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000001c0)=0x36) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000200)={0x17}) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000000280)=[0x2, 0x1], 0x2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000240)={0x1}) creat(&(0x7f0000000000)='./file0\x00', 0x20) 22:40:40 executing program 4: mkdir(0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, 0x0) readlink(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x8, 0x81, 0x1ff, 0x1, 0x20}, &(0x7f0000000340)=0x98) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000380)=@assoc_id=r1, &(0x7f0000000400)=0x4) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030342c757365725f69643df46967178af83edfbdb9448e6f86869b47927d5d38e12908670a9312bf26b763ef0fa85fb7d3ecb0d258274cd6125593890f72e198b07bd82be4c9646741ec1f1bfda0132c90c8e5d48ea6e9743f977f9c644e18f84106b0", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c00f29347fb8e9b2bd5e73849ee88ec34df2fc2491410368b1dac9bebdab2247bac577dcb7ba1d35a0eba45c3b5e17a84903b660f53ee97e83269e28404f72272b28367493d49f7b5dcf5ad961dbd00477e36ae05667fba948cedd9683f09898175c03ca3848c553dfed53850c3df1729b7a2fcc9c6b0dbd1dc174770a4b27ebda73c51d4e115733195fc5c4b78a54812d1ee27ba82b238fea8439beb3f692ec101f9b45c97d32e2158419997eabf997705c173c4bf5b9d5a043009d7637666345da8d96f62dbf47d9887cfad35ef39ca541f6e2409134161785977f913efd136791b92"]) geteuid() syz_genetlink_get_family_id$net_dm(0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000240)=""/141) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000540), &(0x7f0000000580)=0x4) umount2(&(0x7f0000000600)='./file0\x00', 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) chdir(&(0x7f0000000180)='./file0\x00') r3 = inotify_init() inotify_add_watch(r3, 0x0, 0x2fe) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) [ 258.370580] attempt to access beyond end of device 22:40:40 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x8880, 0x0) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f0000000400)) write$FUSE_LK(r4, &(0x7f00000000c0)={0x28, 0x0, 0x1, {{0x6, 0x80000001, 0x0, r0}}}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 258.406759] loop5: rw=4096, want=136, limit=2 [ 258.449535] gfs2: error 10 reading superblock 22:40:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) r4 = syz_open_pts(r0, 0x220000) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000001c0)) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000000)={0xfffffffffffffffc, 0x3f}) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000200)={0x17}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000300)=0xcc7) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[{0x3, 0x7fff, 0x101, 0x100000000}, {0x7, 0xfffffffffffff001, 0xfffffffffffffffc, 0x80000001}]}) creat(0x0, 0x20) pipe2$9p(&(0x7f00000002c0), 0x80000) 22:40:40 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$P9_RLCREATE(r1, &(0x7f00000000c0)={0x18, 0xf, 0x2, {{0x0, 0x2, 0x3}, 0x98}}, 0x18) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x10) listen(r0, 0x0) [ 258.504865] attempt to access beyond end of device [ 258.509826] loop5: rw=4096, want=136, limit=2 [ 258.532528] gfs2: error 10 reading superblock 22:40:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) r4 = syz_open_pts(r0, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000001c0)=0x36) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000240)={0x2e21ac92, 0x3, 0x5, 0x2, 0x8, 0x3f, 0x8, 0x8001, 0x4, 0x0, 0x4, 0x8}) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000200)={0x17}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000280)) creat(&(0x7f0000000000)='./file0\x00', 0x20) 22:40:41 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000080)={0x6, 0x7b, 0x1}) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f00000000c0)={'ifb0\x00', 0x5}) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000400)='.\x00', 0x400, 0x0, 0x0, 0x8800, 0x0) 22:40:41 executing program 4: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000300)={0x8, 0x0, [], {0x0, @reserved}}) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) statfs(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=""/255) accept4$netrom(r3, &(0x7f0000000080)={{}, [@bcast, @null, @netrom, @netrom, @bcast, @rose, @rose, @rose]}, &(0x7f0000000100)=0x48, 0x800) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @broadcast, 'sit0\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f0000000180)={0x18, 0x0, {0x3, @local, 'syz_tun\x00'}}, 0x1e) ioctl$VIDIOC_ENUMINPUT(r3, 0xc050561a, &(0x7f00000003c0)={0x6, "06b08f3eda7ef93c928418e9c602ad905a65ef2530497e6cf61f06f6b3ab40cd", 0x1, 0x4, 0x3, 0x320000, 0x4, 0x2}) close(r1) [ 258.635735] audit: type=1326 audit(1566772841.044:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=13482 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c6ba code=0x0 22:40:41 executing program 4: getpeername(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000100)=0x80) setsockopt$ax25_int(r0, 0x101, 0x8, &(0x7f0000000180)=0xfffffffffffffffa, 0x4) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x20002) write$P9_RRENAME(r1, &(0x7f0000000300)={0x7, 0x15, 0x1}, 0x7) clone(0x2102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000140), 0x0, 0x0, 0x8) r2 = getpid() r3 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xffffffffffffff70, 0x400401) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x100, 0x6, 0x8c2, 0x1000, 0x2, 0x8, 0x9, 0x1b063bfa, 0x7, 0x5, 0x100000001, 0x300000000, 0x4, 0xe33f, 0x9, 0x4], 0xd000, 0x4000}) rt_tgsigqueueinfo(r2, r2, 0x4000000000000016, &(0x7f00000004c0)) ptrace(0x4206, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$setsig(0x4203, r2, 0x0, &(0x7f0000000080)) [ 258.755267] attempt to access beyond end of device [ 258.766350] loop5: rw=4096, want=136, limit=2 [ 258.775615] gfs2: error 10 reading superblock 22:40:41 executing program 5: 22:40:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) r2 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r0) fcntl$dupfd(r2, 0x0, r1) r5 = syz_open_pts(r0, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(r3, 0x0, &(0x7f0000000240)='TRUE', 0xfffffe3a, 0x0) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f00000001c0)=0x36) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000200)={0x17}) creat(&(0x7f00000000c0)='./file0\x00', 0x20) 22:40:41 executing program 5: syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f0000000400)='.\x00', 0x400, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x9, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000040)=0x7) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000080)=""/145) 22:40:41 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000000c0)) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x10) listen(r0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) [ 258.884720] attempt to access beyond end of device [ 258.889926] loop5: rw=4096, want=136, limit=2 [ 258.899606] gfs2: error 10 reading superblock 22:40:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) r3 = syz_open_pts(r0, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f00000001c0)=0x36) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000200)={0x17}) creat(&(0x7f0000000000)='./file0\x00', 0x20) 22:40:41 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) shutdown(r2, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = accept(r1, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000000), 0x1b9c444d569021df, 0x400c840, 0x0, 0x2db3b127) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000000)) [ 258.973695] attempt to access beyond end of device [ 258.978655] loop5: rw=4096, want=136, limit=2 [ 258.988942] gfs2: error 10 reading superblock 22:40:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) r4 = syz_open_pts(r0, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000001c0)) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000200)={0x17}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)=0x0) syz_open_procfs(r5, &(0x7f0000000240)='stat\x00') creat(0x0, 0x20) 22:40:41 executing program 5: syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f0000000400)='.\x00', 0x400, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x401, 0x43) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000040)={0x1, 0x0, {0x6, 0x3, 0x3002, 0x3, 0xa, 0x3, 0x2, 0x7}}) 22:40:41 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) link(0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0) r3 = open(&(0x7f0000000380)='./file0\x00', 0x4400, 0x0) fsetxattr$security_capability(r3, &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000140)=@v2={0x2000000, [{0x100000001, 0xffff}, {0x5, 0x6ff6}]}, 0x14, 0x3) r4 = geteuid() ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000340)) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000800)=ANY=[@ANYRES32=r2], 0x1) setuid(0x0) ioctl$TIOCLINUX6(r3, 0x541c, &(0x7f00000005c0)={0x6, 0x9}) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000400)={0x1}, 0x7) sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000000000a1", 0x12, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r3, 0x0, 0x7, &(0x7f00000003c0)='broute\x00'}, 0x30) getgroups(0x1, &(0x7f0000000480)=[0xee01]) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000580)={r6, r4, r7}, 0xc) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000004c0)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f00000003c0)}, 0x78) syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f00000001c0)='./file0\x00', 0x7, 0x1, &(0x7f0000000200)=[{&(0x7f0000000840)="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", 0xe00, 0x3}], 0x2, &(0x7f0000000240)={[{@data_ordered='data=ordered'}, {@lockproto_dlm='lockproto=dlm'}, {@commit={'commit', 0x3d, 0x1}}, {@discard='discard'}, {@lockproto_nolock='lockproto=lock_nolock'}, {@quota_off='quota=off'}], [{@obj_role={'obj_role', 0x3d, 'selinuxbdev},wlan0mime_type'}}, {@fowner_eq={'fowner', 0x3d, r4}}, {@measure='measure'}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, &(0x7f0000000600)) 22:40:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100), 0x80000) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = syz_open_pts(r0, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000280)=0x1) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000200)={0x17}) creat(&(0x7f0000000000)='./file0\x00', 0x20) 22:40:41 executing program 2: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) r1 = socket$netlink(0x10, 0x3, 0x6) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000700)=0x14, 0x4) ioprio_get$uid(0x3, r0) r2 = syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x200000000007, 0x10042) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e23, 0x2, @mcast2, 0x5}}, 0x4, 0x1ff}, &(0x7f0000000440)=0x90) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000480)=ANY=[@ANYRES32=r3, @ANYBLOB="90000000521398ce9af96ef5160407ef3b108bdec623db5f300000000053383ad03491c6ebc0250cafd5a46a6a0a66b76c202366a37ba34e0e9f2ac8f3cd45b42168feb4c1537db79a15b48e50970b9e3e406b6397b3d88ad67d62c726fdfd1c6fe0c957177fb678fa093e44405a69e71384a7d41f68398a1a412d71c4bb95dd9429af00faa3040af3a78f965f49550351072141"], &(0x7f0000000540)=0x98) listen(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000640)={r4, 0xffffffff}, 0x8) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x10) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x3) listen(r1, 0x0) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x0, 0x0) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/policy\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000100)="baf80c66b8f48dee8e66efbafc0cb80300ef67df70ea0f20c06635000001000f22c00fac3924640fbec3f20da2820f38ca7569d209baf80c66b8ca4c588866efbafc0cb83e00ef660f6d05", 0x4b}], 0x1, 0x40, &(0x7f00000001c0)=[@cstype3={0x5, 0x8}, @cstype0={0x4, 0x6}], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000005c0)={r4, 0x45, "8e4f564833471598b1d46626e33988ebf9c386d15ae85dfcdf268de66bf35ae0918a43151bcabd989e2dc8d2fa0400c7770aa6d11fa4490f85fee4f95f1be7965f5632d204"}, &(0x7f00000000c0)=0x4d) [ 259.329093] audit: type=1326 audit(1566772841.734:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=13482 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c6ba code=0x0 [ 259.533471] attempt to access beyond end of device [ 259.538452] loop5: rw=4096, want=136, limit=2 [ 259.569931] gfs2: error 10 reading superblock 22:40:42 executing program 4: getpeername(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000100)=0x80) setsockopt$ax25_int(r0, 0x101, 0x8, &(0x7f0000000180)=0xfffffffffffffffa, 0x4) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x20002) write$P9_RRENAME(r1, &(0x7f0000000300)={0x7, 0x15, 0x1}, 0x7) clone(0x2102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000140), 0x0, 0x0, 0x8) r2 = getpid() r3 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xffffffffffffff70, 0x400401) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x100, 0x6, 0x8c2, 0x1000, 0x2, 0x8, 0x9, 0x1b063bfa, 0x7, 0x5, 0x100000001, 0x300000000, 0x4, 0xe33f, 0x9, 0x4], 0xd000, 0x4000}) rt_tgsigqueueinfo(r2, r2, 0x4000000000000016, &(0x7f00000004c0)) ptrace(0x4206, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$setsig(0x4203, r2, 0x0, &(0x7f0000000080)) 22:40:42 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000080)=0xffff, &(0x7f00000000c0)=0x4) listen(r0, 0x7f) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x10) listen(r0, 0x0) 22:40:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) r4 = syz_open_pts(r0, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000001c0)) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) write$P9_RMKDIR(r3, &(0x7f0000000100)={0x14, 0x49, 0x1, {0x1, 0x2, 0x4}}, 0x14) ioctl$VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, 0x0) syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x1, 0x40) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000200)={0x17}) creat(0x0, 0x20) 22:40:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) r4 = syz_open_pts(r0, 0x0) ioctl$NBD_DISCONNECT(r1, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000001c0)=0x36) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000240)) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000200)={0x17}) creat(&(0x7f0000000000)='./file0\x00', 0x20) 22:40:42 executing program 1: syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f00000004c0)={0x0, 0x0, 0x3, 0x8, 0xf}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x408, 0x0, 0x220, 0xf0, 0x0, 0x0, 0x338, 0x338, 0x338, 0x338, 0x338, 0x4, &(0x7f0000000080), {[{{@ipv6={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [0xffffffff, 0xffffffff, 0x0, 0xff], [0x0, 0xff000000, 0xffffff00, 0xff], 'ifb0\x00', 'gretap0\x00', {0xff}, {}, 0x3c, 0x8000, 0x4, 0x40}, 0x0, 0xc8, 0xf0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x23}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [0xffffffff, 0x0, 0x0, 0xff000000], [0xffffffff, 0xffffffff, 0xff000000, 0xffffffff], 'veth1_to_bridge\x00', 'ip6tnl0\x00', {0x2c7d28a4a60a8986}, {}, 0x88, 0x7fff, 0x0, 0x40}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hl={0x28, 'hl\x00', 0x0, {0x1, 0xb65}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3ff, 0x14, "3eed3cd8e5dfaa1de9f9f2a268069909b9be5dfb28842b7bc7f7bfce718d"}}}, {{@ipv6={@empty, @dev={0xfe, 0x80, [], 0x19}, [0xffffffff, 0xff], [0xffffffff, 0x0, 0xff, 0xffffff00], 'veth0\x00', 'bpq0\x00', {}, {0xff}, 0x6, 0x8000, 0x2, 0x40}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@icmp6={0x28, 'icmp6\x00', 0x0, {0x11, 0xffffffffffff0000}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x5213d1a2}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r0, 0x4010ae94, &(0x7f00000001c0)={0x1d8d, 0x4, 0x7fffffff}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, &(0x7f0000000440)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 259.655843] attempt to access beyond end of device [ 259.661964] loop5: rw=4096, want=136, limit=2 [ 259.692797] gfs2: error 10 reading superblock 22:40:42 executing program 5: syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f0000000000)='.\x00', 0x400, 0x0, 0x0, 0x0, 0x0) 22:40:42 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-arm64\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x7ff) syncfs(r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0xf17) unshare(0x40040400) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x7, 0x1, 0x0, 0x1, 0x4000, 0xc, 0x89, 0x0, 0x1, 0x8, 0xa5c, 0x80000000, 0x9, 0x1, 0x1f6, 0xfff, 0x7, 0x5, 0x0, 0x5, 0x2, 0x9, 0x0, 0x8, 0xe, 0x400, 0x0, 0x2, 0x2, 0x9, 0x400, 0x4, 0x0, 0xb, 0x0, 0x2, 0x4, @perf_config_ext={0x9, 0x100000000}, 0x280, 0x5e, 0xeb67, 0x0, 0x20, 0x5, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x8) getpgrp(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x135) sendto$unix(r1, &(0x7f0000000180), 0xfffffffe, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000000900)=""/4096, 0x1000, 0x2, 0x0, 0x0) 22:40:42 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2400, 0x0) ioctl$CAPI_SET_FLAGS(r1, 0x80044324, &(0x7f00000000c0)) finit_module(r1, &(0x7f0000000100)='\x00', 0x3) listen(r0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x10) listen(r0, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000140)={0x15, 0x1, 0x5}) 22:40:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) r4 = syz_open_pts(r0, 0x0) ioctl$NBD_DISCONNECT(r1, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000001c0)) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000200)={0x17}) creat(0x0, 0x20) 22:40:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) r3 = syz_open_pts(r0, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f00000001c0)=0x36) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) nanosleep(&(0x7f0000000240), &(0x7f0000000280)) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000200)={0x17}) creat(&(0x7f0000000000)='./file0\x00', 0x20) [ 259.851130] attempt to access beyond end of device [ 259.866548] loop5: rw=4096, want=136, limit=2 [ 259.888558] gfs2: error 10 reading superblock [ 259.909358] IPVS: ftp: loaded support on port[0] = 21 22:40:42 executing program 2: listen(0xffffffffffffffff, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x10) listen(0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x83) getsockname(r0, &(0x7f0000000140)=@nfc_llcp, &(0x7f00000001c0)=0x80) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x9, 0x20000) accept$netrom(r0, &(0x7f0000000200)={{0x3, @null}, [@rose, @bcast, @null, @bcast, @null, @bcast, @remote, @rose]}, &(0x7f0000000280)=0x48) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000002c0)={0x0, r0}) setsockopt$ax25_int(r1, 0x101, 0x9, &(0x7f00000000c0)=0x36cb, 0x4) [ 259.987147] attempt to access beyond end of device [ 259.992311] loop5: rw=4096, want=136, limit=2 [ 260.017504] gfs2: error 10 reading superblock 22:40:42 executing program 5: syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f0000000400)='.\x00', 0x400, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x1, &(0x7f00000001c0)={[{@nfs_export_on='nfs_export=on'}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@xino_auto='xino=auto'}, {@metacopy_off='metacopy=off'}, {@upperdir={'upperdir', 0x3d, './file0'}}], [{@fsname={'fsname', 0x3d, 'gfs2\x00'}}, {@context={'context', 0x3d, 'staff_u'}}, {@hash='hash'}]}) [ 260.097306] IPVS: ftp: loaded support on port[0] = 21 [ 260.226910] attempt to access beyond end of device [ 260.233878] loop5: rw=4096, want=136, limit=2 [ 260.246361] gfs2: error 10 reading superblock [ 260.312193] attempt to access beyond end of device [ 260.318377] loop5: rw=4096, want=136, limit=2 [ 260.326626] gfs2: error 10 reading superblock 22:40:42 executing program 4: getpeername(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000100)=0x80) setsockopt$ax25_int(r0, 0x101, 0x8, &(0x7f0000000180)=0xfffffffffffffffa, 0x4) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x20002) write$P9_RRENAME(r1, &(0x7f0000000300)={0x7, 0x15, 0x1}, 0x7) clone(0x2102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000140), 0x0, 0x0, 0x8) r2 = getpid() r3 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xffffffffffffff70, 0x400401) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x100, 0x6, 0x8c2, 0x1000, 0x2, 0x8, 0x9, 0x1b063bfa, 0x7, 0x5, 0x100000001, 0x300000000, 0x4, 0xe33f, 0x9, 0x4], 0xd000, 0x4000}) rt_tgsigqueueinfo(r2, r2, 0x4000000000000016, &(0x7f00000004c0)) ptrace(0x4206, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$setsig(0x4203, r2, 0x0, &(0x7f0000000080)) 22:40:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000300)=0x31, 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) r4 = syz_open_pts(r0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000001c0)=0x36) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r5, 0x111, 0x3, 0x1, 0x4) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000200)={0x17}) creat(&(0x7f0000000000)='./file0\x00', 0x20) 22:40:42 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0xb2, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000600)={0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffeffffffc, 0x4, 0x0, 0x9}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r1) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000240)={{}, {r5, r6/1000+10000}}, &(0x7f0000000280)) r7 = syz_open_pts(r1, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f00000001c0)) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$VIDIOC_G_AUDIO(r2, 0x80345621, &(0x7f00000002c0)) ioctl$TCSETSF(r7, 0x5412, &(0x7f0000000200)={0x17}) creat(0x0, 0x20) 22:40:42 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101100, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000480)={@mcast1, @remote, @empty, 0xffffffffffffff33, 0x7fffffff, 0x60cf, 0x500, 0x81, 0xf00ba33b56968365, r2}) listen(r0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x10) r3 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x2, 0x2801) timerfd_create(0x4, 0x800) recvfrom$llc(r3, &(0x7f0000000180)=""/24, 0x18, 0x41, &(0x7f00000001c0)={0x1a, 0x300, 0x1, 0x7f, 0x9, 0x7fff, @dev={[], 0xd}}, 0x10) listen(r0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000240)=0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000280)={0x4, 0x10001, 0x9, 0x0, 0xf}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x100000001, 0x0) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000200)=0x54) 22:40:42 executing program 1: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f00000001c0)=0xe8) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='overlay\x00', 0x4080, &(0x7f0000000640)={[{@index_off='index=off'}, {@index_off='index=off'}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@index_off='index=off'}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@euid_lt={'euid<', r0}}]}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(r1, 0x6, &(0x7f0000000140)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000500)={'sit0\x00\x00\x00\x00\x00\x00\x00\xd6\x00'}) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r3 = creat(&(0x7f0000000480)='./file0\x00', 0x8) ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000000240)={0x2}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000004c0)={0x100000000, 0x101, 0x8000, 0xff, 0x401, 0x3, 0x95, 0x100, 0x0}, &(0x7f00000006c0)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000700)={r4, @in6={{0xa, 0x4e23, 0x5, @empty}}, 0x4fd0, 0x7c1, 0x8, 0x1}, &(0x7f00000007c0)=0x98) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'sit0\x00\x00\xff\xff\xff\xff\xa0\x00Q\xfc\x03\x00', 0x141}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x7, 0x8000) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x100, 0x0) geteuid() fallocate(r3, 0x0, 0x3f, 0x10000) 22:40:42 executing program 5: syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f0000000080)='./file0\x00', 0x400, 0xfffffffffffffcb2, 0x0, 0x10000, 0x0) 22:40:42 executing program 5: syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f0000000000)='./file0\x00', 0x400, 0x0, 0x0, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x80c0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f00000000c0)={0x8, 0x5, 0x800, 0x0, 0x8, 0x7ffffffe}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000011c0)={0x6c6, 0x1, 0x7, 0x7ff, 0x1a4e, 0xffff, 0x66, 0xffffffff, 0x4, 0x23c, 0x176000000000}, 0xb) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB="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"], &(0x7f0000000140)=0x1008) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) [ 260.557697] device sit0 entered promiscuous mode [ 260.608913] attempt to access beyond end of device [ 260.632181] loop5: rw=4096, want=136, limit=2 22:40:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$NBD_DISCONNECT(r2, 0xab08) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r0) r5 = syz_open_pts(r0, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f00000001c0)) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000340)={'veth0_to_hsr\x00', 0xff}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000200)={0x17}) r6 = creat(0x0, 0x20) fcntl$setstatus(r6, 0x4, 0x4000) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r6, 0x84, 0x74, &(0x7f0000000240)=""/196, &(0x7f0000000000)=0xc4) [ 260.658809] gfs2: error 10 reading superblock 22:40:43 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0xffffffff, 0x1) write$apparmor_current(r1, &(0x7f0000000100)=@hat={'changehat ', 0x2, 0x5e, ['cgroup&.selfmime_type!trusteduserkeyring/\x00', 'system\x00', 'user\x00', '^\x00', '\x00', 'vboxnet0/keyring&\x00']}, 0x68) syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) listen(r0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x10) listen(r0, 0x0) [ 260.682530] overlayfs: unrecognized mount option "euid<00000000000000000000" or missing value [ 260.691440] device sit0 left promiscuous mode [ 260.748352] device sit0 entered promiscuous mode [ 260.757603] attempt to access beyond end of device [ 260.764137] loop5: rw=4096, want=136, limit=2 [ 260.785673] gfs2: error 10 reading superblock 22:40:43 executing program 1: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f00000001c0)=0xe8) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='overlay\x00', 0x4080, &(0x7f0000000640)={[{@index_off='index=off'}, {@index_off='index=off'}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@index_off='index=off'}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@euid_lt={'euid<', r0}}]}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(r1, 0x6, &(0x7f0000000140)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000500)={'sit0\x00\x00\x00\x00\x00\x00\x00\xd6\x00'}) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r3 = creat(&(0x7f0000000480)='./file0\x00', 0x8) ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000000240)={0x2}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000004c0)={0x100000000, 0x101, 0x8000, 0xff, 0x401, 0x3, 0x95, 0x100, 0x0}, &(0x7f00000006c0)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000700)={r4, @in6={{0xa, 0x4e23, 0x5, @empty}}, 0x4fd0, 0x7c1, 0x8, 0x1}, &(0x7f00000007c0)=0x98) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'sit0\x00\x00\xff\xff\xff\xff\xa0\x00Q\xfc\x03\x00', 0x141}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x7, 0x8000) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x100, 0x0) geteuid() fallocate(r3, 0x0, 0x3f, 0x10000) 22:40:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/btrfs-control\x00', 0x60100, 0x0) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) r3 = syz_open_pts(r0, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0xffffffffffffffff, r1, 0x0, 0x12, &(0x7f0000000240)='/proc/capi/capi20\x00'}, 0x30) r5 = getpid() setpgid(r4, r5) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f00000001c0)=0x36) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x20040, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000200)={0x17}) creat(&(0x7f0000000000)='./file0\x00', 0x20) [ 260.822854] QAT: Invalid ioctl [ 260.831661] QAT: Invalid ioctl [ 260.835396] QAT: Invalid ioctl 22:40:43 executing program 5: syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f0000000000)='.\x00', 0xff000, 0x0, 0x0, 0x3808500, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) recvfrom$inet(r0, &(0x7f0000000200)=""/227, 0xe3, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/wireless\x00') setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="b59cf1549708895825d4448b06a0a95da781589f2d31a0f5678dd924570309eedb67ddbf0b295795ce178a3c5948b3601f505fffad486ccc182ca7d27e858a899af9f5cc5ef10d9e56ec1368cf2b4923094cf0fe0a5aa9faab2695cb656a8b9d33f68ef98c4c43ea721ddff1ef8ac6cbb3eb3609c5be5cf22a8d98fc9626100dd438269dbc3c699fb43c98c1151b678abd4b61b3cce3d066d1e5910a791b6ab0f071b4a65fa3eb", 0xa7) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000140)={0x5, 0xbd3, 0x2}) fcntl$getownex(r0, 0x10, &(0x7f0000000300)={0x0, 0x0}) capget(&(0x7f0000000340)={0x20080522, r2}, &(0x7f0000000380)={0x8, 0x2800000, 0x57, 0x6, 0x8, 0x5}) [ 260.922520] device sit0 left promiscuous mode [ 261.032635] device sit0 entered promiscuous mode 22:40:43 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x400, 0x0) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xf1a}, 0x2c) ioctl$BLKRAGET(r0, 0x1263, &(0x7f00000000c0)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, 0x0, 0x0}, 0x18) 22:40:43 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x80000, 0x0) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f00000000c0)) listen(r0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f00000004c0)={@mcast2, 0x0}, &(0x7f0000000500)=0x14) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x7, 0x2, 0x8001, 0x3, 0x2, 0x1f, 0x5, 0x1f, 0x400, 0x8, 0x3, 0x6, 0x200}, {0x7, 0x0, 0x40, 0x3, 0x0, 0x5, 0x100000000, 0x1, 0x1, 0xea78, 0x64ba, 0x9, 0x2}, {0x0, 0x6, 0x7fffffff, 0x3, 0xfff, 0x1, 0x7, 0x3f, 0x7, 0x8, 0x10001, 0x2, 0xf13}], 0x8}) getpeername$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000600)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@mcast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f0000000740)=0xe8) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000780)={0x0, @broadcast, @remote}, &(0x7f00000007c0)=0xc) sendmsg$nl_route(r1, &(0x7f0000000900)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)=@ipv4_delroute={0xb4, 0x19, 0x10, 0x70bd2c, 0x25dfdbfb, {0x2, 0x80, 0x20, 0x8, 0xfe, 0x4, 0xff, 0x1, 0x400}, [@RTA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x23}}, @RTA_METRICS={0x54, 0x8, "2ec6bbd47aeece3de9d08c1660c97afda03a0e2bc632c06616f945e96a109aacfbda844864a5ee1e522222257c9a8a25123e29ceef58d16a728e5004de41be078b52472e2b9fccd0df58a28d81"}, @RTA_OIF={0x8, 0x4, r2}, @RTA_SRC={0x8, 0x2, @local}, @RTA_OIF={0x8, 0x4, r3}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x7, 0x2, r4}}, @RTA_ENCAP={0xc, 0x16, @typed={0x8, 0x29, @u32=0x1f}}, @RTA_MULTIPATH={0xc, 0x9, {0x3f, 0xffffffff, 0xad, r5}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40044}, 0x4048015) 22:40:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x886e8f2f5a476740, @perf_bp={0x0}, 0xa810, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x63fed7dcaa57cdd4) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) r3 = syz_open_pts(r0, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) r4 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, 0x0) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f00000001c0)) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) recvfrom$unix(r1, &(0x7f0000000280)=""/81, 0x51, 0x1, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000200)={0x17}) creat(0x0, 0x20) 22:40:43 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000004, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x2000, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000340)={0x10001, 0x8, 0x40000000, 0x0, 0x5, 0xffffffff, 0x6, 0x2, 0x1, 0xd35, 0x8, 0x3, 0x0, 0x0, 0x6, 0x4a000, 0x4, 0xc9d, 0x15c}) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x9}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x20000000000007c, 0x200000) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r1) r6 = syz_open_pts(r1, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000380)={0x1, [0x0]}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000400)={r7, @in6={{0xa, 0x4e23, 0x3, @local, 0xfffffffffffffffa}}}, &(0x7f00000004c0)=0x84) ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f00000001c0)=0x36) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x5e0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$sock_bt_hci(r2, 0x400448cb, &(0x7f0000000500)="87cb708278f2ef3879cd71b8cb03fd188cbbcdc03e8bd80243326693cca6933bcdfc46301ff39b01f6844b095486ebf24e3176fb62cbda7e421f3efe717d25f777d6531a78471968b536c16bca7f1de1c0bc") ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$TCSETSF(r6, 0x5412, &(0x7f0000000200)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}) creat(&(0x7f0000000000)='./file0\x00', 0x20) getpeername$ax25(r4, &(0x7f0000000240)={{0x3, @netrom}, [@null, @rose, @remote, @null, @rose, @default, @netrom, @netrom]}, &(0x7f00000002c0)=0x48) 22:40:43 executing program 5: syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3, 0x0, 0x80abae8bc5d8bf13, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) write$input_event(r0, &(0x7f0000000200)={{0x77359400}, 0x15, 0x5d974377, 0x9}, 0x18) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid\x00') r1 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x2000, 0x0) r2 = dup2(r1, 0xffffffffffffffff) dup2(r2, r2) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f0000000000)) fsetxattr$security_smack_entry(r2, &(0x7f0000000100)='security.SMACK64IPIN\x00', &(0x7f0000000140)='gfs2\x00', 0x5, 0x0) 22:40:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000300)=0x31, 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) r4 = syz_open_pts(r0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000001c0)=0x36) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r5, 0x111, 0x3, 0x1, 0x4) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000200)={0x17}) creat(&(0x7f0000000000)='./file0\x00', 0x20) 22:40:43 executing program 5: syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f0000000400)='.\x00', 0x400, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0xa427, 0x0, 0x10003, 0x2}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x4e22, @broadcast}}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000080)={r0}) 22:40:43 executing program 4: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000001000)='keyring\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f00000002c0)=@builtin='builtin_trusted\x00') keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='asymmetric\x00\x81\x15\xeba\xc9*\xdb\xd0\xefg\xcb\xcf\f\xb1\x9c?=\x14\xe1\xdc\x85\xf14k\xb8?\xfb\xb3>\xc8\x8b\xc0XE\xce\xda\xf9\x01hE\xa7\xa8\a\xc3\xaa\xd0\xed\x9ao\xb5\xe0\x1a\xd6\xb8\x15[-K\xe79J\xfc?\xbd\xab\xe1\xca,G\x87\xd1\x02L\t]Kn\xbe\x11\xa5\xe8x3_8', &(0x7f00000003c0)=@keyring={'key_or_keyring:', r1}) 22:40:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000300)=0x31, 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) r4 = syz_open_pts(r0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000001c0)=0x36) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r5, 0x111, 0x3, 0x1, 0x4) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000200)={0x17}) creat(&(0x7f0000000000)='./file0\x00', 0x20) [ 261.455361] attempt to access beyond end of device 22:40:43 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x10) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x400000, 0x0) io_setup(0x10000, &(0x7f0000000080)=0x0) io_destroy(r2) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x202000, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000100)={0x1, r3, 0x1}) listen(r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000180)={'bridge0\x00', {0x2, 0x4e23, @rand_addr=0x2}}) 22:40:43 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ptmx\x00', 0x3, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) r2 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r1) r6 = syz_open_pts(r1, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) ioctl$GIO_FONT(r4, 0x4b60, &(0x7f0000000000)=""/12) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f00000001c0)=0x36) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x5e0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$TCSETSF(r6, 0x5412, &(0x7f0000000200)={0x17}) open_by_handle_at(r5, &(0x7f0000000800)={0xd1, 0x4, "60f703edbe10330bc4ddea7e8810d2eb6a2f3be763b1f31713cdfae4c520b7dd6545c896d41e3ca0fc3304926bb736e29d42f81bb90b5bf20675734aeb32ae4208f4bf83f7a7a7983c6f9588927335ca4007e3d148ebc23bee289884141fd8c40aa30ef698a392878623b909d1e9a008e3172d97a73a9c95ae40e75d64747c8e8921d91fed96b5331c90b3aed0b31ce3f465263390cc83995af23f2ff6f63d66c6afc71b25aaa8d2af4086b67cf9835b942bc0782767b99aabf8936a45c565d4db4403850c72373af7"}, 0x521400) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000480)=0x10) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000580), &(0x7f00000005c0)=0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000500)={r7, 0x0, 0x30}, &(0x7f0000000540)=0xc) syz_open_dev$swradio(&(0x7f0000000240)='/dev/swradio#\x00', 0x0, 0x2) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r3, &(0x7f00000003c0)={0xa0, 0x19, 0x1, {0x2000, {0x84, 0x3, 0x1}, 0x87, r8, r9, 0x7, 0x5, 0xfb, 0x4, 0x3, 0x68, 0x80000000, 0xfde, 0x8, 0x8, 0x1, 0x6af, 0x100000000, 0x7fff800, 0x13}}, 0xa0) creat(&(0x7f00000004c0)='./file0/file0\x00', 0x20) [ 261.486692] loop5: rw=4096, want=136, limit=2 [ 261.529672] gfs2: error 10 reading superblock 22:40:43 executing program 4: ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x4840, 0x0) ioctl$SIOCAX25DELFWD(0xffffffffffffffff, 0x89eb, &(0x7f0000000240)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) pipe(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) pipe2(0x0, 0x4800) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x5, 0x0, 0x80, 0x2, 0x7}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0xfffffffffffffffc) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x7) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00') ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000380)) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file0\x00', r3, &(0x7f0000000140)='./file0/f.le.\x00') renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') write$selinux_validatetrans(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a696e697472635f657865635f743a73302073797374656d5f753a6f626a6563745f723a67726f75706164645f657865635f743a7330203030303030303030303030303030303030303039202f7573722f7362696e2f637570736400edf3649e0533f47204a726a53e839076461e354cfa39b2dec8e11f0e8d4403b1f5707b9dc85664c975a82ffef5ac2d8337b5d28a44faeaf4a9ce79351343ecb4c57f892f5072fbd65adcd2255ac49867bd53b1d6e2c91e646a507082d5ff0062164984a4d8f4daf23b35435ea725ebbfbebdef90ca9b9783728c4aca68e1bff97c3ffcaa73e6beed76a02039b25c48db482f1cf47334b09d4995"], 0x6d) 22:40:43 executing program 3: mount$9p_unix(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x1800000, &(0x7f0000000300)={'trans=unix,', {[{@posixacl='posixacl'}, {@fscache='fscache'}, {@loose='loose'}, {@msize={'msize'}}], [{@audit='audit'}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x3, 0x1, 0x8, 0x20, 0x19, 0x8, 0x100, 0x674, 0x44, 0x100000001, 0x8, 0x1f}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) r3 = syz_open_pts(r0, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f00000001c0)) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000200)={0x17}) creat(0x0, 0x20) [ 261.608080] attempt to access beyond end of device [ 261.613763] loop5: rw=4096, want=136, limit=2 [ 261.642128] gfs2: error 10 reading superblock 22:40:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000300)=0x31, 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) r4 = syz_open_pts(r0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000001c0)=0x36) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r5, 0x111, 0x3, 0x1, 0x4) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000200)={0x17}) creat(&(0x7f0000000000)='./file0\x00', 0x20) 22:40:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r0) r5 = syz_open_pts(r0, 0x0) ioctl$NBD_DISCONNECT(r1, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f00000001c0)=0x36) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r0], 0x14) ioctl$SIOCGETNODEID(r4, 0x89e1, &(0x7f0000000280)={0x4}) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) write$selinux_validatetrans(r2, &(0x7f00000002c0)={'system_u:object_r:null_device_t:s0', 0x20, 'system_u:object_r:ifconfig_exec_t:s0', 0x20, 0x2, 0x20, '/sbin/dhclient\x00'}, 0x6c) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000380)=0x100080000001) setsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f0000000240)=0x3, 0x4) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000200)={0x17}) creat(&(0x7f0000000000)='./file0\x00', 0x20) 22:40:44 executing program 5: syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x3fd, 0x0, 0x0, 0x10100, 0x0) 22:40:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) r4 = syz_open_pts(r0, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000001c0)) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000200)={0x17}) creat(0x0, 0x20) 22:40:44 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x10) r1 = syz_open_dev$usb(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0xff, 0x401) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000780)={0x11, 0x18, r2, 0x1, 0xffff, 0x6, @random="42d6bde503e0"}, 0x14) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x18b200, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x0, &(0x7f00000001c0)=""/238, &(0x7f00000002c0)=0xee) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000140)=0x5, &(0x7f0000000180)=0x2) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f00000000c0)=0x5, 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @remote}, 0x10) listen(r0, 0x0) [ 261.909664] attempt to access beyond end of device 22:40:44 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x0, 0x400) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, 0x0, 0xb6) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@dev, @in6=@initdev}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) chmod(&(0x7f00000001c0)='./file0\x00', 0x12) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000000)={0xd605, 0x0, 0x301f, 0x0, 0x0, 0x0, 0x5}) syz_emit_ethernet(0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, {0x28cf, 0x8, 0x418, 0x1, 0xffffffff, 0xff}}, 0x8) unshare(0x40000000) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f00000002c0)={r1, 0x1, &(0x7f0000000180)=[0x3b89], &(0x7f0000000200)=[0x7, 0x4], 0x1, 0x2, 0x1000, &(0x7f0000000240)=[0x100000000, 0x4], &(0x7f0000000280)=[0x0, 0xfffffffffffffffa, 0x2, 0x1, 0x0]}) socket$inet6(0xa, 0x3, 0x6) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={0x0}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000440)={r2}, &(0x7f0000000480)=0x8) [ 261.945937] loop5: rw=4096, want=136, limit=1 [ 261.988115] gfs2: error 10 reading superblock 22:40:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) r4 = syz_open_pts(r0, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000001c0)=0x36) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000200)={0x17}) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000240)=""/90) creat(&(0x7f0000000000)='./file0\x00', 0x20) [ 262.029923] audit: type=1400 audit(1566772844.434:74): avc: denied { associate } for pid=13773 comm="syz-executor.4" name="f.le." scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 262.059379] overlayfs: filesystem on './file0' not supported as upperdir 22:40:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000240)=0x8) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000480)={0x0, 0x0, [0x101, 0x3, 0x81, 0x1, 0x4, 0x0, 0x2, 0x321]}) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000340)=""/74) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000500)) r2 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f00000003c0)) ioctl$LOOP_SET_FD(r4, 0x4c00, r0) r5 = syz_open_pts(r0, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f00000001c0)) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000280), &(0x7f0000000300)=0x68) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000200)={0x17}) creat(0x0, 0x20) shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ffd000/0x2000)=nil) 22:40:44 executing program 4: ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f00000000c0)={0x9, 0x6, 0x0, 0x80000, 0xffffffffffffffff}) r1 = socket$unix(0x1, 0x2, 0x0) dup3(r0, r1, 0x80000) socket$inet_udplite(0x2, 0x2, 0x88) creat(&(0x7f0000000100)='./file0\x00', 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2af, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) [ 262.095527] attempt to access beyond end of device [ 262.106509] loop5: rw=4096, want=136, limit=1 [ 262.119124] gfs2: error 10 reading superblock 22:40:44 executing program 5: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f0000000400)='.\x00', 0x400, 0x0, 0x0, 0x0, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) 22:40:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) r4 = syz_open_pts(r0, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80605414, &(0x7f0000000240)=""/60) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000001c0)=0x36) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000200)={0x17}) creat(&(0x7f0000000000)='./file0\x00', 0x20) [ 262.264521] attempt to access beyond end of device 22:40:44 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x10) listen(r0, 0x0) listen(r0, 0x6) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x40) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000100)={0xa10000, 0x7, 0x7, [], &(0x7f00000000c0)={0x990aff, 0x10d1ed37, [], @value=0x1}}) [ 262.306006] loop5: rw=4096, want=136, limit=2 22:40:44 executing program 4: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f00002e2000/0x1000)=nil, 0x1000, 0x800007, 0x11, r0, 0x0) connect$inet(r0, &(0x7f0000000940)={0x2, 0x4e22, @loopback}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)={0x2000}) sendmmsg$alg(r0, &(0x7f0000000900)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)="227ddf4e5b74655889d07f35e90c303f321b337417984c378b4125fdd11b", 0x1e}, {&(0x7f0000000100)="59fba2038234ecc12d938a35694a056af66a986b62a686d8b03ec659ed934599d80e722d955a34fbc92fb5e364e059693da1504d34f87eb48eee79032534322ee309907d1f374a0e7b3cf101e852821483bf0ff788ff15a996f26e46c47e9b8d8de75935ae0932fc380e261e1ba4045e8465670fc09c2594002cfe0286ad5588978fefaf02ad9bcc6fa3714bc98fe108419736ff68eaedb150197932eb2145592835ebadcde0", 0xa6}, {&(0x7f00000001c0)="c0fa55974d033096eed36d11280e55b6a9f59ffe9822883fda5ef7b57a6262f155ee2817a8cc129cfc9d96dd326648f12b4ae77d72207f9eb48eb9b108f947b79b9b9d152c6b3a4038961fc3f49d17f273df83ce61b2f69eebe2a8f95b9f61190c42267594418ab3e19aae9ac0f0", 0x6e}, {&(0x7f0000000240)="0d3f14554a48ec2034c4552f5483ef6aac78b045ad861255d77eb78957ae0bc594c931c7b5346106a9b3f7db879611282bdbd2474e890f360d946743f4497b61bcfd52624ce4dbf2b0c9f8c5714e41834f87c09f085e59af02df77181c365538bc53fe93711f1883700617930f3b7648a907c5b791e57f5e34955c93fd858dee56c0da", 0x83}, {&(0x7f0000000300)="764a6a1df3064d0c99946b8cd2d1a48aef02c2b55c1637f1c01b1c72f5e159c291f61f32b8272efec13516b92f8582221d89ede662386b99de1d19865674aa9685a233bbbd2470c4430967f2b73848f733865465dd225008bb250c8c905336b33b2858b5321794f0d4fb2a6c637b9b093cb1a4071c739f8ff0f5f0f2911fbe19c8492f", 0x83}, {&(0x7f00000003c0)="433e5c0c335a5b3834abd693b8883839eb60c74abea7c8ce672b6561b14ce31013282d41aea1fa71fad167d51e41ff2e67c8bb0ff9471136eea885b23a90c8530421dd0697254758cd424f745d126f7e9e228c08dc3c1a0639e16dccdc973aab13e5660b1c213358fdafc069d1a5ff96489e2af04cce3bf8e674ee10db54cda6a279c17ff03f125ca856438541f31c09afe4ff08db300a6d5e3272493770be8f137000e7393816fa3fdd27f905e0ceddbc2f2abf379c67850e1ab20c39f094fd05da3d5069e316377dec2dbba19ca6aad5c0debd3c5214fc91702c1f3421450144bfc8b57aa4da9383cca10f9569dd416d4b99ca9b28", 0xf6}, {&(0x7f0000000080)="dbe39aa8", 0x4}, {&(0x7f00000004c0)="d690e5de1e089b5d315b1665df0c250d3e346aa7f4b1cd7bb7d25f644c6a903180a3fc62e7d4d33309a863fb8174418027069b0cc57c03ad6898bc4a7e189d9e9081d5fd356edb52c0a1891f60d551b85625a5eb45ac7b92a1b9638338b342c3018e8c39818c82c88c4c36444a932091591faafbd54de9e98c5eb5691cc981", 0x7f}], 0x8, &(0x7f00000005c0)=[@iv={0xe0, 0x117, 0x2, 0xcb, "1e168a81f6abfca44297c1ef1ddb7d7c43a15f418349f34f39b88e57f1674e8f9bcf12ccb8e27428ae89dac668a8bd3a37cc8819586198001d74de193378d4c6fd54f86b8e79e6a29583928392c993104476e9bbf33698d895a2f3b76f544a4a0e23b9878072eed490387df205dae5287085335515c2c1414d910c3f2e80b083caae87a72165d1810a92ec19b4aefe65747d46f4b7fd4a209c3095d2823ed19aabe91572eb59b4ca298ce13a3bc809ef78270ae745d1bbb1b48cd671fb01c67828f89eb6a44a60519b8b3c"}, @iv={0x90, 0x117, 0x2, 0x77, "c6f0c78d9a6c89ebb81307cb94f7b332d845a0e4b03d774d1b0c71ec2e24c8d94be0495beaf3f1ade7912ea334ba8760599cd0bfe3baf434d4ab1cf8e94fe769bf9ddd55053207a9e58d6c969ce2cd2473a3c49b6fa290f7a706beb857b0e4fa448baaa109f33984be0b635a9dc02c74c5de6e90ca37da"}, @iv={0x58, 0x117, 0x2, 0x3d, "ffb3bc7c4323c4a201f53b6c5a9e553a6f3c250b4411bad223a11e40fe79788bf59e52d8b6772f7a547c82ecfac9aa5f931f4beef3ec141e3e6bc5117d"}, @iv={0xb8, 0x117, 0x2, 0xa1, "102b4d3b6aedb84dea50bca1592d9fc1150897c7560518e17babfb3221739fe6c7470556b0407a24afa87b869f0a8dd6102ad1a003f142aec90babd6885467258ff5f9220ac59def7dadfc7a9a3ef2bad21b61cd135e95cf8c24bff582eecac438150ac9615a268a121c9c839ddc9a869ca26dd1212bc120b47d649357ed2e5cd2aecb3b559325d69f7d277c773fb3ec49ba886a24e59e2e782f15a7bb2709badf"}, @assoc={0x18, 0x117, 0x4, 0x6}, @op={0x18}, @iv={0x20, 0x117, 0x2, 0x5, "14305b4982"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x3ff}, @op={0x18}], 0x318}], 0x1, 0x20000004) ftruncate(r0, 0x42) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000001740)=0x342) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) [ 262.356118] gfs2: error 10 reading superblock 22:40:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) r4 = syz_open_pts(r0, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000001c0)) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000200)={0x17}) creat(0x0, 0x20) sendto$rose(r1, &(0x7f0000000000)="8cb3203e5e99cf2b9812d7a80c7d5c6bd45af9a12792d84527a2eebd2f75e1c9a7956c", 0x23, 0x4000000, &(0x7f0000000240)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x40) [ 262.445484] attempt to access beyond end of device 22:40:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000180)=""/11, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x15}) r2 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x3, 0x2) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) epoll_pwait(r1, &(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x35d) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0) syz_open_pts(r0, 0x0) dup2(r0, r0) [ 262.470170] loop5: rw=4096, want=136, limit=2 [ 262.474719] gfs2: error 10 reading superblock 22:40:44 executing program 5: syz_mount_image$ceph(&(0x7f0000000000)='ceph\x00', &(0x7f00000000c0)='./file0\x00', 0x800, 0x6, &(0x7f0000000540)=[{&(0x7f0000000100)="0b4344f97f15feac2eab1e7bff1bcfeaa004dae5f8dd1846b9f394dff7177f2a82b5f7bff2c3626ece1552561a94115ab82ebf087c40d33012f34e995ff85625a42404aff0e3981b7fd040b4aae62a9548a1308907967fd58bb274628370fba5f3f1a54813bec705c735377ed915080800df1786733d474839e55231ac0eaa1e8a9312be005af29c0f39", 0x8a, 0x1}, {&(0x7f00000001c0)="8cafb85e734052763adbb60df66c35c9034b5f76a636d886e6c98d7c5ced92c2d135e330158d297f8cc5f2d73fb9a32fb1f5baaa9dc6ee306b817165192a95a2157de487c373cb99767c74d92182b5655be5f0c6c0d9225bb4919801d404e0a5088a43ea34f0f687845ff735e7acb32451c810a4134da41cf5c744d48fb26eec97cfaed25d6311827722340514c604e363e70407b2d654c418b39f79f16e2c6a6f20223fe6e955c7428241c9707178b835846a15a4cc5294b81e5000"/207, 0xcf, 0x1402}, {&(0x7f00000002c0)="d8818fa2529e059bfcdd68613485a0ca410798d541faa96a49ba4d63282f021a0164c766de242f294d5b6fb32c115f79f6f5004844a8cc47b82f2829efe1863396e1b341bbbbdb041a334e7aefb1238ebb082a34ee43cd83341f3a322616025a33", 0x61, 0x3000000000}, {&(0x7f0000000340)="dfb8d1107a487e58c0177beeed178a8a71b83874fd9db6f5c73c572693898c7f960141d0d831956c22cacbf213ca9bfd59ec4d0589a89c16b43575fe92b8bb3a24e3dd2f2c4aff62574967fd8bb77b8568bc7465b8b1695010da035042391d2e835af198b6bb87cd1694c3c03e814d02f5850fbed699ece2dacb6e1eeec3b7222587d6b6dac1800554cd8d840e69f08db7e2b216331fcb6e63a3be558a08689326c6f1dcc3f059f000b9250895c58ec03fd73049d8f6e5d619f28d", 0xbb}, {&(0x7f0000000400)="7e9b7af9bbed0b0228de1a30f48b33fc511323dc1f9591e6d9564e", 0x1b, 0x2}, {&(0x7f0000000440)="b707dd5934ad612317d9fa534225e9a267d1103235cd5a54f67167836b0c6834064146dcb756358151c9ad7cc80aace3e8748a31e6085488dd45a6d0cb7262af5feff6e79607dff1fdcdd10d3b1c87e52802a2ebce17528a70d2d6dfd2169205058aa87606aae1c2cd4864a370a222038ab80587fb5db8355541749827f5d71ecb94e6b2f08134c9fc90f91cd06d0c90dd09837befa8b1044126255039a157d76ef1c37fd3f8ddff41c0246e93e05047056a3a45c415096d6126756395d667fc2f7081b148da4a51f4ff63d4984f3fd472d11335be39ce9aa8f2a744dfe2252dbbfd89b86c7fdfe6", 0x23, 0x1}], 0x203000, &(0x7f0000000600)='\x00') 22:40:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x2, 0x9, 0x2, 0xfffffffffffffffb, 0x3445}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) r4 = syz_open_pts(r0, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000001c0)=0x36) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) unlinkat(r1, &(0x7f00000002c0)='./file0\x00', 0x200) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x2) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000200)={0x17}) creat(&(0x7f0000000000)='./file0\x00', 0x20) [ 262.758624] audit: type=1804 audit(1566772845.164:75): pid=13881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir836092700/syzkaller.B3vxsG/257/file0" dev="sda1" ino=16545 res=1 22:40:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x2, 0x9, 0x2, 0xfffffffffffffffb, 0x3445}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) r4 = syz_open_pts(r0, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000001c0)=0x36) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) unlinkat(r1, &(0x7f00000002c0)='./file0\x00', 0x200) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x2) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000200)={0x17}) creat(&(0x7f0000000000)='./file0\x00', 0x20) 22:40:45 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0xa, 0x6) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000100)) getegid() r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-control\x00', 0x8000, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0)={0x6}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x71, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000002200290800000000000000000400000062b5d368d03f9f3871a3c3d8e975bdb3c9c37928511c74405d5532896b3bd7a9ef78ca27d5114742c06f0a141da21e2b031d75ac8db85053b28067e7de4e5d4acde6feff0e9b9a83c0b1fce192bced051b1c59ead91bbfd7059f78e1b25831df7fae9e2028d1f46405d8747fec2d3a30060917c63cf3954b627148d47f513ffcc14545a69e4a5c44e6e9f6a004b3d7df50a3015488fb38176ddc4419346a660ca0c97c436c518e6b27a96727b71992237e4dc758ca3b685f9778c6acd6aa142fefe511b0be2938610bd36e2684e12d6bd92af52be16655af0eb7b46330f94bfbc641a76943203a715faf08044dc9631734ec0e8bd47aed3fb90b8c183f4a31b5f0751fd0d6c83e67a38ba8926bc252112b9f72ae5c5535f39bbaa7aba35afca63d40822233d9983512194b88aa1d8474b653d97cfae9e8222edd0fe0603619ed802b245c"], 0x14}, 0x1, 0xfdffffff00000000}, 0x0) 22:40:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x80000001) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) r4 = syz_open_pts(r0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000000)={'tunl0\x00', 0x56}) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000001c0)) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) flock(r4, 0x8) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000200)={0x17}) creat(0x0, 0x20) 22:40:45 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f0000000140)='./file0\x00', 0x400, 0x0, 0x0, 0x80, 0x0) ioctl$KDDISABIO(r0, 0x4b37) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000100)) mq_notify(r0, &(0x7f00000002c0)={0x0, 0x15, 0x4, @thr={&(0x7f00000001c0)="4893913aeda89fa2fc00d44e6e03734d029b127255c34af3ee2226387d66b1983a66a4019ec02b4fa95cb4a2424fcd84f2cae3eac94e88d04d404b85018a146780785a546c4f0bc7a28865d6f6fdba1b9d9d77b702b57c110f95c9f8d65b42960941dd8066981c85d9b78a0a81c5e5652f4e326774d4f795120c7fbac5cfbcbe238a937973efb55d1e6a00ce378d00d71e41576b78b1d9d501c3f333c3e6911e2e9cc24aab3109a06353bbb32729c59bb3d14cb0d7de3ba77ff77e4db5b30a9d5d", &(0x7f0000000040)="37063a5d006e6d655f049623d31f9e8ae7a8011114fe846c5e89f091f7102f70095e09"}}) 22:40:45 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @bcast}, [@rose, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom, @null, @rose, @rose, @null]}, 0x48) listen(r0, 0x0) shutdown(r0, 0x1) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x7, 0x8000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000100)=""/148) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f00000000c0)) 22:40:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) r2 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r0) r5 = syz_open_pts(r0, 0x0) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000400)="b4d91fdce52c5d3b793b2ae390cec878542952894413bb1d632b92b8294e5105e64156e4566dc70cd08a56a36b6bd5425acc72f2909358a5177935c7d10b577addaa211ff5bc2c5a56d67e18f5f4e493d8cc291169bcec28d3fbbe230fb4bd8617c7a3f61a3893915823cded8b41f218eb3a8ede40c114bcdd1e23db4ef55143929e1409c5472f958ef3ee85ff854faf4e9e94917b01b5f5b4df9ae64ab9d65594faec5633834575c87082c438be93d9aff5827839b6fb3eab96ee43a208fcd0b3d29529cc84494c75f1d403ac375cafc66ca9ecaecfde64918a43a639b80ff2a511a749c1b3bf0c78493e6f2bebc91077bc", 0xf2) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f00000001c0)=0x36) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) fsetxattr$security_capability(r5, &(0x7f0000000240)='security.capability\x00', &(0x7f0000000280)=@v1={0x1000000, [{0x2, 0x8001}]}, 0xc, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000200)={0x17}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f00000002c0)={{0x9, 0x3}, {0x5, 0x4}, 0x6, 0xf47861d2e31c509d, 0x100}) creat(&(0x7f0000000000)='./file0\x00', 0x20) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x1ff}, &(0x7f0000000380)=0x8) fchdir(r5) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000003c0)={0x80000000, 0x201, 0x9, 0x9, r6}, 0x10) 22:40:45 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x10) listen(r0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0xa080, 0x0) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000280)) getpeername(r0, &(0x7f00000002c0)=@hci, &(0x7f0000000380)=0x80) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000200)='/dev/cec#\x00', 0x3, 0x2) accept4$x25(r2, &(0x7f0000000180)={0x9, @remote}, &(0x7f00000001c0)=0x12, 0x80000) gettid() [ 262.925613] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) [ 262.953336] attempt to access beyond end of device [ 262.958597] loop5: rw=4096, want=136, limit=2 [ 262.975304] gfs2: error 10 reading superblock 22:40:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x2, 0x9, 0x2, 0xfffffffffffffffb, 0x3445}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) r4 = syz_open_pts(r0, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000001c0)=0x36) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) unlinkat(r1, &(0x7f00000002c0)='./file0\x00', 0x200) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x2) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000200)={0x17}) creat(&(0x7f0000000000)='./file0\x00', 0x20) 22:40:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) ioctl$SIOCGSTAMPNS(r3, 0x8907, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r0) r5 = syz_open_pts(r0, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f00000001c0)=0x36) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000200)={0x17}) creat(&(0x7f0000000000)='./file0\x00', 0x20) 22:40:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x50f8b5ba2275c2c2) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000240)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r0) syz_open_pts(r0, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f00000001c0)) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000200)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2fc, 0x0, 0x0, 0x8000}) creat(0x0, 0x20) [ 263.125135] attempt to access beyond end of device [ 263.130835] loop5: rw=4096, want=136, limit=2 [ 263.159710] gfs2: error 10 reading superblock 22:40:45 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0xd0782, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f00000000c0)=0x8) listen(r0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x10) listen(r0, 0x0) 22:40:45 executing program 5: syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f0000000400)='.\x00', 0x400, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080)={0x2, 0x1ff}, 0x2) 22:40:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x2, 0x9, 0x2, 0xfffffffffffffffb, 0x3445}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) r4 = syz_open_pts(r0, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000001c0)=0x36) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) unlinkat(r1, &(0x7f00000002c0)='./file0\x00', 0x200) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x2) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000200)={0x17}) creat(&(0x7f0000000000)='./file0\x00', 0x20) [ 263.443485] attempt to access beyond end of device [ 263.489633] loop5: rw=4096, want=136, limit=2 [ 263.508706] gfs2: error 10 reading superblock [ 263.592636] attempt to access beyond end of device [ 263.597604] loop5: rw=4096, want=136, limit=2 [ 263.609139] gfs2: error 10 reading superblock 22:40:46 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0xa, 0x6) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000100)) getegid() r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-control\x00', 0x8000, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0)={0x6}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x71, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0xfdffffff00000000}, 0x0) 22:40:46 executing program 3: r0 = socket(0xa, 0x20000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x483, &(0x7f0000000040)={0x11, @multicast1, 0x0, 0x0, 'sh\x00\x15\x00\x00\x00\x00\x00\x00T\x00'}, 0x2c) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp\x00') ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000080)) 22:40:46 executing program 1: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x109) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ashmem\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) dup3(r0, r1, 0x80000) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000740)=ANY=[@ANYBLOB="2b0a000000000000010000120000000054000000000000000900000000000000030000000000000000ff00b10000000000000000000000000000000000000000000000001c54fe4ecef33dc583104b473c5b84009900000000000000000000d7c264e86b8d90afadd0388eb5ef89b522823e78c8360545b5930a27ee7532a5d589ba1a798943424843252b5ec4eda13e"]) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e20, 0xffff, @loopback, 0x4000000000000}}, 0x0, 0x4}, &(0x7f0000000080)=0x90) clock_nanosleep(0x5, 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000100)) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) unshare(0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000180)="ced9311e89a6e2640074897073f05934", 0x10) r5 = request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xfffffffffffffff9) ioctl$FIBMAP(r0, 0x1, &(0x7f00000001c0)=0x10000000000) keyctl$describe(0x6, r5, &(0x7f0000000680)=""/185, 0xb9) r6 = creat(&(0x7f0000000300)='./bus\x00', 0x1) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, 0x0) ustat(0x5, &(0x7f0000000500)) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x7b) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f00000004c0)={r7, 0x20}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@mcast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000000640)=0xe8) fstat(r2, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000880)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000980)=0xe8) write$P9_RSTATu(r0, &(0x7f00000009c0)=ANY=[@ANYBLOB="630000007d020000004c0008e903000000020400000001000000000000100dbdef26ff0f0000ff0f0000010000000000000001002c0c002f6465762f610000000c002f6465762f6173686d656d0002005b2f", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10], 0x63) 22:40:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) r4 = syz_open_pts(r0, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000001c0)=0x36) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$void(r2, 0x5450) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000240)={0x0, 0x2, 0x100000001, 0x6}) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000200)={0x17}) creat(&(0x7f0000000000)='./file0\x00', 0x20) 22:40:46 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/member\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x2, @mcast2, 0x7fffffff}, 0x1c) listen(r0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x10) listen(r0, 0x0) 22:40:46 executing program 5: syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f0000000000)='./file0\x00', 0x400, 0x0, 0x0, 0x0, 0x0) 22:40:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000005540)={0x8, "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", 0xfffffffffffffedc}, 0x10e5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_unlink(0x0) sendto$x25(r0, &(0x7f0000000580)="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", 0x1000, 0x40001, &(0x7f0000000040)={0x9, @null=' \x00'}, 0x12) fadvise64(r0, 0x0, 0x0, 0x4) 22:40:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) r3 = syz_open_pts(r0, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f00000001c0)=0x36) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000200)={0x17, 0x0, 0x0, 0x0, 0x19}) creat(&(0x7f0000000000)='./file0\x00', 0x20) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) prctl$PR_SET_PTRACER(0x59616d61, r4) 22:40:46 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @default, @default]}, 0x48) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip_vs_stats_percpu\x00') ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f0000000180)=0x1) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000240)) listen(r0, 0x4) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x1c, 0x80000) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000200)=0x1ff) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000100)=0x3, 0x4) fadvise64(r2, 0x0, 0x1f, 0x1) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f00000001c0)={0x18, 0x18000}) 22:40:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) r4 = syz_open_pts(r0, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000001c0)=0x36) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$void(r2, 0x5450) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000240)={0x0, 0x2, 0x100000001, 0x6}) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000200)={0x17}) creat(&(0x7f0000000000)='./file0\x00', 0x20) [ 264.173383] attempt to access beyond end of device [ 264.178389] loop5: rw=4096, want=136, limit=2 [ 264.178395] gfs2: error 10 reading superblock [ 264.252737] attempt to access beyond end of device [ 264.257700] loop5: rw=4096, want=136, limit=2 [ 264.257706] gfs2: error 10 reading superblock 22:40:46 executing program 5: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) ptrace$setregset(0x4205, r0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)="952ac279dfe8d12504557fa701fc42c3eeb1585a8deb03d2149cf1b45a84562db07161b6df21f013fc4e208a32478ca4b2c73ddbd1270594bdc7950f21b1bd875e2cc9b3c4282e31a0bf070628a9c9c685364e9ede95d38b7b5fb2a2ccad75d94c80a5b0046c5de050722e9ccb5deb682fed88a083e4837b67", 0x79}) r1 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x0, 0x2) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000140)={0x18, 0x0, {0x1, @remote, 'tunl0\x00'}}) 22:40:46 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x102, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2102005ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() tkill(r3, 0x2) r4 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x81, 0x4002) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000180)={0xa, @raw_data="77b6cfa6512727abfb8bcf3d7568e5b5d049636486dc746a6c11431f07fd95f04fdf3ac9ff0ada71abbbd51568a783536afc6709f608935d17743787ad92908ffcc94e28a38acf61a140dff17c897f645e1c95fa3e17d7a5390a9a56ca8ed105c9d0951bc24a6df69cd4fea966ca2025198c4cd62aac648ab043f286cf47ab7a0f5976c9ce72ac9084e5c90fb945d55fbcdbaf78941a62ac6aada9cacad63d413d8edc0b6fac60696298a65d4e000175a7c591f1a4387f35e17d4aea2e07dbe91b41611c4cccef6f"}) prlimit64(r3, 0x0, &(0x7f0000000000), 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000000340)=[0xee00, 0xee00]) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) r9 = getegid() r10 = getgid() r11 = getgid() getresgid(&(0x7f0000000480), &(0x7f00000004c0)=0x0, &(0x7f0000000500)) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="02000000010004000000000002003ae2", @ANYRES32=r5, @ANYBLOB="040002000000000008000100", @ANYRES32=r6, @ANYBLOB="08000300", @ANYRES32=r7, @ANYBLOB="08000400", @ANYRES32=r8, @ANYBLOB="08000400", @ANYRES32=r9, @ANYBLOB="08000400", @ANYRES32=r10, @ANYBLOB="08000500", @ANYRES32=r11, @ANYBLOB="08000300", @ANYRES32=r12, @ANYBLOB="08000200", @ANYRES32=r13, @ANYBLOB="08000400", @ANYRES32=r14, @ANYBLOB="10000101000000002000040000000035"], 0x74, 0x0) r15 = dup3(r1, r0, 0x80000) ioctl$SIOCX25GSUBSCRIP(r15, 0x89e0, &(0x7f0000000700)={'dummy0\x00', 0xf44, 0xb05e}) 22:40:46 executing program 4: r0 = socket$inet(0x2, 0x21342bce21f73904, 0x7) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xe8}}}, &(0x7f00000000c0)=0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r1, &(0x7f0000000140)=0x4) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x400002172, 0xffffffffffffffff, 0x0) mlockall(0x4) mremap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffb000/0x4000)=nil) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VT_DISALLOCATE(r2, 0x5608) ioctl$RTC_PIE_ON(r2, 0x7005) 22:40:46 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x0) connect$netrom(r0, &(0x7f0000000180)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0xffffffffffffffb7) listen(r0, 0x20000000000) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000140)=0x3, 0x4) getsockname$netrom(r0, &(0x7f0000000080)={{0x3, @default}, [@netrom, @null, @netrom, @rose, @rose, @bcast, @rose, @default]}, &(0x7f0000000100)=0x48) 22:40:46 executing program 5: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x400, 0x0, 0x0, 0x8, 0x0) 22:40:46 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x610300, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x0, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}) 22:40:46 executing program 3: r0 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x1) getsockname$netlink(r0, &(0x7f0000000180), &(0x7f00000001c0)=0xc) syz_genetlink_get_family_id$fou(&(0x7f0000000240)='fou\x00') r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, @in={0x2, 0x0, @local}], 0x20) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000280)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x3, @local, 0xffff}, @in6={0xa, 0x4e22, 0x20, @loopback, 0x1}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0xa5d}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e24, @local}], 0x4f) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000200)={'ifb0\x00', 0x81}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000), 0x4) 22:40:47 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) r3 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r6, 0x4c00, r1) r7 = syz_open_pts(r1, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r5, 0x894c, &(0x7f00000001c0)=0x36) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x5e0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) r9 = fcntl$getown(r0, 0x9) r10 = fcntl$getown(r2, 0x9) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0xc) r12 = fcntl$getown(r0, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={0x0, r4, 0x0, 0xc, &(0x7f0000000480)='/dev/media#\x00'}, 0x30) r14 = getpgid(0x0) r15 = getpgrp(0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000003780)=0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0}, &(0x7f00000005c0)=0xc) lstat(&(0x7f0000003140)='./file0\x00', &(0x7f0000003180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000003200)={0x0}, &(0x7f0000003240)=0xc) getresuid(&(0x7f0000003280)=0x0, &(0x7f00000032c0), &(0x7f0000003300)) fstat(r5, &(0x7f0000003340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r22 = getpgid(0xffffffffffffffff) getresuid(&(0x7f00000033c0)=0x0, &(0x7f0000003400), &(0x7f0000003440)) r24 = getgid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000540)={0x0}, &(0x7f00000034c0)=0xc) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000003500)={0x0, 0x0}, &(0x7f0000003540)=0xc) stat(&(0x7f0000003580)='./file0\x00', &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r6, &(0x7f0000003740)={&(0x7f0000000240)=@kern={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)=[{&(0x7f0000000280)={0xf8, 0x35, 0x200, 0x70bd2d, 0x25dfdbfc, "", [@generic="dc8e0c0f5ae390a3", @typed={0x8, 0x8b, @u32=0x20}, @generic="0483a940e70949dd7526f873f6a7b322984a4880115c14d806f3842c4f79006fabf605bc25cc55f925851f1fab1242e19720a600bdafb42064103fd23d113277c1fd80ccbe112b790ab73950619d3d51c6dc814f5f1f4e338f5a3ac7ac1d5fd3bfd8f66d3bf2158d2aac8b1add80166d986b0008316898815b7e3562a20a7bd4a156f5441b26c6b4a5ef7971b61837e69e2e88327f22b97a87f024341efa56628832df8162a4b0a8323e867a39351b098812a87550548ae74c16e9c2a4f0f31b665eda259aa0f3745bb5a9394f4383e63020d175db31"]}, 0xf8}, {&(0x7f0000000640)={0x2bc, 0x2d, 0x200, 0x70bd25, 0x25dfdbff, "", [@generic="54543fef718392beec8989810bf7440aa1bc0c75b05883bc4e3c7f957c033533a8aa3ee8bf1736e7d009dc59c05196503faa7f6afa0feeb24dfe028cd99eeb23f10a696b210317e5435703b0841b5e0d12e01e36cf9c761efab68fbf6423d3c3cb6af85cdae77bc0f1c84b5fd7dc6f59676f172c57790c1dd917bb9d7c662abd21f666b0fdd002bb416e65e85f5b7ee8d9386c516db51df7e6e41c58d288890172aa5772cffa58983ee5acacc77430a399172b4a4c143df3b04a7a436d19172bef3f6d4f90a22001ee505b34b1d322f1527d79034eafb942e201acc1fcbc9edb114e5d45a229", @typed={0x8, 0x8b, @u32=0xb53}, @nested={0xd4, 0x55, [@generic, @typed={0x8, 0x37, @fd=r0}, @typed={0x8, 0x3a, @uid=r8}, @generic="6a9f74a4558ceb6914cb77a518de41c4edfa0cbc11ffd5364993146ed6844b4d83cdb63de3fa95b52df7324cedf90f5af01b1e15155c60fd41196493dc961fa5a1fac83a9e98084198fabc3e61a010fc7fc50872daa773b0e263dd94be902dc6240223963d87f3768bb0dd40a179f3df682261422c149c80bf8f27ab767d84e5761b77b3a22e844c93413ac30cf4af20c034198e45ccfbfa048bdd60c449aa20d315e91d856c58fa43c3b70a1ded65fd3b8c01f681c4cc332fa026b520"]}, @typed={0x8, 0x92, @pid=r9}, @typed={0x14, 0x57, @ipv6=@ipv4={[], [], @loopback}}, @generic="f3f9fc34be791fe3f4ace3664a83ef071196c7527649c1e7a0bfe1f0cd343f43df50a8264a53248ef3a340b0f8db91186f1884ee8b71ea808760e54d419a4d33dea268b64e0024c0055cde898250ed59e0a7507b45a20b705a90b39b", @generic="3b5f7da118dda5a8972054a408e3d671088defa262f03647d01b9b3e7540a4fa2721b747e450cfe5cb9bf90a01220d5dfeb9a01c79720126221626de997dba46acc37c0ac4ac7a64f3b130fa8dd16f46e24519fb0471d20672075158105fac3320e7dc2be0b2fd65ed1da86b536bfaf48d1b"]}, 0x2bc}, {&(0x7f0000000900)={0x142c, 0x33, 0x0, 0x70bd2a, 0x25dfdbfb, "", [@nested={0x1174, 0x24, [@generic="11b2d439acf5d470d421069d56f1e1a4d81ef47501cfa90837efe408f463500dc30f5689f03f97b4b7c940c6a5f69974e2d2424bae42918e0aeb084b00e68aaf421cc14739d6bb98a1a500267fd8805bce969d7f93f0cd892e0254", @typed={0x10, 0x41, @str='security\x00'}, @typed={0x1c, 0x58, @binary="203acfc81f691a18d1f758647697d660ac0306a64b5942d7"}, @generic="bc84b00aece5bcd968e5a441f10ce0e4a1d1429d1590e3e24a0623ea30afe520b8cc53d6ccc9a840bb1d6d26e3c28fc053ae7214f1654cdd01ebbaf5ccab719f7b48e952cc9e0dd330e45cf0e924d80c61cd8bce3100b984bbe2e6b960436a2cad795e3394a55c96aefa268a19bf287c7b61dfdb43b44f108a73b0b892ea9782023bee53ed9746a1a5f430093b94e222eddca863fb553a4a79cadb4cd8028e61bc4a5187c660a7dda594ef43cb374869c3cca383f9f76b32c1b5df1a232e68d36e3b11d171444caf534460584f4440af80fab6", @typed={0x14, 0x19, @ipv6=@loopback}, @generic="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"]}, @typed={0xc, 0x6c, @u64=0x3}, @nested={0x174, 0x46, [@generic="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", @generic="87c22a6348dc4b81a08f9bd1c462da54f8b9a2d70a58e05b4b2bf2483fe4ff47a6196aa75886ecd406b480a2f25f58bd014271bf67cf474417568dfd97f77abaefe59682ff7ac2cbb130aae7a9bf1a2c96627c0b8a3bf98ddcb7fd39a8fb4ba45603b20524116a350c6fc96ac98cde74db9a54"]}, @nested={0x120, 0x92, [@generic="5a5420ee06dfd52d1dc97042e029094cd781f30189b113bf07dfae825e1f2bbd87d51a9c1cc88fc58b63cb9b244242b69057039bab1e4d11a084450f7fc13aff4ab2d257475db354e2e521", @typed={0x8, 0x12, @fd=r4}, @typed={0x8, 0x26, @pid=r10}, @generic="f3155f804ace625c0b7588925bafe7971247b50acb2b56aeecde3c0c27ad2387a8658479ea527e7ba5d1f33b2c83966723c0d85209f21b2aa601dcba490a83b63da7c421f78991bcc638b2f12f22763601eb60cbc62471e339a8f65a223ced1cb696d9a00cbf240bbc5dcdb0f0f24025dad30cb32a2878973a31f26bd2b2f6307b7cbab377b477441605cacc4b9f4486e20e3e958f6aade5204e6475d5b1ba51f9b9ffb2c13ee18580192c1325ea2f518bb828ef46858c2a3a", @typed={0x8, 0x16, @pid=r11}]}, @typed={0x8, 0x29, @ipv4=@multicast1}]}, 0x142c}, {&(0x7f0000001d40)={0x13d0, 0x39, 0x8, 0x70bd27, 0x25dfdbfc, "", [@generic="806e513075720e0e67e5e4a0cb2d9efd0d", @nested={0x88, 0x9, [@typed={0x78, 0x42, @binary="fdd251c3133fc4df5dd2682a16592bfe812fbe44f6de4250aa0d692e2c3e312428778ea8d74b618e37aa87061e9e4e1aa3fc87607547fffdf5c6c8950966c07fc6794a77f2a2a3709f0319a4439b15a0ffc4abdc4d28cee9875499a84f51808d11e93cad61abe3ca50a192114eb6fda43e6f"}, @generic='Y', @typed={0x8, 0x41, @pid=r12}]}, @typed={0x8, 0xe, @pid=r13}, @nested={0x1274, 0x3f, [@typed={0x8, 0x70, @fd=r6}, @typed={0x8, 0x1f, @u32=0xea96}, @typed={0x8, 0x23, @ipv4=@rand_addr=0x80000000000}, @typed={0x4, 0x12}, @typed={0x8, 0x3f, @pid=r14}, @typed={0x1004, 0x77, @binary="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"}, @typed={0x8, 0x51, @pid=r15}, @generic="4609f4d2e117d4dbdc08c828da9da84b6670f0b9019be1758352681668917e8c50eccc78611a51eca7b63f31c0f49fc57b8745a92cd332a1d528c0dbc5c2dd8e29282031260f8001c6a09a34092c9ae6daf560a2e9f79733dda1672df2a7b63f9b35067603682048f63e20df3cc08bc77e9004b7691980a2abde0bc8e6c9fb499b672f761cdd63b1f08f46963491b214d246bcf0f68963d4c0054051a050865810a10295e58ae6009b2d47fb64d2cc5517deab4d40c77a22adc9e1fb5e4c0d5c54668a81e64de139084c8a7b68d73d395b14e5ce84", @generic="4ce16846800fdcf73059683715daf33189f8e2840e08fdcddeec59ceb46d72763c080615f8a92448972f9e808f4fa15a2dacf39388b18c5fbb50f970a50a1baaa6a2fe2d7d68f387dc9841d1d77696386822ec6c0354dd99b27b41060571dbe4dcd362a6c47d7976fe00b181e48054a81f80e0fbe0e9f3856d0f7cec998f8a2a6611e050aa7808ca68f92765e700615e808f58105ec77263adee151b79e3574de64262da7ad3576d8769f3321d55333618f845828517c48611f4ea1c750f", @generic="21d3b508b0d720ae3e7ff13935d61d392d80feeb9b16ecc5ea560eece3904ba84a202e4343f1e14bc5f572441f1260489eae4d54d53080105a71b5c5b7ac256f4d189efb58bd6a8fd65e64ec54e80d87e955aad2e19b286899d5d1b0b5ff89822ad17cc145035b16f367080effd38d5eaf5c647b901cddf29a88e528e0a9661e35a55155e1d204b8c2ac5bf68fc2c3aed56e95e2927a0a8e121b8cac4e42992fb809074485800471b79e3f"]}, @typed={0x8, 0x93, @u32=0x200}, @generic="f42427497721a24d28be3a8e62e15d036e6a67332f3abbee53c36f3b58b32800c976e4b0e9a6c1a1dd54c25079677635cacfff03267323ce1a98d2f5cc13200550f6085ed9d40a4562a6edae3225112bf5107bf44556dde1a397b2150fe169e9d069b4bea15a73a5a2dab221cb6059760d2b878ac82a5cefcf0a6f72507c5e8bc4c1bd3e53669416501ecce740d18e9229699d", @typed={0x10, 0x93, @str='/dev/ptmx\x00'}]}, 0x13d0}], 0x4, &(0x7f0000003640)=[@rights={{0x18, 0x1, 0x1, [r5, r5]}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, r18}}}, @rights={{0x2c, 0x1, 0x1, [r5, r5, r3, r4, r2, r2, r4]}}, @cred={{0x1c, 0x1, 0x2, {r19, r20, r21}}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r24}}}, @cred={{0x1c, 0x1, 0x2, {r25, r26, r27}}}], 0xc8, 0x1}, 0x80) prctl$PR_CAP_AMBIENT(0x2f, 0x7, 0x8) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$TCSETSF(r7, 0x5412, &(0x7f0000000200)={0x17}) creat(&(0x7f0000000000)='./file0\x00', 0x20) [ 264.616874] attempt to access beyond end of device 22:40:47 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x2}, &(0x7f0000000140)=0x8) connect$netrom(r0, &(0x7f0000000000)={{0x6, @null}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000180), &(0x7f00000001c0)=0x4) accept$nfc_llcp(r0, &(0x7f0000000080), &(0x7f0000000200)=0x60) 22:40:47 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x800000000000, 0x501402) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000000080)="1f0000000104ffd0540ac5da07000000020000000b00010003049b0d950547", 0x1f) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0xfffffffffffffd94) write$evdev(r0, &(0x7f0000000080)=[{{0x0, 0x7530}}], 0x2a29) getpeername$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = dup2(r1, r0) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000000)=0x35) 22:40:47 executing program 1: bind$rds(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="ab553fec94248c32e27d040000ab288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) move_pages(r2, 0xc7415838d0333435, &(0x7f0000000380), 0x0, &(0x7f0000000400), 0x0) r3 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x6c, 0x200000) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x14100, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000300)={0x6000, &(0x7f0000000280), 0xc, r4, 0xc}) r5 = fcntl$dupfd(r1, 0x406, r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x8001, 0x0, {0x8}}}, 0xffd3}}, 0x0) [ 264.643708] loop5: rw=4096, want=136, limit=2 [ 264.690872] gfs2: error 10 reading superblock 22:40:47 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000340)={0x1, [0x3]}, &(0x7f0000000380)=0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x1, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47b") r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x2000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000140)={0x0, 0x0, 0x10001}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000180)={0x200, 0x0, 0x0, 0x10001}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000400)={0x4, 0x0, 0x2, 0x3, [], [], [], 0x1ff, 0x1, 0x4, 0x7ff, "1611e3ec2f16eedff874d37202994229"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000cfc000/0x18000)=nil, 0x0, 0xfffffffffffffefd, 0x1, &(0x7f0000000180), 0x10000000000000a2) bpf$MAP_CREATE(0x2, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r2, 0x40106437, &(0x7f0000000240)={0x0, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x44, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10001}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0xff, 0x2, 0x6, 0xc841, 0x401}) ioctl$KDSETMODE(r2, 0x4b3a, 0x3d) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000540)) write$P9_RLERROR(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="10000000070100070054495043763400"], 0x10) [ 264.759772] audit: type=1400 audit(1566772847.164:76): avc: denied { getattr } for pid=14038 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 264.792911] attempt to access beyond end of device [ 264.798093] loop5: rw=4096, want=136, limit=2 22:40:47 executing program 4: ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 22:40:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) r4 = syz_open_pts(r0, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000001c0)=0x36) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000240)=@assoc_id=0x0, &(0x7f0000000280)=0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={r5, 0xffff, 0x6}, 0x8) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$KDGKBLED(r4, 0x4b64, &(0x7f0000000300)) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000200)={0x17}) creat(&(0x7f0000000000)='./file0\x00', 0x20) [ 264.820606] gfs2: error 10 reading superblock 22:40:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup3(r0, r0, 0xa088c492ec4ae960) getdents64(r1, &(0x7f00000000c0)=""/222, 0xde) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = dup(r0) setsockopt$sock_int(r2, 0x1, 0x1, &(0x7f0000000040), 0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="11dca50d0104cfe47bf070") fcntl$setstatus(r0, 0x4, 0x80000000002c00) 22:40:47 executing program 5: syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f0000000140)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x209400, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x1) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/udp6\x00') [ 264.923500] audit: type=1400 audit(1566772847.274:77): avc: denied { map } for pid=14046 comm="syz-executor.3" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=47993 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 22:40:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) r3 = syz_open_pts(r0, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f00000001c0)=0x36) ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f0000000640)={0x0, 0x0, 0x2080}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000200)={0x17}) creat(&(0x7f0000000000)='./file0\x00', 0x20) 22:40:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) r4 = syz_open_pts(r0, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000001c0)=0x36) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000240)=@assoc_id=0x0, &(0x7f0000000280)=0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={r5, 0xffff, 0x6}, 0x8) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$KDGKBLED(r4, 0x4b64, &(0x7f0000000300)) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000200)={0x17}) creat(&(0x7f0000000000)='./file0\x00', 0x20) 22:40:47 executing program 5: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000080)={0x5, 0x6, 0x4}) syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffc, 0x0, 0x0, 0x40480, 0x0) 22:40:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x9}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x418ae50ac88705bc, 0x0) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7c, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) r4 = syz_open_pts(r0, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000001c0)=0x36) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000280)={0x8, 0x0, [{0x2, 0xffffffff, 0x1f, 0x1, 0x7fffffff}, {0xc0000000, 0x7, 0x7, 0x46, 0x9}, {0x2, 0x81, 0x8, 0x549c, 0x6}, {0xc0000000, 0x3, 0x6, 0x4}, {0xc0000001, 0xffffffffffffffe0, 0x6, 0x21ec000000000000, 0x2}, {0xc0000000, 0x4, 0x100, 0x3ff, 0x401}, {0x4, 0x4, 0x0, 0x6, 0xae6}, {0x80000007, 0xc745, 0x80, 0xfffffffffffffff9, 0xfffffffffffff801}]}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000200)={0x17}) creat(&(0x7f0000000000)='./file0\x00', 0x20) ioctl$TIOCGPTLCK(r4, 0x80045439, &(0x7f0000000240)) 22:40:47 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x100000000, 0x100) setsockopt$inet_dccp_buf(r2, 0x21, 0xe, &(0x7f0000000340)="586703154cb8e45ad5d2c94a6ef22116d4c363cfabfb9a6d6754681d03949248a4235ba094cda9a7c92e222ba45b98912e1769352ce4c2474e4d2cf689ab33fdb719034fcc4c0af358488b5ebb4469dedba874cd7a5e6ec7692f587e0887151741ff4ced3e6669b6408ea54713", 0x6d) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r3, 0x0) ppoll(&(0x7f0000000100)=[{r3}], 0xd6, 0x0, 0x0, 0xfffffffffffffdc3) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x10) listen(r0, 0xfffffffffffffffa) 22:40:47 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030303e4cc74502f987c2cec6504df6ead74ed8a60a"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid'}}]}}) 22:40:49 executing program 1: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x40c2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000640)) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000680)={0x0, 0x1, 0x6, @link_local}, 0x10) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x800000000000000) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000300)=0x800) write$9p(0xffffffffffffffff, 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) lsetxattr$security_evm(0x0, &(0x7f00000001c0)='security.evm\x00', 0x0, 0x0, 0x0) 22:40:49 executing program 5: fstat(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000001b40)='./file0\x00', &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x9, 0xa, &(0x7f0000001700)=[{&(0x7f0000000100)="f76229c07ad448da32e6d6", 0xb, 0x6}, {&(0x7f0000000140)="f3cb11a756eff12b202d33f410d40ff4410d386153b5392210d58d747a6e1c821912515a8c21f6a4ba701bbf429e445abd4b8bb5e9873dbebe638935f1", 0x3d, 0x10000}, {&(0x7f0000000180)="0615798f039fc4bb69f7e426f11f360b5c6b5b8d9e5fe50d7f93a73b2aaec9ca3cb56f87ee562c2824e5c7c783af6481dc1c4a49475e32c96507dd7f5fea64a1b6648b2a36e718bcfb18552e0c467592d09778ca6c294ace7e1810effe05ff21764ee3e21a8b8e056f82f7c71371d8b5c4840719", 0x74, 0x6}, {&(0x7f0000000200)="2586cb4e9425d32d670ae7a0730f9866b9676056f70a516b3c5cd90b9dd823732048bad1fa92fb2f1fbea7c7a0f948696d5b467e780936ce6e5c93a5850dadde429caaef87da781d6637b482f4bad9a807ff14da4ece9fd24c1007b20f64711341e668baea297767fa96a1e4aae24b030049c3254b33ed415ffbd04216ff6136a6f1ff27417a31c355b8bf78667930f4c5dcccd23c1753aa638b33eef5486e8062caa85ed4f96a906cfd2ddbfcd32cb10e8c446e1b74b457999eca21a7fd9f4b785b8b452043fde2918ac5e71e9416f5081ce33c2097ef3a7a7d", 0xda, 0x100}, {&(0x7f0000000300)="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", 0x1000, 0x8}, {&(0x7f0000001300)="a9850bf44e99275ad022ac85530e7da74309e55d51e9de42318136e5c8f976de7cb57385469db815b49aaf18bc6022a0c543079b10b34166cdf71e4e976c01409effd9e9340f5a3cf9fbe3a4b057917184ba74a624e7a6e6228e20ee66daa9f6a322d58758ae3b03445a6df27499c54f91db", 0x72, 0x7}, {&(0x7f0000001380)="967d3d0f9a643d5e6fae6aaa104fceeaafa50dd6f8aaa16d9f231332119406fab1f872f4dc0135dc234e889732069a603bc66249d93de4d34d0b4c6410ea0f4fcb5528723ea258a3f34475be0638dbe0ae831b7f36138d157a463761cdb9e18b8960fb3ce0b47cc06c788734e262655e6d9eda6abaf06b6f60620e7ee531e1945107a633031e1a21af8ce697f5322af3766bf7c0951d00674ff19082a7834a4d427408d80dda7b07a34a83034c311755afc166ba383b8c7226bb494abf8131a34a615ba9fab27ab8a9ffeac7b6f3bec8ad2e08e3", 0xd4, 0xae}, {&(0x7f0000001480)="64532ade5bc02d2d4445ed541984012500881e7510c447055ab8707e1cd450eedd1b8baf6a50b780f361ae8be682097fe21c3c5082974ca7f256b721e4deacb4eddcaa4401eb6206dd2c62162b1693664ef7685ecd819d3b583834e312a926c61e10006a7d17f459e19f823ef1b3335a3a021f3f1deaace3c25c564007ac99eb750786fb09516c0c3a9f1c50e5187e33eb703038f6caf266343892a2d8963e646866461707ad6f63355320cc87802d6c35b362bb3efd6aebab175ee89ef8", 0xbe, 0x5d}, {&(0x7f0000001540)="42a8f6f0c4b565c291cea8a7884543b04836ca72953a10747d90e2b4e8b8ec2a2355ac25e0ae414d24f443aa57e8fe85241c797aac8dfec1c2b2ff93627247ecec367a77dcfe47d014193575d664aeceabd4884fd2b16a6edf683209545bd9bebee4d66de4046371080392b63bc826b1d921b9a4b627f7354be6af135b9f1a034de89156900b18ed06f0e6d88ee8b242f37761e6d6bc4ffd394d7086894c345c4732fb5b096b6a58", 0xa8, 0x3}, {&(0x7f0000001600)="b0b9a8737bcb342cf72ba50f999c7d2c85112020cc04aab1bce8b960b62b09e04a16ada83e40641829133ae52128aaeba6f39c105ce12a70c945ffc8a20d795186ad4708a02c18eb91187c847fb8e4b03b0d434e0aa25d5cfeb169af5027123c86bcd0bd7037fc16327b735a310784812365c4f637ea1c6ef2d7e2ef4f53c222a71a8ec40c88ee2c267e058895b1fd1b02a33f3d28069225f3f3eca676ff5a33dd09ed9ec9686c80ee535e6677e9df3cbca926dc2b9a55b4b79ff7bde1cabb1611fa4a56fd292d4e22f33aa7dd189672206354d962a4a0efad2809ae5d426383ded43fb89a4fc8f8d752591bc4334e16df87", 0xf2, 0x8}], 0x20081, &(0x7f0000001cc0)=ANY=[@ANYBLOB='grpquota,smackfshat=userselinuxbdev(,appraise_type=imasig,uid=', @ANYRESDEC=r0, @ANYBLOB=',appraise,pcr=00000000000000#00023,uid=', @ANYRESDEC=r1, @ANYBLOB="2c5b3e29075700326844d3ae6707adbb3185dc6dae90747971653d2c003cddce86f0a261b160289d11cf894f70154fb7949896990df087cef128e21dc1b30f8936676ac99edd30cbbf41700d521e8e6c867edb4fc45cc83491dafb70ee945dc00d26598388918a5c3dff363716bc08bd684dc9d05d57909df28e6b5a5f5d892ae77bba5431cbe8912d9022078f59fa88da5fd9e3b2004ac06d9012d52754dbc8957bbed777ecdbb438"]) syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x400, 0x127, 0x0, 0x0, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000001980)='/proc/capi/capi20\x00', 0x10000, 0x0) ioctl$SG_GET_SG_TABLESIZE(r2, 0x227f, &(0x7f00000019c0)) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001880)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000001900)) mkdirat(r3, &(0x7f00000018c0)='./file0\x00', 0x108) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x4) pipe(&(0x7f0000001940)={0xffffffffffffffff}) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) 22:40:49 executing program 4: creat(&(0x7f0000000040)='./file0\x00', 0xc8) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYPTR64], 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 22:40:49 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x802, 0x0) add_key(&(0x7f0000000040)='big_key\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) write$UHID_CREATE(r0, &(0x7f0000000300)={0x0, 'syz1\x00', 'syz1\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00y\b\x8c\xfa3\x90\xc8\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00K\xf7\xa42\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x009\x10wP\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00', 0x0}, 0x120) 22:40:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f00000003c0)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 22:40:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) write(r2, &(0x7f0000000380), 0xfffffffe) r3 = accept4(r1, 0x0, 0x0, 0x800) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000300)=0x8, 0xfff7) sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:40:49 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) [ 267.080258] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 267.107114] UHID_CREATE from different security context by process 901 (syz-executor.0), this is not allowed. [ 267.129208] audit: type=1800 audit(1566772849.534:78): pid=14129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=17188 res=0 [ 267.132065] EXT4-fs warning (device sda1): ext4_group_extend:1741: can't shrink FS - resize aborted 22:40:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000340)=""/74, 0x4a}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfe72, 0x2, 0x0, 0x800e00516) shutdown(r0, 0x0) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup2(r2, r3) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x51, 0x0, 0x0) recvfrom$inet(r4, 0x0, 0xffffff27, 0x2, 0x0, 0x800e0050e) shutdown(r3, 0x0) 22:40:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000140)=0x1, 0x4) sendmsg$unix(r0, &(0x7f0000000000)={&(0x7f0000000180)=@abs, 0x50, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 22:40:49 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200, 0x0) ioctl$CAPI_INSTALLED(r0, 0x80024322) [ 267.245007] PPPIOCDETACH file->f_count=2 22:40:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") socket(0x0, 0x0, 0x0) lstat(&(0x7f0000000180)='./file0\x00', 0x0) getgroups(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='sched\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) write(r3, &(0x7f0000000380), 0xfffffffe) [ 267.267947] raw_sendmsg: syz-executor.0 forgot to set AF_INET. Fix it! 22:40:49 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:40:49 executing program 5: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x200, 0x0, 0x0, 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x2000, 0x0) 22:40:49 executing program 0: epoll_create1(0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00H\xba4HU2\xfem\xe1\x7f\x84\xe1\x96\xa0[\xf2\x12\xb4.C\xf2){\x98\x01`4[\xb2\xc46=\xd7&\xfc\x88\xd2\xa9\x04K5B\xb7\x19\xec\xbe\xcbs\xc9\x10\xdb8L\xea#\x0e12\xe5F\xe4\x9d,\x84i0\xc9S\f\xa7\xe6\xa9=\xc1\xea\x99\xe6\x87\x16\xac\xae\xa3\xeb\x16T\xa5\x85\x9d\xbc|\xac\xf0\xb8\x16\x9b\xa7\xcd\xc0[>\xd1\xb0\x83W\xbab\x83\xcbsJ\xe9\x00\x00\x00\x00\x00\x00\x00\x02\xb3\xac\xf2\xb4k7\xd9\x9en\x03\xef\x14\xba\xd4\xb3j\x1f\x11L\x86\xdbI|\xfb\xdb\xf1\x97:\x0e\xb6AY\xf6z\x8f\xcf\xce\'\x8d', 0x200002, 0x0) fchdir(r0) listxattr(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)=""/30, 0x1e) 22:40:49 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00D\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) dup2(r0, r1) [ 267.396562] attempt to access beyond end of device [ 267.407074] loop5: rw=4096, want=136, limit=1 [ 267.432953] gfs2: error 10 reading superblock 22:40:49 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000080), 0xfffa) [ 267.451412] PPPIOCDETACH file->f_count=2 22:40:49 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) dup2(r0, r1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) [ 267.496638] attempt to access beyond end of device [ 267.502087] loop5: rw=4096, want=136, limit=1 [ 267.531575] input: syz1 as /devices/virtual/input/input8 [ 267.536134] gfs2: error 10 reading superblock [ 267.577545] input: syz1 as /devices/virtual/input/input9 22:40:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='notify_on_release\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x10a000d54) 22:40:50 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:40:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0x0, 0x0) 22:40:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100303afffe80034300050dff00000000000000ffff020000000000000000000000000001248990780007030060c5961e000000000304000000000000180300000500000111050000000000000000000000000001"], 0x0) 22:40:50 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128l)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, 0x0, 0x10) 22:40:50 executing program 5: syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f0000000400)='.\x00', 0x40401, 0x0, 0x0, 0x4000, 0x0) [ 267.870746] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 22:40:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000300)='cpuset.mems\x00', 0x2, 0x0) write(r2, 0x0, 0x0) 22:40:50 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = memfd_create(0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, 0x0, 0x0) [ 267.957975] gfs2: not a GFS2 filesystem 22:40:50 executing program 3: sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x98, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x80, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @rand_addr="0fb74bd43b1fa403a1b0ef84fbbc8b6d"}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1, 0xfffffffffffffff8}}}}]}, @TIPC_NLA_BEARER={0x4}]}, 0x98}}, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000001400)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote={{}, 0x0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @quote={{}, 0x0, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{0x81, 0x80000001}}}}}}}], 0x30) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) [ 268.002000] PPPIOCDETACH file->f_count=2 22:40:50 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:40:50 executing program 5: openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0xd) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000400)='.\x00', 0x400, 0x0, 0x0, 0x24000, 0x0) [ 268.025834] gfs2: not a GFS2 filesystem 22:40:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r0 = memfd_create(&(0x7f0000003380)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>\x9b\x94a\xac\xf8R?\x1c\xe2\xb5!\xfa\xcb\xd4\xb6\xe1_\xb4d>\xf6\xb7h\xb9Uql\bf_count=2 22:40:50 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) epoll_create(0x400) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:40:50 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/79, 0x4f}, {&(0x7f0000000200)=""/137, 0x89}], 0x2, 0x0) 22:40:50 executing program 3: open(&(0x7f0000000000)='./file0\x00', 0x40c2, 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000300)=0x800) write$9p(0xffffffffffffffff, 0x0, 0x0) 22:40:50 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/79, 0x4f}, {&(0x7f0000000200)=""/137, 0x89}], 0x2, 0x0) [ 268.382770] audit: type=1800 audit(1566772850.794:79): pid=14275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.3" name="file0" dev="sda1" ino=17198 res=0 [ 268.390365] PPPIOCDETACH file->f_count=2 [ 268.418563] EXT4-fs warning (device sda1): ext4_group_extend:1741: can't shrink FS - resize aborted 22:40:50 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) epoll_create(0x400) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:40:50 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) 22:40:50 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/79, 0x4f}, {&(0x7f0000000200)=""/137, 0x89}], 0x2, 0x0) 22:40:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000003380)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>\x9b\x94a\xac\xf8R?\x1c\xe2\xb5!\xfa\xcb\xd4\xb6\xe1_\xb4d>\xf6\xb7h\xb9Uql\bf_count=2 22:40:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)=""/74, 0x4a}, {0x0}, {0x0}, {0x0, 0x297}, {0x0, 0x128}, {0x0}, {0x0}, {0x0, 0xfcdc}], 0x8}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfe72, 0x2, 0x0, 0x800e00516) shutdown(r0, 0x0) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup2(r2, r3) setsockopt$sock_timeval(r2, 0xffff, 0x0, 0x0, 0x0) recvfrom$inet(r4, 0x0, 0xffffff27, 0x2, 0x0, 0x800e0050e) shutdown(r3, 0x0) 22:40:51 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) 22:40:51 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) epoll_create(0x400) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:40:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)=""/97, 0x61}], 0x1}, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfffffde1, 0x0, 0x0, 0x800e00558) shutdown(r0, 0x0) lseek(r1, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0x5f208b7a, 0x0, 0x0, 0x800e0054e) shutdown(r1, 0x0) 22:40:51 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xd, 0x0, 0x8, 0x2, 0x0, 0x1}, 0x3c) socket$inet_udplite(0x2, 0x2, 0x88) close(r0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) tee(r1, 0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) 22:40:51 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000200)='\'\xc4\'\v\xec\xe4\t\xc5r\x12-\x90\xda\x9a\x94\x02\xec\xea\x10\x90\x03\xcb\xf8\x1b6\xa5t\xd6\xd3\x93\xd3\xdf\x85P\x19G7Q\v\xdcHv\x03Qa\xf3\xd4\xfc(\x83\xfb\xf8C\xf6\x8a$\xb1\x90\xeb\'~\xa0\xd8\xc8\xe8\x94#\xcd\xd5Kp\xbf\xc0\x8d7\x1b?A(\xe8^\x9c\xff\x0f\x1ck\xbc\x95\x05\xcd\x17\xf7\x15o\xd4\xdc4\x84uw\xa6w\x0f\xea`1\xec\xb4\x04\xd5\r\x8d\xde\x1f]\x15\xe5\xe8\xd00\xe5\x8d\x9c\x9ec+\x02\x1d\xffa5\x94\xab\xddNe\xfe\x8c\xc4q\xbb#f\xc1\xb9\x81W\xa4$)!\v\x9b\xa7\b\x91\xe5\xeb\x88\x1c\x0f\xb2.Tr\xe4\x99\x9e\x03\xb4\xd2\xf9KW\xce\xd1cC\xd5\xcf\x97\xa9\xeab\xda\xd6:\xa91q\xf7\xc5\xc0C\xd1\'\x89\xee\x84T:\x88x\xe2\x83\xf2r\xf4&t@\x9e\xa4qf\xdf\xf4\xb5\x01\\a\x85\xd3\xe0\xb7\n\xe7\xed\x84Q\xd7s\xcd4B\xcbQ\xa4\x9f[\x99\xdfJ%\xa8\xfc\xe3`\xc1JA\xc9\xbc\xd4~}\xce\xe8\xfejH\x8fb\xdd\xbcJ\vk\'\xe7Q\xfd\xaaA`\xb5\xa1\xe4\xf8\x9eG\xcfb\xe8@\x04\xe1\xf8\xacU)(S\xed\xffA\xfaqt\xb6-\x9b5\xf6\x1e\x13$e\n\xc7\x9b\xb0X\xb6\xd4\t\x99^^\xc2>J\x16\xd0\x8c\xecy*\xa0\a\xe9Ar\xa6\xb4n9j\xe5\xba\x8a\n\xce2\xcf_\x1b.t)\x8d09A[-\xf6\xe7\xe8\x1f\x92>\xb8\xd4>-\xacY\x9e\x88\x96\xa7\xfa\xdaoL\xa6\xec\xe8\xd5\xbfaf\xd7\xfc\x03\x91w)\xcd\x1f\xbe\xc9R\xcfz\x03\xec\br\x83\x8bM-\xf8X\xfd\"\xb4RV\x7f\xda\xd3\xd4h\x1c\xdb\xbe\xa4U\xec\xcd\'\xbc\xd22\x85{,\xe6-,6\x9d\x85\xb4fL\b\x98\xe9@\xee\xc2.\xb3\xd6w\x10\x94\xb5%D\xe8\r\xfe\x98G\x82\fx,\xa2J\x12\x03ec\xd5e-\x1f6\xe7\xb6\xd9\xcf0J\xed\xb7\x9b\xfd\xfc\x00EQ\x1f\x00D\xc95\xdeG +\x1bp\xf4\t\x94\x87\xf1ZbO\xa6\xe9\f`u\xda\xb3\x1d\xf9\x94\x80\xc1\x17\xde(_\xa7\xe7\x11\x9a\xac\x8c\xb1\xd71\xc5\xe9\xd3n\xc2\xa4\x98P\x9aF\xc2\x93\xad@\xa9h\x96\x1b]2\x88\xf3\xd8\xc798\x8c\x9f\xd4W4\xf1}\aD\xa0\xd8\xda\xf4\x1bEx(t|\xf4Y\xfaJ\xc2GS\xc9R\xb5\xda\xa8\x9b\xaa\x01\xe2~\xd8f.#\x94\xbf\x85z\xbf\xa0x62L\x1f\x91\xd2\x1e%\x88\x1f\f\xabb\x8ds\x93\x9e\xed\xd2\xdb\x02\x0e\xcf\xf5\xaf\xc8>+\x03e\xb7\xba\xb9}\xca\xfc\xe8\xed\x9b\xa2\x9ey\bMv\x8f\x8a8\xfd;\x9a5J\xee\x9a\xae\x83>$\x8a6\x05P\x8c\x05\xb8\r\xcf\xdd\x15/\xa9\xa1\xd4\x87{\xc9I4\xe3 i\xa4\xc5\xe5l\x03?\xfdM&\xc0a9}h\x8ef\x10!\xf0\x99\x80\xb72\xcc\x06\'+\xf0\xa1\a\xeeSGH\x12\x068S7s\xd3\xdaT\"\xa9jk\xed\xa2IyM\xa3&t\xfeA\xa9\"\xb4\xec\xdex\x00\x80`p\x91\x84\xbfK\xb6\x00\xa7\xa2\x06\xce\xc8X\x7f\xd1@\xf1\xcf\xdf\xae\xdb\r\xf6h\xdf\xc6+\xac\r\x9f\xc2D\xdf\xd6\xde`\xa4\xd1=\x1b\x8d\xf4\xbe#\tH\x06;a(`\xdcw\x1dc_\v\x046j\xf9`\r\xc0\a\x8d\x12:l\xc7j3E\xd7\xcaX\x97\xad\x93\xea\x99\xca\xd7m\xb8\x1e1\xb6Nz\"U/\x0eP\b=\x01W\xcd\xf1x\x85\xf4&\xe7\xf9W\x06\xa4\xf8&\xbc\xf4\xd0\xd2\xd1W\xee\x9a\xdd\xdbu\x0e\x9aV\xe2\xc5\x84`Bu\x12\xa8/=\x17\xc4F\x11\xdfm-)\xd9hc\xba\xb7\x91\xd9\x11\x9a,\x19\xf4]\xa7Y@B\x1f') syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 22:40:51 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128l)\x00'}, 0x58) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) 22:40:51 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) [ 268.988919] selinux_nlmsg_perm: 20 callbacks suppressed [ 268.988928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=14309 comm=syz-executor.1 22:40:51 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) [ 269.031564] PPPIOCDETACH file->f_count=2 22:40:51 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) 22:40:51 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) 22:40:51 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) 22:40:51 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x1003e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000740)) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x8941, &(0x7f0000000240)=0x1) [ 269.129047] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=14342 comm=syz-executor.1 22:40:51 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) 22:40:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x2}}, 0x20) dup3(r0, r1, 0x0) 22:40:51 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/201, 0xc9}], 0x1, 0x4) [ 269.201293] PPPIOCDETACH file->f_count=2 22:40:51 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) 22:40:51 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) [ 269.289482] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=14364 comm=syz-executor.1 22:40:51 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) 22:40:51 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="eabe9f303b222957eecbc624877c825255f910c28f5e87a64820546a1ebed56adb3b91e7f1ffd7e4ab56ad8e39808e0b61a0bf7a301ffe8dac0726906d", @ANYRESHEX, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d0492482ba837296d961244e2e0c734057548c402cc43b3897cc275fd87f333c960d2bc40dd887fc8dc4872b0001000000000000f515586de3c101e4f8d1b12b1894ef983d0cfcdfbb1118c5ae060bb6ae2af877735be7b03b5278b53fe125393d6b6adf7f7d0734bc1e5566b4d1447a982f0b0b061ef05d38deddd795e0b31aa0a9709836e23e", @ANYRESHEX], 0x0, 0x11e}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 22:40:51 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000003c0)=0xffffffff00000000, 0x12) 22:40:51 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) 22:40:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") socket(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) lstat(&(0x7f0000000180)='./file0\x00', 0x0) getegid() getgroups(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='sched\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) write(r3, &(0x7f0000000380), 0xfffffffe) 22:40:51 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x80000) mkdirat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x1ff) r1 = dup(0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xb24) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000280)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = add_key$user(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f0000000380)={@local}) listen(0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000340)={'syzkaller0\x00', {0x2, 0x0, @multicast2}}) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000300)={'irlan0\x00', {0x2, 0x4e22, @broadcast}}) flock(r4, 0x2) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f00000000c0)=0x3) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000180)={0x1, 0xd, 0x7, 0x1d, 0xa, 0x7fff, 0x1, 0x73, 0xffffffffffffffff}) write$cgroup_pid(r1, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r5 = semget$private(0x0, 0x4, 0x400) semctl$SEM_INFO(r5, 0x0, 0x13, &(0x7f0000000200)=""/73) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x77a0100]}, @rand_addr="58c4c4a733d993a894f49491cb15d13e", @loopback}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, &(0x7f0000000100)) ioctl$UI_DEV_DESTROY(r0, 0x5502) r6 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000680)={'syz', 0x2}, 0x0, 0x0, r3) request_key(0x0, &(0x7f00000005c0)={'syz', 0x3}, &(0x7f0000000600)='syzkaller0\x00', r6) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) tee(r2, r2, 0x6700, 0x2) 22:40:51 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:40:51 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000003c0)=0xffffffff00000000, 0x12) [ 269.441584] PPPIOCDETACH file->f_count=2 [ 269.457478] ptrace attach of "/root/syz-executor.4"[14386] was attempted by "/root/syz-executor.4"[14390] [ 269.511241] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=14392 comm=syz-executor.1 22:40:51 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000003c0)=0xffffffff00000000, 0x12) 22:40:52 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80000001) 22:40:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)=""/97, 0x61}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfffffde1, 0x0, 0x0, 0x800e00558) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000100)=""/117, 0x75}, {0x0}, {0x0}], 0x3}, 0x2) shutdown(r1, 0x0) 22:40:52 executing program 0: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f00000003c0)=0xffffffff00000000, 0x12) 22:40:52 executing program 0: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f00000003c0)=0xffffffff00000000, 0x12) 22:40:52 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80000001) 22:40:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000000)=""/103, 0x67}], 0xd) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x2769, 0x0, 0x0, 0x800e00505) shutdown(r1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r2, 0x0) 22:40:52 executing program 0: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f00000003c0)=0xffffffff00000000, 0x12) 22:40:52 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) [ 269.771912] PPPIOCDETACH file->f_count=2 22:40:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000400"], 0x4) 22:40:52 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) 22:40:52 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:40:52 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80000001) 22:40:52 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:40:52 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x4000000000000ac, 0x43, 0x0) 22:40:52 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) 22:40:52 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(0xffffffffffffffff, r2, 0x0, 0x80000001) 22:40:52 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) 22:40:53 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'bridge_slave_1\x00', &(0x7f0000000100)=@ethtool_rxnfc={0x29, 0x0, 0x0, {0x0, @ah_ip6_spec={@empty, @loopback}, {0x0, @dev}, @sctp_ip4_spec={@broadcast}, {0x0, @dev}}}}) 22:40:53 executing program 2: ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000500)=""/246) r0 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x4004743c, 0x0) 22:40:53 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(0xffffffffffffffff, r2, 0x0, 0x80000001) 22:40:53 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) 22:40:53 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/25, 0x19}], 0x1, 0x500) 22:40:53 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$inet(r1, &(0x7f00000065c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 22:40:53 executing program 2: ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000500)=""/246) r0 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x4004743c, 0x0) 22:40:53 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f00000003c0)=0xffffffff00000000, 0x12) 22:40:53 executing program 5: poll(0x0, 0x0, 0x4e) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000000)={0x5}, 0x10) recvfrom$inet(r0, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)=@abs={0x8}, 0x8) recvfrom$inet(r0, 0x0, 0xfffffe44, 0x0, 0x0, 0x800e00521) shutdown(r0, 0x0) 22:40:53 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(0xffffffffffffffff, r2, 0x0, 0x80000001) 22:40:53 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000), 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 22:40:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() sched_setaffinity(0x0, 0x8, &(0x7f0000000840)=0xd) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = fcntl$getown(r1, 0x9) rt_tgsigqueueinfo(0x0, r2, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x1}) r3 = memfd_create(&(0x7f0000003380)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>\x9b\x94a\xac\xf8R?\x1c\xe2\xb5!\xfa\xcb\xd4\xb6\xe1_\xb4d>\xf6\xb7h\xb9Uql\b0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:40:55 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, 0x0, 0x0) 22:40:55 executing program 3: 22:40:55 executing program 5: perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 22:40:55 executing program 4: 22:40:55 executing program 3: 22:40:55 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0), 0x12) 22:40:55 executing program 5: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:40:55 executing program 1: open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:40:55 executing program 4: [ 272.734589] PPPIOCDETACH file->f_count=2 22:40:55 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:40:55 executing program 3: 22:40:55 executing program 5: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:40:55 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0), 0x12) 22:40:55 executing program 4: 22:40:55 executing program 1: open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:40:55 executing program 3: 22:40:55 executing program 4: [ 272.901104] PPPIOCDETACH file->f_count=2 22:40:55 executing program 5: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:40:55 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:40:55 executing program 3: 22:40:55 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0), 0x12) 22:40:55 executing program 1: fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:40:55 executing program 4: 22:40:55 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:40:55 executing program 3: 22:40:55 executing program 0: 22:40:55 executing program 4: 22:40:55 executing program 1: fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:40:55 executing program 4: 22:40:55 executing program 0: [ 273.150467] PPPIOCDETACH file->f_count=2 22:40:55 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:40:55 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:40:55 executing program 3: 22:40:55 executing program 1: fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:40:55 executing program 0: 22:40:55 executing program 4: 22:40:55 executing program 3: 22:40:55 executing program 4: 22:40:55 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:40:55 executing program 0: 22:40:55 executing program 1: r0 = open(0x0, 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) 22:40:55 executing program 3: 22:40:55 executing program 4: [ 273.400886] PPPIOCDETACH file->f_count=2 22:40:55 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:40:55 executing program 0: 22:40:55 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:40:55 executing program 3: 22:40:55 executing program 1: r0 = open(0x0, 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) 22:40:55 executing program 4: 22:40:55 executing program 0: 22:40:55 executing program 3: 22:40:56 executing program 0: 22:40:56 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:40:56 executing program 4: [ 273.580358] PPPIOCDETACH file->f_count=2 22:40:56 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:40:56 executing program 1: r0 = open(0x0, 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) 22:40:56 executing program 3: 22:40:56 executing program 4: 22:40:56 executing program 3: 22:40:56 executing program 0: 22:40:56 executing program 3: 22:40:56 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:40:56 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) [ 273.741108] PPPIOCDETACH file->f_count=2 22:40:56 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:40:56 executing program 4: 22:40:56 executing program 3: 22:40:56 executing program 0: 22:40:56 executing program 0: 22:40:56 executing program 3: 22:40:56 executing program 4: 22:40:56 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) [ 273.892960] PPPIOCDETACH file->f_count=2 22:40:56 executing program 0: 22:40:56 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) 22:40:56 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:40:56 executing program 4: 22:40:56 executing program 0: 22:40:56 executing program 3: [ 273.991013] selinux_nlmsg_perm: 10 callbacks suppressed [ 273.991024] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=14806 comm=syz-executor.1 22:40:56 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) 22:40:56 executing program 4: [ 274.070670] PPPIOCDETACH file->f_count=2 22:40:56 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:40:56 executing program 4: 22:40:56 executing program 0: 22:40:56 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) 22:40:56 executing program 3: 22:40:56 executing program 4: 22:40:56 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) 22:40:56 executing program 3: 22:40:56 executing program 0: [ 274.212169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=14830 comm=syz-executor.1 [ 274.230937] PPPIOCDETACH file->f_count=2 22:40:56 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:40:56 executing program 4: 22:40:56 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:40:56 executing program 3: 22:40:56 executing program 0: 22:40:56 executing program 4: 22:40:56 executing program 1: open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:40:56 executing program 3: [ 274.411284] PPPIOCDETACH file->f_count=2 22:40:56 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:40:56 executing program 0: 22:40:56 executing program 4: 22:40:56 executing program 3: 22:40:56 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 274.456148] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=14853 comm=syz-executor.1 22:40:56 executing program 4: 22:40:56 executing program 0: 22:40:56 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RCLUNK(r1, &(0x7f0000000100)={0x7}, 0x156) write$binfmt_aout(r2, &(0x7f0000000240)=ANY=[@ANYRES32], 0x4) sync_file_range(r1, 0x0, 0x0, 0x2) fallocate(r2, 0x0, 0x0, 0x2000002) fallocate(r1, 0x0, 0x0, 0x110001) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000200), 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x0, 0x8}) 22:40:57 executing program 1: open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) [ 274.591098] PPPIOCDETACH file->f_count=2 22:40:57 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:40:57 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:40:57 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000b00)=[{&(0x7f0000000000)=""/82, 0x52}], 0x1, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/201, 0xc9}], 0x1, 0x4) 22:40:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000340)=""/74, 0x4a}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfe72, 0x2, 0x0, 0x800e00516) shutdown(r0, 0x0) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup2(r2, r3) setsockopt$sock_linger(r3, 0xffff, 0x80, &(0x7f0000000000), 0x8) recvfrom$inet(r4, 0x0, 0xffffff27, 0x2, 0x0, 0x800e0050e) shutdown(r3, 0x0) [ 274.692133] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=14873 comm=syz-executor.1 22:40:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000340)=""/74, 0x4a}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfe72, 0x0, 0x0, 0x800e00516) shutdown(r0, 0x0) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup2(r2, r3) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x51, 0x0, 0x0) recvfrom$inet(r4, 0x0, 0xffffff27, 0x2, 0x0, 0x800e0050e) shutdown(r3, 0x0) 22:40:57 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:40:57 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x4004743c, 0x0) [ 274.780547] PPPIOCDETACH file->f_count=2 22:40:57 executing program 1: open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:40:57 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:40:57 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = memfd_create(0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, 0x0) [ 274.915114] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=14902 comm=syz-executor.1 22:40:57 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RCLUNK(r1, &(0x7f0000000100)={0x7}, 0x156) write$binfmt_aout(r2, &(0x7f0000000240)=ANY=[@ANYRES32], 0x4) sync_file_range(r1, 0x0, 0x0, 0x2) fallocate(r2, 0x0, 0x0, 0x2000002) fallocate(r1, 0x0, 0x0, 0x110001) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000200), 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x0, 0x8}) 22:40:57 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:40:57 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x4004743c, 0x0) 22:40:57 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) 22:40:57 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:40:57 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) [ 275.136172] audit: type=1800 audit(1566772857.544:81): pid=14874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17253 res=0 22:40:57 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) [ 275.223823] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=14925 comm=syz-executor.1 22:40:57 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 22:40:57 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) [ 275.262311] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=14929 comm=syz-executor.0 22:40:57 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) 22:40:57 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x4004743c, 0x0) 22:40:57 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 22:40:57 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000140)="b59eed145fd11b36c3c12dfdb6c3078dd5f4ce", 0x13}, {0x0}], 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x4603000000000000]}}}}, 0x108) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000480)={{0x7, @addr=0x10001}, 0x8, 0x65ea}) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000380)={{0x7, @name="b5a93b32b35a95db9168404fbb31977fb1b74e5aa600cf5217152736d470695d"}, 0x8, 0x1000, 0x7}) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') preadv(0xffffffffffffffff, &(0x7f0000000100), 0x20a, 0x200000000000000) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) 22:40:57 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:40:57 executing program 4 (fault-call:2 fault-nth:0): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) [ 275.429153] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=14945 comm=syz-executor.1 22:40:57 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 22:40:57 executing program 2 (fault-call:4 fault-nth:0): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:40:57 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x4, 0x40) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000200)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in6={0xa, 0x4e24, 0xccc, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6eb}}}, 0x90) r3 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000001c0)=0xccf, 0xfffffffffffffd69) 22:40:57 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) 22:40:57 executing program 3: r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) bind$bt_sco(r1, &(0x7f0000000080)={0x1f, {0x1000, 0x200, 0x401, 0x20, 0x91, 0x1}}, 0x8) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010000007c00030000000000000000e4ff177f75b09c1d10768a411daffc1af11ee11f4baa88d31451914cb5a6e7a7e21a6d1a374db6bfdab151d6d1db019610ab9506251571959864a3ba12703af39f52d5888492b6752414", 0x59, r0) [ 275.529582] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=14952 comm=syz-executor.0 22:40:58 executing program 5 (fault-call:1 fault-nth:0): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:40:58 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x400000, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000080)={{0x100000, 0x3000, 0xf, 0x1000, 0x80000001, 0xb4f1, 0x4ae, 0x8, 0x4, 0x1, 0xaaca, 0x5}, {0x1000, 0x5000, 0x0, 0x3ff, 0x9, 0x9, 0x2, 0x0, 0x10000, 0x7ff, 0x9c, 0x4}, {0x10000, 0x100000, 0x0, 0x5, 0x9, 0x6, 0x3, 0x6, 0x9, 0xb7ee, 0x8, 0xfff}, {0x10000, 0xf002, 0x10, 0x8, 0x2, 0x8, 0x10001, 0x6, 0x0, 0x8000, 0x4, 0x8}, {0x864e38ff5991e5ea, 0x10000, 0xb, 0xd7, 0x6, 0x783a, 0x4b, 0xfffffffffffffffe, 0x1, 0x9a12, 0x20, 0x1}, {0x1, 0x2, 0xed9bf0ed6146de67, 0x3, 0x9, 0x757b, 0x401, 0x8, 0x200, 0xed8, 0xfd6, 0x6}, {0x0, 0x4, 0xe, 0x0, 0x100, 0x5, 0xfffffffffffffffb, 0x80000001, 0xffffffffffffff81, 0xffffffffffffffff, 0x8, 0x4}, {0x1, 0x10000, 0x8, 0x3ff, 0x4, 0x5, 0x0, 0x5, 0x8, 0x8, 0x7, 0x319}, {0x7000}, {0xf000, 0x100000}, 0x40000, 0x0, 0xd000, 0x20, 0x6, 0x4401, 0x0, [0xffffffff00000001, 0x0, 0x3ff, 0x40]}) [ 275.595974] FAULT_INJECTION: forcing a failure. [ 275.595974] name failslab, interval 1, probability 0, space 0, times 0 [ 275.649648] CPU: 0 PID: 14961 Comm: syz-executor.2 Not tainted 4.14.140 #36 [ 275.656892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 275.666236] Call Trace: [ 275.668824] dump_stack+0x138/0x197 [ 275.672443] should_fail.cold+0x10f/0x159 [ 275.676583] should_failslab+0xdb/0x130 [ 275.680555] kmem_cache_alloc_node+0x287/0x780 [ 275.685118] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 275.690199] ? debug_check_no_obj_freed+0x2aa/0x7b7 [ 275.695194] __alloc_skb+0x9c/0x500 [ 275.698798] ? skb_scrub_packet+0x4b0/0x4b0 [ 275.703102] ? kfree+0x183/0x270 [ 275.706452] ? __devinet_sysctl_unregister.isra.0+0x6b/0xb0 [ 275.712143] inet_netconf_notify_devconf+0x8a/0x190 [ 275.717170] __devinet_sysctl_unregister.isra.0+0x85/0xb0 [ 275.722700] devinet_sysctl_unregister+0x92/0xf0 [ 275.727537] inetdev_event+0x8ec/0x1010 [ 275.733488] ? trace_hardirqs_on_caller+0x400/0x590 [ 275.738487] ? inetdev_init+0x3e0/0x3e0 [ 275.742445] notifier_call_chain+0x111/0x1b0 [ 275.746830] ? notifier_call_chain+0x111/0x1b0 [ 275.751396] raw_notifier_call_chain+0x2e/0x40 [ 275.755967] call_netdevice_notifiers_info+0x56/0x70 [ 275.761053] rollback_registered_many+0x70d/0xb60 [ 275.765875] ? netdev_info+0xf0/0xf0 [ 275.769565] ? mutex_trylock+0x1c0/0x1c0 [ 275.773692] rollback_registered+0xdd/0x180 [ 275.777988] ? rollback_registered_many+0xb60/0xb60 [ 275.782993] unregister_netdevice_queue+0x1ae/0x230 [ 275.787993] ppp_ioctl+0x1c92/0x23bc [ 275.792245] ? ppp_nl_newlink+0x240/0x240 [ 275.796372] ? __might_sleep+0x93/0xb0 [ 275.800237] ? __fget+0x210/0x370 [ 275.803687] ? ppp_nl_newlink+0x240/0x240 [ 275.807812] do_vfs_ioctl+0x7ae/0x1060 [ 275.811681] ? selinux_file_mprotect+0x5d0/0x5d0 [ 275.816418] ? lock_downgrade+0x6e0/0x6e0 [ 275.820550] ? ioctl_preallocate+0x1c0/0x1c0 [ 275.824937] ? __fget+0x237/0x370 [ 275.828372] ? security_file_ioctl+0x89/0xb0 [ 275.832869] SyS_ioctl+0x8f/0xc0 [ 275.836218] ? do_vfs_ioctl+0x1060/0x1060 [ 275.840381] do_syscall_64+0x1e8/0x640 [ 275.844249] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 275.849086] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 275.854263] RIP: 0033:0x459879 [ 275.857435] RSP: 002b:00007f2d2a098c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 275.865137] RAX: ffffffffffffffda RBX: 00007f2d2a098c90 RCX: 0000000000459879 [ 275.872385] RDX: 0000000000000000 RSI: 000000004004743c RDI: 0000000000000003 [ 275.879632] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 275.886889] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2d2a0996d4 22:40:58 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) [ 275.894138] R13: 00000000004c1ae1 R14: 00000000004d4e28 R15: 0000000000000005 [ 275.903773] FAULT_INJECTION: forcing a failure. [ 275.903773] name failslab, interval 1, probability 0, space 0, times 0 [ 275.917170] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=14976 comm=syz-executor.1 [ 275.934366] CPU: 1 PID: 14975 Comm: syz-executor.5 Not tainted 4.14.140 #36 [ 275.941482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 275.950840] Call Trace: [ 275.953440] dump_stack+0x138/0x197 [ 275.953459] should_fail.cold+0x10f/0x159 [ 275.953474] should_failslab+0xdb/0x130 [ 275.961227] kmem_cache_alloc_trace+0x2e9/0x790 [ 275.961248] perf_event_alloc.part.0+0x5f/0x25b0 [ 275.961264] SYSC_perf_event_open+0xad1/0x2690 [ 275.961281] ? perf_event_set_output+0x460/0x460 [ 275.961305] SyS_perf_event_open+0x34/0x40 [ 275.961313] ? perf_bp_event+0x170/0x170 [ 275.961328] do_syscall_64+0x1e8/0x640 [ 275.961336] ? trace_hardirqs_off_thunk+0x1a/0x1c 22:40:58 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r1 = socket(0x10, 0x3, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80000001) 22:40:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="c2", 0x1) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x0, &(0x7f0000000e40), 0x0, 0x2}], 0x1, 0x0) [ 275.961353] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 275.969957] RIP: 0033:0x459879 [ 275.969963] RSP: 002b:00007f5b61f09c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 275.969974] RAX: ffffffffffffffda RBX: 00007f5b61f09c90 RCX: 0000000000459879 [ 275.969980] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000200 [ 275.969988] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 275.979293] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f5b61f0a6d4 22:40:58 executing program 5 (fault-call:1 fault-nth:1): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:40:58 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r1 = socket(0x10, 0x3, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80000001) [ 275.979299] R13: 00000000004c66e4 R14: 00000000004db758 R15: 0000000000000004 22:40:58 executing program 4: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x81358a716391f04b, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0xa235}}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000003c0)=0xffffffff00000000, 0x12) [ 276.165467] FAULT_INJECTION: forcing a failure. [ 276.165467] name failslab, interval 1, probability 0, space 0, times 0 [ 276.185798] CPU: 1 PID: 14995 Comm: syz-executor.5 Not tainted 4.14.140 #36 [ 276.192930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 276.202269] Call Trace: [ 276.202291] dump_stack+0x138/0x197 [ 276.202312] should_fail.cold+0x10f/0x159 [ 276.202329] should_failslab+0xdb/0x130 [ 276.202344] kmem_cache_alloc+0x2d7/0x780 [ 276.220778] ? selinux_capable+0x36/0x40 [ 276.224849] __d_alloc+0x2d/0x9f0 [ 276.228298] d_alloc_pseudo+0x1e/0x30 [ 276.232089] anon_inode_getfile+0x10f/0x310 [ 276.236402] ? reverse_path_check_proc.cold+0x22/0x22 [ 276.241569] ? perf_pin_task_context+0xe0/0xe0 [ 276.246172] SYSC_perf_event_open+0x1191/0x2690 [ 276.250836] ? perf_event_set_output+0x460/0x460 [ 276.255592] SyS_perf_event_open+0x34/0x40 [ 276.259803] ? perf_bp_event+0x170/0x170 [ 276.263854] do_syscall_64+0x1e8/0x640 [ 276.267729] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 276.272563] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 276.277740] RIP: 0033:0x459879 [ 276.280922] RSP: 002b:00007f5b61f2ac78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 276.288607] RAX: ffffffffffffffda RBX: 00007f5b61f2ac90 RCX: 0000000000459879 [ 276.295880] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000200 [ 276.303129] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 22:40:58 executing program 2 (fault-call:4 fault-nth:1): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:40:58 executing program 3: r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) accept4$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001700)=0x14, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001840)={{{@in, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000001940)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002180)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000002280)=0xe8) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x20010, r0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000022c0)={'veth0_to_team\x00', 0x0}) accept4$packet(0xffffffffffffffff, &(0x7f0000003740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000003780)=0x14, 0x800) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000037c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@dev}}, &(0x7f00000038c0)=0xe8) ioctl$TCSETX(r0, 0x5433, &(0x7f0000001740)={0x3, 0x0, [0x0, 0x80000000000000, 0x3d61, 0x4, 0x6], 0xcb}) sendmmsg$inet(r1, &(0x7f0000003a00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x1ff}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="72e2e92b32141c326c9adb72a7354db60ddb186e8c4356ec1470445a1c31f56a964cce6baab1102967dc608654b92f41cb7d6e2b2b9533cc9912a61a4373148ae0f0191cf2f9c950069115e9cd91745149afc030531e77da01671873f4c9057f90acec274c7581650d31edd1", 0x6c}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e23, @rand_addr=0x1}, 0x10, &(0x7f0000000400)=[{&(0x7f00000001c0)="5aae988b18f69e11a7db8ef312367028fee37374dc3cc81535e88b15", 0x1c}, {&(0x7f0000000200)="8a857bb2263f3c97be776cbb3e591f0ea6156e2a1e1de597c988eabcc99d5ed26bc2efbf1faeb22b87caf368887d95317841484f51783a899df2d5617e11c40354cbe276cfcee1c55001073a0168d21482181dec22dc82946ca07616a72eb4952efa6b5cfb95f1c8b531868b764521b55c261e368d3dd264abb6c6329dd7708f3c81eb94a6b57c7dd860f5ab69ee81eabc65a5187a972857435a182402c919122c9b3ce5093989568f78cfd7d27f0a154e0fc1deeff6d64b961bd57a1059d6efc305723b", 0xc4}, {&(0x7f0000000300)="b944e92a9858063fc23c81972f39c2cb5503333d2cdfaaeec59c9ba70568cf344aaeacbac81c0c0abaae0845118a76f2a5a93ce051524598f132d84ed7e3e85229fb63098f0c76fd1b27395c619ec74bf24dc87d1ef8463e1e26268b1ec63c2d5b210aa69ab8e38f7db48b0d9a48f3c303bdd37f99503060af9e927896061052ecdb74a4b06315216f985af0f7e8656646690b137875f40824e90b9dafa2980097fec66d2b4e450fc1df644b2e404082aeb007a81f3379a6741eb304c2ff1441820fd79d800615e99ea36ba3debf1241ef19e17c412307c1", 0xd8}], 0x3}}, {{&(0x7f0000000440)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000600)="137a0401bde7cbbe1d3be513e348eb7df7373af3f20c2942e5728d7db05e0fe4cbdb73ff7f539bec2a894447ca4d70d60f0aed42e14aeb333264ba91e60eecb9430ac7d29a9c9bcd5c55c7fd3b3196eaaac724380b53c6f937be26ade3c696e2a1f309a2f65ac2549013d7fd5911f58dc71460a9d7202d59243b9ae89bd087fdff6a534ccdb983b3875b7353144bcfacd7622399b23f91d5ab986173ac86a089ae8206ec7343d86722c4ffb9de09daacf5140d173724fc25bdd6c752d29403af3a5835bccd872fc920e98336c9ad187b83cf246bddf26c0978a370319dc8aa1eb66702553b399edf74e4381c91ca193e6a85e272ada0d892f1211c7ea9f61c433b3875f2451af590cbeb2ecaff5ef7f99c7ed60097afb081f0a3c65c5804fe47a4156ec731c571d4f8aba42b5420ee4b65b6701ab5fbd0744c1f34ad354b382d3bb52368da0aa22f8d4b89bc5a0021195480f0d10b24f22a462c2c9a7c4646e4f96ba5142fe19e5d140d393706bab659e8142e0551ce14073dbbab300499d3310f5f449a6ba276318d6168799389952398a66fbc1b0203326041238f601e057db41d74ad0fa5e53b118be9b4b84578d361fd5ae9d5c56cd4cb2b540b30db2401e55176acde82164aee3bf4c09910b229d6c577fcf8fbe350d4c6833b19582bcc0691696d5ea0f529dcf73cc161fd7849b12ffe09668d267a5419959c31b23ab1985b7dcad814e7419d049a9173b21b054ed9e8178a46b2f35738177c100f1fd65ee8ad16411a5d608998c3fad5fe791dfaa8d86ddc734780ac952caa403ebf91b708952f2df6ebea56c96058b5f66e54b60b1ebbc8fe351746b01c321e25a234935981aeb8d7e210662b3f0fe368c33e1c345f9820582384d0a28ae995169e81345b13ae58edbb3e918102767d756fe33cfca126e457d5a89547f34e887f42d92e60790a58b7cf5f87273f5fc1f609b044d8558001d69e1df93839cc7b4e271ac66a9f5044981afde7a329ad1d2569ec1546fb4dcc0bdc3b8588248f90200db293291245b57cae6aac471a9887e904022f292b1cacf075a0c23e6ae947028626ccb71c714c3ff5483f53d273a50b5f2fc6a672b4eed439a51865576c257661555e8495b59fba10d3ddda6ee02a288aa3a582538a09ae23d503faca60c27f1d3085fdfd13a77a53bc65e4b1bd75597c2a17997b42d00589dc0c72480a4ed13aa98d2bfe64d6bd8f0003747b1b90151e3eb36a5a185d6859d2b42d889714e1af67548afb915d912d1c3075cddf0a84620338a576c8aa2962085dc52f38c1b6a2ab985f647c30868763f41e034d4ea99896591e31842e4be2168bb4c1bca508db021ceaec8461a034b32a336f408631a70f2ef570f11f58a057b893d32e46f057784b5ae067ef423c699ced01b7192643a65803e52d47b8ae0faccfd77ab78c66b91fa3d73ac1912b872cacf3232ec0d5e72326a1f137b913c174935f034fc90d44813c535137051e27e00c25f07cd89f381bd5808db1820be49a6016883955f591340fefb22bfed800cd40bb2b5e3bc9ce5f830764a1cdf5a7d5fb81e36faf0b158594635356b74727e1a604bbbc69d78882754389aa89b1e6381af18b2bb0ec7d2660819b32bbc9e36b77285d968efeaa0f2df8d705a512d9b25c1f0e1dca16190ccdd5a3bf9513b8d2be1ee52e2f0a58b7b61b2d7a659dce1310512173f1de2cefdbcde95c105b4842cac3a4246846f8377c820ddd85250456b41c055625b3dc6b42a4c8dfdb9731d9bb0951a3b5d49475ed80c4bfc4ebd2b08f3c89375b007106d10e3ee416183637eb2f9871c03dab917523d91160ae24c066796e7155db9c52c376e58a51b6fa649d407c29b8b6238a7c891f5d1340a4b0059cb6118a8b33612d1a35095fedb72cb4f99d713d5824bb5f2b9ba2a19f9a3f3829032ee46195867bf553a3971634fba86f26efceded1bbf7495228905c5f8c38122a321ebf360c182be343bb5c8ec1a7fb1cb4b55392ff7aeb8a4a5691ccdd35d8ebddb3be83a80d419f52586178be6419956799f42db2870fa5a84872202b1ac86db769d99784b51af1eb0965a1438f2ce137922f919749f32b52b5e20f76ca62d886d4d09b83320de09f0aa255792393278ab928ec81e10a4ef141e3f4f709f3cb0745616cf3da69b04a4628dff0b4dd8b33d0f2599038563c89c72da4eaf8a7d4a04dc359967efa857a4514d85730a600a019640992c2b4963e2aa96f8e37cc876d8030017d6ae479629a7ddd92b1bcb5dd5430e337475b62eeb86f9987032fb02ad8f678c8939aed2dcd29cb47325b57c404cc84bb276c2c0db6588ac85aabbef0fc135f0d0e48815846b83d6cb2298f03d156da0b8da5dc654e9ff7efd7303472a94787a1ee2d168922575e0d98613626a6821d07af71e26c480037743f47894473ae79c216db665df06f53c630d685d78ef15c0dc83ec57a9df09ebb351b5791230f56f218e526e61b984d879e27f866847fe0c87b0a1285b2e354b29931b1f1a0d234b95684cae405fab6b315ee22fb129e18230e07e415e8143cf042d6507c11fce2345e22b24ce5106f6eae9dcb3de745fad5198cd70b9f4a6a8d7436fd2554f5cf4c368a9371d55b832a98886f3d4114a6effd2fa43e4e6c2d6dce3af411ddc637b545853f7906efa684b69ba071678488edec6cac4ddcf2e932c0a1cdad9fa01f47320cf77ec4b1bc2808d7d476a61f9edc972ea69499ea684209683a1a8e05b80826c3af3c5205cbace974a172cbcd02e7cd8acfb728bd9797369b8f1b873b0898fc03157a837cfbdfe3663658234469710b6903f6ba4ffc8cd95a08a396c4fe7439ab8180d62bb145b651cf0de4b60ed1dda3307d77e87582608a04ac240727ed0a1a5d6ae72ba2b8cc2e994ae5cd85bcc9fc2d13562525d07b83a58bd4aa23ce3e00f2ee7b8958cb1c230ee2aca2942c288a74682ff48639d18723a00d82c92de2f92be1adf5c38d219cc0b64d4077b157847cd554ca538c1e6490b59eae088058ad7aeb662e5de24b5a6dc40336576f0b810f07a6aad99f2c8a3bee35c01a07e771e6f161b54a19d8c041e611a933e1fcc84a21283340f4f4904555a7a89c09c111914012767c19ffbe458f4a723cff6388b168abec8ccedb999e7a6943959582bbb89de0f404c9f28e5f93e80cf72f052911cbd20d45568ba256336b825278ba8cc149aef7bcaeb5695ed9fa71d08c1a1510d020cd1b8975ebc478546c58fdfef32c53d5d6f50ee396b0ab2f420ed75fed87a56a1f9fe10055730cf85f8f9b9730591d83a9ec56a7005a347d31b7eb0c037a8fde19458de674b532f10295ad114f7190017c7c2561caeda81fed4b4438f57fdec501a75dbfd28e608982facd35216982cf0a7d697b405fa353b7d117873dc363ffa21e9fb99bd77fc1e66bb691becef4171519883df8c822342f963393bf7c863bcc42bf4fd6e595dce1f5696c9039207dab5ed87d64cd866a4d9799386550dfac3fe44b54f3d0235682278185a301b8575271426a7c0b06fef23181022e089490c926c46bbf3bfe340754293cfca8d57d8f364d2d5f19fd520a5feaa760215a34163ac517f083ecdeb279f74fca5263d5ec7904fe175d8f4656542588ceab55106c6d2ca973b237e637da0bdb74670a2266ff834837ae965162d09b049a27146d7f36c6b1afa4f1f97ba5f0968e8451bb905efcdeb5819ae800d4725042cde97977ffdcaf667612b047db555f9560670967ba738c591c742e0e3ec4ca6234bfa8f5dbf9ec20cc344d76850f177a2b3eec576e3bc3c77e8322551294400627fde89e4feb0f6198d6a5fd5d792dbfa02a7bff59645b0f8c33d653924ceee9668eead0377d3c0e196c3472cdf047b250b60e0a222fa6c2b8d45aaef1330394aaa86331f19dcda56a40c619f919f3e9206a49dbe3ff84aca64da767e851f1861ed009bd842ade72b5c0a5ef1320fc39a033d1b1303a845c80ce5f1bb2dd7f0132fe5062ba559e9d92c6d3dbecd6e1406c8b4a153660bb09069a44dd67e034ec40391867bc8a259e6a1a19a4db8a28c6e4d50c292dec2f0f899f62ca07bf06a75fa41fd619d4e7a32ed50740fdd2657d95a2bf6f85e3736011a554bf1e3b42e63acb86a849bac9ff6615d3bdaad5f4247fb869954b82f9465549650561921291090a5832e554af79f97086b70224e4b196287a65c3b1b5fd09b7c4f041956eac9d662b225c1936ea7015b5d021c86d576b35996839b2be9cb16d24058a552d0a1550592ca9dbcb7d417abac56483f2d188c1be7db92e9596c79e705c4d8dd8706f5c368c9a32d56a42822f9dd055e12aa79b7b6895018facf91f0e3d894b864c184d73b5fd842e5480d750869c378081b98950c1a524d1a9a390b8045dee05ead4fc5570daa11ff7083ba29806a3dcddc1bdc84eb5eaea3f9cbd24798e82eb4a2018ec46ef44ddb3fc6851dcc15789590a359099db18eb4432742c5b6686a110d2a50e2d9b2f562597f8dd2fcafab0a9f15d31852c91f27896b877a459af701b38ed379f5bfd319e374ec40af6f82197e3c59ab72ec30a3014e1705a295366b19a0f9f7a4173172c0fb9fea045a12ace13a7cee696e973535e9e24f495eb2aa216142b746125d38ad0ffe4a915a1cf594902a8c7676da24a0163d0cc5aa58919cf715f0d68c98f2d6c6c9bcdd67a4d789aea5b90f0f642629d19d5c2e9be3e47b8926cb3e5d210a8182e92dc2ed0fed703265796e5a346e629da8541b9a0cb2a291dba425e73ca3be96aaab21d50d725541ed839705f4ec645b0a28be9f82afaadcb7b4c79935d9f0042ad379a8bbc8b7df1ca1c8173a15d815b8303b94158bb575b974bee79b57e0b0650183247c60d9c1cbb448d57385dc0dcd5440fffe6f0e309c4ee0f52305d92b05c532f817554f14416658b8b0cbb3d9a18cccafd9f803b029cb48b156739061b226e2d8fd0fb535a7e255db4d328d264781ddb888865999a5017a060e8d968315cceca8910aa5a80a977f75b6c28d33604463c2833d963a1348d1c17e69bba871ad2f03e561f414ad623bf1dc799e5315ddd634427ebdfc60cb8aa27e1b27852e9f68a5716aa7d51faa665a36ec1153c341c315bdb14275c530071b0218861e3a0eac4ac7254ece79a7470f40992da59c7f73ff6c046818bab736b45c99148744d73e0cb22d1962833104e084056bf0e7f368320d7d4d8f1a7c8a1afc82135d2e2203b3ac21245a81c3d70c023580ec40aad0637319b0af28d96e6ad4e40986274dce7ecdca8aeac577ad8fa91cd1ab629ebd61acc956dde8b06aa683f09238f76da235456aab5cc9b77cc77599aad327689f5ce9fa3a162871a54b4d96b20af9343178b3279c3cb207ca993d87f92e0d6b57d3aa54897921f057429faa3779841fb3e5dbf169ffe5963512748fa7d2be2442656f0f12fe1c41796d64ad752e4d1a37f8d133b92adaca3a21e7b3f519c477ee2b5f92cbfa8c65ccb392d3fc1fae649bd01b52516d024bb6e14fa22ec31b0fa8f4ec541c64bf5033d002176ff76279d728c6f5b30dd1c9c6aaea767aa1d3736321f12db6302db19e35eb0588551ebad0781f7dafb2f878c6ce896f2fcbb139cc00765ec2fffea7ab03afc0cc2b97628fede5c86bae22bfdf5347393f13aed5ed511e6897429f9d10d3599910fc7eec37692a5498737fb0c794cc6c064a693301b7c10ad054d188af181f565a0fe4ba9d1bbdb3cc05ca715728d119a47f6f4a343fe7c168287b930cfdaf06a30ee340537", 0x1000}], 0x1, &(0x7f00000004c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffffffffffffff80}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001600)="defb183bb2e478b8604e16a09a0fd3f752444cae0722cc6aff1c3bcb02ac2b07f3add5e2c44d038bf7e471ad6a1108f25f54ad6820beb737610176c6402271f0db18c74b5d41d254b0b5aa0604a139e66d078c9c6eb421049907a75c548ae199774e213d96c7c44b611fba9314c28d48ca902d5ea841bc5220c695b96d1d09e2961f374f30f93d8d71f7d69ca6d848325b51d4ca735b6ebaccd66689b1b61ebf24de1265569742bfc5bb083eaece29f7e37db2a73a48da4d8b58a08ffe72e44e677e3b2f009cbc426efc9246c6ce6bde8e5556218b884a14da0429abac", 0xdd}], 0x1, &(0x7f0000001980)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="ffffffff00000dd10000000014000000000000000000000002000000050000000000000040000000000000000000000007000000831700ac1414aae000000200000001ac1e0001e000000101070be8ac1e0101ac1414aa0004ebcd940600000b79000000140000000000000000000000010000007f00000000000000"], 0x2f8}}, {{&(0x7f0000001c80)={0x2, 0x4e21, @rand_addr=0x7}, 0x10, &(0x7f0000002100)=[{&(0x7f0000001cc0)}, {&(0x7f0000001d00)="4206f35f9c4a6702a912b8cd41c705ef36ebbcbd7dca30aa5372919d93a6382d54be69557bf79c265c6a174c92988085aad7cb78df3778cef7ca9d7273a680731772ea83adaa110464c71c82d676ddc867f14cfba09235a6c68eca19fcfe202f501c934ba82bd0da78150071644e5387b36938f22b9ee151777827f29289771bdb34f289508a1480a6ad78b1a5a130eb72082c09896e68608f820ab259", 0x9d}, {&(0x7f0000001dc0)="71d4d314", 0x4}, {&(0x7f0000001e00)="30ade5b629f2553440168e62e15136346762c11459182211fe5d014cc57b77cb0709e0e2905de73810ed74a1686003650ca01f838323dc7ed14329b6f3ce64d060a9ba4882cc786b66197eedc5f48194e1aa987374544e3d9e3bb19824584fb92992baecf431cc5066bf345fa5d14927520a511358425dc0dcbe2f395a9a71881d04b79fba6db03b4d2d12cae84331ec35fe840a30544f535cc13d2ac23eeade83aefbb79f759b5e4c73bc9bba001d7262412e", 0xb3}, {&(0x7f0000001ec0)="bd00d9281acf08f49a887fb1ccec4a44b63042ced8e52e579ebbed639e845664cea36f232a882980d327d2ae750be036335a6a789ec4f60faedd3112ec7efab344a57474b23c3aecfaca4084c6f73203bd1f5b5720403c9dc6250a914b9fd440f0f7d51ebed13e8c4eeec7a43babb05a8be2f1353b4210160a66a66f9d34e6fcfb490dccd0ce21f52fa339bc6df30aa82bc070c51892ff55c71fa94a9db153fd5d34a97a12943a101bc63e35905f7cd1dda801b9dbfec61f191e2112d67dfa52fbf11f29af954c3ef4", 0xc9}, {&(0x7f0000001fc0)="cabb9377e88034c9add6366092b574ebeb65f6db66a56d4a7f86dbf29dc4cdba4ead7e6151e01834cbb1b69e4481394990119a180039a153671c380568201c75fafc208ccead37c5e5d74dd32444dcf2436980f17de38400372e6025f3c517577aea17efe4534e47efa36760f9a11e9c4be87f86b6a671dd632172a121b341f82f6e5471910d0d65c1addccc22a090cf4edff43123ec7077ea6be9676da19d1f91bc03239377ab3e56b1fddd6d9f6540cc2d3e39d2a6bd2628c5929b2a8b0d54e74fd9882de7bc16f8da578f5e8f33bcc6204c963d3032", 0xd7}, {&(0x7f00000020c0)="a04909f8cc8f01c6a4a8329d4b38ddf3e670458229004ae9789ee3dc060205a07a3dea202701f466dbe18a0c", 0x2c}], 0x7, &(0x7f0000002300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast2, @dev={0xac, 0x14, 0x14, 0xc}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast2, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x58}}, {{&(0x7f0000002380)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000036c0)=[{&(0x7f00000023c0)="523e7d4daa6c66fe3f72be5b42499392fdd6302cca1197ca2071911129c39c62aa3f674341148c72b2e2523f7c501a53ea5e1ae5031a2e781d22901483f470d6f43812716b352834caa17655a1525dbb9924aa6266bb495d19c387235b053ba4e721d1c7029bd5c77f32d104404ddb4cac6471933d1f5ceb1fd541795c9ef9d2e2031d2ea15c6e5333", 0x89}, {&(0x7f0000002480)="9e13f9b4f9230ab699885285d5ca676f1389172ed60694a007bc090a1b7f345e0d2764abfa440381d411414516b684a4918fc536db63d72b98d8af62ec0d25f3ddbddfef65f60a306680ddf180f76cbadb3efce0876b8fa4f0", 0x59}, {&(0x7f0000002500)="72559524c5b5ffc5aa95df75a0a9f7c9930f2424797fe97130d73e588991a76bff4be2520992f5291cc927fe82741a3d349f0573cf2d34f889d83dd69a14911ea6120f56dee31249e10c90485b76df3e285026d378c6e02bee035f548656814ab0238ab030f9ef6df68106c0a9301a00829dc6bb319495c63b8aa18ee766f377bd", 0x81}, {&(0x7f00000025c0)="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", 0x1000}, {&(0x7f00000035c0)="8cd1beb881ffa458fcf89dc3faf392852fa8f465ce48e6bfcca64b27f9a93a2906ec8d692a427dd6ed43dade062edda83080051814dedf2701a83d734744c9819308685b3c80c8dbe1a3a3267e0f015662f80a463cbe34a12b20c808f524139533409a0408d9b7490013e243dc9e2e2d3555990837c95eb1719d8462be1aa12daf9d0b52c61b33ce36dcd491bc66b57eceb4fdb4c1dd57c1eddbe75cb63f2784dcc5bc4046ccbb1340b63c24584985e3defb2a8f70a9aff04b826b7d06ab707fd097107c0ca8ccc5d4", 0xc9}], 0x5, &(0x7f0000003900)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @broadcast, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x200}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x7, 0x9, [@dev={0xac, 0x14, 0x14, 0x17}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x100}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7f}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @remote, @multicast2}}}], 0xd0}}], 0x6, 0x4000) setsockopt$inet6_buf(r1, 0x29, 0x8000000039, &(0x7f0000000180)="d1020400005800200007000613f32e1c00ce5fe1b471985e", 0xfffffce5) sendto$inet6(r1, &(0x7f0000000040)="cd", 0x1, 0x0, &(0x7f0000aa9000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x800da0ffffffff], 0xffffffffffffffff}, 0x1000000000000002}, 0x1c) 22:40:58 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)={0x4, 0x0, 0x5, 0x0, 0x0, [{r1}, {r1, 0x0, 0x1}, {r0, 0x0, 0x7}, {r0, 0x0, 0x1ff}, {r0, 0x0, 0x7ff}]}) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x20000, 0x0) readlinkat(r2, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/120, 0x78) 22:40:58 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r1 = socket(0x10, 0x3, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80000001) 22:40:58 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) 22:40:58 executing program 5 (fault-call:1 fault-nth:2): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 276.310381] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f5b61f2b6d4 [ 276.317630] R13: 00000000004c66e4 R14: 00000000004db758 R15: 0000000000000004 [ 276.342847] PPPIOCDETACH file->f_count=2 [ 276.407231] FAULT_INJECTION: forcing a failure. [ 276.407231] name failslab, interval 1, probability 0, space 0, times 0 [ 276.429352] CPU: 0 PID: 15010 Comm: syz-executor.5 Not tainted 4.14.140 #36 [ 276.436492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 276.445854] Call Trace: [ 276.445875] dump_stack+0x138/0x197 [ 276.445898] should_fail.cold+0x10f/0x159 [ 276.456230] should_failslab+0xdb/0x130 [ 276.460210] kmem_cache_alloc+0x2d7/0x780 [ 276.464362] ? lock_downgrade+0x6e0/0x6e0 [ 276.468520] get_empty_filp+0x8c/0x3f0 [ 276.472462] alloc_file+0x23/0x440 [ 276.476005] anon_inode_getfile+0x171/0x310 [ 276.480323] ? reverse_path_check_proc.cold+0x22/0x22 [ 276.485505] ? perf_pin_task_context+0xe0/0xe0 [ 276.485524] SYSC_perf_event_open+0x1191/0x2690 [ 276.485540] ? perf_event_set_output+0x460/0x460 [ 276.485561] SyS_perf_event_open+0x34/0x40 [ 276.499521] ? perf_bp_event+0x170/0x170 22:40:58 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) [ 276.499537] do_syscall_64+0x1e8/0x640 [ 276.499547] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 276.511690] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 276.511700] RIP: 0033:0x459879 [ 276.511705] RSP: 002b:00007f5b61f2ac78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 276.511716] RAX: ffffffffffffffda RBX: 00007f5b61f2ac90 RCX: 0000000000459879 [ 276.511724] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000200 [ 276.532671] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 22:40:58 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x80000001) 22:40:58 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000040)=0xdea) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) 22:40:59 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) [ 276.547252] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f5b61f2b6d4 [ 276.547259] R13: 00000000004c66e4 R14: 00000000004db758 R15: 0000000000000004 [ 276.594896] FAULT_INJECTION: forcing a failure. [ 276.594896] name failslab, interval 1, probability 0, space 0, times 0 [ 276.628346] CPU: 0 PID: 15017 Comm: syz-executor.2 Not tainted 4.14.140 #36 [ 276.635483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 276.644832] Call Trace: [ 276.647415] dump_stack+0x138/0x197 [ 276.651045] should_fail.cold+0x10f/0x159 [ 276.655188] should_failslab+0xdb/0x130 [ 276.659143] kmem_cache_alloc_node_trace+0x280/0x770 [ 276.664236] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 276.669669] __kmalloc_node_track_caller+0x3d/0x80 [ 276.674581] __kmalloc_reserve.isra.0+0x40/0xe0 [ 276.679227] __alloc_skb+0xcf/0x500 [ 276.682840] ? skb_scrub_packet+0x4b0/0x4b0 [ 276.687139] ? kfree+0x183/0x270 [ 276.690486] ? __devinet_sysctl_unregister.isra.0+0x6b/0xb0 [ 276.696176] inet_netconf_notify_devconf+0x8a/0x190 [ 276.701185] __devinet_sysctl_unregister.isra.0+0x85/0xb0 [ 276.706699] devinet_sysctl_unregister+0x92/0xf0 [ 276.711432] inetdev_event+0x8ec/0x1010 [ 276.715415] ? trace_hardirqs_on_caller+0x400/0x590 [ 276.720413] ? inetdev_init+0x3e0/0x3e0 [ 276.725328] notifier_call_chain+0x111/0x1b0 [ 276.729714] ? notifier_call_chain+0x111/0x1b0 [ 276.734281] raw_notifier_call_chain+0x2e/0x40 [ 276.738842] call_netdevice_notifiers_info+0x56/0x70 [ 276.743928] rollback_registered_many+0x70d/0xb60 [ 276.748749] ? netdev_info+0xf0/0xf0 [ 276.752441] ? mutex_trylock+0x1c0/0x1c0 [ 276.756484] rollback_registered+0xdd/0x180 [ 276.760820] ? rollback_registered_many+0xb60/0xb60 [ 276.765818] unregister_netdevice_queue+0x1ae/0x230 [ 276.770833] ppp_ioctl+0x1c92/0x23bc [ 276.774526] ? ppp_nl_newlink+0x240/0x240 [ 276.778652] ? __might_sleep+0x93/0xb0 [ 276.782518] ? __fget+0x210/0x370 [ 276.785978] ? ppp_nl_newlink+0x240/0x240 [ 276.790116] do_vfs_ioctl+0x7ae/0x1060 [ 276.793988] ? selinux_file_mprotect+0x5d0/0x5d0 [ 276.798739] ? lock_downgrade+0x6e0/0x6e0 [ 276.802892] ? ioctl_preallocate+0x1c0/0x1c0 [ 276.807274] ? __fget+0x237/0x370 [ 276.810727] ? security_file_ioctl+0x89/0xb0 [ 276.815122] SyS_ioctl+0x8f/0xc0 [ 276.818558] ? do_vfs_ioctl+0x1060/0x1060 [ 276.822686] do_syscall_64+0x1e8/0x640 [ 276.826552] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 276.831375] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 276.836540] RIP: 0033:0x459879 [ 276.839705] RSP: 002b:00007f2d2a077c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 276.847391] RAX: ffffffffffffffda RBX: 00007f2d2a077c90 RCX: 0000000000459879 [ 276.854661] RDX: 0000000000000000 RSI: 000000004004743c RDI: 0000000000000003 [ 276.861925] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 276.869171] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2d2a0786d4 22:40:59 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x80000001) 22:40:59 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) [ 276.876429] R13: 00000000004c1ae1 R14: 00000000004d4e28 R15: 0000000000000005 22:40:59 executing program 2 (fault-call:4 fault-nth:2): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) [ 276.960322] PPPIOCDETACH file->f_count=2 [ 277.009948] FAULT_INJECTION: forcing a failure. [ 277.009948] name failslab, interval 1, probability 0, space 0, times 0 [ 277.022428] CPU: 1 PID: 15040 Comm: syz-executor.2 Not tainted 4.14.140 #36 [ 277.029539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 277.038874] Call Trace: [ 277.041461] dump_stack+0x138/0x197 [ 277.045079] should_fail.cold+0x10f/0x159 [ 277.049209] should_failslab+0xdb/0x130 [ 277.053162] kmem_cache_alloc_node+0x287/0x780 [ 277.057756] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 277.062849] ? debug_check_no_obj_freed+0x2aa/0x7b7 [ 277.067860] __alloc_skb+0x9c/0x500 [ 277.071465] ? skb_scrub_packet+0x4b0/0x4b0 [ 277.075771] ? kfree+0x183/0x270 [ 277.079120] ? __addrconf_sysctl_unregister.isra.0+0x92/0xe0 [ 277.084896] inet6_netconf_notify_devconf+0x78/0x170 [ 277.089991] __addrconf_sysctl_unregister.isra.0+0xa7/0xe0 [ 277.095600] addrconf_sysctl_unregister+0x91/0xf0 [ 277.100432] addrconf_ifdown+0xe36/0x1400 [ 277.104574] ? __mutex_unlock_slowpath+0x71/0x800 [ 277.109416] ? addrconf_sysctl_addr_gen_mode+0x300/0x300 [ 277.114852] addrconf_notify+0x12d/0x1b40 [ 277.118982] ? nf_tables_netdev_init_net+0x220/0x220 [ 277.124079] ? mirred_device_event+0x152/0x190 [ 277.128652] ? inet6_ifinfo_notify+0x140/0x140 [ 277.133217] ? ip6mr_device_event+0x17f/0x1f0 [ 277.137694] notifier_call_chain+0x111/0x1b0 [ 277.142103] raw_notifier_call_chain+0x2e/0x40 [ 277.146675] call_netdevice_notifiers_info+0x56/0x70 [ 277.151756] rollback_registered_many+0x70d/0xb60 [ 277.156575] ? netdev_info+0xf0/0xf0 [ 277.160274] ? mutex_trylock+0x1c0/0x1c0 [ 277.164339] rollback_registered+0xdd/0x180 [ 277.168650] ? rollback_registered_many+0xb60/0xb60 [ 277.173699] unregister_netdevice_queue+0x1ae/0x230 [ 277.178717] ppp_ioctl+0x1c92/0x23bc [ 277.182419] ? ppp_nl_newlink+0x240/0x240 [ 277.186555] ? __might_sleep+0x93/0xb0 [ 277.190420] ? __fget+0x210/0x370 [ 277.193866] ? ppp_nl_newlink+0x240/0x240 [ 277.198001] do_vfs_ioctl+0x7ae/0x1060 [ 277.201873] ? selinux_file_mprotect+0x5d0/0x5d0 [ 277.206617] ? lock_downgrade+0x6e0/0x6e0 [ 277.210747] ? ioctl_preallocate+0x1c0/0x1c0 [ 277.215137] ? __fget+0x237/0x370 [ 277.218581] ? security_file_ioctl+0x89/0xb0 [ 277.222976] SyS_ioctl+0x8f/0xc0 [ 277.226328] ? do_vfs_ioctl+0x1060/0x1060 [ 277.230456] do_syscall_64+0x1e8/0x640 [ 277.234322] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 277.239146] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 277.244320] RIP: 0033:0x459879 [ 277.247498] RSP: 002b:00007f2d2a098c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 22:40:59 executing program 3: r0 = socket$inet(0x2, 0x3, 0x18) clone(0x80000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) setsockopt$inet_mreqn(r0, 0x0, 0x100000000000026, &(0x7f0000000380)={@multicast2, @local}, 0xc) 22:40:59 executing program 5 (fault-call:1 fault-nth:3): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:40:59 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) 22:40:59 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgr#\x01p.net/syz1\x00\x00\x1a\xee=\xae\x83\x88\x0e\x9b\xc2Hs\n\xca\xc9\xf1\xcf\xb8h&\xc6[N\xa4\n\x11\x16\xfa\xc6\xe9\xd6\x03D\xa3V\x80\xe9\xc1Iu\xca\xeai\x97\x95/\x82Rfi\xbe\xe1\xe3f\xc0S\xb7\xff\bp3 \xaeq\xbb\xc0\xba7of\x16\xeb\x9f%[$\x19\xf2\xb3\xc1\x82\x830H\x9bnrK\\\xa4\xbc\xee1\x8ey\x06!\x8f\xd8\'\x89\xe1\xee8\n\x94Ng\xf4d\xdb\x1e/87\x7f{\xf8\xdd\xd2\x1f\xd6F3\xeb\xbciLT\x14\x96\xc3P\xbc\xfb\xcf2\xa0/If\x99!\x87\xf88$W\xa9\xf4', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) prctl$PR_SVE_GET_VL(0x33, 0xf6a1) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) 22:40:59 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x80000001) [ 277.255197] RAX: ffffffffffffffda RBX: 00007f2d2a098c90 RCX: 0000000000459879 [ 277.262448] RDX: 0000000000000000 RSI: 000000004004743c RDI: 0000000000000003 [ 277.269711] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 277.276958] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2d2a0996d4 [ 277.284213] R13: 00000000004c1ae1 R14: 00000000004d4e28 R15: 0000000000000005 22:40:59 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:40:59 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) [ 277.339458] FAULT_INJECTION: forcing a failure. [ 277.339458] name failslab, interval 1, probability 0, space 0, times 0 [ 277.356152] PPPIOCDETACH file->f_count=2 22:40:59 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='notse\x00\xe2\x14\x04\xe5\xeb\xddI\f\xe5s\xf7\xee\xda\x1e\x9c\xbb\xff\xe0z*\x1d\xc6\xf0\v\x9d\xecC\xa9^\x8d\xcb\xf7\xf0\xd6&\xddO\x10>9\x19\x9a\x12\x9a\xfdE\xad\x83&\xf6T\x924T', 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x4001, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='bic\x00', 0x4) accept4$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @reserved}, 0x10, 0x80800) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) 22:40:59 executing program 2 (fault-call:4 fault-nth:3): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:40:59 executing program 3: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) timer_create(0x5, &(0x7f0000000180)={0x0, 0x2e, 0x3, @tid=r1}, &(0x7f00000001c0)=0x0) timer_settime(r5, 0x1, &(0x7f0000000240)={{0x77359400}, {0x77359400}}, &(0x7f00000002c0)) fcntl$setpipe(r0, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 277.411290] CPU: 1 PID: 15053 Comm: syz-executor.5 Not tainted 4.14.140 #36 [ 277.418449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 277.427811] Call Trace: [ 277.430400] dump_stack+0x138/0x197 [ 277.434041] should_fail.cold+0x10f/0x159 [ 277.438208] should_failslab+0xdb/0x130 [ 277.442188] kmem_cache_alloc+0x2d7/0x780 [ 277.446343] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 277.451800] ? check_preemption_disabled+0x3c/0x250 22:40:59 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x400, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000080)=0x4) r2 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000003c0)=0xffffffff00000000, 0x12) 22:40:59 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) [ 277.456825] selinux_file_alloc_security+0xb4/0x190 [ 277.461861] security_file_alloc+0x6d/0xa0 [ 277.466111] get_empty_filp+0x162/0x3f0 [ 277.470092] alloc_file+0x23/0x440 [ 277.473655] anon_inode_getfile+0x171/0x310 [ 277.477974] ? reverse_path_check_proc.cold+0x22/0x22 [ 277.483184] ? perf_pin_task_context+0xe0/0xe0 [ 277.487777] SYSC_perf_event_open+0x1191/0x2690 [ 277.492456] ? perf_event_set_output+0x460/0x460 [ 277.497221] SyS_perf_event_open+0x34/0x40 [ 277.501449] ? perf_bp_event+0x170/0x170 [ 277.505509] do_syscall_64+0x1e8/0x640 22:40:59 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r2, 0x10e, 0x1, &(0x7f0000000040)=""/78, &(0x7f00000000c0)=0x4e) [ 277.509390] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 277.514236] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 277.519423] RIP: 0033:0x459879 [ 277.522613] RSP: 002b:00007f5b61f2ac78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 277.530359] RAX: ffffffffffffffda RBX: 00007f5b61f2ac90 RCX: 0000000000459879 [ 277.537630] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000200 [ 277.544895] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 277.552158] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f5b61f2b6d4 [ 277.559425] R13: 00000000004c66e4 R14: 00000000004db758 R15: 0000000000000004 [ 277.583227] FAULT_INJECTION: forcing a failure. [ 277.583227] name failslab, interval 1, probability 0, space 0, times 0 [ 277.585919] audit: type=1400 audit(1566772859.994:82): avc: denied { getopt } for pid=15077 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 277.629794] CPU: 1 PID: 15080 Comm: syz-executor.2 Not tainted 4.14.140 #36 [ 277.636907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 277.646254] Call Trace: [ 277.648843] dump_stack+0x138/0x197 [ 277.652499] should_fail.cold+0x10f/0x159 [ 277.656659] should_failslab+0xdb/0x130 [ 277.660636] kmem_cache_alloc_node_trace+0x280/0x770 [ 277.665746] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 277.671212] __kmalloc_node_track_caller+0x3d/0x80 [ 277.676142] __kmalloc_reserve.isra.0+0x40/0xe0 [ 277.680814] __alloc_skb+0xcf/0x500 [ 277.684470] ? skb_scrub_packet+0x4b0/0x4b0 [ 277.688780] ? kfree+0x183/0x270 [ 277.688794] ? __addrconf_sysctl_unregister.isra.0+0x92/0xe0 [ 277.688805] inet6_netconf_notify_devconf+0x78/0x170 [ 277.703025] __addrconf_sysctl_unregister.isra.0+0xa7/0xe0 [ 277.708642] addrconf_sysctl_unregister+0x91/0xf0 [ 277.713486] addrconf_ifdown+0xe36/0x1400 [ 277.713496] ? __mutex_unlock_slowpath+0x71/0x800 [ 277.713512] ? addrconf_sysctl_addr_gen_mode+0x300/0x300 [ 277.713526] addrconf_notify+0x12d/0x1b40 [ 277.713543] ? nf_tables_netdev_init_net+0x220/0x220 [ 277.713554] ? mirred_device_event+0x152/0x190 [ 277.713566] ? inet6_ifinfo_notify+0x140/0x140 [ 277.713577] ? ip6mr_device_event+0x17f/0x1f0 [ 277.750952] notifier_call_chain+0x111/0x1b0 [ 277.755362] raw_notifier_call_chain+0x2e/0x40 [ 277.759926] call_netdevice_notifiers_info+0x56/0x70 [ 277.765027] rollback_registered_many+0x70d/0xb60 [ 277.769846] ? netdev_info+0xf0/0xf0 [ 277.773537] ? mutex_trylock+0x1c0/0x1c0 [ 277.777594] rollback_registered+0xdd/0x180 [ 277.781903] ? rollback_registered_many+0xb60/0xb60 [ 277.786992] unregister_netdevice_queue+0x1ae/0x230 [ 277.792531] ppp_ioctl+0x1c92/0x23bc [ 277.796332] ? ppp_nl_newlink+0x240/0x240 [ 277.800465] ? __might_sleep+0x93/0xb0 [ 277.804364] ? __fget+0x210/0x370 [ 277.807799] ? ppp_nl_newlink+0x240/0x240 [ 277.811928] do_vfs_ioctl+0x7ae/0x1060 [ 277.815794] ? selinux_file_mprotect+0x5d0/0x5d0 [ 277.820532] ? lock_downgrade+0x6e0/0x6e0 [ 277.824760] ? ioctl_preallocate+0x1c0/0x1c0 [ 277.829230] ? __fget+0x237/0x370 [ 277.832665] ? security_file_ioctl+0x89/0xb0 [ 277.837052] SyS_ioctl+0x8f/0xc0 [ 277.840402] ? do_vfs_ioctl+0x1060/0x1060 [ 277.844537] do_syscall_64+0x1e8/0x640 [ 277.848402] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 277.853225] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 277.858392] RIP: 0033:0x459879 [ 277.861568] RSP: 002b:00007f2d2a098c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 277.869265] RAX: ffffffffffffffda RBX: 00007f2d2a098c90 RCX: 0000000000459879 [ 277.876513] RDX: 0000000000000000 RSI: 000000004004743c RDI: 0000000000000003 22:41:00 executing program 5 (fault-call:1 fault-nth:4): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:00 executing program 0: open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r0, r1, 0x0, 0x80000001) 22:41:00 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) 22:41:00 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x48c6c789}, {0xa, 0x4e20, 0xffffffffffffffff, @dev={0xfe, 0x80, [], 0x12}, 0x6}, r3, 0x40000000}}, 0x48) [ 277.883757] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 277.891010] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2d2a0996d4 [ 277.898262] R13: 00000000004c1ae1 R14: 00000000004d4e28 R15: 0000000000000005 22:41:00 executing program 0: open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r0, r1, 0x0, 0x80000001) 22:41:00 executing program 2 (fault-call:4 fault-nth:4): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:41:00 executing program 3: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)=0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) rt_tgsigqueueinfo(r0, r1, 0x26, &(0x7f00000002c0)={0x2f, 0x5, 0x7fff}) syz_emit_ethernet(0x4, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRES32=0x41424344, @ANYRESDEC=0x0, @ANYBLOB="5000000090780000"], 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004f40)=[{{&(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/122, 0x7a}, {&(0x7f00000003c0)=""/201, 0xc9}, {&(0x7f00000004c0)}, {&(0x7f0000000500)=""/252, 0xfc}, {&(0x7f0000000600)=""/19, 0x13}, {&(0x7f0000000640)=""/93, 0x5d}], 0x6, &(0x7f0000000740)=""/224, 0xe0}, 0x9}, {{&(0x7f0000000840)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000008c0)=""/109, 0x6d}, {&(0x7f0000000940)=""/163, 0xa3}, {&(0x7f0000000a00)=""/180, 0xb4}, {&(0x7f0000000ac0)=""/62, 0x3e}, {&(0x7f0000000b00)=""/145, 0x91}, {&(0x7f0000000bc0)=""/255, 0xff}], 0x6, &(0x7f0000000d40)=""/61, 0x3d}, 0x91b}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000d80)=""/105, 0x69}, {&(0x7f0000000e00)=""/99, 0x63}, {&(0x7f0000000e80)=""/4096, 0x1000}], 0x3, &(0x7f0000001ec0)=""/79, 0x4f}, 0x1}, {{&(0x7f0000001f40)=@nl, 0x80, &(0x7f0000002040)=[{&(0x7f0000001fc0)=""/109, 0x6d}], 0x1, &(0x7f0000002080)=""/57, 0x39}, 0x7}, {{&(0x7f00000020c0)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000002340)=[{&(0x7f0000002140)=""/39, 0x27}, {&(0x7f0000002180)=""/206, 0xce}, {&(0x7f0000002280)=""/67, 0x43}, {&(0x7f0000002300)=""/54, 0x36}], 0x4}, 0x7fff}, {{&(0x7f0000002380)=@nl, 0x80, &(0x7f0000002680)=[{&(0x7f0000002400)=""/171, 0xab}, {&(0x7f00000024c0)=""/56, 0x38}, {&(0x7f0000002500)=""/79, 0x4f}, {&(0x7f0000002580)=""/30, 0x1e}, {&(0x7f00000025c0)=""/152, 0x98}], 0x5, &(0x7f0000002700)=""/121, 0x79}, 0xe56}, {{&(0x7f0000002780)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000028c0)=[{&(0x7f0000002800)=""/179, 0xb3}], 0x1}, 0xa1e2}, {{&(0x7f0000002900)=@pppoe, 0x80, &(0x7f0000004e80)=[{&(0x7f0000002980)=""/33, 0x21}, {&(0x7f00000029c0)=""/37, 0x25}, {&(0x7f0000002a00)=""/83, 0x53}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/49, 0x31}, {&(0x7f0000003ac0)=""/139, 0x8b}, {&(0x7f0000003b80)=""/4096, 0x1000}, {&(0x7f0000004b80)=""/245, 0xf5}, {&(0x7f0000004c80)=""/222, 0xde}, {&(0x7f0000004d80)=""/229, 0xe5}], 0xa}, 0x1}], 0x8, 0x3, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000005140)={'broute\x00'}, &(0x7f00000051c0)=0x78) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x80000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f0000000040)) ioctl$NBD_SET_BLKSIZE(r3, 0xab01, 0x2) [ 277.951021] PPPIOCDETACH file->f_count=2 22:41:00 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) r2 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)={0x94, r3, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SOCKETS={0x14, 0x7, [{0x8, 0x1, r0}, {0x8, 0x1, r4}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x20}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x800}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x800}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r5 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/user\x00', 0x2, 0x0) open_by_handle_at(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="16000000a8390000780104e2722e1f73b2fc8501b346"], 0x40000) 22:41:00 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2800, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x14, r1, 0x100, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xc209246ce0660676}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x100, 0x0) ioctl$TIOCSISO7816(r2, 0xc0285443, &(0x7f00000000c0)={0x2, 0xc7d5, 0x212, 0xa8d, 0x100000001}) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40106410, &(0x7f00000004c0)={0x76, &(0x7f0000000440)="bfd187790f207b5066c69b7586cedb000d242ed833c240b422f1d3e1e4cbd0e65542c22fbe2ec952762eefdcb159177eb9fa3657327be6048f756bf863a0bc42aa68ac6059156205d0109226b7b54679fe4d7b04bbd2b7e60cc69c66666e74cdbdb88e4951dd742e0b5428b7bfe7a93e35e352254e8e"}) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x3, 0x401}, {0x2765, 0x3}, {0x800000000000, 0x5}]}) 22:41:00 executing program 0: open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r0, r1, 0x0, 0x80000001) 22:41:00 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = dup3(r0, r0, 0x80000) write$cgroup_int(r1, &(0x7f0000000000)=0x6, 0x12) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000003c0)=0xffffffffb00e998e, 0x12) [ 278.061929] FAULT_INJECTION: forcing a failure. [ 278.061929] name failslab, interval 1, probability 0, space 0, times 0 [ 278.073887] CPU: 0 PID: 15105 Comm: syz-executor.2 Not tainted 4.14.140 #36 [ 278.081008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 278.090353] Call Trace: [ 278.092946] dump_stack+0x138/0x197 [ 278.096593] should_fail.cold+0x10f/0x159 [ 278.100927] should_failslab+0xdb/0x130 [ 278.104905] kmem_cache_alloc_node+0x287/0x780 [ 278.109489] __alloc_skb+0x9c/0x500 [ 278.113116] ? skb_scrub_packet+0x4b0/0x4b0 [ 278.117437] ? if_nlmsg_size+0x38f/0x810 [ 278.121510] rtmsg_ifinfo_build_skb+0x72/0x140 [ 278.126100] rollback_registered_many+0x78f/0xb60 [ 278.130986] ? netdev_info+0xf0/0xf0 [ 278.134784] ? mutex_trylock+0x1c0/0x1c0 [ 278.138868] rollback_registered+0xdd/0x180 [ 278.143186] ? rollback_registered_many+0xb60/0xb60 [ 278.143201] unregister_netdevice_queue+0x1ae/0x230 [ 278.153202] ppp_ioctl+0x1c92/0x23bc [ 278.153217] ? ppp_nl_newlink+0x240/0x240 [ 278.153229] ? __might_sleep+0x93/0xb0 [ 278.153240] ? __fget+0x210/0x370 [ 278.153257] ? ppp_nl_newlink+0x240/0x240 [ 278.172542] do_vfs_ioctl+0x7ae/0x1060 [ 278.176517] ? selinux_file_mprotect+0x5d0/0x5d0 [ 278.181269] ? lock_downgrade+0x6e0/0x6e0 [ 278.185558] ? ioctl_preallocate+0x1c0/0x1c0 [ 278.189975] ? __fget+0x237/0x370 [ 278.193437] ? security_file_ioctl+0x89/0xb0 [ 278.197844] SyS_ioctl+0x8f/0xc0 [ 278.201244] ? do_vfs_ioctl+0x1060/0x1060 [ 278.205398] do_syscall_64+0x1e8/0x640 22:41:00 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) unshare(0x20040400) clone(0x20000800, 0x0, 0x0, 0x0, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000080)={0x7, 0x2, 0x1, {0x9, 0x3}}) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) 22:41:00 executing program 0: fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r0, r1, 0x0, 0x80000001) 22:41:00 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000240)='/dev/midi#\x00', 0x200, 0x200000) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000340)={r3, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e24, 0x1, @remote}]}, &(0x7f0000000380)=0x10) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) r4 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x7, 0x480800) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x80, 0x4}, &(0x7f0000000140)=0x90) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000000180)={r5, @in={{0x2, 0x4e20, @multicast2}}}, 0x84) [ 278.209288] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 278.214143] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 278.219331] RIP: 0033:0x459879 [ 278.222514] RSP: 002b:00007f2d2a098c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 278.230231] RAX: ffffffffffffffda RBX: 00007f2d2a098c90 RCX: 0000000000459879 [ 278.237505] RDX: 0000000000000000 RSI: 000000004004743c RDI: 0000000000000003 [ 278.244807] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 278.252093] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2d2a0996d4 22:41:00 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) 22:41:00 executing program 0: fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r0, r1, 0x0, 0x80000001) 22:41:00 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f0000000080)={0x80, 0xffffffffffff8001, 0xffffffffffffffe0}) openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) [ 278.259343] R13: 00000000004c1ae1 R14: 00000000004d4e28 R15: 0000000000000005 22:41:00 executing program 2 (fault-call:4 fault-nth:5): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:41:00 executing program 3: r0 = socket(0x10, 0x1000000000802, 0x0) write(r0, &(0x7f0000000000), 0x0) write(r0, &(0x7f0000000040)="240000001a0025f0001b000400edfc0e1c0b0020e80000001009ffeb0800010004000300", 0xfffffffffffffe13) 22:41:00 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, &(0x7f00000000c0)={0x1000, 0x0, 0xa989e68e2e3aa263, 0xe0ce, 0xff, {0x0, 0xfffffffffffffffa}}) 22:41:00 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x5673d49f81109c8d}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @in={0x2, 0x4e22, @loopback}}}, 0x90) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) 22:41:00 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) 22:41:00 executing program 0: fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r0, r1, 0x0, 0x80000001) [ 278.400238] PPPIOCDETACH file->f_count=2 22:41:00 executing program 0: r0 = open(0x0, 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:00 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) 22:41:00 executing program 3: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x1, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x200000, 0x0) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)=0x0) r3 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x5, 0x37, 0x3ff, 0x101, 0x0, 0x90c, 0x20, 0x8, 0x4, 0x100000000, 0x0, 0x0, 0x100, 0x3, 0x20, 0x80000000, 0x1, 0x9, 0xaa, 0x9, 0xffffffffffff38ff, 0xffffffffffff3439, 0x5, 0x7f84, 0x1ff, 0x7, 0x0, 0x1, 0x1f, 0x80000001, 0x1, 0x401, 0x3, 0x4, 0x2, 0x8, 0x0, 0x20, 0x4, @perf_config_ext={0x7f, 0x401}, 0x16020, 0x1, 0x7ce, 0x9, 0x8, 0x40, 0x258b3f36}, r2, 0xc, r0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x200, 0x0) fcntl$setlease(r4, 0x400, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) prctl$PR_CAPBSET_DROP(0x18, 0xfffffffffffffffd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000008032, r3, 0x0) syz_genetlink_get_family_id$SEG6(0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x20000, 0x10000000002) write$cgroup_int(r0, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000400)={'filter\x00', 0x7, 0x4, 0x498, 0x270, 0x130, 0x130, 0x3b0, 0x3b0, 0x3b0, 0x4, &(0x7f00000003c0), {[{{@uncond, 0xf0, 0x130}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x9, 0x8, 0x759}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @multicast2, 0x4, 0xfe95172dfcdd182d}}}, {{@arp={@multicast2, @empty, 0xffffff00, 0xff, @mac=@remote, {[0xff, 0xff, 0x0, 0x0, 0xff]}, @empty, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x9aff, 0x5, 0x0, 0x8000, 0x8000, 0x5a3, 'nr0\x00', 'dummy0\x00', {0xff}, {}, 0x0, 0x4}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14, 0xa}, @rand_addr=0x9, 0x2, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4e8) ioctl$VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f0000000140)={0x4, @sliced={0x7, [0xfffffffffffff800, 0xe44, 0x1ff, 0x9, 0xffffffffffffff51, 0x0, 0xc7, 0x5, 0x7, 0x8, 0x13, 0x9, 0x2, 0x7, 0xffffffffffffff80, 0x5, 0x97, 0x2, 0x9b, 0x7, 0xfff, 0x5, 0xafc, 0x7, 0xfffffffffffffffa, 0x401, 0x3, 0x2, 0x3f, 0xcc8b, 0x4, 0x5, 0x1, 0x86c5, 0x10001, 0x800, 0x1, 0x10001, 0x3f, 0x3ea, 0x3, 0x1, 0x2, 0x3f, 0x0, 0x2, 0x4, 0x6], 0x1}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x2c, &(0x7f0000000280)=[@in={0x2, 0x4e22, @rand_addr=0x4}, @in6={0xa, 0x4e20, 0x7fffffff, @ipv4={[], [], @multicast1}, 0x2}]}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000340)={r7, 0x81, 0x30}, &(0x7f0000000380)=0xc) 22:41:00 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) [ 278.476283] FAULT_INJECTION: forcing a failure. [ 278.476283] name failslab, interval 1, probability 0, space 0, times 0 [ 278.535252] CPU: 1 PID: 15149 Comm: syz-executor.2 Not tainted 4.14.140 #36 [ 278.542401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 278.551756] Call Trace: [ 278.554352] dump_stack+0x138/0x197 [ 278.557992] should_fail.cold+0x10f/0x159 [ 278.562145] should_failslab+0xdb/0x130 [ 278.566129] kmem_cache_alloc_node_trace+0x280/0x770 [ 278.571235] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 278.576699] __kmalloc_node_track_caller+0x3d/0x80 [ 278.581630] __kmalloc_reserve.isra.0+0x40/0xe0 [ 278.586298] __alloc_skb+0xcf/0x500 [ 278.589918] ? skb_scrub_packet+0x4b0/0x4b0 [ 278.594237] ? if_nlmsg_size+0x38f/0x810 [ 278.598287] rtmsg_ifinfo_build_skb+0x72/0x140 [ 278.602857] rollback_registered_many+0x78f/0xb60 [ 278.607680] ? netdev_info+0xf0/0xf0 [ 278.611369] ? mutex_trylock+0x1c0/0x1c0 [ 278.615423] rollback_registered+0xdd/0x180 [ 278.619725] ? rollback_registered_many+0xb60/0xb60 [ 278.624731] unregister_netdevice_queue+0x1ae/0x230 [ 278.629728] ppp_ioctl+0x1c92/0x23bc [ 278.633424] ? ppp_nl_newlink+0x240/0x240 [ 278.637553] ? __might_sleep+0x93/0xb0 [ 278.641419] ? __fget+0x210/0x370 [ 278.644859] ? ppp_nl_newlink+0x240/0x240 [ 278.649006] do_vfs_ioctl+0x7ae/0x1060 [ 278.652875] ? selinux_file_mprotect+0x5d0/0x5d0 [ 278.657615] ? lock_downgrade+0x6e0/0x6e0 [ 278.661746] ? ioctl_preallocate+0x1c0/0x1c0 [ 278.666135] ? __fget+0x237/0x370 [ 278.669575] ? security_file_ioctl+0x89/0xb0 [ 278.673967] SyS_ioctl+0x8f/0xc0 [ 278.677310] ? do_vfs_ioctl+0x1060/0x1060 [ 278.681438] do_syscall_64+0x1e8/0x640 [ 278.685303] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 278.690128] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 278.695314] RIP: 0033:0x459879 [ 278.698481] RSP: 002b:00007f2d2a098c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 278.706167] RAX: ffffffffffffffda RBX: 00007f2d2a098c90 RCX: 0000000000459879 [ 278.713504] RDX: 0000000000000000 RSI: 000000004004743c RDI: 0000000000000003 [ 278.720755] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 278.728006] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2d2a0996d4 22:41:00 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x1, 0x200) getsockopt$inet6_dccp_int(r1, 0x21, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 22:41:01 executing program 0: r0 = open(0x0, 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) [ 278.735268] R13: 00000000004c1ae1 R14: 00000000004d4e28 R15: 0000000000000005 22:41:01 executing program 2 (fault-call:4 fault-nth:6): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:41:01 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:01 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xffffffff, 0x2, 0x1, 0x0, 0x0, 0x9, 0x1, 0x5eac91fb38b04765, 0x5f0, 0x40, 0x4, 0xb1f, 0x7, 0x5, 0x4, 0x9, 0x2, 0x3ff, 0xf403, 0x2, 0x0, 0x5fa, 0x8, 0x100000000000, 0x4, 0x7, 0x8, 0x100, 0x1, 0x1, 0x2, 0x5, 0x4, 0x4f, 0x7fffffff, 0xc7c5, 0x0, 0x3f, 0x2, @perf_config_ext={0x100000000, 0xffffffffffffffff}, 0x8208, 0x8, 0x80000001, 0x5, 0x8750, 0x6, 0xbffd}, 0x0, 0xb, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:01 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8ac9, 0x10400) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000003, 0x12) 22:41:01 executing program 0: r0 = open(0x0, 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) [ 278.840882] PPPIOCDETACH file->f_count=2 22:41:01 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f00000004c0)={0x2d, 'syz0\x00'}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000400)={'broute\x00', 0x0, 0x3, 0xcf, [], 0x8, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000300)=""/207}, &(0x7f0000000480)=0x78) recvfrom$x25(0xffffffffffffffff, &(0x7f00000000c0)=""/153, 0x99, 0x2000, &(0x7f0000000180)={0x9, @remote={[], 0x1}}, 0x12) 22:41:01 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:01 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) [ 278.993733] FAULT_INJECTION: forcing a failure. [ 278.993733] name failslab, interval 1, probability 0, space 0, times 0 [ 279.021379] selinux_nlmsg_perm: 22 callbacks suppressed [ 279.021388] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=15200 comm=syz-executor.0 [ 279.040365] CPU: 0 PID: 15196 Comm: syz-executor.2 Not tainted 4.14.140 #36 [ 279.047479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 279.050135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=15202 comm=syz-executor.1 [ 279.056822] Call Trace: [ 279.056844] dump_stack+0x138/0x197 [ 279.056880] should_fail.cold+0x10f/0x159 [ 279.056909] should_failslab+0xdb/0x130 [ 279.083570] kmem_cache_alloc_node_trace+0x5a/0x770 [ 279.088592] ? trace_hardirqs_on+0x10/0x10 [ 279.092830] __kmalloc_node_track_caller+0x3d/0x80 [ 279.097743] __kmalloc_reserve.isra.0+0x40/0xe0 [ 279.102389] pskb_expand_head+0x116/0xc10 [ 279.106533] ? mark_held_locks+0xb1/0x100 [ 279.110668] netlink_trim+0x1c1/0x230 [ 279.114450] netlink_broadcast_filtered+0x5c/0x9f0 [ 279.119368] ? __wake_up_common+0x5a0/0x5a0 [ 279.123679] nlmsg_notify+0x7c/0x190 [ 279.127373] rtmsg_ifinfo_send+0x76/0x8b [ 279.131419] rollback_registered_many+0x81e/0xb60 [ 279.136241] ? ppp_init_net+0x380/0x380 [ 279.140197] ? netdev_info+0xf0/0xf0 [ 279.143891] ? mutex_trylock+0x1c0/0x1c0 [ 279.147932] rollback_registered+0xdd/0x180 [ 279.152317] ? rollback_registered_many+0xb60/0xb60 [ 279.157315] unregister_netdevice_queue+0x1ae/0x230 [ 279.162313] ppp_ioctl+0x1c92/0x23bc [ 279.166008] ? ppp_nl_newlink+0x240/0x240 [ 279.170134] ? __might_sleep+0x93/0xb0 [ 279.173998] ? __fget+0x210/0x370 [ 279.177435] ? ppp_nl_newlink+0x240/0x240 [ 279.181570] do_vfs_ioctl+0x7ae/0x1060 [ 279.185438] ? selinux_file_mprotect+0x5d0/0x5d0 [ 279.190170] ? lock_downgrade+0x6e0/0x6e0 [ 279.194297] ? ioctl_preallocate+0x1c0/0x1c0 [ 279.198681] ? __fget+0x237/0x370 [ 279.202123] ? security_file_ioctl+0x89/0xb0 [ 279.206532] SyS_ioctl+0x8f/0xc0 [ 279.209875] ? do_vfs_ioctl+0x1060/0x1060 [ 279.214008] do_syscall_64+0x1e8/0x640 [ 279.217877] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 279.222702] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 279.227958] RIP: 0033:0x459879 [ 279.231136] RSP: 002b:00007f2d2a077c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 279.238840] RAX: ffffffffffffffda RBX: 00007f2d2a077c90 RCX: 0000000000459879 [ 279.246085] RDX: 0000000000000000 RSI: 000000004004743c RDI: 0000000000000003 [ 279.253331] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 279.260579] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2d2a0786d4 [ 279.267827] R13: 00000000004c1ae1 R14: 00000000004d4e28 R15: 0000000000000005 [ 279.351971] PPPIOCDETACH file->f_count=2 22:41:01 executing program 3: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x1, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x200000, 0x0) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)=0x0) r3 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x5, 0x37, 0x3ff, 0x101, 0x0, 0x90c, 0x20, 0x8, 0x4, 0x100000000, 0x0, 0x0, 0x100, 0x3, 0x20, 0x80000000, 0x1, 0x9, 0xaa, 0x9, 0xffffffffffff38ff, 0xffffffffffff3439, 0x5, 0x7f84, 0x1ff, 0x7, 0x0, 0x1, 0x1f, 0x80000001, 0x1, 0x401, 0x3, 0x4, 0x2, 0x8, 0x0, 0x20, 0x4, @perf_config_ext={0x7f, 0x401}, 0x16020, 0x1, 0x7ce, 0x9, 0x8, 0x40, 0x258b3f36}, r2, 0xc, r0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x200, 0x0) fcntl$setlease(r4, 0x400, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) prctl$PR_CAPBSET_DROP(0x18, 0xfffffffffffffffd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000008032, r3, 0x0) syz_genetlink_get_family_id$SEG6(0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x20000, 0x10000000002) write$cgroup_int(r0, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000400)={'filter\x00', 0x7, 0x4, 0x498, 0x270, 0x130, 0x130, 0x3b0, 0x3b0, 0x3b0, 0x4, &(0x7f00000003c0), {[{{@uncond, 0xf0, 0x130}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x9, 0x8, 0x759}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @multicast2, 0x4, 0xfe95172dfcdd182d}}}, {{@arp={@multicast2, @empty, 0xffffff00, 0xff, @mac=@remote, {[0xff, 0xff, 0x0, 0x0, 0xff]}, @empty, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x9aff, 0x5, 0x0, 0x8000, 0x8000, 0x5a3, 'nr0\x00', 'dummy0\x00', {0xff}, {}, 0x0, 0x4}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14, 0xa}, @rand_addr=0x9, 0x2, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4e8) ioctl$VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f0000000140)={0x4, @sliced={0x7, [0xfffffffffffff800, 0xe44, 0x1ff, 0x9, 0xffffffffffffff51, 0x0, 0xc7, 0x5, 0x7, 0x8, 0x13, 0x9, 0x2, 0x7, 0xffffffffffffff80, 0x5, 0x97, 0x2, 0x9b, 0x7, 0xfff, 0x5, 0xafc, 0x7, 0xfffffffffffffffa, 0x401, 0x3, 0x2, 0x3f, 0xcc8b, 0x4, 0x5, 0x1, 0x86c5, 0x10001, 0x800, 0x1, 0x10001, 0x3f, 0x3ea, 0x3, 0x1, 0x2, 0x3f, 0x0, 0x2, 0x4, 0x6], 0x1}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x2c, &(0x7f0000000280)=[@in={0x2, 0x4e22, @rand_addr=0x4}, @in6={0xa, 0x4e20, 0x7fffffff, @ipv4={[], [], @multicast1}, 0x2}]}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000340)={r7, 0x81, 0x30}, &(0x7f0000000380)=0xc) 22:41:01 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:01 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='n\x00\x00\x00\x80\x00\x00\x00\x00aeeleawe\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) 22:41:01 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x80, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000000c0)={0x1f, 0x36314d59, 0x7, 0x1, 0x3, @discrete={0x800, 0x9d66}}) 22:41:01 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:01 executing program 2 (fault-call:4 fault-nth:7): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:41:01 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) flistxattr(r0, &(0x7f00000004c0)=""/4096, 0x1000) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) syz_init_net_socket$ax25(0x3, 0x5, 0x8) socket$inet_udp(0x2, 0x2, 0x0) [ 279.441582] QAT: Invalid ioctl [ 279.446072] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=15219 comm=syz-executor.1 [ 279.465808] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=15222 comm=syz-executor.0 [ 279.492276] FAULT_INJECTION: forcing a failure. [ 279.492276] name failslab, interval 1, probability 0, space 0, times 0 [ 279.525331] CPU: 0 PID: 15218 Comm: syz-executor.2 Not tainted 4.14.140 #36 [ 279.532581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 279.541933] Call Trace: [ 279.544527] dump_stack+0x138/0x197 [ 279.548168] should_fail.cold+0x10f/0x159 [ 279.552320] should_failslab+0xdb/0x130 [ 279.556297] kmem_cache_alloc_trace+0x2e9/0x790 [ 279.560970] ? vprintk_default+0x28/0x30 [ 279.565039] kobject_uevent_env+0x378/0xc23 [ 279.569362] ? show_regs_print_info+0x63/0x63 [ 279.573875] ? consume_skb+0xbc/0x340 [ 279.577678] kobject_uevent+0x20/0x26 [ 279.581477] kobject_put.cold+0x168/0x2f9 [ 279.585627] net_rx_queue_update_kobjects+0x2f7/0x400 22:41:02 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) r2 = dup2(r0, r0) getsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000000)=0x1, &(0x7f0000000080)=0x4) 22:41:02 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x3) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r2, 0x6431) 22:41:02 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='notiease\x00\x00\x00\x00\x00\x00#$\xf3\x89', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x8010, r0, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x200, 0x0) [ 279.590830] netdev_unregister_kobject+0x13b/0x1d0 [ 279.595767] rollback_registered_many+0x694/0xb60 [ 279.600616] ? ppp_init_net+0x380/0x380 [ 279.604593] ? netdev_info+0xf0/0xf0 [ 279.608309] ? mutex_trylock+0x1c0/0x1c0 [ 279.612382] rollback_registered+0xdd/0x180 [ 279.616707] ? rollback_registered_many+0xb60/0xb60 [ 279.621842] unregister_netdevice_queue+0x1ae/0x230 [ 279.626861] ppp_ioctl+0x1c92/0x23bc [ 279.630584] ? ppp_nl_newlink+0x240/0x240 [ 279.634730] ? __might_sleep+0x93/0xb0 [ 279.638618] ? __fget+0x210/0x370 22:41:02 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 22:41:02 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0) getsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000080)=0x9, &(0x7f00000000c0)=0x4) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) [ 279.642075] ? ppp_nl_newlink+0x240/0x240 [ 279.646219] do_vfs_ioctl+0x7ae/0x1060 [ 279.650112] ? selinux_file_mprotect+0x5d0/0x5d0 [ 279.654872] ? lock_downgrade+0x6e0/0x6e0 [ 279.659021] ? ioctl_preallocate+0x1c0/0x1c0 [ 279.663433] ? __fget+0x237/0x370 [ 279.666911] ? security_file_ioctl+0x89/0xb0 [ 279.671321] SyS_ioctl+0x8f/0xc0 [ 279.674689] ? do_vfs_ioctl+0x1060/0x1060 [ 279.678840] do_syscall_64+0x1e8/0x640 [ 279.682757] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 279.687635] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 279.692911] RIP: 0033:0x459879 [ 279.696181] RSP: 002b:00007f2d2a098c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 279.703970] RAX: ffffffffffffffda RBX: 00007f2d2a098c90 RCX: 0000000000459879 [ 279.711218] RDX: 0000000000000000 RSI: 000000004004743c RDI: 0000000000000003 [ 279.718462] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 279.725726] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2d2a0996d4 [ 279.732975] R13: 00000000004c1ae1 R14: 00000000004d4e28 R15: 0000000000000005 [ 279.783024] PPPIOCDETACH file->f_count=2 22:41:02 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, &(0x7f00000000c0)={0x1000, 0x0, 0xa989e68e2e3aa263, 0xe0ce, 0xff, {0x0, 0xfffffffffffffffa}}) 22:41:02 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='cg\xf2oup.events\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x4, 0x590, [0x0, 0x200004c0, 0x2000079c, 0x200008d2], 0x0, &(0x7f0000000080), &(0x7f00000004c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x11, 0x8, 0x6005, 'yam0\x00', 'ifb0\x00', 'lapb0\x00', 'team_slave_0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0x0, 0x50168cbf6c412b25, 0xff, 0xff, 0xff], @remote, [0x0, 0x0, 0xff, 0x0, 0xff], 0xbe, 0xbe, 0x10e, [@nfacct={'nfacct\x00', 0x28, {{'syz1\x00', 0x9}}}], [], @common=@log={'log\x00', 0x28, {{0x7fff, "cd4103a3abc7cb240c50e6604be0c22c552723d725b523c9062de8d86a7a", 0x1}}}}, {0xb, 0x40, 0x88e7, 'ipddp0\x00', 'bridge0\x00', 'yam0\x00', 'rose0\x00', @random="6f5606d668e6", [0x0, 0x866472c2cc3daf74, 0x0, 0xff, 0xff], @dev={[], 0x27}, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0x19e, [], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x5, 'system_u:object_r:sulogin_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x11, 0x5e, 0x1f489357ee2ee0dd, 'ip6gretap0\x00', 'veth1_to_bond\x00', 'syzkaller1\x00', 'rose0\x00', @random="ed1df6945ac1", [0xff, 0xff, 0xff, 0xff, 0xff], @empty, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], 0x6e, 0xb6, 0x106, [], [@common=@ERROR={'ERROR\x00', 0x20, {"c64bd8cc978b2d98c40ca6ef11d0615ca36198b19b06d7050c560a150335"}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0x3f, 0xffffffffffffff00}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x1, [{0x9, 0x10, 0xa00, 'lo\x00', 'veth0_to_team\x00', 'netdevsim0\x00', 'veth1_to_bond\x00', @remote, [0x0, 0xff, 0xff, 0xb70915c40f964de0, 0x0, 0xff], @broadcast, [0x618471ad34fdc83, 0x0, 0xff], 0xe6, 0x11e, 0x14e, [@ip6={'ip6\x00', 0x50, {{@remote, @local, [0xffffff00, 0xff, 0xff, 0xff], [0x0, 0xffffffff, 0xffffffff], 0x8001, 0x89, 0x4, 0xf7cbfa07adb8a35a, 0x4e21, 0x4e23, 0x4e20, 0x4e23}}}], [@common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0xfffffffffffffffe}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0xfffffffffffffffe}}}}]}]}, 0x608) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) 22:41:02 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:02 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:02 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={'caif0\x00', {0x2, 0x4e22}}) ioctl$PPPIOCGDEBUG(r2, 0x80047441, &(0x7f0000000280)) read(r1, &(0x7f0000000140)=""/141, 0x8d) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x1, @broadcast, 'veth0\x00'}}) 22:41:02 executing program 2 (fault-call:4 fault-nth:8): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) [ 279.893197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=15257 comm=syz-executor.0 [ 279.913114] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=15259 comm=syz-executor.1 22:41:02 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, &(0x7f00000000c0)={0x1000, 0x0, 0xa989e68e2e3aa263, 0xe0ce, 0xff, {0x0, 0xfffffffffffffffa}}) 22:41:02 executing program 0: open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r0, r1, 0x0, 0x80000001) 22:41:02 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/policy\x00', 0x0, 0x0) r3 = accept4$rose(r2, &(0x7f0000000040)=@full={0xb, @dev, @rose, 0x0, [@netrom, @netrom, @netrom, @remote, @remote, @rose]}, &(0x7f0000000380)=0x3c, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000003700)={0x11, 0x0, 0x0}, &(0x7f0000003740)=0x14) sendmsg(r3, &(0x7f0000004b80)={&(0x7f0000003780)=@xdp={0x2c, 0x1, r4, 0x4}, 0x80, &(0x7f0000003940)=[{&(0x7f0000003800)="7f3442a990a1553948213b8a234255d9d2aaaf531f9578c430540b03daf7aeb40537978f923918cc72af35b2a250e04b140172a34352fce50fb617d705f51196240b271c738e94c5c9fb45664162cfa8ed59fb39d3ec455c4465078a8acefdf9fcbd948eb10702bbaf71ad8901440d909c8f4070acd77826a99993c13da461b4b3576864173dfb55287bb694fdf5743f85872e844f69d3686d750f76c1e27a58f7a46356d0ef4e3cb7bd32a101775e0508a67fc6", 0xb4}, {&(0x7f00000038c0)="eb28f02e5060b25de62288970d2705bfb3164ec2dcea3e3b44e743ce32e4d660feab623d1af0c85c1fde60cc3375647dd38b88bcdad83daf8d174f17e0d242f22e5ae90afd08f74dd06c1d5342c70956041f61bcff68a8ea9d897effffac176c4fb11a792a2c2498a75b73ecfd055702361ce81873345702b991d7b6", 0x7c}], 0x2, &(0x7f0000003980)=[{0x90, 0x18b, 0x200, "46025b75ee943aaa06697795f209c6923ec5fcc7c6949cb5b765e302ddf8115979a396e1759ebb791a97fb6ab1cb57e402dae643910e554941372dfbd3d2ee3e7fef108ef8d18a9c5e77bc8f776672231b6d31ea9cc182d84f84aefd4492098fb2539ec641b88ad093099d34ab3f5d8b5f44f7900409c04fadd5"}, {0xa8, 0x117, 0x1, "7515c4f66f20f4c51ae392acb44cc2c364668934d09eba457aeaa543b5f64afe55f82bc119dd3b918c6366af691f186265aab99882b784a19b5f478a9768d72618372c7772c5b1ce06c3ede4676a19e685af62e0f8a23e239fc8b9bcb2fe2b6f67e1ee9a67f29c89ddfa70c3df5654bf809e08bafb309c945f5a955cb7ac26427a907067ab8acc966b9e46dd8a9521be06bf489eee2a3bac"}, {0x98, 0x88, 0x1, "ea08ea7587611436227271d689cdaf99bb6d4c6f7e522f8bfdebe42357b10f99e5e1eea05d42a9d13f26cfd34e3607e793eee321c06a9ed80205fb37ec16b2972cfe912ac5a980e8d131d765d3185b295010b583cc509d2be6b242193ad0f18192491650ec3c16eea7e23d28d40a785ab2b925aa23775d2932218d02dcc77958625cfe745625e9"}, {0x1010, 0x112, 0x5f2f, "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"}], 0x11e0}, 0x40000) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) syz_mount_image$f2fs(&(0x7f00000000c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x6, 0x3, &(0x7f0000000240)=[{&(0x7f0000000140)="0eb6a14d90c19a8854b2ff3d407889246a605312b3573d8d5bc5085a", 0x1c, 0x4f8b}, {&(0x7f0000000180)="cce32629bab0fb5477a73d34d3ce123a40b4678dfeb5094ab73a9c214f4d2e9d1b29f030e0ddcecde15c1fe2f6c84f4e531eeb2a45617b96bca2d5", 0x3b, 0x1f}, {&(0x7f00000001c0)="4722ff82c232bb66032ddb491a9bddb24b873781fb075dfd3b1db0eaa3ee8330c7def17f9198fcd85d6c6a24a4e4d1ba84aabc56cb8fa0fd2d7513b3ca01d509fe63ddfa809e5eb1f7d8b0387f380770e1bc6657b4e7d23d1078f303a3b5310637a32cf53ec4a0a858da6de897", 0x6d, 0x4}], 0x2000000, &(0x7f00000004c0)={[{@usrjquota={'usrjquota', 0x3d, './cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee'}}, {@whint_mode_off='whint_mode=off'}, {@grpjquota={'grpjquota', 0x3d, './cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee'}}, {@test_dummy_encryption='test_dummy_encryption'}, {@noheap='noheap'}, {@user_xattr='user_xattr'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@whint_mode_off='whint_mode=off'}], [{@fowner_gt={'fowner>', r5}}, {@subj_user={'subj_user', 0x3d, './cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee'}}, {@measure='measure'}, {@obj_user={'obj_user', 0x3d, './cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee'}}, {@smackfsdef={'smackfsdef', 0x3d, './cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee'}}, {@permit_directio='permit_directio'}]}) write$cgroup_int(r1, &(0x7f00000003c0)=0xfffffffefffffffe, 0x12) 22:41:02 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) [ 279.939275] FAULT_INJECTION: forcing a failure. [ 279.939275] name failslab, interval 1, probability 0, space 0, times 0 22:41:02 executing program 5: perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000140)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) [ 280.038842] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=15272 comm=syz-executor.0 [ 280.041364] CPU: 1 PID: 15258 Comm: syz-executor.2 Not tainted 4.14.140 #36 [ 280.058385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 280.067734] Call Trace: [ 280.070313] dump_stack+0x138/0x197 [ 280.073928] should_fail.cold+0x10f/0x159 [ 280.078061] should_failslab+0xdb/0x130 [ 280.082031] __kmalloc+0x2f0/0x7a0 [ 280.085550] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 280.091103] ? kobject_uevent_env+0x378/0xc23 [ 280.095584] ? rcu_read_lock_sched_held+0x110/0x130 [ 280.100593] ? kobject_get_path+0xbb/0x1a0 [ 280.104809] kobject_get_path+0xbb/0x1a0 [ 280.108851] kobject_uevent_env+0x39c/0xc23 [ 280.113152] ? show_regs_print_info+0x63/0x63 [ 280.117635] ? consume_skb+0xbc/0x340 [ 280.121419] kobject_uevent+0x20/0x26 [ 280.125198] kobject_put.cold+0x168/0x2f9 [ 280.129329] net_rx_queue_update_kobjects+0x2f7/0x400 [ 280.134501] netdev_unregister_kobject+0x13b/0x1d0 [ 280.139412] rollback_registered_many+0x694/0xb60 [ 280.144237] ? ppp_init_net+0x380/0x380 [ 280.148188] ? netdev_info+0xf0/0xf0 [ 280.151880] ? mutex_trylock+0x1c0/0x1c0 [ 280.155926] rollback_registered+0xdd/0x180 [ 280.160229] ? rollback_registered_many+0xb60/0xb60 [ 280.165228] unregister_netdevice_queue+0x1ae/0x230 [ 280.170226] ppp_ioctl+0x1c92/0x23bc [ 280.173937] ? ppp_nl_newlink+0x240/0x240 [ 280.178065] ? __might_sleep+0x93/0xb0 [ 280.181935] ? __fget+0x210/0x370 [ 280.185370] ? ppp_nl_newlink+0x240/0x240 [ 280.189498] do_vfs_ioctl+0x7ae/0x1060 [ 280.193365] ? selinux_file_mprotect+0x5d0/0x5d0 [ 280.198101] ? lock_downgrade+0x6e0/0x6e0 [ 280.202235] ? ioctl_preallocate+0x1c0/0x1c0 [ 280.206623] ? __fget+0x237/0x370 [ 280.210149] ? security_file_ioctl+0x89/0xb0 [ 280.214541] SyS_ioctl+0x8f/0xc0 [ 280.217891] ? do_vfs_ioctl+0x1060/0x1060 [ 280.222027] do_syscall_64+0x1e8/0x640 [ 280.225893] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 280.230720] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 280.235977] RIP: 0033:0x459879 22:41:02 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x129000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@initdev}}, &(0x7f0000000200)=0xe8) ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000240)={0x3, @default, r4}) sched_setparam(r2, &(0x7f0000000080)=0x4) [ 280.239145] RSP: 002b:00007f2d2a098c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 280.246835] RAX: ffffffffffffffda RBX: 00007f2d2a098c90 RCX: 0000000000459879 [ 280.254091] RDX: 0000000000000000 RSI: 000000004004743c RDI: 0000000000000003 [ 280.261341] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 280.268588] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2d2a0996d4 [ 280.275839] R13: 00000000004c1ae1 R14: 00000000004d4e28 R15: 0000000000000005 22:41:02 executing program 0: open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r0, r1, 0x0, 0x80000001) 22:41:02 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000080)={0x20, 0x0, 0x301f, 0x5, 0x2, 0xfffffffffffffff9, 0x2, 0xc2a481d15c1f2bb2}) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) [ 280.316744] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=15279 comm=syz-executor.1 22:41:02 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) 22:41:02 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0xec, "1465abe774618c6d168328cd81bdc54ac17ae0c1c61d0eef317f0530973fe73928ec839ceebf68a89ec9946aae51b3e460b436088689d865ec9cf623f5bd9c89cc75c46d8e3e25e80ef93915a4938d1e021f5dc38f899d3027eb33131a03dda1db51038eec740062910d71ede903c55f0e80822be9c8855d10e86a611a411b3222cb140243532f883228c3ff3779b9d6bbb88f8dee2f23353869d6974679a076c13e8546dbc6ed2ea256c68a898421f31a64299b46e99f15872319fe121390f79890497c27d60363c9ecc5866d7575e5c0653e3916b7676d96bac118c455b1247e42aca41257c1023ed27d98"}, &(0x7f0000000040)=0xf4) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000001c0)={r2, 0xc1, "a91558864732a700f0dc5b281d275d2048824094a71ed495aa0368c8ab0a695111b84a7da2f80b48c4e113c8cbaf33d8fd8b7cb5cbc481ebe9b21d64e18f189871a8258b0ccf7ccfff53b066a7bfc9a7e70469680ebe2d045a2b6097cb4d97097164443c013171ec3dadc0bbb0366beee5a5c9dc8c6fa97c0110291b757cf2d17c23a3962a6fe5a626b78c62bd9647f46324c3134f8332776ff35c10b4613664a5cecb747db33eb16639cc08230c3374da8e68741982b793e50485b30fd73575f4"}, &(0x7f00000002c0)=0xc9) r3 = openat$cgroup_int(r0, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000003c0)=0xffffffff00000000, 0x12) [ 280.402473] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=15287 comm=syz-executor.0 [ 280.415483] PPPIOCDETACH file->f_count=2 22:41:02 executing program 2 (fault-call:4 fault-nth:9): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:41:02 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x4002033, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000000c0)={r1, 0x22}) setsockopt$inet6_int(r0, 0x29, 0xfe, &(0x7f0000000100), 0x4) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000040)) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, 0x0, &(0x7f0000001040)) fsync(r0) [ 280.453995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=15294 comm=syz-executor.1 22:41:02 executing program 0: open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r0, r1, 0x0, 0x80000001) 22:41:02 executing program 5: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x80401, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000280)={0x81, 0x30cf}, 0x8) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x2, 0x4000) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) syz_kvm_setup_cpu$x86(r2, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="650f15f8c4e3fd687207000f001767660f38411b0f381cf066b8e0008ee8c744240050c00000c744240204000000c7442406000000000f011c240fc7bbf2200000b937030000b80a000000ba000000000f30c4c161fa07", 0x57}], 0x1, 0x28, &(0x7f0000000180)=[@dstype0={0x6, 0x6}, @cstype3={0x5, 0xc}], 0x2) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0xffffffffffffffff, 0x0, r1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:41:02 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) 22:41:02 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) 22:41:03 executing program 3: socket$nl_xfrm(0xa, 0x3, 0x87) syz_emit_ethernet(0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffff030000000000000014878ff380000000000000000000006cc3956b4499753a880aae0747000000aafe8000000000000000000000000000aa3b000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50004a661a000090"], 0x0) [ 280.552026] FAULT_INJECTION: forcing a failure. [ 280.552026] name failslab, interval 1, probability 0, space 0, times 0 [ 280.595124] CPU: 1 PID: 15300 Comm: syz-executor.2 Not tainted 4.14.140 #36 [ 280.602266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 280.611615] Call Trace: [ 280.614210] dump_stack+0x138/0x197 [ 280.617849] should_fail.cold+0x10f/0x159 [ 280.621993] should_failslab+0xdb/0x130 [ 280.625969] kmem_cache_alloc_node+0x287/0x780 [ 280.630552] __alloc_skb+0x9c/0x500 [ 280.634178] ? skb_scrub_packet+0x4b0/0x4b0 [ 280.638518] ? netlink_has_listeners+0x20a/0x330 22:41:03 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:03 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) [ 280.643280] kobject_uevent_env+0x781/0xc23 [ 280.647616] kobject_uevent+0x20/0x26 [ 280.651418] kobject_put.cold+0x168/0x2f9 [ 280.655566] net_rx_queue_update_kobjects+0x2f7/0x400 [ 280.660767] netdev_unregister_kobject+0x13b/0x1d0 [ 280.665702] rollback_registered_many+0x694/0xb60 [ 280.670552] ? ppp_init_net+0x380/0x380 [ 280.674527] ? netdev_info+0xf0/0xf0 [ 280.678238] ? mutex_trylock+0x1c0/0x1c0 [ 280.682351] rollback_registered+0xdd/0x180 [ 280.686670] ? rollback_registered_many+0xb60/0xb60 22:41:03 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:03 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\rw(O\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\x02\x00\x00\x00\x00\x00\x00\x00\x00\xa6\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) [ 280.691687] unregister_netdevice_queue+0x1ae/0x230 [ 280.696704] ppp_ioctl+0x1c92/0x23bc [ 280.700416] ? ppp_nl_newlink+0x240/0x240 [ 280.704590] ? __might_sleep+0x93/0xb0 [ 280.708492] ? __fget+0x210/0x370 [ 280.711955] ? ppp_nl_newlink+0x240/0x240 [ 280.716101] do_vfs_ioctl+0x7ae/0x1060 [ 280.719991] ? selinux_file_mprotect+0x5d0/0x5d0 [ 280.724748] ? lock_downgrade+0x6e0/0x6e0 [ 280.731158] ? ioctl_preallocate+0x1c0/0x1c0 [ 280.735581] ? __fget+0x237/0x370 [ 280.739039] ? security_file_ioctl+0x89/0xb0 22:41:03 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000140)=0xfffffffffffffffd) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000180)='pids.max\x00>]#\xcas\x9b\xa7\x17\x1d\xa7\xf9\xf8{\xc0^\xb3\xe9\x9f\xd4&\xfe\x0e\x94\xb3:\xabo\x1d', 0x2, 0x0) syz_emit_ethernet(0x44, &(0x7f00000001c0)={@broadcast, @remote, [{[{0x9100, 0x6, 0x4, 0x2}], {0x8100, 0x1fe, 0x800, 0x2}}], {@arp={0x806, @generic={0x335, 0x0, 0x6, 0xa, 0x1, @local, "ec7811c6f72e386c6104", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, "05d802367486ebe367a753db95b74fa4"}}}}, &(0x7f0000000240)={0x0, 0x2, [0x992, 0x4c7, 0x231, 0x9e1]}) write$cgroup_int(r2, &(0x7f00000003c0)=0xffffffff00000000, 0x3112f7749d9e2337) [ 280.743450] SyS_ioctl+0x8f/0xc0 [ 280.746830] ? do_vfs_ioctl+0x1060/0x1060 [ 280.750980] do_syscall_64+0x1e8/0x640 [ 280.754868] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 280.759719] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 280.764905] RIP: 0033:0x459879 [ 280.768088] RSP: 002b:00007f2d2a098c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 280.775791] RAX: ffffffffffffffda RBX: 00007f2d2a098c90 RCX: 0000000000459879 [ 280.783091] RDX: 0000000000000000 RSI: 000000004004743c RDI: 0000000000000003 [ 280.790352] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 280.797633] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2d2a0996d4 [ 280.804914] R13: 00000000004c1ae1 R14: 00000000004d4e28 R15: 0000000000000005 22:41:03 executing program 2 (fault-call:4 fault-nth:10): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:41:03 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:03 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000003c0)=0xffffffff00000000, 0x12) 22:41:03 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x5, 0x40000) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0xee65, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r1, 0x0) 22:41:03 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x81, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0x0, 0x0}) r3 = fcntl$getown(r1, 0x9) r4 = syz_open_procfs(r3, &(0x7f0000000000)='loginuid\x00') fchdir(r4) fcntl$notify(r1, 0x402, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000100)={0x8, &(0x7f00000000c0)=[0x9, 0x2, 0x4, 0x3, 0xfff, 0x9, 0x4, 0xffffffffffffffc0]}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 22:41:03 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) [ 280.890569] PPPIOCDETACH file->f_count=2 22:41:03 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) 22:41:03 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x0, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) 22:41:03 executing program 5: shmget(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080), 0xfffffffffffffffd) socket$inet(0x2, 0x0, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x5) connect$packet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) r1 = dup(0xffffffffffffffff) write$selinux_validatetrans(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a73797374656d645f7061737377645f7661725f72756ebb29a67bbb9bfaeb8e5f743a736563745f6ed3737368645f6b65795f743b73302031383434363734343037333730393535313535332073797374656d5f753a73797374656d5f723a6b65726e656c5f743a733000fba3ea8d8e67729f22b04f0087e82025816190d231b53b58389ca231ca67b5159b24a254f694b4d9708e3e1e06a78cb8d2052f1f39b9f0ed13d8982191b3666ddbab9933c3e861170b80436b2084c7c43c940e1bd255a31c8b9240fa7094ad6b00"/234], 0x81) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r2, 0x0) [ 280.971000] FAULT_INJECTION: forcing a failure. [ 280.971000] name failslab, interval 1, probability 0, space 0, times 0 [ 280.998791] CPU: 1 PID: 15348 Comm: syz-executor.2 Not tainted 4.14.140 #36 [ 281.005928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 281.015276] Call Trace: [ 281.017868] dump_stack+0x138/0x197 [ 281.021510] should_fail.cold+0x10f/0x159 [ 281.025668] should_failslab+0xdb/0x130 [ 281.029648] kmem_cache_alloc_node+0x287/0x780 [ 281.034236] __alloc_skb+0x9c/0x500 [ 281.037875] ? skb_scrub_packet+0x4b0/0x4b0 [ 281.042214] ? netlink_has_listeners+0x20a/0x330 [ 281.046975] kobject_uevent_env+0x781/0xc23 [ 281.051312] kobject_uevent+0x20/0x26 [ 281.055121] kobject_put.cold+0x168/0x2f9 [ 281.059253] net_rx_queue_update_kobjects+0x2f7/0x400 [ 281.064443] netdev_unregister_kobject+0x13b/0x1d0 [ 281.069361] rollback_registered_many+0x694/0xb60 [ 281.074298] ? ppp_init_net+0x380/0x380 [ 281.078252] ? netdev_info+0xf0/0xf0 [ 281.081948] ? mutex_trylock+0x1c0/0x1c0 [ 281.086008] rollback_registered+0xdd/0x180 [ 281.090339] ? rollback_registered_many+0xb60/0xb60 [ 281.095453] unregister_netdevice_queue+0x1ae/0x230 [ 281.100460] ppp_ioctl+0x1c92/0x23bc [ 281.104156] ? ppp_nl_newlink+0x240/0x240 [ 281.108285] ? __might_sleep+0x93/0xb0 [ 281.112150] ? __fget+0x210/0x370 [ 281.115605] ? ppp_nl_newlink+0x240/0x240 [ 281.119732] do_vfs_ioctl+0x7ae/0x1060 [ 281.123601] ? selinux_file_mprotect+0x5d0/0x5d0 [ 281.128342] ? lock_downgrade+0x6e0/0x6e0 [ 281.132466] ? ioctl_preallocate+0x1c0/0x1c0 [ 281.136870] ? __fget+0x237/0x370 [ 281.140318] ? security_file_ioctl+0x89/0xb0 [ 281.144709] SyS_ioctl+0x8f/0xc0 [ 281.148049] ? do_vfs_ioctl+0x1060/0x1060 [ 281.152178] do_syscall_64+0x1e8/0x640 [ 281.156042] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 281.160879] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 281.166046] RIP: 0033:0x459879 22:41:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0x101000) write$P9_RWALK(r0, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{0x8, 0x1, 0x7}]}}, 0x16) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/anycast6\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x0) 22:41:03 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:03 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x1, 0x0) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x2) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f00000000c0)={0x0, {0x3, 0x200000004}}) [ 281.169216] RSP: 002b:00007f2d2a098c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 281.176903] RAX: ffffffffffffffda RBX: 00007f2d2a098c90 RCX: 0000000000459879 [ 281.184180] RDX: 0000000000000000 RSI: 000000004004743c RDI: 0000000000000003 [ 281.191426] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 281.198760] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2d2a0996d4 [ 281.206020] R13: 00000000004c1ae1 R14: 00000000004d4e28 R15: 0000000000000005 [ 281.320821] PPPIOCDETACH file->f_count=2 22:41:03 executing program 2 (fault-call:4 fault-nth:11): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:41:03 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0)={0xffffffffffffffff}, 0x3, 0xffffffffffffffff, 0x30, 0x1, @in6={0xa, 0x4e20, 0x40000000000, @rand_addr="2f3a7ef291c30437652a398c23df3248", 0xfff}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f00000001c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r3 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000003c0)=0xffffffff00000000, 0x12) 22:41:03 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x0, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) 22:41:03 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:03 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:03 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) vmsplice(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)="d0379001dc0e27c627b23aaed24774724d27b7f25b4d4115576f164aee5864ef38eafd989a0aa1d23cddd86ce08a208393fe6ce7c04f21b491a441be25014b14cd94d82d83d13734ed958002c1fb587c8769fb58d0911527db32f65a66f90f23c9aa1a88b5b9fdce7b1fac157d376524415843bdb1e9767a3f2eb35fc82613227a867f0c58ff19d345c0549f540d5433ad71e41a148fa0c67059f1b9e31a7473439f62af23f019c2927d4f87766a0dbc922a8cbd3b0d2bf09f3a9949f43afcd9bd26986fc67e899292ea83661fbfd9e5887149f3e69f450576004252a0fd15934ceb898ee6c3ed7f4b89d8e0cc3f9e0e90dd71", 0xf3}, {&(0x7f00000001c0)="29acba78b1", 0x5}], 0x2, 0x4) r1 = open(&(0x7f0000000080)='./file0\x00', 0x8b8faad3128c7c43, 0x10) r2 = gettid() perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x7fffffff, 0x80000001, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x10000, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x3, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, r2, 0x0, r1, 0x0) 22:41:03 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:03 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x0, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) [ 281.457287] FAULT_INJECTION: forcing a failure. [ 281.457287] name failslab, interval 1, probability 0, space 0, times 0 22:41:03 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x100000001, 0x100000048) write$binfmt_aout(r0, &(0x7f00000004c0)={{0x107, 0x6, 0x8000, 0x303, 0x9d, 0x7, 0x1, 0x2}, "eb491885095a8b6c4068caf14c25ecfc8a8b13d8bb9e3dc11c2fbbfaf829f00b7cb1b9cc65cd3bad44467048d4275ae3e3e4577c8f4f5bb483d71ec37ada2bd406da62ced096a435e9bad98cc55e4d9bf026e751893fc52cc4daca2707f2985e456fa1badec2dbaf2bb78989b7f2498ae24b844007bf76f7f110d7b066b482079e5d78e6d67739a36f4760fa1147a7312563ea957976ab09761d83a9b33d6ae40e381caf2515b0ea72d100d40cbd0f", [[], [], [], [], []]}, 0x5cf) [ 281.514524] CPU: 1 PID: 15391 Comm: syz-executor.2 Not tainted 4.14.140 #36 [ 281.521659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 281.531013] Call Trace: [ 281.533604] dump_stack+0x138/0x197 [ 281.537244] should_fail.cold+0x10f/0x159 [ 281.541398] should_failslab+0xdb/0x130 [ 281.545374] kmem_cache_alloc_node+0x287/0x780 [ 281.549959] __alloc_skb+0x9c/0x500 [ 281.553589] ? skb_scrub_packet+0x4b0/0x4b0 [ 281.557915] ? netlink_has_listeners+0x20a/0x330 [ 281.562690] kobject_uevent_env+0x781/0xc23 [ 281.567040] kobject_uevent+0x20/0x26 [ 281.570841] kobject_put.cold+0x168/0x2f9 [ 281.574998] net_rx_queue_update_kobjects+0x2f7/0x400 [ 281.580194] netdev_unregister_kobject+0x13b/0x1d0 [ 281.585124] rollback_registered_many+0x694/0xb60 [ 281.589958] ? ppp_init_net+0x380/0x380 [ 281.592050] audit: type=1800 audit(1566772864.004:83): pid=15405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=17289 res=0 [ 281.593949] ? netdev_info+0xf0/0xf0 [ 281.620575] ? mutex_trylock+0x1c0/0x1c0 [ 281.624644] rollback_registered+0xdd/0x180 [ 281.629007] ? rollback_registered_many+0xb60/0xb60 [ 281.629764] audit: type=1800 audit(1566772864.034:84): pid=15407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=17289 res=0 [ 281.634018] unregister_netdevice_queue+0x1ae/0x230 [ 281.634035] ppp_ioctl+0x1c92/0x23bc [ 281.634049] ? ppp_nl_newlink+0x240/0x240 [ 281.634060] ? __might_sleep+0x93/0xb0 [ 281.634072] ? __fget+0x210/0x370 [ 281.677095] ? ppp_nl_newlink+0x240/0x240 [ 281.681227] do_vfs_ioctl+0x7ae/0x1060 [ 281.685104] ? selinux_file_mprotect+0x5d0/0x5d0 [ 281.689844] ? lock_downgrade+0x6e0/0x6e0 [ 281.693983] ? ioctl_preallocate+0x1c0/0x1c0 [ 281.698389] ? __fget+0x237/0x370 [ 281.701843] ? security_file_ioctl+0x89/0xb0 [ 281.706284] SyS_ioctl+0x8f/0xc0 [ 281.709630] ? do_vfs_ioctl+0x1060/0x1060 [ 281.713760] do_syscall_64+0x1e8/0x640 [ 281.717715] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 281.725062] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 281.730274] RIP: 0033:0x459879 [ 281.733447] RSP: 002b:00007f2d2a098c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 281.741138] RAX: ffffffffffffffda RBX: 00007f2d2a098c90 RCX: 0000000000459879 [ 281.748431] RDX: 0000000000000000 RSI: 000000004004743c RDI: 0000000000000003 [ 281.755769] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 281.763035] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2d2a0996d4 [ 281.770298] R13: 00000000004c1ae1 R14: 00000000004d4e28 R15: 0000000000000005 22:41:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0x101000) write$P9_RWALK(r0, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{0x8, 0x1, 0x7}]}}, 0x16) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/anycast6\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x0) 22:41:04 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:04 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x4, 0xcec5818, 0x8, 0x1000, 0xe65, 0x5, 0x3, 0x1, 0x0}, &(0x7f0000000080)=0x20) socket$pptp(0x18, 0x1, 0x2) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000000c0)={r2, 0xec, "bfd577e534d93a2de8ee3103290fe5eaf13c6f3db001b99b0389e3c4c7c6f30c653ef7c43b6c253c3e0e4fd68fb81ae66ed8774208ac349d32de2cc569e5b0a874a4e64c58bae2795d559285cf3a6eba856bcdb6c08b567e178b70628f4d9c54983ff6dfb5a2956dab00e2e7dc66073e0f138dbb3a41dc5f7a563f0fc17ea986fdd2afda5e3b955920521d20ef0c1e1f40a89eadd3e6d25957a1380189457b0500dfdc0b402d834d11d35a2744c4eb07843876658924eef417ede189852d56e8d1936f716e7d938673d9b0f9e1852f8877d06905d3dc7ecd177d4e4be74bb29337860d3e58f29c8f9a257584"}, &(0x7f00000001c0)=0xf4) [ 281.835655] PPPIOCDETACH file->f_count=2 22:41:04 executing program 2 (fault-call:4 fault-nth:12): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:41:04 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee64, 0x0, 0xfffffffffffffff0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3d851c07345b9f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:04 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) 22:41:04 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/198}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) accept4(r0, &(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000380)=0x80, 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000540)=0x2, 0x4) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xfc6f, 0x200400) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80002002}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x8e2bc73bbc39d4d0, 0x70bd27, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4) r5 = openat$cgroup_int(r1, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000580)) write$cgroup_int(r5, &(0x7f00000003c0)=0xffffffff00000000, 0x12) 22:41:04 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:04 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) epoll_create(0x100000000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x2000, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x8001, 0x2000) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000300)={0xffff, 0xa, 0x4, 0x80000, {0x77359400}, {0x3, 0x1, 0x2, 0x7, 0x800, 0x81, "a9d8e8fd"}, 0x100000000000, 0x1, @fd=r2, 0x4}) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) socketpair(0x2, 0x3, 0xfffffffffffffffb, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000600)=0x101, 0x4) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0xf3, "d058be4f1a6ee5730af67ef7e8b43144f27a196d355138a85b1992973ebce9fa71e6f0db1982a4826dac19db0dea03549fb30cc21014e465311f4093d1d87503104d3d4cce226ec923e4e20bd14c0992cc96115461bf11ee675d4eddd03b8878fdc86891ae2bd4cb83bdf21a0f1f42ace01d2b877d001bbe2607e0d2ff29374973211c2cdfb3f777e3e4c87fb07de4a926192110cf06c62d9d16cd820342f8aec73ee400bca2d97f298e120f38f953dd1762b80089af7cdc6d0b8cab281522780cd4d762eea6059075dc9180ce8f3d0390981dc3d3deb4da78d57bc343cae1a72ae5d26c867ea02f20d61b44dc142b2d1f63d0"}, &(0x7f0000000180)=0xfb) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000380)=@assoc_id=r5, 0x4) sendto$x25(r1, &(0x7f00000003c0)="b26c389d5838b26d9f565770fc1bcfd8e75de1e3e89bb67246e2fa4a048858960655f31900c056d47cc670efb7cb97968ee4385525a7ee3bee63580a5a52ad4789314ec631be2a366af48d417577b6453a70fe93dd21165edf669407340f8c9b702013babb8b856112b7384cb711f419533a5024434e3e8f573534463cdbf2e41fefab5df5dc8dd1550392fc0fff10ce6261a86dea1b85fbf5d03616e30362709b7c5280a9f31cae8c83236fdd110dd0d82f105f90b4f44366b8988a2ea57fe9824fc9fadae17bf5bee1196e", 0xcc, 0x5, &(0x7f00000001c0)={0x9, @null=' \x00'}, 0x12) sysfs$2(0x2, 0x2, &(0x7f0000000640)=""/4096) 22:41:04 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) [ 282.004101] FAULT_INJECTION: forcing a failure. [ 282.004101] name failslab, interval 1, probability 0, space 0, times 0 [ 282.038956] CPU: 1 PID: 15432 Comm: syz-executor.2 Not tainted 4.14.140 #36 22:41:04 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000080)={0x53b5, 0x3}) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) [ 282.046092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 282.055476] Call Trace: [ 282.058161] dump_stack+0x138/0x197 [ 282.061799] should_fail.cold+0x10f/0x159 [ 282.065985] should_failslab+0xdb/0x130 [ 282.069983] kmem_cache_alloc_node_trace+0x280/0x770 [ 282.075094] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 282.080554] __kmalloc_node_track_caller+0x3d/0x80 [ 282.085590] __kmalloc_reserve.isra.0+0x40/0xe0 [ 282.090258] __alloc_skb+0xcf/0x500 [ 282.093906] ? skb_scrub_packet+0x4b0/0x4b0 [ 282.098233] ? netlink_has_listeners+0x20a/0x330 22:41:04 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x0, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) [ 282.103001] kobject_uevent_env+0x781/0xc23 [ 282.107336] kobject_uevent+0x20/0x26 [ 282.111134] kobject_put.cold+0x168/0x2f9 [ 282.115276] net_rx_queue_update_kobjects+0x2f7/0x400 [ 282.120469] netdev_unregister_kobject+0x13b/0x1d0 [ 282.125412] rollback_registered_many+0x694/0xb60 [ 282.130258] ? ppp_init_net+0x380/0x380 [ 282.134231] ? netdev_info+0xf0/0xf0 [ 282.137948] ? mutex_trylock+0x1c0/0x1c0 [ 282.142013] rollback_registered+0xdd/0x180 [ 282.146337] ? rollback_registered_many+0xb60/0xb60 [ 282.151352] unregister_netdevice_queue+0x1ae/0x230 [ 282.156368] ppp_ioctl+0x1c92/0x23bc [ 282.160087] ? ppp_nl_newlink+0x240/0x240 [ 282.164245] ? __might_sleep+0x93/0xb0 [ 282.168128] ? __fget+0x210/0x370 [ 282.171577] ? ppp_nl_newlink+0x240/0x240 [ 282.171590] do_vfs_ioctl+0x7ae/0x1060 [ 282.171604] ? selinux_file_mprotect+0x5d0/0x5d0 [ 282.171618] ? lock_downgrade+0x6e0/0x6e0 [ 282.171626] ? ioctl_preallocate+0x1c0/0x1c0 [ 282.171637] ? __fget+0x237/0x370 [ 282.179644] ? security_file_ioctl+0x89/0xb0 [ 282.200723] SyS_ioctl+0x8f/0xc0 [ 282.204196] ? do_vfs_ioctl+0x1060/0x1060 [ 282.208358] do_syscall_64+0x1e8/0x640 [ 282.212257] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 282.217096] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 282.222274] RIP: 0033:0x459879 [ 282.225454] RSP: 002b:00007f2d2a098c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 282.233172] RAX: ffffffffffffffda RBX: 00007f2d2a098c90 RCX: 0000000000459879 [ 282.240423] RDX: 0000000000000000 RSI: 000000004004743c RDI: 0000000000000003 [ 282.247683] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 22:41:04 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0xc) fcntl$lock(r0, 0x5, &(0x7f0000000100)={0x0, 0x0, 0x5, 0x9}) timer_create(0x2, &(0x7f0000000000)={0x0, 0x40, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_gettime(r1, &(0x7f0000000080)) 22:41:04 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./\xffgjjup/cpu\x0fsyz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x34b) 22:41:04 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x0, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) [ 282.254935] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2d2a0996d4 [ 282.262181] R13: 00000000004c1ae1 R14: 00000000004d4e28 R15: 0000000000000005 22:41:04 executing program 2 (fault-call:4 fault-nth:13): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) [ 282.302436] PPPIOCDETACH file->f_count=2 22:41:04 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0xddff3e3c49d543a1) ioctl$TIOCCONS(r0, 0x541d) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000eff0)=[{&(0x7f0000010000)="240000001900030007ff0907000083be8020000000040005031d85680300a3a2d188737e", 0x24}], 0x1}, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mixer\x00', 0x400, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000000c0)={{0x1000, 0x10000, 0xe, 0x124b, 0x80000000, 0x816, 0x800, 0x0, 0x3, 0xbc4, 0x7, 0x4}, {0x100000, 0x100000, 0x8, 0x9, 0xfff, 0x8, 0x9, 0x0, 0x1, 0x8, 0x80000000, 0x6}, {0xf000, 0x2, 0x10, 0x9, 0x6, 0x80, 0x3, 0xffff, 0x7f4, 0x10000, 0x5, 0x1f}, {0x1f884920fa835dc9, 0x2, 0x9, 0x2, 0x4, 0x100000000, 0xb8, 0x10002, 0x9, 0x7, 0x4, 0x9}, {0x4000, 0x2, 0xe, 0x6, 0x7, 0x1, 0x4, 0x2, 0x3ff, 0x7, 0x7fffffff, 0x3}, {0x3000, 0x2000, 0xf, 0x6, 0x2, 0xe219, 0x5, 0x10001, 0xffffffff, 0x100000000, 0x3, 0x9}, {0x1000, 0x3000, 0x3, 0x80000001, 0x5, 0x2, 0x1, 0x7, 0x9fe, 0x7, 0xfffffffffffff001, 0x8}, {0x100000, 0x0, 0x3, 0x8, 0x1000, 0x35, 0x3, 0xf7, 0x4, 0x8, 0x7afceb5f, 0xc7}, {0x27e4efc892c58fee, 0x10000}, {0x10000, 0xf000}, 0x10000, 0x0, 0x0, 0x120, 0x0, 0x4000, 0x1000, [0xe28, 0x80, 0x25d6d075, 0x40]}) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r3, 0x0) 22:41:04 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) 22:41:04 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) 22:41:04 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x0, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:04 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./\x15groJ\xab.net/syz1\x00c#u\x17\x96\xbd\x1d\xb0\x93W<\xfd\x89,<\x89O\xb3e\xfe\xe6\xd7\xb6\xf7S\xcf\xde\xeb\xdbX\xa5\xc3\x17fS\n\x18\x17\x9e\xd0i\xcd(y0\xc1\xd8\xa5\xda\xaf\xcf|\xc4\x9d}\xaf\x11\xf2\xb0=a\xe6%+\x9b\xfa\xe7\xe3CG\xde\xf5\x8c\x05\x82\x9c\xa3\xd8\x1a\t\x916\xafL\xd7(\x85\xeb_\fB\x0f\x173\xc9{g\xb4}6\xc9\x85\x99\xb6~[\xa6\xa7dj6\xdf\xa3\x96\x04}\xcc\x98\x82h_\x8f|\xf4}y \xcd\\\x1f\xf2\x90\xdb', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) r2 = dup2(r0, r1) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f00000017c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001780)={&(0x7f0000001400)={0x358, r3, 0x100, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA={0x38, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb1d7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_BEARER={0x38, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x59}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'bond_slave_0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK={0xb0, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff80000001}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xaaf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x97}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK={0xe0, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffc00}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x12000000000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbe}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdb1e}]}]}, @TIPC_NLA_BEARER={0x88, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x9, @mcast2, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xfff, @dev={0xfe, 0x80, [], 0x10}, 0x3}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffffffffff7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xffff, @mcast1, 0x7ff}}}}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffff7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}]}]}, 0x358}, 0x1, 0x0, 0x0, 0x27c073022b3f99f5}, 0x804) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) 22:41:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="117bf670") r1 = socket(0x200000000000011, 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000100)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ip_vti0\x00', r2}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x3cb, 0x6, @remote}, 0x14) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000280), 0x2) unshare(0x4000400) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) [ 282.417339] FAULT_INJECTION: forcing a failure. [ 282.417339] name failslab, interval 1, probability 0, space 0, times 0 [ 282.435047] CPU: 1 PID: 15469 Comm: syz-executor.2 Not tainted 4.14.140 #36 [ 282.442172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 282.451521] Call Trace: [ 282.454130] dump_stack+0x138/0x197 [ 282.457769] should_fail.cold+0x10f/0x159 [ 282.461937] should_failslab+0xdb/0x130 22:41:04 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) [ 282.465931] kmem_cache_alloc_node+0x287/0x780 [ 282.470533] __alloc_skb+0x9c/0x500 [ 282.474151] ? skb_scrub_packet+0x4b0/0x4b0 [ 282.478487] ? netlink_has_listeners+0x20a/0x330 [ 282.483245] kobject_uevent_env+0x781/0xc23 [ 282.487575] kobject_uevent+0x20/0x26 [ 282.491373] kobject_put.cold+0x168/0x2f9 [ 282.495522] net_rx_queue_update_kobjects+0x2f7/0x400 [ 282.500720] netdev_unregister_kobject+0x13b/0x1d0 [ 282.505663] rollback_registered_many+0x694/0xb60 [ 282.510506] ? ppp_init_net+0x380/0x380 22:41:04 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:04 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) [ 282.514477] ? netdev_info+0xf0/0xf0 [ 282.518187] ? mutex_trylock+0x1c0/0x1c0 [ 282.522286] rollback_registered+0xdd/0x180 [ 282.526605] ? rollback_registered_many+0xb60/0xb60 [ 282.531629] unregister_netdevice_queue+0x1ae/0x230 [ 282.536650] ppp_ioctl+0x1c92/0x23bc [ 282.540365] ? ppp_nl_newlink+0x240/0x240 [ 282.544516] ? __might_sleep+0x93/0xb0 [ 282.548402] ? __fget+0x210/0x370 [ 282.551871] ? ppp_nl_newlink+0x240/0x240 [ 282.556033] do_vfs_ioctl+0x7ae/0x1060 [ 282.559938] ? selinux_file_mprotect+0x5d0/0x5d0 22:41:05 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) 22:41:05 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0xfffffffffffffffa, 0x2) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000080)={0x400, "4afba9c2366a5a5121163767981b200ae6b8e54918f844d63d1f16615497ef66", 0x2, 0x1}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000003c0)=0xffffffff00000000, 0x12) [ 282.564692] ? lock_downgrade+0x6e0/0x6e0 [ 282.568836] ? ioctl_preallocate+0x1c0/0x1c0 [ 282.573247] ? __fget+0x237/0x370 [ 282.576703] ? security_file_ioctl+0x89/0xb0 [ 282.581113] SyS_ioctl+0x8f/0xc0 [ 282.584480] ? do_vfs_ioctl+0x1060/0x1060 [ 282.588627] do_syscall_64+0x1e8/0x640 [ 282.592505] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 282.597353] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 282.602684] RIP: 0033:0x459879 [ 282.605863] RSP: 002b:00007f2d2a098c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 282.613583] RAX: ffffffffffffffda RBX: 00007f2d2a098c90 RCX: 0000000000459879 [ 282.620845] RDX: 0000000000000000 RSI: 000000004004743c RDI: 0000000000000003 [ 282.628113] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 282.635375] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2d2a0996d4 [ 282.642650] R13: 00000000004c1ae1 R14: 00000000004d4e28 R15: 0000000000000005 22:41:05 executing program 2 (fault-call:4 fault-nth:14): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:41:05 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) 22:41:05 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./c/s1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='memory.swap.max\x00', 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x70, 0x4, 0xd609, 0x6, 0x3, 0x0, 0x3, 0x2000, 0x8, 0x81, 0x81, 0x4b, 0x927, 0x0, 0x6, 0x3, 0x100000001, 0x7, 0x8, 0x5, 0x5, 0x8d99, 0x3f6, 0x0, 0x1bc4, 0x9, 0x1, 0x9, 0xffffffffffffffff, 0x9, 0x3, 0xd7, 0x64f1a28, 0x80000000, 0x8001, 0x20, 0xffffffffffffffff, 0x0, 0x40, 0x10, @perf_config_ext={0x8, 0x7}, 0x8000, 0xffff, 0x2, 0x2, 0x7, 0x7f, 0x68}, r0, 0xf, r0, 0x4) write$cgroup_int(r0, &(0x7f00000003c0)=0x1, 0x0) getpeername$unix(r1, &(0x7f00000000c0), &(0x7f0000000140)=0x6e) 22:41:05 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) 22:41:05 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="0f5119cb172326fef84dcd7ecea868979e800f07e06e9979", 0x18}], 0x1, 0x0) 22:41:05 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x800080000000) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000340)={0x1, 0x4, [@local, @dev={[], 0x10}, @empty, @empty]}) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0xff5d) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x20000, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f00000002c0)={0x4, &(0x7f0000000040)=[{}, {}, {}, {}]}) [ 282.704472] PPPIOCDETACH file->f_count=2 22:41:05 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) 22:41:05 executing program 3: futex(&(0x7f0000000000)=0x2, 0x8c, 0x1, &(0x7f00000000c0)={0x0, 0x1c9c380}, &(0x7f0000000100), 0x1) futex(&(0x7f0000000080), 0x0, 0x1, 0x0, &(0x7f0000000040)=0x2000000001, 0x1f000000) r0 = socket$bt_hidp(0x1f, 0x3, 0x6) r1 = dup(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e22, 0x6, @mcast2}, {0xa, 0x4e22, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8001}, 0x800, [0x800, 0x9, 0x3, 0x4, 0x80000001, 0x5, 0x6, 0x10000]}, 0x5c) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f00000001c0)) 22:41:05 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) [ 282.779576] FAULT_INJECTION: forcing a failure. [ 282.779576] name failslab, interval 1, probability 0, space 0, times 0 [ 282.819541] CPU: 1 PID: 15512 Comm: syz-executor.2 Not tainted 4.14.140 #36 22:41:05 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='O\x00\x00\x00\x05\xb9\x01\x00\x00\x00\x00\x00\x00\x00\xee7\x00`QY[Y\v:~7\xa5\xce\xef\\\x05\xd6Zp\x14R3\x17+\xdd\n>\xd3D\x8d\x05\x04\x1aL\xe1\x9b\xf5\xbc\xc5\xef\xc1J&\xa54\xc9\x80\xf8\xadM+\x99\f\\\xd0\a\x94\x83\xd8\xb2\xb2{}\xcej\x8dQ\xb5\v^\xf8\xd0\xfc\xc16!\xfbSD\xe3\xfb\xe2\x80\xec\xe2\xfe\xf8\x0fn\xbe\x980\x9c\xce\x80QT\xa7\x00\x00\x00\x00\x00\x00\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x208100, 0x0) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000040)) [ 282.826683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 282.836033] Call Trace: [ 282.838623] dump_stack+0x138/0x197 [ 282.842274] should_fail.cold+0x10f/0x159 [ 282.846432] should_failslab+0xdb/0x130 [ 282.850418] kmem_cache_alloc_node+0x287/0x780 [ 282.855010] __alloc_skb+0x9c/0x500 [ 282.858641] ? skb_scrub_packet+0x4b0/0x4b0 [ 282.862965] ? netlink_has_listeners+0x20a/0x330 [ 282.867736] kobject_uevent_env+0x781/0xc23 [ 282.872066] kobject_uevent+0x20/0x26 [ 282.875861] kobject_put.cold+0x168/0x2f9 22:41:05 executing program 3: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000d4f000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x100, 0x0) fchmod(r0, 0x100) ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f0000000100)={{0x0, @name="ba26b6de4cb3dd449d9fda940370fed8ce7f52546a700914bb383823ae8012c3"}, 0x8, 0x0, 0xd7}) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000da1000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="0f290a25012e5a5fb9810400000f320f019a0a000000c4c14975b9007000003e0f005a00dcec66b822000f00d0c4e2319718b8010000000f01c1", 0x3a}], 0x1, 0x24, &(0x7f00000000c0)=[@cstype0={0x4, 0xa}, @flags={0x3, 0x4000}], 0x2) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.origin\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x2) 22:41:05 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x800, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000080)={0x7, 0x600000000000000, 0x9, 0xe361a00f5657063a, 0x2}) [ 282.880017] net_rx_queue_update_kobjects+0x2f7/0x400 [ 282.885214] netdev_unregister_kobject+0x13b/0x1d0 [ 282.890147] rollback_registered_many+0x694/0xb60 [ 282.894993] ? ppp_init_net+0x380/0x380 [ 282.898970] ? netdev_info+0xf0/0xf0 [ 282.902690] ? mutex_trylock+0x1c0/0x1c0 [ 282.906753] rollback_registered+0xdd/0x180 [ 282.911089] ? rollback_registered_many+0xb60/0xb60 [ 282.916110] unregister_netdevice_queue+0x1ae/0x230 [ 282.921128] ppp_ioctl+0x1c92/0x23bc [ 282.924854] ? ppp_nl_newlink+0x240/0x240 [ 282.929005] ? __might_sleep+0x93/0xb0 [ 282.932888] ? __fget+0x210/0x370 [ 282.936346] ? ppp_nl_newlink+0x240/0x240 [ 282.940510] do_vfs_ioctl+0x7ae/0x1060 [ 282.944398] ? selinux_file_mprotect+0x5d0/0x5d0 [ 282.949161] ? lock_downgrade+0x6e0/0x6e0 [ 282.953484] ? ioctl_preallocate+0x1c0/0x1c0 [ 282.958422] ? __fget+0x237/0x370 [ 282.961882] ? security_file_ioctl+0x89/0xb0 [ 282.966287] SyS_ioctl+0x8f/0xc0 [ 282.969653] ? do_vfs_ioctl+0x1060/0x1060 [ 282.973822] do_syscall_64+0x1e8/0x640 [ 282.977710] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 282.982555] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 282.987758] RIP: 0033:0x459879 [ 282.990944] RSP: 002b:00007f2d2a098c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 282.998639] RAX: ffffffffffffffda RBX: 00007f2d2a098c90 RCX: 0000000000459879 [ 283.005923] RDX: 0000000000000000 RSI: 000000004004743c RDI: 0000000000000003 [ 283.013189] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 283.020446] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2d2a0996d4 [ 283.027727] R13: 00000000004c1ae1 R14: 00000000004d4e28 R15: 0000000000000005 22:41:05 executing program 2 (fault-call:4 fault-nth:15): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:41:05 executing program 3: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x2, 0x80000) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x3, 0x3800000000000000, 0xffff, 0x8, 0xfffffffffffffffe, 0x3, 0x81, 0x5, 0x0, 0x4, 0x57b}, 0xb) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)={0x80000001, 0x4, 0x4, 0x1, {0x0, 0x7530}, {0x4, 0x0, 0x1f, 0x2, 0xfff, 0x1, "af08c29f"}, 0x9be, 0x3, @userptr=0x80, 0x4}) ioctl$TCSBRKP(r0, 0x5425, 0x4) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) utimes(0x0, &(0x7f00000000c0)={{}, {r1, r2/1000+10000}}) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000200)={0x1, 0x4cc}) 22:41:05 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000001, 0x12) 22:41:05 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x80000001) 22:41:05 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) timer_create(0xaa7fbc4eae931cc0, &(0x7f0000000080)={0x0, 0x28, 0x1}, &(0x7f00000000c0)=0x0) timer_gettime(r1, &(0x7f0000000100)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) write$P9_RCREATE(r2, &(0x7f0000000180)={0x18, 0x73, 0x2, {{0x0, 0x1, 0x8}, 0x2}}, 0x18) 22:41:05 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(0xffffffffffffffff, r2, 0x0, 0x80000001) [ 283.082872] PPPIOCDETACH file->f_count=2 22:41:05 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(0xffffffffffffffff, r2, 0x0, 0x80000001) 22:41:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) connect$rxrpc(r2, &(0x7f0000000040)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @multicast2}}, 0x24) 22:41:05 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x80000001) 22:41:05 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x2, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='io.max\x00', 0x2, 0x0) write$P9_RLCREATE(r2, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x0, 0x0, 0x5}, 0x7ff}}, 0x18) 22:41:05 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cachefiles\x00', 0x400c4, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000280)={{0x3, 0xc3bd480b4e0db2ee, 0x8, 0x8000, 'syz0\x00', 0x2af0}, 0x1, 0x3, 0x66, r2, 0x3, 0x800, 'syz1\x00', &(0x7f0000000140)=['.C\x00', 'em1..-\x00', '&*\x00'], 0xd, [], [0x4, 0x3ff, 0xdc, 0xffffffffffffff80]}) 22:41:05 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x80000001) [ 283.202540] FAULT_INJECTION: forcing a failure. [ 283.202540] name failslab, interval 1, probability 0, space 0, times 0 [ 283.237684] CPU: 1 PID: 15561 Comm: syz-executor.2 Not tainted 4.14.140 #36 [ 283.244952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 283.254330] Call Trace: [ 283.256958] dump_stack+0x138/0x197 [ 283.260596] should_fail.cold+0x10f/0x159 [ 283.264755] should_failslab+0xdb/0x130 [ 283.268736] kmem_cache_alloc_node_trace+0x280/0x770 [ 283.273842] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 283.279280] __kmalloc_node_track_caller+0x3d/0x80 [ 283.284191] __kmalloc_reserve.isra.0+0x40/0xe0 [ 283.288838] __alloc_skb+0xcf/0x500 [ 283.292450] ? skb_scrub_packet+0x4b0/0x4b0 [ 283.296759] ? netlink_has_listeners+0x20a/0x330 [ 283.301504] kobject_uevent_env+0x781/0xc23 [ 283.305815] kobject_uevent+0x20/0x26 [ 283.309618] kobject_put.cold+0x168/0x2f9 [ 283.313753] net_rx_queue_update_kobjects+0x2f7/0x400 [ 283.318922] netdev_unregister_kobject+0x13b/0x1d0 [ 283.323833] rollback_registered_many+0x694/0xb60 [ 283.328663] ? ppp_init_net+0x380/0x380 [ 283.332616] ? netdev_info+0xf0/0xf0 [ 283.336303] ? mutex_trylock+0x1c0/0x1c0 [ 283.340346] rollback_registered+0xdd/0x180 [ 283.344663] ? rollback_registered_many+0xb60/0xb60 [ 283.349683] unregister_netdevice_queue+0x1ae/0x230 [ 283.354680] ppp_ioctl+0x1c92/0x23bc [ 283.358377] ? ppp_nl_newlink+0x240/0x240 [ 283.362505] ? __might_sleep+0x93/0xb0 [ 283.366383] ? __fget+0x210/0x370 [ 283.369838] ? ppp_nl_newlink+0x240/0x240 [ 283.373965] do_vfs_ioctl+0x7ae/0x1060 [ 283.377836] ? selinux_file_mprotect+0x5d0/0x5d0 [ 283.382569] ? lock_downgrade+0x6e0/0x6e0 [ 283.386697] ? ioctl_preallocate+0x1c0/0x1c0 [ 283.391185] ? __fget+0x237/0x370 [ 283.394625] ? security_file_ioctl+0x89/0xb0 [ 283.399133] SyS_ioctl+0x8f/0xc0 [ 283.402479] ? do_vfs_ioctl+0x1060/0x1060 [ 283.406617] do_syscall_64+0x1e8/0x640 [ 283.410495] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 283.415331] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 283.420506] RIP: 0033:0x459879 [ 283.423716] RSP: 002b:00007f2d2a098c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 283.431416] RAX: ffffffffffffffda RBX: 00007f2d2a098c90 RCX: 0000000000459879 [ 283.438715] RDX: 0000000000000000 RSI: 000000004004743c RDI: 0000000000000003 [ 283.445978] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 283.453272] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2d2a0996d4 [ 283.460523] R13: 00000000004c1ae1 R14: 00000000004d4e28 R15: 0000000000000005 22:41:05 executing program 2 (fault-call:4 fault-nth:16): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:41:05 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, 0xffffffffffffffff, 0x0, 0x80000001) 22:41:05 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) 22:41:05 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(0xffffffffffffffff, r2, 0x0, 0x80000001) 22:41:05 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x5, 0x2180) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 283.510710] PPPIOCDETACH file->f_count=2 22:41:06 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x10000, 0x0) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000300)={0x5, [0x401, 0xb5, 0xd6, 0x9, 0x3]}) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r1, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000100)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) recvfrom$packet(r2, &(0x7f0000000140)=""/113, 0x6, 0x2, &(0x7f0000000280)={0x11, 0xf7, r3, 0x1, 0x8000, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) 22:41:06 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, 0xffffffffffffffff, 0x0, 0x80000001) [ 283.659442] FAULT_INJECTION: forcing a failure. [ 283.659442] name failslab, interval 1, probability 0, space 0, times 0 [ 283.680513] CPU: 1 PID: 15593 Comm: syz-executor.2 Not tainted 4.14.140 #36 [ 283.687647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 283.696999] Call Trace: [ 283.699589] dump_stack+0x138/0x197 [ 283.699610] should_fail.cold+0x10f/0x159 [ 283.707358] should_failslab+0xdb/0x130 [ 283.707372] kmem_cache_alloc_node+0x287/0x780 [ 283.715910] __alloc_skb+0x9c/0x500 [ 283.719546] ? skb_scrub_packet+0x4b0/0x4b0 [ 283.723852] ? netlink_has_listeners+0x20a/0x330 [ 283.728588] kobject_uevent_env+0x781/0xc23 [ 283.732904] kobject_uevent+0x20/0x26 [ 283.736682] kobject_put.cold+0x168/0x2f9 [ 283.740827] net_rx_queue_update_kobjects+0x2f7/0x400 [ 283.746005] netdev_unregister_kobject+0x13b/0x1d0 [ 283.750924] rollback_registered_many+0x694/0xb60 [ 283.755841] ? ppp_init_net+0x380/0x380 [ 283.759811] ? netdev_info+0xf0/0xf0 [ 283.763516] ? mutex_trylock+0x1c0/0x1c0 [ 283.767569] rollback_registered+0xdd/0x180 [ 283.771881] ? rollback_registered_many+0xb60/0xb60 [ 283.776915] unregister_netdevice_queue+0x1ae/0x230 [ 283.781921] ppp_ioctl+0x1c92/0x23bc [ 283.785637] ? ppp_nl_newlink+0x240/0x240 [ 283.790089] ? __might_sleep+0x93/0xb0 [ 283.793965] ? __fget+0x210/0x370 [ 283.797404] ? ppp_nl_newlink+0x240/0x240 [ 283.801547] do_vfs_ioctl+0x7ae/0x1060 [ 283.805423] ? selinux_file_mprotect+0x5d0/0x5d0 [ 283.810180] ? lock_downgrade+0x6e0/0x6e0 [ 283.814313] ? ioctl_preallocate+0x1c0/0x1c0 [ 283.818710] ? __fget+0x237/0x370 [ 283.822156] ? security_file_ioctl+0x89/0xb0 [ 283.826553] SyS_ioctl+0x8f/0xc0 [ 283.829896] ? do_vfs_ioctl+0x1060/0x1060 [ 283.834030] do_syscall_64+0x1e8/0x640 [ 283.837894] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 283.842720] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 283.847902] RIP: 0033:0x459879 [ 283.851070] RSP: 002b:00007f2d2a098c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 283.858763] RAX: ffffffffffffffda RBX: 00007f2d2a098c90 RCX: 0000000000459879 [ 283.866015] RDX: 0000000000000000 RSI: 000000004004743c RDI: 0000000000000003 [ 283.873262] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 283.880516] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2d2a0996d4 [ 283.887768] R13: 00000000004c1ae1 R14: 00000000004d4e28 R15: 0000000000000005 22:41:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x4980, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000150004000000000000000500000000000000"]) 22:41:06 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, 0xffffffffffffffff, 0x0, 0x80000001) 22:41:06 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x5cc2e3e5380b5d91, 0x0) openat$cgroup_int(r0, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040)) open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x80, 0x80) 22:41:06 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, 0xffffffffffffffff, 0x0, 0x80000001) 22:41:06 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)={0x4, 0x2, {0x3, 0x3, 0xc18, 0x1, 0x101}}) ioctl$TIOCSBRK(r0, 0x5427) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r1, 0x0) get_thread_area(&(0x7f0000000280)={0x3ff, 0x1000, 0x1000, 0x7fff, 0xfffffffffffffff7, 0x1000, 0x6, 0x800, 0x1, 0x8}) setxattr$trusted_overlay_nlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'U+', 0x3}, 0x28, 0x1) [ 283.942490] PPPIOCDETACH file->f_count=2 22:41:06 executing program 2 (fault-call:4 fault-nth:17): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:41:06 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, 0xffffffffffffffff, 0x0, 0x80000001) 22:41:06 executing program 3: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040)=0x5, 0x4) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000100)={'broute\x00', 0x0, 0x0, 0x0, [], 0xa, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x118) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000240)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000280)={0x0, 0x3, 0x1, [0xffff]}, &(0x7f00000002c0)=0xa) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000300)={r1, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000340)={0x0, 0x1, 0x40, 0x1ff, r1}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in=@remote, @in=@dev}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f0000000480)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000500)=0xc) sched_getparam(r2, &(0x7f0000000540)) connect$nfc_llcp(r0, &(0x7f0000000580)={0x27, 0x0, 0x0, 0x5942579c5e93bec6, 0x20, 0x5, "8aa92f1d4edfdf8d9ff600d61e3740cf09df82353343f916e2cd7e13ccb4448c93af436893403ad114963d9fff74fa915c776692ac64435e98a3081aed7e8a", 0x35}, 0x60) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000600)={0xadb, 0x9, 0x4}) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000640)) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x3f) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000680)='vxcan1\x00', 0x10) times(&(0x7f00000006c0)) r3 = socket$can_raw(0x1d, 0x3, 0x1) write$FUSE_BMAP(r0, &(0x7f0000000700)={0x18, 0xffffffffffffffff, 0x8, {0x51b0}}, 0x18) migrate_pages(r2, 0xf353, &(0x7f0000000740)=0x7, &(0x7f0000000780)=0x1) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000007c0), &(0x7f0000000800)=0x4) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000840)=r2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0xc) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000000900)) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000940), &(0x7f0000000980)=0x4) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f00000009c0)={0x0, 0x5, 0x1ff, 0x8bcd, 0x4f61, 0x2, 0x82c}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000a00)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @multicast2}], 0x20) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000a40)={0x7, 0xffffffffffff98bd, 0x101}) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000a80)={r1, 0x3}, 0x8) setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000ac0)=0x1a1, 0x4) 22:41:06 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, 0xffffffffffffffff, 0x0, 0x80000001) 22:41:06 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.low\x00', 0x2, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1000, 0x200) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f00000001c0)=""/72) r3 = msgget$private(0x0, 0x100) msgctl$MSG_STAT(r3, 0xb, &(0x7f0000000100)=""/189) 22:41:06 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0xffffffffffffffff, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 284.073492] FAULT_INJECTION: forcing a failure. [ 284.073492] name failslab, interval 1, probability 0, space 0, times 0 [ 284.105693] CPU: 0 PID: 15622 Comm: syz-executor.2 Not tainted 4.14.140 #36 [ 284.112833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 284.122182] Call Trace: [ 284.124761] dump_stack+0x138/0x197 [ 284.128379] should_fail.cold+0x10f/0x159 [ 284.132511] should_failslab+0xdb/0x130 [ 284.136491] kmem_cache_alloc_node+0x287/0x780 [ 284.141066] __alloc_skb+0x9c/0x500 [ 284.144676] ? skb_scrub_packet+0x4b0/0x4b0 [ 284.148977] ? netlink_has_listeners+0x20a/0x330 [ 284.153714] kobject_uevent_env+0x781/0xc23 [ 284.158023] kobject_uevent+0x20/0x26 [ 284.161806] kobject_put.cold+0x168/0x2f9 [ 284.166035] net_rx_queue_update_kobjects+0x2f7/0x400 [ 284.171205] netdev_unregister_kobject+0x13b/0x1d0 [ 284.176121] rollback_registered_many+0x694/0xb60 [ 284.180960] ? ppp_init_net+0x380/0x380 [ 284.184914] ? netdev_info+0xf0/0xf0 [ 284.188609] ? mutex_trylock+0x1c0/0x1c0 [ 284.192653] rollback_registered+0xdd/0x180 [ 284.196951] ? rollback_registered_many+0xb60/0xb60 [ 284.201956] unregister_netdevice_queue+0x1ae/0x230 [ 284.207083] ppp_ioctl+0x1c92/0x23bc [ 284.210773] ? ppp_nl_newlink+0x240/0x240 [ 284.214911] ? __might_sleep+0x93/0xb0 [ 284.218778] ? __fget+0x210/0x370 [ 284.222219] ? ppp_nl_newlink+0x240/0x240 [ 284.226347] do_vfs_ioctl+0x7ae/0x1060 [ 284.230215] ? selinux_file_mprotect+0x5d0/0x5d0 [ 284.234950] ? lock_downgrade+0x6e0/0x6e0 [ 284.239070] ? ioctl_preallocate+0x1c0/0x1c0 [ 284.243456] ? __fget+0x237/0x370 [ 284.246894] ? security_file_ioctl+0x89/0xb0 [ 284.251281] SyS_ioctl+0x8f/0xc0 [ 284.254660] ? do_vfs_ioctl+0x1060/0x1060 [ 284.258816] do_syscall_64+0x1e8/0x640 [ 284.262678] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 284.267520] entry_SYSCALL_64_after_hwframe+0x42/0xb7 22:41:06 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x0) 22:41:06 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 284.272686] RIP: 0033:0x459879 [ 284.275854] RSP: 002b:00007f2d2a098c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 284.283542] RAX: ffffffffffffffda RBX: 00007f2d2a098c90 RCX: 0000000000459879 [ 284.290792] RDX: 0000000000000000 RSI: 000000004004743c RDI: 0000000000000003 [ 284.298069] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 284.305319] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2d2a0996d4 [ 284.312567] R13: 00000000004c1ae1 R14: 00000000004d4e28 R15: 0000000000000005 22:41:06 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x5, 0x10101) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x1) write$vhci(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="04d91e2627534cce9f7bbce4f5b4426a5200aa4f50"], 0x15) r2 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000003c0)=0x4, 0x12) fremovexattr(r1, &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00') 22:41:06 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x0) 22:41:06 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x0) 22:41:06 executing program 3: r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) unshare(0x40600) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000001640)={&(0x7f0000000180)=@file={0x8be4597212d8543b, './file0\x00'}, 0x6e, &(0x7f00000015c0)=[{&(0x7f0000000200)="3f1103a9d081dd13f3e46823c0c9f2e349c094a27576849898b2c4cba9ea3629b738dd154d1795a2816a42b89b72bc692e13ef927fdb161f95744e36553c7fd266b2db296ceb3d8e82e0c933c2ce5a3d24d4686c309549892fd83403f88e960f5612161e8190a9f8cf2d954d4276ee5a0ef77824ff01d352", 0x78}, {&(0x7f0000000280)="bf1fce19c4d4b8f169225da6abb07771e4587cb4a491a89e794f4dafa179f930b262a492d5118a54268d28e39c694456306ad2da14b477c5d5db2b1c38f07cdb5668bb", 0x43}, {&(0x7f0000000300)="36fc50955e0d949c1efe94b9539b756723f9489a6e59ce6c84f3521fd143ae1ec2ef68ebe9ef214d454782868556f401c5aa39295a9490e04f2192ef1b256e548b8699ceb26189b774f93aa402a14564aeecf79742d685c57e66d468b141c676e9c11d1fde2bb93ae9a98267caa2bee94abf0167e579ecdaa23df5f194744e9467716cf08f0821100da2244e7771eb3cfd16e0b894b321740bccd972ca938b4eeeca340ed2334f5e560f3ee747399c8d8eabe2904035bc5bca788e06e519ed626bda40bb", 0xc4}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="03f630483773506f9aae9f5ff75d67dd35314cb46ded12b07f8db722106e451338075346be56d234f0c196fe3e2c7b4a372f154553fa1361121fa9748e53ed03d245fb3ba873401e421eacb45cc79543b19d5d9a0d8c9f8c79bd696d9b91b36990dbb70b7e4ec691b56d7514c73d9036f96bf61055c6daddbefa8820d107e17cace76fa51f8d00825e1b4a062af3a767d74331f557f6e2e5c522d180fff7188cdb25b0ea0f147939f6587c9c5315be7fe238020a2e077ff33a3127902576248585f060747e00598f78ef99bcf9cd520c1cd2", 0xd2}, {&(0x7f0000000100)="09227b95f43a03712ea71871e8a6d2ea0f85045b474281f9abe291aeb56cd9bea6f3cce0c2b68c42d812ac25e6e722a2e88b372059", 0x35}, {&(0x7f0000001500)="8d041cbfd1d811520e64bfb71a67678e4d82f89f8cd63ac99c7308a5e42e40aea4487b4cb8f66368147632424a5f9976ebb7ae151fd7a060d4f1d6b6bc224eaed528411fb31d0dd3af9d2996101d8a3b5360e2e823eb7b0c78585cfa56c8ffafcdb5b2013ab51d54152a77da241212fc9803ffc7dc49e04f1c648bbbc3450f469676a55cb11c385d03c2ff268fdfed61a7de8027f3165e9a326897b7a7589b0bebeaa249dce33a01c975a6998112bfea73881178fa3f", 0xb6}], 0x7, 0x0, 0x0, 0x4000}, 0x800) init_module(&(0x7f0000000000)='\x00', 0x1, &(0x7f00000000c0)='self{+}$securitymd5sum\xee^self8@)cgroup:\x00') perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x5) [ 284.391504] PPPIOCDETACH file->f_count=2 22:41:06 executing program 2 (fault-call:4 fault-nth:18): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:41:06 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpu_exclusive\x00', 0x2, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) 22:41:06 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x0) 22:41:06 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40000000000, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) read$alg(r2, &(0x7f0000000100)=""/54, 0x36) setsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x4}, 0x8) 22:41:06 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) signalfd(r0, &(0x7f0000000000)={0x1ff}, 0x8) r1 = memfd_create(&(0x7f0000000180)='eth1!\\\x00', 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0xbdf3cbddf718d2c, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r1, 0x0) madvise(&(0x7f00000a2000/0x600000)=nil, 0x600000, 0x8) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'lapb0\x00', &(0x7f0000000080)=@ethtool_rx_ntuple={0x35, {0x12, @ether_spec={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x41973673a5fc5db5}, @broadcast, 0x8000}, @tcp_ip4_spec={@rand_addr, @broadcast, 0x4e24, 0x4e23, 0x9}, 0x8, 0x100000001, 0x4, 0xbd79, 0xfffffffffffffffe}}}) 22:41:06 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x0) 22:41:06 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x400000, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x1, 0x2) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x1b6eb3bf832ea519}, 0x10) r4 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x5, 0x220000) ioctl$SG_GET_SCSI_ID(r4, 0x2276, &(0x7f0000000080)) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000780)=""/28) write$cgroup_int(r1, &(0x7f0000000180)=0xf7ffefff00000000, 0x12) sendmsg$tipc(r4, &(0x7f0000000740)={&(0x7f00000001c0)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x1}}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000200)="a327234b1311966a9b62310c9b5104bb8cee408e783e718009d48a09fe9abeff901bf43ffeb29b89af4a09a64d887693aded6312145ec1ba79bbca864f7fbb1c209cd6bfb69d04218f54dffd45329d30e54d84803e4993ab22bee8032147672498ff692688f9104058f2d73886bd509f6735fd5804", 0x75}, {&(0x7f0000000280)="539d2a54eb9f3ff073b0ee428fc89c65f2827e93e187bbd58e37c7ac776fc3507a57fb1c3ff4bf92655a52d6ba2e7a6fe27802", 0x33}, {&(0x7f00000002c0)="ffd4df913ab3665712b079f65354193ffc287950ff2dee4d40346096290faf40d16daaf733374f13b1a20957fd433b2add8bdd5387f0c0698a2b7de12700b4a32239ea604eba44f5bb427264ee22fc397564602992a7645e256015a37dcecbf08c6941c26b68de29d18ef39d648487c35437af56a89fe7fc3a27814d8e283c", 0x7f}, {&(0x7f0000000340)="73c158c8261f0f3747cc70a07870f47e3f086e9a831b200ac5f14ea1724815885397d6d9c35287134804e86a1976f3fa1047a219941768b9d3760ab6a29c034b194d4dd37988a36090385bc6ecfb15c1e7562635c5717a25e83619b9779aca9b717df73b43e6b3634e586fa187ac01bbf43b069a1d780c9ff730b291fe66a96e536e049cebef8bfe3be87649795907b2576258c177651a88f3acfa111b615ae3b6cfc3697991f6ddfbb5b9", 0xab}, {&(0x7f00000004c0)="9939ef8d644323312eee6d841352a8d8464e7e7ff11424d3a4909e2b414f85e3f9fe44ebe9380c25fa597ce67d9a17ead932585d2b5d308cfbccee3f896b1e923540123cf7d90796d126e4cb1f8198ead657fac594aab57edafac1497f3aabc4f89620f2669bc5c34d4e02ef337a4f73707309c1eaf4c7a49d7b8643f5062531bdb8af76e2eaea59bc2376791184bc1d3280e950d51a570597718d5d7f0851619b93670e8d4b86151253aa9adfa94e638fc3ae4b693b94872cf3e1b3bd683833b7eb38483dadd9480843b82d56b4d325dce60879bb44e4b1232f5ddf33d3d8658a426ebd958d95fb2fe4f11221", 0xed}], 0x5, &(0x7f0000000640)="6fe754ba5d7484986e251d00e6b15a51cd94a511533216f6e85f79489ae42dc22870b739dbb2e781a94669a05347676baca9d156ac429f428708a1c64bce84b8d98f7f9f4f8f1ed57450cf3b97da14135382588b19aa70c05b62174e38abf0ffe037457447edb938da7de20f5bab7676b3aa81b654133fa958dbe84933decefee2f76eadab908106c0b2f01130b4c4d8d19d9b694e53ec04b21f0312c1f7b29aff7a1bdfc114bbe8b0c1dbfe99471055e1d692efbc17922d19bf1b86bcef5d0d0e55c0d6b36b954c5a201b3a571943e2cecb1de5ed56b491f2e42f542fb14dbb0b820f2200ff605c5047a0986f2bc61fec2daa924f5c4c6af6", 0xf9, 0x20000010}, 0x80) [ 284.576406] FAULT_INJECTION: forcing a failure. [ 284.576406] name failslab, interval 1, probability 0, space 0, times 0 [ 284.618013] CPU: 0 PID: 15674 Comm: syz-executor.2 Not tainted 4.14.140 #36 [ 284.625141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 284.634499] Call Trace: [ 284.637106] dump_stack+0x138/0x197 [ 284.640755] should_fail.cold+0x10f/0x159 [ 284.644907] should_failslab+0xdb/0x130 [ 284.648922] kmem_cache_alloc_node+0x287/0x780 [ 284.653515] __alloc_skb+0x9c/0x500 [ 284.657140] ? skb_scrub_packet+0x4b0/0x4b0 [ 284.661463] ? netlink_has_listeners+0x20a/0x330 [ 284.666227] kobject_uevent_env+0x781/0xc23 [ 284.670568] kobject_uevent+0x20/0x26 [ 284.674348] kobject_put.cold+0x168/0x2f9 [ 284.678481] net_rx_queue_update_kobjects+0x2f7/0x400 [ 284.683655] netdev_unregister_kobject+0x13b/0x1d0 [ 284.688585] rollback_registered_many+0x694/0xb60 [ 284.693410] ? ppp_init_net+0x380/0x380 [ 284.697372] ? netdev_info+0xf0/0xf0 [ 284.701078] ? mutex_trylock+0x1c0/0x1c0 [ 284.705128] rollback_registered+0xdd/0x180 [ 284.709432] ? rollback_registered_many+0xb60/0xb60 [ 284.714440] unregister_netdevice_queue+0x1ae/0x230 [ 284.719523] ppp_ioctl+0x1c92/0x23bc [ 284.723219] ? ppp_nl_newlink+0x240/0x240 [ 284.727357] ? __might_sleep+0x93/0xb0 [ 284.731223] ? __fget+0x210/0x370 [ 284.734663] ? ppp_nl_newlink+0x240/0x240 [ 284.738784] do_vfs_ioctl+0x7ae/0x1060 [ 284.742645] ? selinux_file_mprotect+0x5d0/0x5d0 [ 284.747379] ? lock_downgrade+0x6e0/0x6e0 [ 284.751508] ? ioctl_preallocate+0x1c0/0x1c0 [ 284.755892] ? __fget+0x237/0x370 [ 284.759323] ? security_file_ioctl+0x89/0xb0 [ 284.763710] SyS_ioctl+0x8f/0xc0 [ 284.767053] ? do_vfs_ioctl+0x1060/0x1060 [ 284.771182] do_syscall_64+0x1e8/0x640 [ 284.775054] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 284.779879] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 284.785056] RIP: 0033:0x459879 [ 284.788233] RSP: 002b:00007f2d2a098c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 284.796426] RAX: ffffffffffffffda RBX: 00007f2d2a098c90 RCX: 0000000000459879 [ 284.803675] RDX: 0000000000000000 RSI: 000000004004743c RDI: 0000000000000003 [ 284.810923] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 22:41:07 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x20000, 0x0) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000080)=0xc4) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f00000000c0)=0x8) 22:41:07 executing program 0 (fault-call:4 fault-nth:0): r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:07 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) fcntl$notify(r0, 0x402, 0x4) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000740)='tracefs\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') sendfile(r1, r1, &(0x7f0000000180)=0x74000000, 0x5) 22:41:07 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x0) 22:41:07 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x200) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000000c0)) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r1, 0x0) [ 284.818183] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2d2a0996d4 [ 284.825437] R13: 00000000004c1ae1 R14: 00000000004d4e28 R15: 0000000000000005 [ 284.852749] FAULT_INJECTION: forcing a failure. [ 284.852749] name failslab, interval 1, probability 0, space 0, times 0 [ 284.873060] CPU: 0 PID: 15697 Comm: syz-executor.0 Not tainted 4.14.140 #36 [ 284.880209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 284.889557] Call Trace: [ 284.892137] dump_stack+0x138/0x197 [ 284.895755] should_fail.cold+0x10f/0x159 [ 284.899888] should_failslab+0xdb/0x130 [ 284.903847] kmem_cache_alloc_trace+0x2e9/0x790 [ 284.908502] ? file_has_perm+0x163/0x2c0 [ 284.912547] alloc_pipe_info+0xb0/0x380 [ 284.916505] splice_direct_to_actor+0x5d2/0x7b0 [ 284.921159] ? selinux_file_permission+0x85/0x480 [ 284.925985] ? generic_pipe_buf_nosteal+0x10/0x10 [ 284.930809] ? security_file_permission+0x89/0x1f0 [ 284.935715] ? do_splice_to+0x170/0x170 [ 284.939670] ? rw_verify_area+0xea/0x2b0 [ 284.943761] do_splice_direct+0x18d/0x230 [ 284.947888] ? splice_direct_to_actor+0x7b0/0x7b0 [ 284.952711] ? rw_verify_area+0xea/0x2b0 [ 284.957066] do_sendfile+0x4db/0xbd0 [ 284.960769] ? do_compat_pwritev64+0x140/0x140 [ 284.965335] ? fput+0xd4/0x150 [ 284.968516] SyS_sendfile64+0x102/0x110 [ 284.972472] ? SyS_sendfile+0x130/0x130 [ 284.976434] ? do_syscall_64+0x53/0x640 [ 284.980398] ? SyS_sendfile+0x130/0x130 [ 284.984372] do_syscall_64+0x1e8/0x640 [ 284.988238] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 284.993065] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 284.998232] RIP: 0033:0x459879 [ 285.001402] RSP: 002b:00007f8a5e6e9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 285.009091] RAX: ffffffffffffffda RBX: 00007f8a5e6e9c90 RCX: 0000000000459879 [ 285.016338] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 285.023585] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 285.030833] R10: 0000000080000001 R11: 0000000000000246 R12: 00007f8a5e6ea6d4 [ 285.038098] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 [ 285.090489] PPPIOCDETACH file->f_count=2 22:41:07 executing program 2 (fault-call:4 fault-nth:19): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:41:07 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xd1c57d78a2b3b716, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000140)={'raw\x00'}, &(0x7f0000000040)=0x54) r2 = socket(0x10, 0x43d54ee2b0aa760b, 0x0) sendmsg(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="5500000018007f5300fe01b2a4a280930a600200ffa84308910000003900080008000c00010000000000156f757284366a660006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000", 0x55}], 0x1}, 0x0) 22:41:07 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000100, 0x12) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x400, 0x70bd25, 0x25dfdbfd, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0xc040}, 0x20000000) 22:41:07 executing program 0 (fault-call:4 fault-nth:1): r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:07 executing program 1 (fault-call:6 fault-nth:0): r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) 22:41:07 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f00000000c0)={0x0, @bt={0x6, 0x8001, 0x1, 0x2, 0x10001, 0x1ff, 0xfffffffffffffffe, 0x100000000, 0x80d, 0x0, 0x7, 0xd2, 0x4, 0x8, 0x2, 0x1}}) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000280)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000300)=0xff, 0x4) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r1, 0x0) clock_nanosleep(0x7, 0x0, &(0x7f0000000180)={0x77359400}, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f00000002c0)=0xfffffffffffffffe) [ 285.190360] FAULT_INJECTION: forcing a failure. [ 285.190360] name failslab, interval 1, probability 0, space 0, times 0 [ 285.196350] audit: type=1400 audit(1566772867.604:85): avc: denied { ioctl } for pid=15705 comm="syz-executor.3" path="socket:[54594]" dev="sockfs" ino=54594 ioctlcmd=0x8912 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 285.205540] FAULT_INJECTION: forcing a failure. 22:41:07 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'lo\x00\x00\x00\x00\x00\x00\xed\xff\xff\xff\xff\xff\xff\xff'}) r1 = socket(0x8, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x32, &(0x7f0000000000)={@initdev, 0x9}, 0x20) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x5, 0x80) ioctl$VIDIOC_G_FBUF(r2, 0x8030560a, &(0x7f0000000200)={0x10, 0x1, &(0x7f0000000100)="8e24eb39bfe1542015f32dbf557b7d01e86188c75b2a140e96dafd7baa827d6f0b9540e9e55bde0d908376c9ce93548c16e610aa4da9dc66d122304a0205b3b3999575b7c774c9dc6729ba604f92d56ca845179bded158b302a59e67722083f7a022493a02a9afed20c2ea7980f39d40a4dab1b2a88eeea38c89f797aace7026e3cc37fae4", {0x1f, 0x3, 0x34324d59, 0x7, 0x80, 0x7, 0x6, 0x8000}}) [ 285.205540] name failslab, interval 1, probability 0, space 0, times 0 [ 285.252249] FAULT_INJECTION: forcing a failure. [ 285.252249] name failslab, interval 1, probability 0, space 0, times 0 [ 285.277874] CPU: 1 PID: 15712 Comm: syz-executor.0 Not tainted 4.14.140 #36 [ 285.285005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 285.294353] Call Trace: [ 285.296937] dump_stack+0x138/0x197 [ 285.300574] should_fail.cold+0x10f/0x159 [ 285.304717] should_failslab+0xdb/0x130 [ 285.308683] __kmalloc+0x2f0/0x7a0 [ 285.312216] ? kmem_cache_alloc_trace+0x623/0x790 [ 285.317055] ? alloc_pipe_info+0x15c/0x380 [ 285.321303] alloc_pipe_info+0x15c/0x380 [ 285.325360] splice_direct_to_actor+0x5d2/0x7b0 [ 285.330023] ? selinux_file_permission+0x85/0x480 [ 285.334863] ? generic_pipe_buf_nosteal+0x10/0x10 [ 285.339699] ? security_file_permission+0x89/0x1f0 [ 285.344615] ? do_splice_to+0x170/0x170 [ 285.348581] ? rw_verify_area+0xea/0x2b0 [ 285.352634] do_splice_direct+0x18d/0x230 [ 285.356789] ? splice_direct_to_actor+0x7b0/0x7b0 [ 285.361626] ? rw_verify_area+0xea/0x2b0 [ 285.365685] do_sendfile+0x4db/0xbd0 [ 285.369397] ? do_compat_pwritev64+0x140/0x140 [ 285.373976] ? fput+0xd4/0x150 [ 285.377166] SyS_sendfile64+0x102/0x110 [ 285.381132] ? SyS_sendfile+0x130/0x130 [ 285.385098] ? do_syscall_64+0x53/0x640 [ 285.389065] ? SyS_sendfile+0x130/0x130 [ 285.393043] do_syscall_64+0x1e8/0x640 [ 285.396927] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 285.401767] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 285.406946] RIP: 0033:0x459879 [ 285.410125] RSP: 002b:00007f8a5e6e9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 285.417832] RAX: ffffffffffffffda RBX: 00007f8a5e6e9c90 RCX: 0000000000459879 [ 285.425086] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 285.432448] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 285.439708] R10: 0000000080000001 R11: 0000000000000246 R12: 00007f8a5e6ea6d4 [ 285.446976] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 [ 285.457691] CPU: 0 PID: 15715 Comm: syz-executor.2 Not tainted 4.14.140 #36 [ 285.464814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 285.474162] Call Trace: [ 285.476754] dump_stack+0x138/0x197 [ 285.480400] should_fail.cold+0x10f/0x159 [ 285.484556] should_failslab+0xdb/0x130 [ 285.488537] kmem_cache_alloc_node+0x287/0x780 [ 285.493134] __alloc_skb+0x9c/0x500 [ 285.496759] ? skb_scrub_packet+0x4b0/0x4b0 [ 285.501084] ? netlink_has_listeners+0x20a/0x330 [ 285.505848] kobject_uevent_env+0x781/0xc23 [ 285.510181] kobject_uevent+0x20/0x26 [ 285.513983] kobject_put.cold+0x168/0x2f9 [ 285.518141] net_rx_queue_update_kobjects+0x2f7/0x400 [ 285.522910] FAULT_INJECTION: forcing a failure. [ 285.522910] name failslab, interval 1, probability 0, space 0, times 0 [ 285.523332] netdev_unregister_kobject+0x13b/0x1d0 [ 285.523348] rollback_registered_many+0x694/0xb60 [ 285.523362] ? ppp_init_net+0x380/0x380 [ 285.523369] ? netdev_info+0xf0/0xf0 [ 285.523382] ? mutex_trylock+0x1c0/0x1c0 [ 285.555976] rollback_registered+0xdd/0x180 [ 285.560298] ? rollback_registered_many+0xb60/0xb60 [ 285.565310] unregister_netdevice_queue+0x1ae/0x230 [ 285.570341] ppp_ioctl+0x1c92/0x23bc [ 285.574052] ? ppp_nl_newlink+0x240/0x240 [ 285.578188] ? __might_sleep+0x93/0xb0 [ 285.582061] ? __fget+0x210/0x370 [ 285.585507] ? ppp_nl_newlink+0x240/0x240 [ 285.589648] do_vfs_ioctl+0x7ae/0x1060 [ 285.593533] ? selinux_file_mprotect+0x5d0/0x5d0 [ 285.598284] ? lock_downgrade+0x6e0/0x6e0 [ 285.603039] ? ioctl_preallocate+0x1c0/0x1c0 [ 285.603052] ? __fget+0x237/0x370 [ 285.610908] ? security_file_ioctl+0x89/0xb0 [ 285.615314] SyS_ioctl+0x8f/0xc0 [ 285.618668] ? do_vfs_ioctl+0x1060/0x1060 [ 285.622811] do_syscall_64+0x1e8/0x640 [ 285.626683] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 285.631520] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 285.636696] RIP: 0033:0x459879 22:41:07 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x14, 0x80000) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000140)={'bridge_slave_0\x00', 0xb49c}) r2 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000040)='memory.events\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x5c8}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000380)={&(0x7f0000000180), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x114, r4, 0xd78ba7361fedbd3c, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x34}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x42c}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x1a}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xc04}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffffffff147}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffffffffffd}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2c3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xffff0}]}]}, 0x114}, 0x1, 0x0, 0x0, 0xe4b9e65f3092f356}, 0x4) write$cgroup_int(r2, &(0x7f00000003c0)=0xffffffff00000000, 0x12) 22:41:07 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x81, 0x0) getpeername$netrom(r1, &(0x7f0000000100)={{0x3, @rose}, [@netrom, @netrom, @null, @remote, @bcast, @default, @bcast]}, &(0x7f0000000180)=0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r0, 0x1f, 0x1, 0xffffffff, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3}, 0x20) r2 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000003c0)=0xffffffff00000000, 0x12) 22:41:07 executing program 0 (fault-call:4 fault-nth:2): r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) [ 285.639875] RSP: 002b:00007f2d2a098c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 285.647570] RAX: ffffffffffffffda RBX: 00007f2d2a098c90 RCX: 0000000000459879 [ 285.654823] RDX: 0000000000000000 RSI: 000000004004743c RDI: 0000000000000003 [ 285.662090] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 285.669362] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2d2a0996d4 [ 285.676620] R13: 00000000004c1ae1 R14: 00000000004d4e28 R15: 0000000000000005 [ 285.683894] CPU: 1 PID: 15731 Comm: syz-executor.0 Not tainted 4.14.140 #36 [ 285.690995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 285.700340] Call Trace: [ 285.702926] dump_stack+0x138/0x197 [ 285.706565] should_fail.cold+0x10f/0x159 [ 285.710737] should_failslab+0xdb/0x130 [ 285.714708] kmem_cache_alloc_node_trace+0x280/0x770 [ 285.719804] ? lock_downgrade+0x6e0/0x6e0 [ 285.724109] __kmalloc_node+0x3d/0x80 [ 285.727908] kvmalloc_node+0x4e/0xe0 [ 285.731621] iov_iter_get_pages_alloc+0x4a7/0xef0 [ 285.736458] ? iov_iter_revert+0x9c0/0x9c0 [ 285.740695] ? iov_iter_pipe+0x9f/0x2c0 [ 285.744664] default_file_splice_read+0x17c/0x7b0 [ 285.749491] ? __kmalloc+0x15d/0x7a0 [ 285.753191] ? alloc_pipe_info+0x15c/0x380 [ 285.757414] ? splice_direct_to_actor+0x5d2/0x7b0 [ 285.762246] ? do_splice_direct+0x18d/0x230 [ 285.766557] ? do_syscall_64+0x1e8/0x640 [ 285.770616] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 285.776008] ? page_cache_pipe_buf_steal+0x2f0/0x2f0 [ 285.781101] ? trace_hardirqs_on+0x10/0x10 [ 285.785414] ? trace_hardirqs_on+0x10/0x10 [ 285.790009] ? save_trace+0x290/0x290 [ 285.793793] ? save_trace+0x290/0x290 [ 285.797593] ? __fsnotify_update_child_dentry_flags.part.0+0x300/0x300 [ 285.804269] ? fsnotify+0x11e0/0x11e0 [ 285.808060] ? __inode_security_revalidate+0xd6/0x130 [ 285.813247] ? avc_policy_seqno+0x9/0x20 [ 285.817301] ? selinux_file_permission+0x85/0x480 [ 285.822132] ? security_file_permission+0x89/0x1f0 [ 285.827165] ? rw_verify_area+0xea/0x2b0 [ 285.831215] ? page_cache_pipe_buf_steal+0x2f0/0x2f0 [ 285.836307] do_splice_to+0x105/0x170 [ 285.840100] splice_direct_to_actor+0x222/0x7b0 [ 285.844763] ? generic_pipe_buf_nosteal+0x10/0x10 [ 285.849600] ? do_splice_to+0x170/0x170 [ 285.853585] ? rw_verify_area+0xea/0x2b0 [ 285.857643] do_splice_direct+0x18d/0x230 [ 285.861790] ? splice_direct_to_actor+0x7b0/0x7b0 [ 285.866720] ? rw_verify_area+0xea/0x2b0 [ 285.870785] do_sendfile+0x4db/0xbd0 [ 285.874497] ? do_compat_pwritev64+0x140/0x140 [ 285.879073] ? fput+0xd4/0x150 [ 285.882282] SyS_sendfile64+0x102/0x110 [ 285.886245] ? SyS_sendfile+0x130/0x130 [ 285.890214] ? do_syscall_64+0x53/0x640 [ 285.894202] ? SyS_sendfile+0x130/0x130 [ 285.898171] do_syscall_64+0x1e8/0x640 [ 285.902045] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 285.906887] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 285.912072] RIP: 0033:0x459879 [ 285.915254] RSP: 002b:00007f8a5e6e9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 285.922953] RAX: ffffffffffffffda RBX: 00007f8a5e6e9c90 RCX: 0000000000459879 [ 285.930215] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 285.937475] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 285.944744] R10: 0000000080000001 R11: 0000000000000246 R12: 00007f8a5e6ea6d4 [ 285.952183] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 [ 285.959464] CPU: 0 PID: 15717 Comm: syz-executor.1 Not tainted 4.14.140 #36 [ 285.966570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 285.975912] Call Trace: [ 285.978481] dump_stack+0x138/0x197 [ 285.982097] should_fail.cold+0x10f/0x159 [ 285.986229] should_failslab+0xdb/0x130 [ 285.990183] kmem_cache_alloc_trace+0x2e9/0x790 [ 285.994831] ? file_has_perm+0x163/0x2c0 [ 285.998899] alloc_pipe_info+0xb0/0x380 [ 286.002854] splice_direct_to_actor+0x5d2/0x7b0 [ 286.007510] ? selinux_file_permission+0x85/0x480 [ 286.012332] ? generic_pipe_buf_nosteal+0x10/0x10 [ 286.017155] ? security_file_permission+0x89/0x1f0 [ 286.022062] ? do_splice_to+0x170/0x170 [ 286.026029] ? rw_verify_area+0xea/0x2b0 [ 286.030072] do_splice_direct+0x18d/0x230 [ 286.034206] ? splice_direct_to_actor+0x7b0/0x7b0 [ 286.039030] ? rw_verify_area+0xea/0x2b0 [ 286.043089] do_sendfile+0x4db/0xbd0 [ 286.046785] ? do_compat_pwritev64+0x140/0x140 [ 286.051434] ? fput+0xd4/0x150 [ 286.054609] SyS_sendfile64+0x102/0x110 [ 286.058582] ? SyS_sendfile+0x130/0x130 [ 286.062534] ? do_syscall_64+0x53/0x640 [ 286.066497] ? SyS_sendfile+0x130/0x130 [ 286.070449] do_syscall_64+0x1e8/0x640 [ 286.074320] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 286.079160] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 286.084331] RIP: 0033:0x459879 22:41:08 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000040)="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") write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) 22:41:08 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x80c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x7, 0xe0000) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x1) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="2a0000000400000000000000000000000300000010000000060000000000000002000000800000000000f7a89299de97"], 0x2a) [ 286.087498] RSP: 002b:00007f7bd04dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 286.095184] RAX: ffffffffffffffda RBX: 00007f7bd04dcc90 RCX: 0000000000459879 [ 286.102432] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 286.109682] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 286.116929] R10: 0000000080000001 R11: 0000000000000246 R12: 00007f7bd04dd6d4 [ 286.124177] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000008 22:41:08 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x301000, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000100)={0x7, {{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0xc}, 0xe6}}}, 0x88) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r2 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:41:08 executing program 4: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f00000000c0)=0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x7, 0x80000) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x138, r3, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x99}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xae}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfaea}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe893}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf9dc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4b1f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000840}, 0x4008884) write$cgroup_int(r2, &(0x7f0000000080)=0x1, 0xffffffffffffff5c) 22:41:08 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f00000001c0)=0x600000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) open(&(0x7f0000000140)='./file0\x00', 0x400000, 0x180) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6cff7765726469723d2e3a66696c6530"]) r2 = semget(0x2, 0x4, 0x2) semctl$GETNCNT(r2, 0x1, 0xe, &(0x7f0000000280)=""/20) open$dir(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) 22:41:08 executing program 0 (fault-call:4 fault-nth:3): r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:08 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x7f9) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = syz_open_dev$sndseq(0x0, 0x0, 0x0) dup2(r2, r1) [ 286.269589] overlayfs: unrecognized mount option "lÿwerdir=.:file0" or missing value [ 286.278498] selinux_nlmsg_perm: 12 callbacks suppressed [ 286.278507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=15752 comm=syz-executor.1 [ 286.280482] FAULT_INJECTION: forcing a failure. [ 286.280482] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 286.306130] CPU: 1 PID: 15754 Comm: syz-executor.0 Not tainted 4.14.140 #36 [ 286.315824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 286.325165] Call Trace: [ 286.325186] dump_stack+0x138/0x197 [ 286.325205] should_fail.cold+0x10f/0x159 [ 286.325217] ? __might_sleep+0x93/0xb0 [ 286.325231] __alloc_pages_nodemask+0x1d6/0x7a0 [ 286.325243] ? __alloc_pages_slowpath+0x2930/0x2930 [ 286.331431] ? rcu_read_lock_sched_held+0x110/0x130 [ 286.331448] alloc_pages_current+0xec/0x1e0 [ 286.331464] push_pipe+0x3cb/0x780 [ 286.331480] iov_iter_get_pages_alloc+0x4fc/0xef0 [ 286.331496] ? iov_iter_revert+0x9c0/0x9c0 [ 286.331506] ? iov_iter_pipe+0x9f/0x2c0 [ 286.331519] default_file_splice_read+0x17c/0x7b0 [ 286.331528] ? __kmalloc+0x15d/0x7a0 [ 286.331540] ? alloc_pipe_info+0x15c/0x380 [ 286.344180] ? splice_direct_to_actor+0x5d2/0x7b0 [ 286.344189] ? do_splice_direct+0x18d/0x230 [ 286.344204] ? do_syscall_64+0x1e8/0x640 [ 286.344215] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 286.344227] ? page_cache_pipe_buf_steal+0x2f0/0x2f0 [ 286.354214] ? trace_hardirqs_on+0x10/0x10 22:41:08 executing program 0 (fault-call:4 fault-nth:4): r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:08 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x0, 0x3, [0x20000, 0x88, 0x6]}, &(0x7f00000001c0)=0xe) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={r1, 0x5}, 0x8) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) add_key(&(0x7f0000000180)='asymmetric\x00', 0x0, &(0x7f00000002c0)="df", 0x1, 0xfffffffffffffffc) write$cgroup_int(r3, &(0x7f00000003c0)=0xffffffff00000000, 0x12) [ 286.354223] ? trace_hardirqs_on+0x10/0x10 [ 286.354235] ? save_trace+0x290/0x290 [ 286.354244] ? save_trace+0x290/0x290 [ 286.354269] ? __fsnotify_update_child_dentry_flags.part.0+0x300/0x300 [ 286.354279] ? fsnotify+0x11e0/0x11e0 [ 286.354294] ? __inode_security_revalidate+0xd6/0x130 [ 286.354304] ? avc_policy_seqno+0x9/0x20 [ 286.354318] ? selinux_file_permission+0x85/0x480 [ 286.366965] ? security_file_permission+0x89/0x1f0 [ 286.366983] ? rw_verify_area+0xea/0x2b0 [ 286.366992] ? page_cache_pipe_buf_steal+0x2f0/0x2f0 [ 286.367003] do_splice_to+0x105/0x170 [ 286.367013] splice_direct_to_actor+0x222/0x7b0 [ 286.367028] ? generic_pipe_buf_nosteal+0x10/0x10 [ 286.367041] ? do_splice_to+0x170/0x170 [ 286.367051] ? rw_verify_area+0xea/0x2b0 [ 286.367062] do_splice_direct+0x18d/0x230 [ 286.367072] ? splice_direct_to_actor+0x7b0/0x7b0 [ 286.367087] ? rw_verify_area+0xea/0x2b0 [ 286.367099] do_sendfile+0x4db/0xbd0 [ 286.367117] ? do_compat_pwritev64+0x140/0x140 [ 286.367130] ? fput+0xd4/0x150 [ 286.367143] SyS_sendfile64+0x102/0x110 [ 286.367152] ? SyS_sendfile+0x130/0x130 [ 286.367164] ? do_syscall_64+0x53/0x640 [ 286.367174] ? SyS_sendfile+0x130/0x130 [ 286.367184] do_syscall_64+0x1e8/0x640 [ 286.367193] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 286.367210] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 286.367219] RIP: 0033:0x459879 [ 286.367224] RSP: 002b:00007f8a5e6e9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 286.367236] RAX: ffffffffffffffda RBX: 00007f8a5e6e9c90 RCX: 0000000000459879 [ 286.367241] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 286.367247] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 286.367265] R10: 0000000080000001 R11: 0000000000000246 R12: 00007f8a5e6ea6d4 [ 286.367271] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 [ 286.488741] FAULT_INJECTION: forcing a failure. [ 286.488741] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 286.509305] CPU: 0 PID: 15767 Comm: syz-executor.0 Not tainted 4.14.140 #36 [ 286.517802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 286.517807] Call Trace: [ 286.517827] dump_stack+0x138/0x197 [ 286.517845] should_fail.cold+0x10f/0x159 [ 286.517856] ? __might_sleep+0x93/0xb0 [ 286.633021] __alloc_pages_nodemask+0x1d6/0x7a0 [ 286.637677] ? __alloc_pages_slowpath+0x2930/0x2930 [ 286.642676] ? rcu_read_lock_sched_held+0x110/0x130 [ 286.647687] alloc_pages_current+0xec/0x1e0 [ 286.651992] push_pipe+0x3cb/0x780 [ 286.655515] iov_iter_get_pages_alloc+0x4fc/0xef0 [ 286.660341] ? iov_iter_revert+0x9c0/0x9c0 [ 286.664557] ? iov_iter_pipe+0x9f/0x2c0 [ 286.668517] default_file_splice_read+0x17c/0x7b0 [ 286.673335] ? __kmalloc+0x15d/0x7a0 [ 286.677057] ? alloc_pipe_info+0x15c/0x380 [ 286.681273] ? splice_direct_to_actor+0x5d2/0x7b0 [ 286.686096] ? do_splice_direct+0x18d/0x230 [ 286.690397] ? do_syscall_64+0x1e8/0x640 [ 286.694436] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 286.699788] ? page_cache_pipe_buf_steal+0x2f0/0x2f0 [ 286.704873] ? trace_hardirqs_on+0x10/0x10 [ 286.709097] ? trace_hardirqs_on+0x10/0x10 [ 286.713315] ? save_trace+0x290/0x290 [ 286.717100] ? save_trace+0x290/0x290 [ 286.723674] ? __fsnotify_update_child_dentry_flags.part.0+0x300/0x300 [ 286.730330] ? fsnotify+0x11e0/0x11e0 [ 286.734115] ? __inode_security_revalidate+0xd6/0x130 [ 286.739283] ? avc_policy_seqno+0x9/0x20 [ 286.743323] ? selinux_file_permission+0x85/0x480 [ 286.748151] ? security_file_permission+0x89/0x1f0 [ 286.753062] ? rw_verify_area+0xea/0x2b0 [ 286.757101] ? page_cache_pipe_buf_steal+0x2f0/0x2f0 [ 286.762205] do_splice_to+0x105/0x170 [ 286.766001] splice_direct_to_actor+0x222/0x7b0 [ 286.770657] ? generic_pipe_buf_nosteal+0x10/0x10 [ 286.775478] ? do_splice_to+0x170/0x170 [ 286.779431] ? rw_verify_area+0xea/0x2b0 [ 286.783473] do_splice_direct+0x18d/0x230 [ 286.787597] ? splice_direct_to_actor+0x7b0/0x7b0 [ 286.792430] ? rw_verify_area+0xea/0x2b0 [ 286.796471] do_sendfile+0x4db/0xbd0 [ 286.800169] ? do_compat_pwritev64+0x140/0x140 [ 286.804732] ? fput+0xd4/0x150 [ 286.807902] SyS_sendfile64+0x102/0x110 [ 286.811856] ? SyS_sendfile+0x130/0x130 [ 286.815837] ? do_syscall_64+0x53/0x640 [ 286.819789] ? SyS_sendfile+0x130/0x130 [ 286.823745] do_syscall_64+0x1e8/0x640 [ 286.827723] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 286.832641] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 286.837808] RIP: 0033:0x459879 [ 286.840975] RSP: 002b:00007f8a5e6e9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 286.848662] RAX: ffffffffffffffda RBX: 00007f8a5e6e9c90 RCX: 0000000000459879 [ 286.855997] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 286.863246] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 22:41:09 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) 22:41:09 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0, 0x2}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000200)={r3, 0x8, 0x5}, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0x9, &(0x7f0000000000)='fdinfo/3\x00'}, 0x30) r6 = fcntl$getown(r1, 0x9) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r5, &(0x7f0000000240)={0x80000000}) kcmp(r4, r6, 0x6, r1, r2) r7 = socket(0x10, 0x3, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r7, r8, 0x0, 0x80000001) 22:41:09 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) [ 286.870494] R10: 0000000080000001 R11: 0000000000000246 R12: 00007f8a5e6ea6d4 [ 286.877742] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 [ 286.899994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=15767 comm=syz-executor.0 [ 286.975558] PPPIOCDETACH file->f_count=2 22:41:09 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0xff) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=@v2={0x5, 0x3, 0xd, 0x100, 0xcb, "60c51fef4fb783b60d6739d5972cc38d30d69f5f9929a54ad06ee88491ea5f8893fa9271b6e1ad370ffaecbfacc2949db6acde274162bfa65377326015d57a6c3ec3c033a0fc425b1a275726bbc0bafce8292a0b23d80cc59896044e7136f7ff571fdfd7585b629a4911e00d729dff9f502701d85c34935b6c52555dd0da88e961aa0df19c9a85a3ebfc35328c7657c1c9c037f266259a5486cc2b9a186fa8c829747737fd5b3b8df2e1c1961fa5980dd6831d8901bd1c2288fb2944a69348e1b35ab6c8892b8f4c068ec6"}, 0xd5, 0x1) perf_event_open(&(0x7f0000000200)={0x3, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r1, 0x0) [ 286.997538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=15780 comm=syz-executor.1 22:41:09 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2000) ioctl$VFIO_SET_IOMMU(r2, 0x3b66, 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x57, &(0x7f0000000040)={0x77359400}, 0x10) 22:41:09 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000080)) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x200000, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000180)={0x7f, 0xffff, 0x401, 0x10000}, 0x8) 22:41:09 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000000500)=[{{&(0x7f0000000080)=@alg, 0xffffffffffffff13, &(0x7f0000000400)=[{&(0x7f0000000100)=""/122}, {&(0x7f0000000180)=""/199}, {&(0x7f0000000280)=""/177}, {&(0x7f0000000340)=""/160}, {&(0x7f0000000000)=""/28}], 0x0, &(0x7f0000000480)=""/110}, 0x2ee4}], 0x52, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_procfs(0x0, &(0x7f00000007c0)='cgroup\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 22:41:09 executing program 0 (fault-call:4 fault-nth:5): r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:09 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x400, 0x4) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x1a, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) 22:41:09 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x200000, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000280)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1}) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000950}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="05000000000000007409dde39d60305d8b694acb7481bd2cf3a4d1e13a23480ded17157dd0bb299a1ddbd09c3256150768387039091379e4a8e34859b3016d91525bdc", @ANYRES16=r3, @ANYBLOB="140029bd70000100000004000200040002002800060004000200080001002000000004000200080001000500000004000200080001000002000040000500080001007564700008000100696200000800010065746800240002000800020001000100080001000c0000000800030005000000080003000400000004010100100001007564703a73797a320000000038000400200001000a004e240000040000000000000000000000000000000001ff0300001400020002004e200000040000000000000000000c00010069623a6966623000100001007564703a73797a30000000002c00020008000100020000000800040009000000080001001300000008000300904d0000080003001e3600003c00020008000100180000000800020000000000080001001f00000008000400200000000800010018000000080002000600000008000300060000003400020008000300ff7f0000080003009800000008000200ffff000008000400050000000800040002000000080004002f000000"], 0x194}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) sched_rr_get_interval(r1, &(0x7f00000000c0)) 22:41:09 executing program 3: r0 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x100000000a, &(0x7f0000000000)=0x1, 0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'rose0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}}) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000040)={0x1d, r2}, 0x10) setsockopt(r1, 0x65, 0x1, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0xa, 0x4e22, 0x0, @remote}, 0x1c) 22:41:09 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000000)) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000140)=0xc) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r2, &(0x7f00000001c0)={r0, r1, 0xffffffff80000000}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r0, r0, 0x0, 0x80000001) [ 287.136084] FAULT_INJECTION: forcing a failure. [ 287.136084] name fail_page_alloc, interval 1, probability 0, space 0, times 0 22:41:09 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x5, 0x100) utimensat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{}, {0x77359400}}, 0x100) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r1, 0x0) [ 287.188338] CPU: 1 PID: 15800 Comm: syz-executor.0 Not tainted 4.14.140 #36 [ 287.195487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 287.195494] Call Trace: [ 287.195512] dump_stack+0x138/0x197 [ 287.195531] should_fail.cold+0x10f/0x159 [ 287.215446] ? __might_sleep+0x93/0xb0 [ 287.219342] __alloc_pages_nodemask+0x1d6/0x7a0 [ 287.224015] ? __alloc_pages_slowpath+0x2930/0x2930 [ 287.229055] ? rcu_read_lock_sched_held+0x110/0x130 [ 287.234079] alloc_pages_current+0xec/0x1e0 [ 287.238406] push_pipe+0x3cb/0x780 [ 287.241979] iov_iter_get_pages_alloc+0x4fc/0xef0 [ 287.241995] ? iov_iter_revert+0x9c0/0x9c0 [ 287.242006] ? iov_iter_pipe+0x9f/0x2c0 [ 287.242020] default_file_splice_read+0x17c/0x7b0 [ 287.242031] ? __kmalloc+0x15d/0x7a0 [ 287.242042] ? alloc_pipe_info+0x15c/0x380 [ 287.242052] ? splice_direct_to_actor+0x5d2/0x7b0 [ 287.255054] ? do_splice_direct+0x18d/0x230 [ 287.255070] ? do_syscall_64+0x1e8/0x640 [ 287.255081] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 287.255093] ? page_cache_pipe_buf_steal+0x2f0/0x2f0 [ 287.263611] ? trace_hardirqs_on+0x10/0x10 [ 287.263620] ? trace_hardirqs_on+0x10/0x10 [ 287.263631] ? save_trace+0x290/0x290 [ 287.263639] ? save_trace+0x290/0x290 [ 287.263663] ? __fsnotify_update_child_dentry_flags.part.0+0x300/0x300 [ 287.263672] ? fsnotify+0x11e0/0x11e0 [ 287.263687] ? __inode_security_revalidate+0xd6/0x130 [ 287.263697] ? avc_policy_seqno+0x9/0x20 [ 287.281088] ? selinux_file_permission+0x85/0x480 [ 287.281106] ? security_file_permission+0x89/0x1f0 [ 287.281121] ? rw_verify_area+0xea/0x2b0 [ 287.281130] ? page_cache_pipe_buf_steal+0x2f0/0x2f0 [ 287.281140] do_splice_to+0x105/0x170 [ 287.281153] splice_direct_to_actor+0x222/0x7b0 [ 287.281168] ? generic_pipe_buf_nosteal+0x10/0x10 [ 287.281180] ? do_splice_to+0x170/0x170 [ 287.281190] ? rw_verify_area+0xea/0x2b0 [ 287.300082] do_splice_direct+0x18d/0x230 [ 287.300095] ? splice_direct_to_actor+0x7b0/0x7b0 [ 287.300113] ? rw_verify_area+0xea/0x2b0 [ 287.300125] do_sendfile+0x4db/0xbd0 [ 287.300143] ? do_compat_pwritev64+0x140/0x140 [ 287.300156] ? fput+0xd4/0x150 [ 287.300167] SyS_sendfile64+0x102/0x110 [ 287.396006] ? SyS_sendfile+0x130/0x130 [ 287.399968] ? do_syscall_64+0x53/0x640 [ 287.403962] ? SyS_sendfile+0x130/0x130 [ 287.407928] do_syscall_64+0x1e8/0x640 [ 287.411797] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 287.416628] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 287.421808] RIP: 0033:0x459879 [ 287.424981] RSP: 002b:00007f8a5e6e9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 22:41:09 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='not\x8afy_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) [ 287.432678] RAX: ffffffffffffffda RBX: 00007f8a5e6e9c90 RCX: 0000000000459879 [ 287.439932] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 287.447183] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 287.454433] R10: 0000000080000001 R11: 0000000000000246 R12: 00007f8a5e6ea6d4 [ 287.461690] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 22:41:09 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) modify_ldt$read(0x0, &(0x7f0000000300)=""/159, 0x9f) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) recvfrom$unix(r1, &(0x7f00000001c0)=""/170, 0xaa, 0x2, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) 22:41:09 executing program 0 (fault-call:4 fault-nth:6): r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) [ 287.477927] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=15800 comm=syz-executor.0 [ 287.557738] PPPIOCDETACH file->f_count=2 [ 287.559467] FAULT_INJECTION: forcing a failure. [ 287.559467] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 287.574088] CPU: 1 PID: 15832 Comm: syz-executor.0 Not tainted 4.14.140 #36 [ 287.581222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 287.581228] Call Trace: [ 287.581249] dump_stack+0x138/0x197 [ 287.581270] should_fail.cold+0x10f/0x159 [ 287.581281] ? __might_sleep+0x93/0xb0 [ 287.581292] __alloc_pages_nodemask+0x1d6/0x7a0 [ 287.581305] ? __alloc_pages_slowpath+0x2930/0x2930 [ 287.581322] ? rcu_read_lock_sched_held+0x110/0x130 [ 287.581336] alloc_pages_current+0xec/0x1e0 [ 287.581350] push_pipe+0x3cb/0x780 [ 287.581365] iov_iter_get_pages_alloc+0x4fc/0xef0 [ 287.581380] ? iov_iter_revert+0x9c0/0x9c0 [ 287.581389] ? iov_iter_pipe+0x9f/0x2c0 [ 287.581401] default_file_splice_read+0x17c/0x7b0 [ 287.581411] ? __kmalloc+0x15d/0x7a0 [ 287.609694] ? alloc_pipe_info+0x15c/0x380 [ 287.609703] ? splice_direct_to_actor+0x5d2/0x7b0 [ 287.609711] ? do_splice_direct+0x18d/0x230 [ 287.619709] ? do_syscall_64+0x1e8/0x640 [ 287.619722] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 287.619736] ? page_cache_pipe_buf_steal+0x2f0/0x2f0 [ 287.627554] ? trace_hardirqs_on+0x10/0x10 [ 287.627563] ? trace_hardirqs_on+0x10/0x10 [ 287.627572] ? save_trace+0x290/0x290 [ 287.627581] ? save_trace+0x290/0x290 [ 287.640609] ? __fsnotify_update_child_dentry_flags.part.0+0x300/0x300 [ 287.640618] ? fsnotify+0x11e0/0x11e0 [ 287.640633] ? __inode_security_revalidate+0xd6/0x130 [ 287.640641] ? avc_policy_seqno+0x9/0x20 [ 287.640652] ? selinux_file_permission+0x85/0x480 [ 287.640670] ? security_file_permission+0x89/0x1f0 [ 287.649183] ? rw_verify_area+0xea/0x2b0 [ 287.649191] ? page_cache_pipe_buf_steal+0x2f0/0x2f0 [ 287.649202] do_splice_to+0x105/0x170 [ 287.658239] splice_direct_to_actor+0x222/0x7b0 [ 287.658255] ? generic_pipe_buf_nosteal+0x10/0x10 [ 287.658267] ? do_splice_to+0x170/0x170 [ 287.666611] ? rw_verify_area+0xea/0x2b0 [ 287.666623] do_splice_direct+0x18d/0x230 [ 287.666634] ? splice_direct_to_actor+0x7b0/0x7b0 [ 287.677052] ? rw_verify_area+0xea/0x2b0 [ 287.677064] do_sendfile+0x4db/0xbd0 [ 287.677080] ? do_compat_pwritev64+0x140/0x140 [ 287.685504] ? fput+0xd4/0x150 [ 287.685517] SyS_sendfile64+0x102/0x110 [ 287.685527] ? SyS_sendfile+0x130/0x130 [ 287.693080] ? do_syscall_64+0x53/0x640 [ 287.693091] ? SyS_sendfile+0x130/0x130 [ 287.693101] do_syscall_64+0x1e8/0x640 [ 287.693110] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 287.693127] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 287.693135] RIP: 0033:0x459879 [ 287.693140] RSP: 002b:00007f8a5e6e9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 287.693150] RAX: ffffffffffffffda RBX: 00007f8a5e6e9c90 RCX: 0000000000459879 [ 287.693157] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 287.708749] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 287.708755] R10: 0000000080000001 R11: 0000000000000246 R12: 00007f8a5e6ea6d4 [ 287.708761] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 [ 287.746826] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=15832 comm=syz-executor.0 [ 287.754469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=15834 comm=syz-executor.1 22:41:10 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="b9cba1f3b50b36a656903bf99174309717b881bd96829b0a6dd16637553b8b7216b68be215ceb5271df59a305891e02184fa9689b8df6d82343d424bad71339a7b7ce5a0168ba9d37a77a4b2cf64f0d76b2e2f7322ef3bd162c0a1b7551e6b3749042ad8e1ed", 0x66}, {&(0x7f0000000100)="28a880acbbfabd77172d695da65776ee9bb89d1c08647276a322aa2c9f5cb5007349d37e4e5a41b7549a0a7dfa7c2c14b3d2e11792fa9857f6a2dc13f3e574e7f75367e023d31bc5496226a565bc94af83ded43e20e249ccf441dfa0d469c1b872b4", 0x62}], 0x2) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) 22:41:10 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000001c0)={0x980000, 0x791b, 0x6, [], &(0x7f0000000180)={0x990a60, 0x5, [], @string=&(0x7f0000000140)=0x2}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000380)={0x0, 0x9}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000400)={r1, 0x8001, 0x800, 0x1}, 0x10) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = creat(0x0, 0x6857b21ff1155d90) r3 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="c787800017000007002e2f6669abf24a6c6531629bdf536be213d68f91cd23bd5a5e614485e767da7de738e33c8a31de"], 0x30) sendfile(r4, r4, &(0x7f0000000240), 0x7fff) ioctl$KVM_ASSIGN_SET_INTX_MASK(r2, 0x4040aea4, &(0x7f0000000040)={0x400, 0x3ff, 0x21, 0x1, 0x2}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000280)={0x0, 0x50, "4422c1abee088b626ab9c41b7f6ab0f58ebba1cf2cab36a89363c0cd76a671776109553caa4d82642bbd2f1c1e0557f77e0bb4365984323670120cd7c7467df90729b49fe8b087eefd6e87bfa49f3116"}, &(0x7f0000000200)=0x58) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000340)={r5, 0x3}, 0x8) 22:41:10 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x140) 22:41:10 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x2bbe, 0x101) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x1f, 0x7, 0x8001, 0x6, 0x5}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0), 0x80000) 22:41:10 executing program 0 (fault-call:4 fault-nth:7): r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:10 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0xcc81, 0x0) write$P9_RWALK(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="16151ff05676f33dc0fdd66d4c00006f02000d00c00200f9310600000000e2000100000000000000486833c227c0ec431d3b70fb83215c0c2791608fc10c27"], 0x16) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) membarrier(0x40, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000003c0)=0xffffffff00000000, 0x12) [ 287.966578] FAULT_INJECTION: forcing a failure. [ 287.966578] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 287.992731] device bridge_slave_1 left promiscuous mode [ 287.998244] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.005482] CPU: 0 PID: 15845 Comm: syz-executor.0 Not tainted 4.14.140 #36 [ 288.012596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 288.021938] Call Trace: [ 288.024537] dump_stack+0x138/0x197 [ 288.028154] should_fail.cold+0x10f/0x159 [ 288.032292] ? __might_sleep+0x93/0xb0 [ 288.036164] __alloc_pages_nodemask+0x1d6/0x7a0 [ 288.040816] ? __alloc_pages_slowpath+0x2930/0x2930 [ 288.045816] ? rcu_read_lock_sched_held+0x110/0x130 [ 288.050828] alloc_pages_current+0xec/0x1e0 [ 288.055132] push_pipe+0x3cb/0x780 [ 288.058658] iov_iter_get_pages_alloc+0x4fc/0xef0 [ 288.063488] ? iov_iter_revert+0x9c0/0x9c0 [ 288.067702] ? iov_iter_pipe+0x9f/0x2c0 [ 288.071661] default_file_splice_read+0x17c/0x7b0 [ 288.076484] ? __kmalloc+0x15d/0x7a0 [ 288.080180] ? alloc_pipe_info+0x15c/0x380 [ 288.084395] ? splice_direct_to_actor+0x5d2/0x7b0 [ 288.089217] ? do_splice_direct+0x18d/0x230 [ 288.093623] ? do_syscall_64+0x1e8/0x640 [ 288.097666] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 288.103012] ? page_cache_pipe_buf_steal+0x2f0/0x2f0 [ 288.108101] ? trace_hardirqs_on+0x10/0x10 [ 288.112316] ? trace_hardirqs_on+0x10/0x10 [ 288.116529] ? save_trace+0x290/0x290 [ 288.120316] ? save_trace+0x290/0x290 [ 288.124103] ? __fsnotify_update_child_dentry_flags.part.0+0x300/0x300 [ 288.130746] ? fsnotify+0x11e0/0x11e0 [ 288.134534] ? __inode_security_revalidate+0xd6/0x130 [ 288.139723] ? avc_policy_seqno+0x9/0x20 [ 288.143763] ? selinux_file_permission+0x85/0x480 [ 288.148583] ? security_file_permission+0x89/0x1f0 [ 288.153498] ? rw_verify_area+0xea/0x2b0 [ 288.157539] ? page_cache_pipe_buf_steal+0x2f0/0x2f0 [ 288.162622] do_splice_to+0x105/0x170 [ 288.166413] splice_direct_to_actor+0x222/0x7b0 [ 288.171062] ? generic_pipe_buf_nosteal+0x10/0x10 [ 288.175997] ? do_splice_to+0x170/0x170 [ 288.179951] ? rw_verify_area+0xea/0x2b0 [ 288.183996] do_splice_direct+0x18d/0x230 [ 288.188123] ? splice_direct_to_actor+0x7b0/0x7b0 [ 288.192948] ? rw_verify_area+0xea/0x2b0 [ 288.196994] do_sendfile+0x4db/0xbd0 [ 288.200692] ? do_compat_pwritev64+0x140/0x140 [ 288.205254] ? fput+0xd4/0x150 [ 288.208425] SyS_sendfile64+0x102/0x110 [ 288.212378] ? SyS_sendfile+0x130/0x130 [ 288.216347] ? do_syscall_64+0x53/0x640 [ 288.220302] ? SyS_sendfile+0x130/0x130 [ 288.224284] do_syscall_64+0x1e8/0x640 [ 288.228158] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 288.232983] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 288.238155] RIP: 0033:0x459879 [ 288.241323] RSP: 002b:00007f8a5e6e9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 288.249011] RAX: ffffffffffffffda RBX: 00007f8a5e6e9c90 RCX: 0000000000459879 [ 288.256291] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 288.263543] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 288.270882] R10: 0000000080000001 R11: 0000000000000246 R12: 00007f8a5e6ea6d4 [ 288.278133] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 [ 288.306201] device bridge_slave_0 left promiscuous mode 22:41:10 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='.\t\xf2\x9bMmU\x00\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) 22:41:10 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0xffffffffffffff25, 0x8000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f00000000c0)={0xfffffffffffffc00, 0x3, {0x3, 0x1, 0x0, 0x1, 0xe01}}) [ 288.317575] bridge0: port 1(bridge_slave_0) entered disabled state 22:41:10 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/mls\x00', 0x0, 0x0) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000100)) syz_open_dev$vivid(&(0x7f0000000240)='/dev/video#\x00', 0x1, 0x2) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f00000004c0)) ioctl$TCSETXF(r1, 0x5434, &(0x7f0000000200)={0xfffffffffffffeff, 0x7fffffff, [0x4, 0x401, 0x2, 0x629, 0x401], 0x80}) syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x0, 0x2) ioctl$TCGETS(r1, 0x5401, &(0x7f00000000c0)) ioctl$FIBMAP(r0, 0x1, &(0x7f00000001c0)=0x3) r2 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xffffffff00000000, 0xe) 22:41:10 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x10000, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000100)) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0xed) [ 288.478519] device hsr_slave_1 left promiscuous mode [ 288.507897] device hsr_slave_0 left promiscuous mode [ 288.544401] team0 (unregistering): Port device team_slave_1 removed [ 288.573800] team0 (unregistering): Port device team_slave_0 removed [ 288.588697] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 288.598401] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=15845 comm=syz-executor.0 [ 288.615882] bond0 (unregistering): Releasing backup interface bond_slave_0 22:41:11 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) 22:41:11 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x7, 0x400000) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000080)={0x80000000, 0x7ff, 0x85e1, 0x4, 0x5, 0xfffffffffffffffb}) r2 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000003c0)=0xffffffff00000000, 0x12) [ 288.672482] bond0 (unregistering): Released all slaves [ 288.738636] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=15882 comm=syz-executor.1 22:41:11 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x40000, 0x0) accept4$nfc_llcp(r1, &(0x7f0000000100), &(0x7f0000000180)=0x60, 0x80800) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r2 = epoll_create(0x400) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x30) ioctl$IOC_PR_PREEMPT_ABORT(r3, 0x401870cc, &(0x7f0000000040)={0x0, 0x3ff, 0x3, 0x55}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:41:11 executing program 5: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffffffff) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000300)={0x7ff, 0x8, 0xb6, 0xffffffff, 0x4, 0x6, 0xfb, 0x5, 0x70, 0x80000000}) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r1, 0x0) r2 = request_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='\x00', 0x0) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="5de61a07db94151097dd63440a073ef703edea9242a03c43f5d1e67466296ea372f89d66fb21e11b318fb59c4045b22c2e37506ac8b71ea0ee06e06e79224a671f7101101b5b30279aeb7f4d81756f82983431b9de3eb91faa48e787db1e26f562d139ae50c2f6e2fb69d084ff76a7ff8a2e68e966029ca0510755d72794cc774969dad61877e435924a9851220a73b4070b811a2c", 0x95, r2) 22:41:11 executing program 0 (fault-call:4 fault-nth:8): r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:11 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x202000, 0x0) connect$vsock_dgram(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) sendto$unix(r2, &(0x7f0000000500)="9494b39878ee2f4ab15b2af714a8ff61ef1981d5bdb1db39cddf2625d7621c23d888f65a404262b7178951c3c56287ac5a4cc54e1fd583c6a776ede1747f9da2a9135840f50697dcdb97ca080aad64bde2341b08802991dd48cbaed02c8ecbb49de135f682a863b45c453e4e92f9ce359dc21870f4b73a102229fb7ece8f19da056c6e4f5990a2890f1220b3cdfe30b4d3af24539d796fabde490e", 0x9b, 0x6da95532d07e265a, 0x0, 0x0) connect$vsock_dgram(r1, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r3 = syz_open_dev$vcsn(&(0x7f0000000600)='/dev/vcs#\x00', 0x10000, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) ioctl$VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f00000004c0)={0x20, 0x1, 0x8, 0x5, 0xff}) getpeername$inet6(r2, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000005c0)=0x1c) sendmsg$nl_netfilter(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0400150010001000a56b013f15bcacbd335d00001dbd6a62c265c48cd580222b08e2b78dd54c3a0650ed0ae9e8dcc34fbc8fa05a56c88f9f52144ee259f0c12f772cbfd0d83e3d78b47153e81f4ac8f18fde551bdc505d83aba8b74db17856d16c0c5d4cf751ae264577f40a850ead8d828c22d53e38722db6b717308eb4f69994dbe45e00407f6bab5b07858688c02d02ab73efaf92b76394a7a2e8071d74598f5dea518b82df23c8f24621886095647500000008001900000000001400240000000000000000000000ffff7f000001"], 0x1e4}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 22:41:11 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}}, 0x496, 0x3, 0x1700000002, 0x100, 0xffffffffffffff38}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={r1, 0x7, 0x2, [0x3, 0x1]}, &(0x7f0000000200)=0xc) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x200000, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r3, 0xc004aea7, &(0x7f0000000080)=0x1) r4 = openat$cgroup_int(r2, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000003c0)=0xffffffff00000000, 0x12) 22:41:11 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$x25(r0, &(0x7f0000000080)={0x9, @null=' \x00'}, 0x12) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000140)={0x73, @multicast2, 0x4e23, 0x1, 'wlc\x00', 0xd2645664c3093b78, 0x4, 0x56}, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f00000001c0)=0x9d2, 0x8) r2 = socket(0x10, 0x3, 0x0) r3 = accept(r0, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @dev}, &(0x7f0000000280)=0x80) ioctl$SIOCGETLINKNAME(r3, 0x89e0, &(0x7f00000002c0)={0x3, 0x3}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r4, 0x0, 0x80000001) ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, &(0x7f0000000000)={0x7}) 22:41:11 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x202000, 0x0) connect$vsock_dgram(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) sendto$unix(r2, &(0x7f0000000500)="9494b39878ee2f4ab15b2af714a8ff61ef1981d5bdb1db39cddf2625d7621c23d888f65a404262b7178951c3c56287ac5a4cc54e1fd583c6a776ede1747f9da2a9135840f50697dcdb97ca080aad64bde2341b08802991dd48cbaed02c8ecbb49de135f682a863b45c453e4e92f9ce359dc21870f4b73a102229fb7ece8f19da056c6e4f5990a2890f1220b3cdfe30b4d3af24539d796fabde490e", 0x9b, 0x6da95532d07e265a, 0x0, 0x0) connect$vsock_dgram(r1, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r3 = syz_open_dev$vcsn(&(0x7f0000000600)='/dev/vcs#\x00', 0x10000, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) ioctl$VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f00000004c0)={0x20, 0x1, 0x8, 0x5, 0xff}) getpeername$inet6(r2, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000005c0)=0x1c) sendmsg$nl_netfilter(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0400150010001000a56b013f15bcacbd335d00001dbd6a62c265c48cd580222b08e2b78dd54c3a0650ed0ae9e8dcc34fbc8fa05a56c88f9f52144ee259f0c12f772cbfd0d83e3d78b47153e81f4ac8f18fde551bdc505d83aba8b74db17856d16c0c5d4cf751ae264577f40a850ead8d828c22d53e38722db6b717308eb4f69994dbe45e00407f6bab5b07858688c02d02ab73efaf92b76394a7a2e8071d74598f5dea518b82df23c8f24621886095647500000008001900000000001400240000000000000000000000ffff7f000001"], 0x1e4}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 22:41:11 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x8400, 0x0) openat$cgroup_type(r2, &(0x7f0000000240)='cgroup.type\x00', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@dev, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000180)=0xe8) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f00000001c0)={@mcast2, @local, @dev={0xfe, 0x80, [], 0x28}, 0x1, 0xfff, 0x2, 0x500, 0x0, 0x4000000, r3}) [ 288.883384] FAULT_INJECTION: forcing a failure. [ 288.883384] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 288.898652] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=15896 comm=syz-executor.1 [ 288.937734] CPU: 0 PID: 15893 Comm: syz-executor.0 Not tainted 4.14.140 #36 [ 288.944870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 288.954223] Call Trace: [ 288.957172] dump_stack+0x138/0x197 [ 288.960823] should_fail.cold+0x10f/0x159 [ 288.964974] ? __might_sleep+0x93/0xb0 [ 288.968891] __alloc_pages_nodemask+0x1d6/0x7a0 [ 288.973563] ? __alloc_pages_slowpath+0x2930/0x2930 [ 288.978577] ? rcu_read_lock_sched_held+0x110/0x130 [ 288.983594] alloc_pages_current+0xec/0x1e0 [ 288.987921] push_pipe+0x3cb/0x780 [ 288.991462] iov_iter_get_pages_alloc+0x4fc/0xef0 [ 288.996300] ? iov_iter_revert+0x9c0/0x9c0 [ 289.000569] ? iov_iter_pipe+0x9f/0x2c0 [ 289.004537] default_file_splice_read+0x17c/0x7b0 [ 289.009368] ? __kmalloc+0x15d/0x7a0 [ 289.013074] ? alloc_pipe_info+0x15c/0x380 [ 289.017301] ? splice_direct_to_actor+0x5d2/0x7b0 [ 289.022129] ? do_splice_direct+0x18d/0x230 [ 289.026447] ? do_syscall_64+0x1e8/0x640 [ 289.030519] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 289.035878] ? page_cache_pipe_buf_steal+0x2f0/0x2f0 [ 289.040994] ? trace_hardirqs_on+0x10/0x10 [ 289.045220] ? trace_hardirqs_on+0x10/0x10 [ 289.049451] ? save_trace+0x290/0x290 [ 289.053239] ? save_trace+0x290/0x290 [ 289.057050] ? __fsnotify_update_child_dentry_flags.part.0+0x300/0x300 [ 289.063703] ? fsnotify+0x11e0/0x11e0 [ 289.067492] ? __inode_security_revalidate+0xd6/0x130 [ 289.072669] ? avc_policy_seqno+0x9/0x20 [ 289.076735] ? selinux_file_permission+0x85/0x480 [ 289.081561] ? security_file_permission+0x89/0x1f0 [ 289.086473] ? rw_verify_area+0xea/0x2b0 [ 289.090547] ? page_cache_pipe_buf_steal+0x2f0/0x2f0 [ 289.095673] do_splice_to+0x105/0x170 [ 289.099473] splice_direct_to_actor+0x222/0x7b0 [ 289.104128] ? generic_pipe_buf_nosteal+0x10/0x10 [ 289.108951] ? do_splice_to+0x170/0x170 [ 289.112956] ? rw_verify_area+0xea/0x2b0 [ 289.117001] do_splice_direct+0x18d/0x230 [ 289.121144] ? splice_direct_to_actor+0x7b0/0x7b0 [ 289.125968] ? rw_verify_area+0xea/0x2b0 [ 289.130019] do_sendfile+0x4db/0xbd0 [ 289.133721] ? do_compat_pwritev64+0x140/0x140 [ 289.138285] ? fput+0xd4/0x150 [ 289.141458] SyS_sendfile64+0x102/0x110 [ 289.145411] ? SyS_sendfile+0x130/0x130 [ 289.149365] ? do_syscall_64+0x53/0x640 [ 289.153323] ? SyS_sendfile+0x130/0x130 [ 289.157277] do_syscall_64+0x1e8/0x640 [ 289.161159] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 289.165983] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 289.171148] RIP: 0033:0x459879 [ 289.174315] RSP: 002b:00007f8a5e6e9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 289.182013] RAX: ffffffffffffffda RBX: 00007f8a5e6e9c90 RCX: 0000000000459879 22:41:11 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x202000, 0x0) connect$vsock_dgram(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) sendto$unix(r2, &(0x7f0000000500)="9494b39878ee2f4ab15b2af714a8ff61ef1981d5bdb1db39cddf2625d7621c23d888f65a404262b7178951c3c56287ac5a4cc54e1fd583c6a776ede1747f9da2a9135840f50697dcdb97ca080aad64bde2341b08802991dd48cbaed02c8ecbb49de135f682a863b45c453e4e92f9ce359dc21870f4b73a102229fb7ece8f19da056c6e4f5990a2890f1220b3cdfe30b4d3af24539d796fabde490e", 0x9b, 0x6da95532d07e265a, 0x0, 0x0) connect$vsock_dgram(r1, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r3 = syz_open_dev$vcsn(&(0x7f0000000600)='/dev/vcs#\x00', 0x10000, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) ioctl$VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f00000004c0)={0x20, 0x1, 0x8, 0x5, 0xff}) getpeername$inet6(r2, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000005c0)=0x1c) sendmsg$nl_netfilter(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0400150010001000a56b013f15bcacbd335d00001dbd6a62c265c48cd580222b08e2b78dd54c3a0650ed0ae9e8dcc34fbc8fa05a56c88f9f52144ee259f0c12f772cbfd0d83e3d78b47153e81f4ac8f18fde551bdc505d83aba8b74db17856d16c0c5d4cf751ae264577f40a850ead8d828c22d53e38722db6b717308eb4f69994dbe45e00407f6bab5b07858688c02d02ab73efaf92b76394a7a2e8071d74598f5dea518b82df23c8f24621886095647500000008001900000000001400240000000000000000000000ffff7f000001"], 0x1e4}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) [ 289.189263] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 289.196512] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 289.203757] R10: 0000000080000001 R11: 0000000000000246 R12: 00007f8a5e6ea6d4 [ 289.211006] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 22:41:11 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x202000, 0x0) connect$vsock_dgram(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) sendto$unix(r2, &(0x7f0000000500)="9494b39878ee2f4ab15b2af714a8ff61ef1981d5bdb1db39cddf2625d7621c23d888f65a404262b7178951c3c56287ac5a4cc54e1fd583c6a776ede1747f9da2a9135840f50697dcdb97ca080aad64bde2341b08802991dd48cbaed02c8ecbb49de135f682a863b45c453e4e92f9ce359dc21870f4b73a102229fb7ece8f19da056c6e4f5990a2890f1220b3cdfe30b4d3af24539d796fabde490e", 0x9b, 0x6da95532d07e265a, 0x0, 0x0) connect$vsock_dgram(r1, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r3 = syz_open_dev$vcsn(&(0x7f0000000600)='/dev/vcs#\x00', 0x10000, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) ioctl$VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f00000004c0)={0x20, 0x1, 0x8, 0x5, 0xff}) getpeername$inet6(r2, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000005c0)=0x1c) sendmsg$nl_netfilter(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="e4010000070400002cbd7000fddbdf2505000007b4014c0098004600bc25fc0a87a16cb6b5be6a48c0ccc96ad5df8c83b2aebd91ced8782c5748e192d7975dd872442bcf75dd6320317ebc4b320eb00ab3582e4e98b0cb06d6f8f66450ebba3d9f0a816d3261e9f2abbbd9c5ec03a3fd891d038752f2b1228b410440f7c1bff6d687a4c0d7b4b89391e1af9f057da87bb871e33409beaa8109560eb06020b18200c03f10a9adedee34a7a365de000000d42045522484f1410bf8bff4768c43d5b354d8f506cf221a1728cd410800b1209ceb6d1b38afc4251f6bf92001f3a82908d6bcb102efd435374019c4cf72922b62c3f3bb1734c313105bd38bee0003a285b45c9dcc617b89b1cf9ece08008d00", @ANYRES32=r4, @ANYBLOB="0400150010001000a56b013f15bcacbd335d00001dbd6a62c265c48cd580222b08e2b78dd54c3a0650ed0ae9e8dcc34fbc8fa05a56c88f9f52144ee259f0c12f772cbfd0d83e3d78b47153e81f4ac8f18fde551bdc505d83aba8b74db17856d16c0c5d4cf751ae264577f40a850ead8d828c22d53e38722db6b717308eb4f69994dbe45e00407f6bab5b07858688c02d02ab73efaf92b76394a7a2e8071d74598f5dea518b82df23c8f24621886095647500000008001900000000001400240000000000000000000000ffff7f000001"], 0x1e4}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) [ 289.235294] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=15893 comm=syz-executor.0 22:41:11 executing program 0 (fault-call:4 fault-nth:9): r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:11 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) [ 289.280356] PPPIOCDETACH file->f_count=2 22:41:11 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000200)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) [ 289.344843] FAULT_INJECTION: forcing a failure. [ 289.344843] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 289.399221] CPU: 0 PID: 15928 Comm: syz-executor.0 Not tainted 4.14.140 #36 [ 289.406352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 289.415785] Call Trace: [ 289.418455] dump_stack+0x138/0x197 [ 289.422083] should_fail.cold+0x10f/0x159 [ 289.426240] ? __might_sleep+0x93/0xb0 [ 289.430124] __alloc_pages_nodemask+0x1d6/0x7a0 [ 289.434802] ? __alloc_pages_slowpath+0x2930/0x2930 [ 289.439833] ? rcu_read_lock_sched_held+0x110/0x130 [ 289.444842] alloc_pages_current+0xec/0x1e0 [ 289.449158] push_pipe+0x3cb/0x780 [ 289.452697] iov_iter_get_pages_alloc+0x4fc/0xef0 [ 289.457537] ? iov_iter_revert+0x9c0/0x9c0 [ 289.461776] ? iov_iter_pipe+0x9f/0x2c0 [ 289.465761] default_file_splice_read+0x17c/0x7b0 [ 289.470610] ? __kmalloc+0x15d/0x7a0 [ 289.474312] ? alloc_pipe_info+0x15c/0x380 [ 289.478532] ? splice_direct_to_actor+0x5d2/0x7b0 [ 289.483360] ? do_splice_direct+0x18d/0x230 [ 289.487667] ? do_syscall_64+0x1e8/0x640 [ 289.491712] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 289.497053] ? page_cache_pipe_buf_steal+0x2f0/0x2f0 [ 289.502135] ? trace_hardirqs_on+0x10/0x10 [ 289.506346] ? trace_hardirqs_on+0x10/0x10 [ 289.510563] ? save_trace+0x290/0x290 [ 289.514337] ? save_trace+0x290/0x290 [ 289.518123] ? __fsnotify_update_child_dentry_flags.part.0+0x300/0x300 [ 289.524767] ? fsnotify+0x11e0/0x11e0 [ 289.528546] ? __inode_security_revalidate+0xd6/0x130 [ 289.533717] ? avc_policy_seqno+0x9/0x20 [ 289.537784] ? selinux_file_permission+0x85/0x480 [ 289.542610] ? security_file_permission+0x89/0x1f0 [ 289.547518] ? rw_verify_area+0xea/0x2b0 [ 289.551556] ? page_cache_pipe_buf_steal+0x2f0/0x2f0 [ 289.556636] do_splice_to+0x105/0x170 [ 289.560416] splice_direct_to_actor+0x222/0x7b0 [ 289.565068] ? generic_pipe_buf_nosteal+0x10/0x10 [ 289.569891] ? do_splice_to+0x170/0x170 [ 289.573838] ? rw_verify_area+0xea/0x2b0 [ 289.577874] do_splice_direct+0x18d/0x230 [ 289.581998] ? splice_direct_to_actor+0x7b0/0x7b0 [ 289.586821] ? rw_verify_area+0xea/0x2b0 [ 289.590861] do_sendfile+0x4db/0xbd0 [ 289.594558] ? do_compat_pwritev64+0x140/0x140 [ 289.599123] ? fput+0xd4/0x150 [ 289.602295] SyS_sendfile64+0x102/0x110 [ 289.606248] ? SyS_sendfile+0x130/0x130 [ 289.610210] ? do_syscall_64+0x53/0x640 [ 289.614163] ? SyS_sendfile+0x130/0x130 [ 289.618116] do_syscall_64+0x1e8/0x640 [ 289.621983] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 289.626806] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 289.631974] RIP: 0033:0x459879 [ 289.635140] RSP: 002b:00007f8a5e6e9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 289.642824] RAX: ffffffffffffffda RBX: 00007f8a5e6e9c90 RCX: 0000000000459879 22:41:12 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) write$FUSE_LK(r1, &(0x7f0000000100)={0x28, 0x0, 0x6, {{0xc1, 0x9, 0x1, r2}}}, 0x28) 22:41:12 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$isdn(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="81000000fffffeffb24cbd0f332af5d97fded55345a04d9c2d498bdcad17d8f35606b962f4237e759d519bd746899663ba3e277bb62cff69fed0db8175b514108e2d3bdb77378d210d861f7d3b167bc73098a8f6fa27df869a3d7128dece26c59a92b20bb11bf368c0736485682fb5103e0d6fbca28d329b4045d7bb94e21dfceddbe054b1647d484494b10c07fb1cf0a3fc9b71b25d"], 0xa1, 0x1, &(0x7f0000000000)={0x22, 0xfff, 0x3, 0x2, 0x4}, 0x6) poll(&(0x7f0000000140)=[{r0, 0x1000}, {r1, 0x200}], 0x2, 0x100000001) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') open(&(0x7f0000000080)='./file0\x00', 0x10000, 0x2) sendfile(r2, r3, 0x0, 0x80000001) 22:41:12 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2000, 0x0) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) r2 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000003c0)=0xffffffff00000000, 0x12) [ 289.650199] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 289.657446] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 289.664707] R10: 0000000080000001 R11: 0000000000000246 R12: 00007f8a5e6ea6d4 [ 289.671956] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 22:41:12 executing program 0 (fault-call:4 fault-nth:10): r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) [ 289.730389] PPPIOCDETACH file->f_count=2 22:41:12 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) unlink(&(0x7f0000000080)='./file0\x00') r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000040)={0xa, {0x5, 0xffffffffffff7fff, 0xffff, 0x4}, {0x3, 0x1, 0x0, 0x100000001}, {0xffffffff, 0x3b694ffa}}) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) [ 289.772309] PPPIOCDETACH file->f_count=2 22:41:12 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x202) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f00000001c0)=""/134) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x202, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000500)=""/246) r2 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000280)={r3, @in6={{0xa, 0x4e23, 0x0, @mcast1, 0x5}}, 0x8, 0xfbb, 0x200, 0x100000001, 0xfff}, &(0x7f0000000140)=0x98) ioctl$EVIOCGREP(r1, 0x4004743c, 0x0) 22:41:12 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x200, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f00000000c0)={0x101, 0xffffffffffffff7f, 0x8, 0x4, 0x4, 0x9}) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:12 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000001c0)={[0xffffffffffff7fff, 0x0, 0x1, 0x200, 0x8, 0xff, 0x9, 0x3, 0x0, 0x5, 0xffffffffffffffff, 0x1ff, 0x9, 0x3f, 0x3], 0x1, 0x200000}) [ 289.910537] PPPIOCDETACH file->f_count=2 22:41:12 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x202000, 0x0) connect$vsock_dgram(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) sendto$unix(r2, &(0x7f0000000500)="9494b39878ee2f4ab15b2af714a8ff61ef1981d5bdb1db39cddf2625d7621c23d888f65a404262b7178951c3c56287ac5a4cc54e1fd583c6a776ede1747f9da2a9135840f50697dcdb97ca080aad64bde2341b08802991dd48cbaed02c8ecbb49de135f682a863b45c453e4e92f9ce359dc21870f4b73a102229fb7ece8f19da056c6e4f5990a2890f1220b3cdfe30b4d3af24539d796fabde490e", 0x9b, 0x6da95532d07e265a, 0x0, 0x0) connect$vsock_dgram(r1, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r3 = syz_open_dev$vcsn(&(0x7f0000000600)='/dev/vcs#\x00', 0x10000, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) ioctl$VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f00000004c0)={0x20, 0x1, 0x8, 0x5, 0xff}) getpeername$inet6(r2, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000005c0)=0x1c) 22:41:12 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) bind$ax25(r0, &(0x7f0000000140)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:12 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1146c45440acb834}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x400, 0x70bd25, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x487b1d3b1967e8ec}, 0x40) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) 22:41:12 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) r1 = msgget(0x2, 0x2) msgctl$IPC_INFO(r1, 0x3, &(0x7f00000001c0)=""/103) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x56, 0x6, 0x8, 0x20}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='coredump_filter\x00') sendfile(r3, r4, 0x0, 0x80000001) 22:41:12 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000080)={'lo\x00', 0x4}) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:12 executing program 2: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) getgroups(0x9, &(0x7f0000000080)=[0xffffffffffffffff, 0x0, 0xee01, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00]) fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) getgroups(0x4, &(0x7f0000000240)=[r0, r1, r2, r3]) r4 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x0) signalfd4(r4, &(0x7f00000002c0)={0x80}, 0x8, 0x80000) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000500)=""/246) r6 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)) ioctl$EVIOCGREP(r5, 0x4004743c, 0x0) 22:41:12 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x202000, 0x0) connect$vsock_dgram(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) sendto$unix(r2, &(0x7f0000000500)="9494b39878ee2f4ab15b2af714a8ff61ef1981d5bdb1db39cddf2625d7621c23d888f65a404262b7178951c3c56287ac5a4cc54e1fd583c6a776ede1747f9da2a9135840f50697dcdb97ca080aad64bde2341b08802991dd48cbaed02c8ecbb49de135f682a863b45c453e4e92f9ce359dc21870f4b73a102229fb7ece8f19da056c6e4f5990a2890f1220b3cdfe30b4d3af24539d796fabde490e", 0x9b, 0x6da95532d07e265a, 0x0, 0x0) connect$vsock_dgram(r1, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r3 = syz_open_dev$vcsn(&(0x7f0000000600)='/dev/vcs#\x00', 0x10000, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) ioctl$VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f00000004c0)={0x20, 0x1, 0x8, 0x5, 0xff}) 22:41:12 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0xa8a) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x4, 0x4, [0x0, 0x4, 0x1, 0x4]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r4, 0xc51}, 0x8) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x80, 0x0) 22:41:12 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000080)={0x3f, 0x1000, 0x1}) sendfile(r2, r2, 0x0, 0x80000001) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000001240)=0x400, 0x4) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000011c0)={'filter\x00', 0x0, 0x4, 0x1000, [], 0x5, &(0x7f0000000140)=[{}, {}, {}, {}, {}], &(0x7f00000001c0)=""/4096}, &(0x7f0000000000)=0x78) ftruncate(r1, 0x3) 22:41:12 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x202000, 0x0) connect$vsock_dgram(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) sendto$unix(r2, &(0x7f0000000500)="9494b39878ee2f4ab15b2af714a8ff61ef1981d5bdb1db39cddf2625d7621c23d888f65a404262b7178951c3c56287ac5a4cc54e1fd583c6a776ede1747f9da2a9135840f50697dcdb97ca080aad64bde2341b08802991dd48cbaed02c8ecbb49de135f682a863b45c453e4e92f9ce359dc21870f4b73a102229fb7ece8f19da056c6e4f5990a2890f1220b3cdfe30b4d3af24539d796fabde490e", 0x9b, 0x6da95532d07e265a, 0x0, 0x0) connect$vsock_dgram(r1, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) syz_open_dev$vcsn(&(0x7f0000000600)='/dev/vcs#\x00', 0x10000, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) 22:41:12 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x400080, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f00000000c0)) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000340)) ioctl(r0, 0x3, &(0x7f0000000300)="f1f83477f77d0a80c277911f8e0ca239c91eb980b067cc2d7c7e8c9758be81fae85a844b9c6fe71f1205478754c85a29b92885935b8266818cb0ab") setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000100)={0x40000000000ff, 0x8, 0x5, 0x781, 0x100, 0x5, 0x4}, 0xc) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000003c0)={0x80000000, 0x5, 0x20, 0x7, 0x30, 0x7}) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x89c69a649a9e2758}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, r2, 0x300, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) ioctl$VFIO_IOMMU_GET_INFO(r1, 0x3b70, &(0x7f0000000380)={0x10}) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:12 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0xc0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)={0x0, 0x0, 0xffff}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000000c0)={0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000100)={r3, r4, 0xd7}) write$cgroup_int(r1, &(0x7f00000003c0)=0xfffffeff00000000, 0x12) 22:41:12 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x202000, 0x0) connect$vsock_dgram(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) sendto$unix(r2, &(0x7f0000000500)="9494b39878ee2f4ab15b2af714a8ff61ef1981d5bdb1db39cddf2625d7621c23d888f65a404262b7178951c3c56287ac5a4cc54e1fd583c6a776ede1747f9da2a9135840f50697dcdb97ca080aad64bde2341b08802991dd48cbaed02c8ecbb49de135f682a863b45c453e4e92f9ce359dc21870f4b73a102229fb7ece8f19da056c6e4f5990a2890f1220b3cdfe30b4d3af24539d796fabde490e", 0x9b, 0x6da95532d07e265a, 0x0, 0x0) connect$vsock_dgram(r1, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) syz_open_dev$vcsn(&(0x7f0000000600)='/dev/vcs#\x00', 0x10000, 0x0) 22:41:12 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) ptrace$cont(0x9, r3, 0x2, 0x7) r4 = getpid() syz_init_net_socket$rose(0xb, 0x5, 0x0) fcntl$setstatus(r0, 0x4, 0x400) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r1, &(0x7f0000000140)={r0, r1, 0x1}) sendfile(r1, r2, 0x0, 0x80000001) 22:41:12 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x202000, 0x0) connect$vsock_dgram(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) sendto$unix(r2, &(0x7f0000000500)="9494b39878ee2f4ab15b2af714a8ff61ef1981d5bdb1db39cddf2625d7621c23d888f65a404262b7178951c3c56287ac5a4cc54e1fd583c6a776ede1747f9da2a9135840f50697dcdb97ca080aad64bde2341b08802991dd48cbaed02c8ecbb49de135f682a863b45c453e4e92f9ce359dc21870f4b73a102229fb7ece8f19da056c6e4f5990a2890f1220b3cdfe30b4d3af24539d796fabde490e", 0x9b, 0x6da95532d07e265a, 0x0, 0x0) connect$vsock_dgram(r1, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) [ 290.341237] PPPIOCDETACH file->f_count=2 22:41:12 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0x9, 0x264) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x100, 0x101000) getpeername$netrom(r2, &(0x7f0000000080)={{}, [@rose, @netrom, @remote, @rose, @null, @null, @remote, @default]}, &(0x7f0000000100)=0x48) syz_mount_image$minix(&(0x7f0000000140)='minix\x00', &(0x7f0000000180)='./file0\x00', 0x9, 0x4, &(0x7f0000000340)=[{&(0x7f00000001c0)="3a62919f103674d3172c7661c40aa2198cbc4cbe7cd2c72cedf685e364d814e62d1181e1e5e3b3825a5fd9d7808e37509d63e1672216f8568af777f1b000137d24765ef91b8ea48821", 0x49, 0x2}, {&(0x7f0000000240)="0be822650978157048567892255db68648a9950c28f643356b57d97c26e11a7c92ee10026894b7a9737cfd040bd3d1809bd8b4ec606c9622e0bbf6b7f4ba1e73ace46f70fc5cedd9897c2054990a6d5858b228fe63c6327da0a724e8567cef7f28c04f13e28892bd95f8bd8e71bdb0f01d6a8f3ff1", 0x75, 0x100000000}, {&(0x7f00000002c0)="a4eeea026e7a601c1e6fcacebf6dd3a8e5a391fb88525ecf90f7bf36463c22becc52f79af83f9d583b02ba98023af3714d64e7aa", 0x34, 0xffffffffffffffff}, {&(0x7f0000000300)="099fe299e79ec540afa8c76b7993d1cdba63118f6e07ba79cc5048f8d9c9b9e8", 0x20, 0x80}], 0x80, 0x0) 22:41:12 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f00000001c0)={{0x4, 0x1, 0x7ff, 0x100, '\x00', 0x10001}, 0x1, [0xff, 0x43cb, 0xfff, 0x9, 0x1000, 0x9, 0x7, 0x4, 0x2, 0x7, 0xfffffffffffffffd, 0x3, 0x7fffffff, 0x3, 0x6, 0x0, 0x4, 0xffffffffffff7fff, 0x7ff, 0x800, 0x6c5, 0x93, 0x10000, 0x100000000, 0x7c9ae91d, 0x2, 0x3, 0x1f, 0x800, 0x0, 0x7ff, 0xfffffffffffffc01, 0x9, 0x95e, 0x8, 0x8000000100000000, 0x6, 0x100, 0x3ca, 0x9, 0x5, 0x3, 0x7a, 0x3, 0x9, 0x800, 0x0, 0xbd, 0x0, 0x8, 0x0, 0x4, 0xb8, 0x7, 0x15e7, 0x200, 0x7fffffff, 0x7fffffff, 0x1, 0x5, 0x4, 0x5, 0x1, 0x6, 0x7, 0xc7d4, 0x8, 0x9, 0x6, 0x20, 0x2, 0x1e, 0x800, 0x1, 0x400, 0x3, 0xffffffffffffff81, 0x800, 0x252, 0xfff, 0x7, 0x8000, 0x7fffffff, 0x6, 0xfe000000000, 0x7, 0x7, 0x81, 0x296, 0x1000, 0x3, 0x8, 0xffffffff00000000, 0xd126, 0x10, 0x6, 0x100000001, 0x1ff, 0x2, 0x4e60, 0x80000000, 0x0, 0x100, 0x10001, 0x1, 0x3f, 0x80, 0x75, 0x4, 0x9, 0x3, 0x7fffffff, 0x0, 0x8, 0x1, 0x3ff, 0x20, 0xfffffffffffffffa, 0x3f, 0xadf5, 0x2, 0xfff, 0x7, 0x6, 0x10001, 0xb274, 0x6, 0x37ab38f9], {0x0, 0x1c9c380}}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r3, r4, 0x0, 0x80000001) 22:41:12 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) prctl$PR_SET_FPEXC(0xc, 0x2) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:41:12 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x1, 0x2) sendmsg$nl_route(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x4004040) 22:41:12 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x202000, 0x0) connect$vsock_dgram(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_dgram(r1, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 22:41:12 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:12 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2, 0x40000) 22:41:12 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x202000, 0x0) connect$vsock_dgram(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_dgram(r1, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 22:41:12 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vsock\x00', 0x8000, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) r3 = getgid() getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000280)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) write$P9_RSTATu(r1, &(0x7f0000000380)={0x6d, 0x7d, 0x1, {{0x0, 0x54, 0x3, 0x2, {0x10, 0x1, 0x3}, 0x1000000, 0x2, 0x6, 0x7, 0xb, '/dev/vsock\x00', 0xb, '/dev/vsock\x00', 0xb, '/dev/vsock\x00'}, 0x4, 'eth0', r2, r3, r4}}, 0x6d) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:13 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x0, 0x80) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0xf0, 0x4) [ 290.570904] PPPIOCDETACH file->f_count=2 22:41:13 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x202000, 0x0) connect$vsock_dgram(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_dgram(r1, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 22:41:13 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) sendfile(r1, r2, 0x0, 0x80000001) 22:41:13 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x101, r1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x6bb646586ef46dc4}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x174, r5, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa696}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x34, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x72fd}]}, @TIPC_NLA_LINK={0x3c, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x235c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2d6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa20}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xea7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_BEARER={0x38, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x4080}, 0x840) sendfile(r3, r4, 0x0, 0x80000001) 22:41:13 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x202000, 0x0) connect$vsock_dgram(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_dgram(r1, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 22:41:13 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x8040, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000500)=""/246) r2 = epoll_create(0x400) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TCGETS2(r3, 0x802c542a, &(0x7f0000000180)) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffff8, 0x40000) setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x3, 0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:41:13 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00\xa3\xca\xb5\xc18X\xb3\xa4\x85\xd5=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~F\xb0\x96g\x87aK\x04\xdf\xf3\xc2\xfa\xb9\xc45\x90\xd4\x90\a\x0f{GV\x9di=[&\x83\x8c\xac;WE_\x05;\xefk\x1e\xed:\xa2\x8e\xba\x96\xde\xfac\xf0\'&:bn`\xe8i\xad\xa3uf\xb0)\xa0\x8ej\x94\xc6\x86UZ*\xb07#T\xa6\xa3\x9c\x91_jM\xda\x8aq\x1e\xee\x04\x04\x1a\xb3f@\x06\x8c\xf5\xbb\x81\x91\x10\xdc\xb2\xeb\xf7\xc2\x98\x10z\xf9\xe4\xee&\xae\x1fF \x1b\xc1Kq\x10\x9b\xce\xa7\x87c\x9et\xad\xdc\x05@\xc9\xed\xacE\x17S\x1b\xa6\xd2,#|\xeb\xbfh\xb0\xa8\xf5\xf0\xbfzPC\xf4z\xdbb4/\xb7\xab\xca\x94\x90l\xa7]\xab\xc8D\x0eL\xf8\x8b\x1e\xa5{&f\x171Sjdc\xde\xfd$\x98\xa0ZZk\x9c\x9d\xa3\xec\xc8\x1dD6E`1\xbf\xc9\x18\x99\x9a\x1b\xca/\xe8A\xbe\xe5\x17\xb8\n\x0f\xe3K\xf0+)4F\xd6>\xd2L\"M\xa14;\x9e!\xbf\x9a.,C\x14Tm\'G\xaf)\x88C\x1d\x1b|:', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) getsockname$tipc(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xfffffffffffffffc) dup2(r0, r1) 22:41:13 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x7f, 0x501000) getsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:13 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x1, 0x4) sendfile(r1, r2, 0x0, 0x80000001) 22:41:13 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080)=@int=0x3, 0x4) semget$private(0x0, 0x1, 0x3c0) r2 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000003c0)=0xffffffff00000000, 0xffffffffffffff26) r3 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0xbde735f7036bbafa) ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0) 22:41:13 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) mount$bpf(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='bpf\x00', 0x4, &(0x7f00000003c0)={[{@mode={'mode', 0x3d, 0x37e4}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/ppp\x00'}}, {@obj_user={'obj_user', 0x3d, 'mime_typemime_type.'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@audit='audit'}, {@obj_user={'obj_user', 0x3d, 'vmnet1Qnodev[{'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@permit_directio='permit_directio'}]}) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) stat(&(0x7f0000000040)='\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000080), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r2, &(0x7f0000000280)={0x82, 0x7d, 0x1, {{0x0, 0x64, 0x200, 0x9, {0x0, 0x2, 0x7}, 0x5000000, 0x0, 0x1, 0x10000, 0x9, '/dev/ppp\x00', 0x11, ':posix_acl_access', 0xe, 'vmnet1Qnodev[{', 0x9, '/dev/ppp\x00'}, 0x9, '/dev/ppp\x00', r3, r4, r5}}, 0x82) 22:41:13 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x40000000000000, 0x3, 0x0, 0x0, 0x0, 0xfefffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x1000, 0x8}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:13 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f00000001c0)={{0x41, 0x7f}, 'port1\x00', 0xc, 0x40000, 0x9, 0x10001, 0x9, 0x100000001, 0x2, 0x0, 0x2, 0x2}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket(0x10, 0x4, 0x401) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r3, 0x0, 0x80000001) 22:41:13 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x202000, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_dgram(r1, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 22:41:13 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x68, 0x0, &(0x7f00000002c0)=[@increfs_done={0x40106308, 0x1}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/19, 0x13, 0x0, 0xb}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/249, 0xf9, 0x2, 0x26}}, &(0x7f0000000080)={0x0, 0x18, 0x40}}, 0x400}, @acquire={0x40046305, 0x3}], 0x32, 0x0, &(0x7f0000000340)="c055185ee4ee9cf14f5771df4bef5e6b3b32829eef35abe7c58d8a28f73ad69e59a427d1d284c97cec47cd87da81fd383cbd"}) sendfile(r1, r2, 0x0, 0x80000001) 22:41:13 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000080), 0x4) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:13 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_dgram(r1, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 22:41:13 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x0, 0x401) accept4$bt_l2cap(r2, 0x0, &(0x7f0000000080), 0x800) 22:41:13 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) [ 290.991079] PPPIOCDETACH file->f_count=2 22:41:13 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(r1, r2, 0x80000) r3 = socket(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r3, r4, 0x0, 0x80000001) 22:41:13 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x5, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:13 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) 22:41:13 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x54) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000040)={0x0, {0x4, 0x5}}) 22:41:13 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x1f, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f00000000c0)) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r1, 0x0) 22:41:13 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 22:41:13 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r2 = dup2(r1, r0) read(r1, &(0x7f0000000140)=""/63, 0x3f) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000180)={[], 0x7, 0xc8e4, 0x7, 0x0, 0x3, 0xf000, 0x4, [], 0x9}) openat$cgroup_ro(r2, &(0x7f0000000100)='cpuacct.usage_user\x00', 0x0, 0x0) 22:41:13 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000080)=0x3) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/3\x00\xe7=\xc5UE!\xc5\xc5\x83W\xf7W\xf4\xb9ma\f\x00\xe6>u\x1b#\xd2\x1e*\x1fIm(\x8c\xd1\xece%N\xfcz\xa8\x1c6\xc8\xad\xdc\xa47\xa2\xd2\x8e\\\xb0\xcd\x16\xd5th\xd4\x92\xa5\xeb\xc5\x88\x14\f\xe1\xa0\xe0\xb1\xa6\x19\n\x82\xd4_%\xf4kL\xcfv\xc3\x8b\xe2\x11{i:u.H\xa7qv\xcdB\xe3\xebH\x9f\x14\xe0;\xb1\xc2\x98H\xaa@V\xa6\xff\x1f\x90\xce\xf7\xffQ\xd2\xfa`\xa79\x0f\x18\xf5uZ\x9cK*f\x97\x98#\x00}L\x89\x87\xd3\"\xeb\x8f\xf5\xd6xK\xc7\xb7Y\x83\xe2 \xf7\xed\xad\xbd\x97\xce\xde\x16m\x94\"cO%0\x9c\xa8b\xc8u \x92\xec\xb3\x90\x95\xd3\x06\bT\x16\x009/\xd2\xd3\xd4\x88\x06\xec\xffc\xb5\x13?\xfe\xc2\xd6Y\xc2\xee\x85\xaf\xd5\x846\xa1\x8e\xa4\xe1U\xab\xe9\x03\x03\xb7') ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000100)={0x5, 0xf00, 0x3, 0x9, 0x95}) sendfile(r1, r2, 0x0, 0x80000001) 22:41:13 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') signalfd(r1, &(0x7f0000000000)={0x8e}, 0x8) sendfile(r3, r4, 0x0, 0x80000001) 22:41:13 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0xa1b, 0x4080) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x0, 0x0) 22:41:13 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) [ 291.230541] PPPIOCDETACH file->f_count=2 22:41:13 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_dgram(r0, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 22:41:13 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x80) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, r0, 0x11, 0x3}, 0x14) r1 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r2 = socket(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r1, 0x0, 0x80000401) 22:41:13 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f00000001c0)=0x1ff, 0x1) write$FUSE_INTERRUPT(r0, &(0x7f0000000200)={0x10, 0x0, 0x2}, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000240)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x1800, 0x3cd) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000080)=0x101, 0x4) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) 22:41:13 executing program 5: perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x1) msgsnd(r0, &(0x7f0000000000)={0x3, "4efdbcaf845e4ac0a327f89b58a1f81deb5dc66d34fe95009738106909242a14a4795198e94d468af61eaaa715ef550d7463cc2b7dbc10"}, 0x3f, 0xe4bd05cf5617453b) 22:41:13 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) connect$x25(r0, &(0x7f0000000000)={0x9, @remote={[], 0x2}}, 0x12) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:41:13 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) 22:41:13 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_dgram(r0, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 22:41:13 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca\x01b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xf8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xff, 0x101000) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) userfaultfd(0x80800) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xc05a, {0x6, 0x101, 0x0, 0x4, 0x5, 0x7fffffff}, 0x3f}, 0xe) msgget(0x1, 0x400) write$cgroup_int(0xffffffffffffffff, &(0x7f00000003c0)=0xffffffff00000000, 0x12) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x20000, 0x0) 22:41:13 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x7, 0x9, 0xffff}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000100)={r3, @in={{0x2, 0x4e20, @multicast2}}, 0x5c1b, 0x7, 0x8, 0x80, 0x4}, &(0x7f0000000280)=0x98) 22:41:13 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_dgram(r0, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 22:41:13 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x10004) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x101}) socket(0x10, 0x3, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r2 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) sendfile(r2, r1, 0x0, 0x2) [ 291.424237] selinux_nlmsg_perm: 18 callbacks suppressed [ 291.424246] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=16187 comm=syz-executor.1 22:41:13 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000080)=0x1) r2 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000003c0)=0x8352, 0xffffffffffffffe6) 22:41:13 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffa000/0x3000)=nil) r1 = shmget(0x3, 0x3000, 0x100, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ff9000/0x3000)=nil, 0x4000) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20000) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r2 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x8, 0x2000) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) [ 291.510305] PPPIOCDETACH file->f_count=2 22:41:13 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000080)=0x1c00000000000) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:14 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vga_arbiter\x00', 0x4000, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000004c0)={'TPROXY\x00'}, &(0x7f0000000500)=0x1e) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r1, 0x0) r2 = semget(0x3, 0x2, 0x100) semctl$GETNCNT(r2, 0x3, 0xe, &(0x7f0000000080)=""/11) syncfs(r1) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x2000, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r3, 0xc0485630, &(0x7f0000000100)={0xfff, "cd4e3b472765673760659422da25680a02d3442cf3acd788759b6b02f7a38a64", 0x1, 0x200, 0x0, 0x8, 0x4}) sendmsg$key(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x180}}, 0x800) ioctl$VIDIOC_DECODER_CMD(r3, 0xc0485660, &(0x7f0000000180)={0x2, 0x1, @raw_data=[0xba, 0x2, 0x7f, 0x0, 0x7f, 0x40f, 0x5, 0xe555, 0x7, 0x0, 0x81, 0x1, 0x273, 0x7fff, 0x7fffffff, 0x5]}) 22:41:14 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000340)=0xe8) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000600)={@hci={0x1f, r3, 0x2}, {&(0x7f0000000380)=""/161, 0xa1}, &(0x7f0000000440), 0xe}, 0xa0) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000040)={0x9, 0x7f939d28, 0x7, 0x9}) 22:41:14 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_dgram(r0, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 22:41:14 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x8) r1 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x2, 0x7, 0x4, 0x3, 0x80000000}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={r2, 0x4}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r3, 0x0, 0x80000001) 22:41:14 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000003c0)=0xffffffff00000000, 0x12) 22:41:14 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_dgram(r0, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) [ 291.622464] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=16222 comm=syz-executor.0 22:41:14 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2a79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000080)={0x2, 0x70, 0x5, 0x8000, 0x0, 0x9, 0x0, 0x3, 0x12004, 0x8, 0xffff, 0x2, 0x1, 0x8dd, 0x8, 0xfffffffffffffe1e, 0x3, 0x52, 0x4, 0x2d2b, 0x8, 0x8000, 0x0, 0x101, 0x1, 0x6, 0x101, 0x10001, 0x5, 0xfffffffffffffc00, 0x7fff, 0x7f, 0x1000, 0x2, 0x5, 0x100000000, 0x100, 0xbe, 0x0, 0x200, 0x1, @perf_config_ext={0x800, 0x7}, 0x3a000, 0x100, 0xaf3, 0x5, 0x5348, 0xffffffff, 0x8}) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r1, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x200, 0x0) ioctl$RTC_UIE_OFF(r2, 0x7004) 22:41:14 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) 22:41:14 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffc, 0x101}) fstat(r0, &(0x7f0000000140)) r1 = socket(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f00000002c0)={0x8, 0x4, 0xa2cd, 0x80000001, &(0x7f00000001c0)=[{}, {}, {}, {}]}) sendfile(r1, r1, 0x0, 0x3) [ 291.730495] PPPIOCDETACH file->f_count=2 22:41:14 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_dgram(r0, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) [ 291.755592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=16240 comm=syz-executor.1 22:41:14 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x4, 0x0, 0x1f) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:14 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) 22:41:14 executing program 5: perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 22:41:14 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x60100, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:41:14 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0xffffffffffffff6d) 22:41:14 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_dgram(r1, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 22:41:14 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36e4, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffe, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x608a7a9f17f45489, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000700)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$selinux_access(r1, &(0x7f0000000740)={'system_u:object_r:netlabel_mgmt_exec_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x2}, 0x4e) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x98400, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000540)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f00000005c0)={0x9, 0x108, 0xfa00, {r3, 0x82, "b17425", "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"}}, 0x110) r4 = getpgrp(0x0) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f00000001c0)=r2) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f00000000c0)=r4) exit_group(0x7) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x1, 0x29e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000100), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xa3eb8fe58a00369b}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x11, 0x4, 0x600, 'veth0\x00', 'veth0_to_team\x00', 'team0\x00', 'veth0_to_bond\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0xff, 0x0, 0x6e30c3701f7b8a11, 0x0, 0xff], 0xf6, 0x166, 0x1de, [@ip={'ip\x00', 0x20, {{@multicast1, @remote, 0xffffff00, 0x0, 0x8000, 0x4, 0x4, 0x1c, 0x4e24, 0x4e20, 0x4e21, 0x4e20}}}, @quota={'quota\x00', 0x18, {{0x1, 0x0, 0x70, 0x426}}}], [@common=@dnat={'dnat\x00', 0x10, {{@random="977b52e00271", 0xfffffffffffffffd}}}, @common=@dnat={'dnat\x00', 0x10, {{@broadcast, 0xfffffffffffffffc}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x200, 0x1, 0x2, 0x0, 0x0, "8b5ac8412cac8c9aba5eec849ddd73a7f6d05ccf1e18971e31eda4861ec7259480ed8afccd2346919f9cfb0abe775a647818abe39b71dfd017a08721f8aa428d"}}}}]}]}, 0x316) [ 291.915056] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=16266 comm=syz-executor.1 22:41:14 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1, 0x100000000) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) socket$vsock_stream(0x28, 0x1, 0x0) 22:41:14 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='c.\x1b\x1b6\xfbZ\xf3\x1fus\x00\xe7Ww)U+\xb7\x9e1EU\x16\xcb4\b\xe8KB\x94\xe0\xaeZ\xac}\xf8\xaf\xfbz]\x0e\xaa\xa0tyF\x15\x04\xfao\xaf\xc1s\x9fT\xad\x87\x17=\x0f\xa0\x99[J\xa5o\xe0Nn0\"\x8e+r\x00\x00\x00\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) write(r1, &(0x7f0000000040)="f9032607", 0x4) 22:41:14 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) ioctl$DRM_IOCTL_CONTROL(r3, 0x40086414, &(0x7f0000000000)={0x3, 0x446}) 22:41:14 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000080)=""/128) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 292.033580] PPPIOCDETACH file->f_count=2 [ 292.049974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=16294 comm=syz-executor.0 22:41:14 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) write$cgroup_int(r1, &(0x7f0000000040)=0x7, 0x12) 22:41:14 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:14 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x2000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x61, 0x7a, 0x77, 0x90c6a83c2c00d238, 0x36, 0x34, 0x30], 0x2d, [0x7b8c1d0a33d726e9, 0x77, 0x64, 0x6bafbb311fab1d94], 0x2d, [0x35, 0x0, 0x63, 0x66], 0x2d, [0x33, 0x77, 0x37, 0x33], 0x2d, [0x66, 0x64, 0x35, 0x35, 0x0, 0x79, 0x0, 0x35]}}}]}}) r1 = socket(0x11, 0x3, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000014c0)='IPVS\x00') ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000001600)=0x7f) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00022dbd7000eddbdf250a0000001c0001000800090017000000080002002c00000008000600776c630024000100080002003a000000080009004c000000080004004e23000008000600666f0000080005000900000008000500ff070000"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0xe0ca04990c80f1ec) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_names\x00') setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x80000001) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, {0x10000, 0x3ff, 0x7fff, 0x200}}) recvmsg(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001640)=""/195, 0xc3}, {&(0x7f0000001740)=""/146, 0x92}, {&(0x7f0000001800)=""/65, 0x41}, {&(0x7f0000001880)}, {&(0x7f00000018c0)=""/29, 0x1d}], 0x5}, 0x2040) preadv(r0, &(0x7f0000001440)=[{&(0x7f0000000200)=""/240, 0xf0}, {&(0x7f0000000300)=""/204, 0xcc}, {&(0x7f0000000400)=""/1, 0x1}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x4, 0x0) [ 292.083091] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=16300 comm=syz-executor.0 [ 292.105060] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=16297 comm=syz-executor.1 22:41:14 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x15\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSMNZ\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xe6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM_I>7\x8e\xd2\x99\xe9\xb2\xdbc$L\x12D\xeb@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xdf\x8f\xa2\xeew\"\xb8\x06\xab\x18J\xcdE\b\xe5\xfc\xb4\xf5\xf4\xfe>\xdd+\x8c\xff\x00\x14v\x8cX!ft,\xcfEl\xde\xe2\xbc\x82\x87\x9b\x86\x95\xa0\xd7t\x9bR\xb7W/\xc8\xac\xda\xdei4\x9fo\xdc\xb1e\xae0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) getpgrp(0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) r3 = getpgrp(0xffffffffffffffff) r4 = syz_open_procfs(r3, &(0x7f0000000080)='fdinfo/3\x00') sendfile(r2, r4, 0x0, 0x80000001) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000100)=0x2) [ 292.293161] PPPIOCDETACH file->f_count=2 [ 292.320560] PPPIOCDETACH file->f_count=2 22:41:15 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_dgram(r1, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 22:41:15 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x4000, 0x89) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200001}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="30010000", @ANYRES16=r2, @ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x1}, 0xa77265bf2ca5ab76) 22:41:15 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) read(r0, &(0x7f0000000080)=""/26, 0x1a) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000200)={{0x2c, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x3, 'wlc\x00', 0x1, 0x8, 0x64}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e23, 0x10000, 0xffffffff, 0x7, 0x3}}, 0x44) getgid() r1 = getpgid(0xffffffffffffffff) sched_rr_get_interval(r1, &(0x7f0000000180)) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000140)) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) getgid() r2 = socket(0x10, 0x80000, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) 22:41:15 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4001ff) ioctl(r1, 0x9, &(0x7f00000005c0)="8308437007c9484d469e2846aee6d62e1f332a3507618500dde16b86b573640100993915f63f71484eb4eaafcbe4bd05dabc1f0eff489f48f8880eebda47a1d0d42fcab6efaf3fbeb875540914383566eacf69d1a70b787afdd6220b364e5bf2a386dc8fd434340de1f6a61e7d3595104fd3f4dd447857641fa6be2c1d8a6b93c9fc76d30c4eed1a92e44a4bcfbc4bf1cf390706d836c04b6dd990679ad0061f48f9a2341587c15f0f102cfc8a8c12d8fbfd816d639758e297db673cb3f6e3a38a48ae79dcb781d3a0bc6b0c44d0af36f496") getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000001c0), &(0x7f0000000580)=0xffffffffffffffad) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000140)=@req3={0xcf6, 0xfffffffffffffff8, 0x5, 0x5, 0xffffffffffffffff, 0xffffffff7fffffff, 0x1}, 0x1c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000740)=0x1, 0x4) r5 = syz_open_procfs(r4, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r3, r5, 0x0, 0x80000001) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f00000004c0), &(0x7f0000000500)=0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e22, 0x9ba6, @dev={0xfe, 0x80, [], 0xb}, 0x1000}}}, &(0x7f00000003c0)=0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000400)={0x401, 0x4, 0x8201, 0x20, 0x3, 0x401, 0xc5, 0x5, r6}, 0x20) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000480)=0x1) ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) sched_getaffinity(r4, 0xffffffffffffffe5, &(0x7f00000007c0)) accept(r3, &(0x7f00000006c0)=@ll={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x1f, 0x6b, 0x5, 0x80, 0xc07f0abc9b50980d, 0x1, 0x0, [], r7, r0, 0x0, 0x2}, 0x3c) r8 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x1, 0x2) write$rfkill(r8, &(0x7f00000002c0)={0x101, 0x5}, 0x8) 22:41:15 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xa, 0x800) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)=0x4) r2 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000003c0)=0xffffffff00000000, 0x12) 22:41:15 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:41:15 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0x401, 0x48) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000040)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x100, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000080)=""/137) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 22:41:15 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r0, r1, 0x0, 0x80000001) [ 292.791324] audit: type=1400 audit(1566772875.204:86): avc: denied { create } for pid=16331 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_iscsi_socket permissive=1 [ 292.826041] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=16339 comm=syz-executor.1 22:41:15 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x4000, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f00000000c0), 0x8) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000080)) 22:41:15 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) 22:41:15 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 292.896183] PPPIOCDETACH file->f_count=2 22:41:15 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f0000000140)='net/netfilter\x00') accept$netrom(r0, &(0x7f0000000200)={{0x3, @bcast}, [@default, @remote, @default, @netrom, @netrom, @rose, @rose, @rose]}, &(0x7f0000000280)=0x48) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000002c0)=[@in6={0xa, 0x4e20, 0xfba3, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x100}, @in6={0xa, 0x4e24, 0x4e, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xbf7}, @in6={0xa, 0x4e21, 0x80000000, @empty}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e22, 0x742, @remote, 0x9}, @in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, [], 0x24}, 0x3890}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e24, 0xfff, @dev={0xfe, 0x80, [], 0x27}, 0x48}], 0xe8) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x304}, "0b63061e832d252c", "95f2ffcfb341be2cb53104f79ebd70e0", "574de140", "e983475cec5fa5a8"}, 0x28) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000180), &(0x7f00000001c0)=0x4) [ 292.979760] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=16367 comm=syz-executor.0 [ 292.995549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=16367 comm=syz-executor.0 22:41:16 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_dgram(r1, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 22:41:16 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = add_key(&(0x7f0000000040)='.dead\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000004c0)="e35293db4998eeb547f7e00327c3948ded6cb04bc859c991803afb9a77c47f67cf8dec363a017eade449edc6caff7d7657647de60943401d6432b51ba65174d2439c214badfa009b4fd40d600ec091c57bf1927924d6adf8eaeeafa335892857065c5447df0e01b2bbcd4523502974a304e611e93fd744cf457da707e7fe7770a07eddd2d8282bb6fb11d2b2db969fc0ca74df9ce99de94a8b7d91c43ff370f4743ad76d3f45cf9230ff59051b4b6da6305689dcad66f4c5d2c00a91498a26c24720d7819b7a4dfd376f304c560ae12172ad3ceda984b6db2df3b547becb5e010c12484807c1ebdc4c5728d0809b2165253dc5592205b2b9c270236c110c40ab82669354229431ba79573b4f1310f796f0547123b4932e8a19250ff376fcd5217d5582102e4e05ef36b53bed03ec3fea67e789f3ba986b165a0b4d0c244eadc45ba0f0973d5d82a245c9aa6ebfe96d17ea229746eda6336a6596bf8bd4ef367be6475a7c3aa2927a06abf6ac33519ca7d849f594d289051939faeb5709ea95d2b4e5f1bb0b89367d813a1dbd4de6ee2533575dc5c161a2f71bc46197fa5aaea9fbcc6f601e2aeae30e1ef7e9a741e40014b3319a2c5d21ee7da7d28ac9c3d5f6a96ff6eca735966d726af847951ad6f71802bbf00bb81a15297a6a787de6b2c7d49c1654c4ec02d65ed31fd60a62f3a364ca9feaf88a462b2f1485ffdade7b98c394b198ee427829851d2bdaf8eaa1861edfb5fc5c333cf8b8463623782dd68c8810b8edf4930c2b4a63a5fd27ec09e6544fcfeadaa4273049c0c9f92cac8ff5133a73eeceffbf89826fee91a0f4f2aa231053a81892289c8870f683cd0e36516a7dfde1dedc5b7b62459ae74f697c23e7979223d6043412b501466d70b2b86b35c57f2f955136e96327c1b6568661ec3731ccfaff4ca79ab03756c30fc1b832c255a20bc0c1fcf1cb29256f588c202a9b8d459336cc23d5d1bec12c72cf99ea5c68fa11a82d10ddbcc2ca22b43d66d9dcbb5936c3eb04dceb1a72e0450c8a7676f6d59419376e1627fb2c460e1ca77c3cb338fff2ae378d53ef985ec97b5668de3b37de2fc71d762a8919a04a4785acee4d705efee3084ae98faf74651eace8a7f5605076aa307368e8938c2d594f483ac4fe6172ab6e391fffaa64c985ee16f99c97d7acc581748872904a954e11b432d89495f480b982f9a6dbff9ee19f7410b664763d494da2f4c3c00994c5a427a5dba1b2740c6675a1713911e3248afa7969a8c172dbf36ac8f1ef495ab09c1f53beb83ac8016791f5b034e604034bbd8d27c90a5881efec635aa515ac7cd9a354599c90b1f32c62888bb5fa5f8f070672f6098035c8472a80c86af47e0e77723452fdcd9bae464ad8a81ad40c49101bbece7665bff969861608d7c0c63332beced3bb96f5bb2e8ada889327a0bdc6a249ab14572adc9145ab4bd83fa0ad7c6a1b10d5643c51b69b1dfc13e3641f3d2f1be439179494507bb5e2d6448e3b15c5eb63e66c0891bf5aeed3601073e02123e55019c34e7481cd0d3ed6b5c6bc2952e198868f61f2f1b1880e716a2910e7d548e47183d86ca93ea02481d3ea3f68be54c5b2c1a9794205e82ae738376b512c375dc895458038b1d8466f61fded0bdf4949548266990c3c2a91ea1bf6e9a5b05ac6ad863a888aea00e342d4daf6ae6ecde0d0e19c801e775c5ade7323e3cd4320523a7a6d0c6f8ea722720463dbb3ef9e0419df8469dbfc2cc635dba6377aad37b382921ed197a9719a5e705a6e36474c8bc976b1669419bd6dcce7827f66f41470de7b57f2adfab400f8ebb3c0e8612f8e3e4a244eb263036c784b0e3a98d8d315217e914c2e725ee81fc721cbf81aea751afc0399713c9528c21c5119b18bbbc0f7ffa377a7e6551a196f2c1a5d5dd71e500c718502d5bca59d9f301d24088d1977b6577f681b3aa1afbbb2aebdd522b9436f66e1b793ce4f99e6f297280fb3b416296cdaedabed7bb7159286b38cf136bf3b41b4b957b183aa38e6eb03047ce1200148e70d95aebbdc7f6a079ed789ee5ca107f30b8490dbe2e1b67a6bbe2532570d2bea22133b1d637238c80a731ec204ae86d3821000e1345528eed62c5846c68bbb78d4a3ed1b10908b4357cd6cf0ee4a9386628d5aa5806274a52bc36f169621f8a153f874638279645b22ba4db0018f6f8454358569fa577bbbc65a57390e74136b78322b6e61f65a86accc2bd0e2bc2cd797071a78bc2c1131e6b7e861dadaf66c1f88456de8885083d77f5f7756edbbd102826ee841b92df3bda608eb757ae903cbad2095e43e4dac884018637db3080d1a86184e8513dbefded9ba5cd0d704b75d6c76a5932821085c13729a201fbb2b34db7e4e8c2bf5b3aa99dc0bf90dafc281c696873871f5103ee59c037081f3399895a32026059051dce6bcfa71350eb132aba811afcd201e39bf84d8f401876eef0b3e22569bdd8af441d1e7584a2fbf855a576f42314333cd1f75adc92c25c7b5ff35d737067931f3b194197728d21d7062709d7a5b592214f8a43ff732a11618b05352d6a65c319f430c882a6e9cde13fc58f76d5d332eaa655f711993deef67a4f96149072ed533e380ad63018ec48108a178e8179a47793343b2d88c418b85ddf511556b07b677ecf03ef2aedf68cbb68266d4f5791554ed34463699c89b67ce1a99e1f378e5855c553ae20e00377f786e3816a6dfd30ac94ed558d47175f3f39438c2e541d39418d36a99c49763128af697bdb946521081b72c176b92b1983e6c3326698e1a19ccfe13b9c8005b55d23752dcd8b44d27ffa0ff69d716c54400fa42f7a164492eed749b0260db7419dd87f637e8219116e678902299fee81636de01a7291d4737490096ae1213325d64ba1157a10e17097ca0f1bb7e1cdda1003e537e31d6c4e13a2bfb4d231dc42953cdb6c50e6e66a5be051137b1421fef13de8c4d964b095b03ab26fcd40bb29255c00af1d54b85a39fd46ff7f687f151dcae22db5cbdc50be849d9d3d02d9484fa40788ab9c62a70c59cf2ce6132339d50207cbe50b0406fac2643bb4a0441ce923c7b903b7924b2b02c38f70ee6973e9af02b6427d8c68bf22b28b04f4090fd38607dc112681953f38f2957549599e580733850eaac03f8196d2da7006f5d5fb8d350717416175a312f7bc7c2d51be26e21bd66b7c89226e25b70d76d8e7432bba68e6a19a9c05ca08795babd8b1050972b13212c9ccc2af2f1719dd25c80afadbd17739d3a5b2cd44c7117a24bacc80084e016e7f3eafec5761126c92f4e894a12ed209f4f0f8466121ffcd4910cd068752352a39863a876a55d5b6670c87a468220be91ca1929d0b17552219cc0b1c72cf7116b063e3637b94b97ca14f754c279297d357fd1beaf28410c75e64544d74c171ee6eb666d7d4ec7616a404530f6488edaf17e5aa5cf1d3fd699396ce6c8f48683be10ad08335e8f3986d368a0e013d942fe6f52f9cea403b5f1dac66ef34ab6e8c9c8e005433181d837bd615068e7482dc90001f02d5fa3c6709cd62c7a52b444ea599c73b06c118ac7f9559351a63764458ad25c74b8b34548e38267c7f36873abec3dd8300b205951209d9a462ee9cc677ead4de21f09dd2f84f4be1be0e48001b853272ae7063918fea17fff5360b9cb341be99ec4e0e93d8f744f838c0a8e84e87efcf901157fd849aaea575eac0b7434ae492006c8f75a4f87fe58472a4adbd801622a665f876654f9246cd884991f830fbbd62874c9b3a8b6f89215f75a53fa600be9ab766529391099118d12258d4c9024728e8579a48a2f580e82962426fbd95e51f51a14e24bccc1a6d3e65bcf43b34cdca25586c07725444f02ef35ffc47a3b43a778d3e2855ec0af6bd46faff339a6a136ffe30a6b5ab270e5a598de0a70ad17701bedcbb16a6969f6e2f0bd0e0c4da0e86420715f38ef847c0a5f3c0b16c4879d680385d9e0bbc844b57bdcc53f31685a6275efeb061e0e7f7ed4786b77c6ba0fc60a4c8de3ad926c52589719128557a6aec80f34e00fa0bdb917815d5afd440f9b4e78b1c12ff512f7233745451f848ebbd20be99a41166a7fd9a8405fa13a92a39a53dafe34bb6fbac7843704d6af9b7e02d3121cfaa84def6b8d0a82d532e84f3ef90231000a803596aa637ec61e09a84bf6360a780f35e0b5bef0f406cad0eaebe96c0475da2f4027ef3f24aa0fc6483bb1a2fd93ee9ee451610d79eb05273a209ab8cce7bd788024b5d1822a6385b4edba28ca360dc68abb5a1560b7f468976a24509b50faffbf971639af3fcb5747b4273898335def7aa0016a173fab3022eaf4d90018035dbf09ce8f05e4698a5259de4b47d3057e2d7f43bcca8262ea329932503c6e0656ad48d4795ca4265ed637a622ba5eff47b03cb2348cc3f2693176c264c731b5d821ffa253bacfb6f854e431fb1888235e86a20f751d752aa5e80df3a984e16fff37e758558e41c1436fd31f48991a159ff0bc7fd85f2fbdb5d5970074921c4d0906baa0a8f4209a12d18ccd6e51b58d140eb97e286077c833888094a12061d7bc4154ea6d3a150d92c8443a716a5cbd05791cfff1a24e116f4eae90abc7696c723804d571c950147af1edc850b05ffcb4d3d41e15dd6bd5daeadd27cbc1dcc420ec1708eb3ad34679e13bf553a9a9d39124e692f0970134e56c2900f3f93e06444a49e3b5b7f4e101b6e262191e4f1bf293bfcd49ca498ce15e35df3d0cf63fdaeddd737d626cb962cd3d048d02ad53abee8c5244277315414ca2e8118b2354e1376e4bbe812dac568aa3d6fa544baebf375d0bb818416d1efcdabd12b6e0cdd9d962684ea686d08c1ad7f9fac79260eed3af53cf1b4851884ebb6103f52b8668f788d6925db6d66c7ee5cbe08432d907208818fba6393036604a3d8e9e46c8843746fec447e406840694692fe236cc5695e9944a0f75a7b12d1b1e39a625cc78ccfe5304c751ea8f7121c1aca570b65bddc50e5746fb3863b8ebeff951badf324b7d379ddcfb747d25e1133144d111a4d5ab08fdf104a43065cba8f9c984d914b81325b79aa7c77c211dcbfd87e8ddea96ac575da0bd1c1b21519a2e01dcc89b1648904f732ece40ce195eaa7319bdc99548f3d43556d450cdf18da0defdac134305c50183f2ca5cf573da8144e913cf8139d963fe2d5dce417e7cd61357a96ec806ed119d82ccbf78da2604e6bb5efa581d1f32d1097002264d273568cde80e36a829af7441a727bff4de1b61f47237a5aabc62564f1f08e340499312390afa07c3dbd2ca5c31851a92455617c2a54e2747bc1c3a7189ee92fa3ded105236033eed3e228cd0b916854c64b853bcc5bc344cd6b2348507c027719653c9f279bd167d6d0278e00d0aef865941afdecfeeeccaa69715a52efdfeba8234921b8d52f8c0184312ff976c75a03d125586895330b804c805ac16162bb1c89367f35a15ee6b1d20adb5370d09eaa24a8efd919b6f355d6dbb4808b81ef5e41f863739a9e19d332da77bd0b68cc2453649b28ed0f9d6f55d02b8d73685f667d4c04a2e5d1865ee9057e02e14b0a4989b262e493c2d954fb75a2a632bf5571732fb25954cd7cc9b829e8a6c3d3f2bdb29e2bc79d79a88ec50238982f3c9a8056a3fb6d6aaa5f1683d8f02a6aaabb93b9ddfc0f94258137cf414377a2e60d7a4fb36e49b7eb18f9562a20afea4c58bf4058071400ab391bd596bdd5807d2e64f59e3da24bd440bdf34690af285a5f2521a86a3fa9a452e78143ba916", 0x1000, 0xfffffffffffffffb) keyctl$set_timeout(0xf, r1, 0x8) r2 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000003c0)=0xffffffff00000000, 0x12) 22:41:16 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x10002, 0x80) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0xfe96, 0x0, 0x8, 0x1}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={r2, 0xfffffffffffffff7}, &(0x7f00000001c0)=0x8) r3 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x1000, 0x2000) ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0xc787) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) connect$pppoe(r3, &(0x7f0000000280)={0x18, 0x0, {0x4, @empty, 'syz_tun\x00'}}, 0x1e) 22:41:16 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000040)={0x56, "de760e9f3d1e6f64367ccf020a436b1bdca7a7cb8bd2c90166ddf3e00327eb34", 0x8, 0x397a, 0x712, 0x1f, 0x2}) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:41:16 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)=0x0) r5 = syz_open_procfs(r4, &(0x7f0000000080)='\x00\x00\x00\x00\x00D}\x00\x00\x04\x00\x00\xf9\xd5p)\x93\xc8x\xa7|&\xa0\x18(\x18q\xf0\x0e\xd8\xbf\xf7w\x81\x8f*\x87\x8d\"\xa9') getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000100)={'nat\x00'}, &(0x7f00000001c0)=0x54) sendfile(r3, r5, 0x0, 0x80000001) 22:41:16 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x5, 0x0) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000000)='fdinfo/3\x00') sendfile(r1, r3, 0x0, 0x80000001) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f0000000080)={0x0, 0x100000001, 0x100000002, 0x100ffff, 0x10014, 0x10000000000aab}) 22:41:16 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x3f, 0x0) write$FUSE_BMAP(r0, &(0x7f0000000180)={0x18, 0x0, 0x7, {0x8}}, 0x18) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x2c7, 0x82002) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e22, 0x79b5, @ipv4={[], [], @multicast1}, 0x80000000}}, 0x0, 0x401, 0x0, "7e8d2fe1f3c0056aeb214ea192216ffb4847c65486ef4893055103a573f264069dc97599706c42caf2c3b5a7433c26d13e5ba91020c8f092f24c26f370470c0768d53a3b413d34c510082fddcdc56af4"}, 0xd8) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000100)=0x1) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x0, 0x0, 0x0, 0xa67c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x741, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r1, 0x0) 22:41:16 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000080)='fdinfo/3\x00') sendfile(r1, r3, 0x0, 0x80000001) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000100), 0x1) 22:41:16 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='pids.max\x00', 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000040)={'syz0', "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"}, 0x103) write$cgroup_int(r1, &(0x7f00000003c0)=0xffffffff00000000, 0x12) fadvise64(r1, 0x0, 0x3, 0x5) [ 293.670364] PPPIOCDETACH file->f_count=2 22:41:16 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) r1 = open(&(0x7f0000000080)='./file0/file0\x00', 0x80400, 0x80) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x4000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xbc, r3, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x105}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7fff}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x1}, 0x4) prctl$PR_SET_FPEMU(0xa, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = socket(0x10, 0x3, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f0000000000)) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') ioctl$RTC_AIE_OFF(r0, 0x7002) sendfile(r4, r5, 0x0, 0x80000001) 22:41:16 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xc4ad, 0xf) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080)=0x10000, 0x4) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) 22:41:16 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x10}) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) [ 293.860484] PPPIOCDETACH file->f_count=2 [ 293.910264] PPPIOCDETACH file->f_count=2 22:41:16 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_dgram(r1, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 22:41:16 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x1b, 0xf, 0x5187099d) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x11020}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="cf8342a0", @ANYRES16=r2, @ANYBLOB="eb5327bd7000fedbdf250500000034000200080008003f00000008000b000a0000000800030001000000080009000700000008000d000100000008000b000a0000000c000100080009006a000000080005000400000064000100080001000a000000080006006e71000008000b007369700014000300e0000001000000000000000000000000080006006e710000080009003f000000080002002100000008000b00736970000c0006006e6f6e6500000000080004004e22000008000400030000000800050044070000"], 0xd0}, 0x1, 0x0, 0x0, 0x8000}, 0x53fb735ca32b46fe) fcntl$setflags(r1, 0x2, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r3, 0x0, 0x80000001) 22:41:16 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x401, 0x800) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x4, 0x4, 0x3}, &(0x7f0000000100)=0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000140)={r2, 0xb2b8}, 0x8) 22:41:16 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000003c0)=0xffffffff00000000, 0x12) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x90000) 22:41:16 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:16 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x40000000}) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r3 = request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='/dev/ppp\x00', 0xfffffffffffffffd) keyctl$reject(0x13, r2, 0x3, 0xf1d, r3) 22:41:16 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000280)={'broute\x00', 0x0, 0x3, 0x55, [], 0x1, &(0x7f0000000080)=[{}], &(0x7f0000000200)=""/85}, &(0x7f0000000100)=0x78) r1 = socket(0x10, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/i\x1f\xfe\x00\x00A\xf0T_&\xbfV\xcc\xc7\x88\xa0\x1b\xb1\x02\xad\xf0#\x0e3\xeb\x87\xe7\xc9\xe7\xb4\xfb\xd4\x1b\xa4&\xc5\xd7\xae\xb8\xe2\xf1\xb7\xe6}\x02,\x85\xf6\xfa\t\\\xe4\xeb\xcf^\xeaD\x82mj\xe8M\x9e\xfdK\x1f\x03\x9e%F\xe5\xf8\xa3\x06\xefKg\xc2Q\x99!\x82\xf9L\'\xbf\a\x88\x8c:\xec\x9d\xf9\xf69\x1a\x1e\x1a\xac\xc2\x9f\xc7dO\xf7\xa2\x83\xd9U^\xbe\xcf\x13\'\xe8\xc3\x01\xbc!\x83*+\xf1\xd4\xf7\x9c\xfa\vxH\x04\x00\xb55\xf9\x85$\xb4\x81\xf5h@^\x1dz\xd9\x1e\x844[\b\xf9P\xed\xb3\n') ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000340)={0x0, 0x3ff, 0x7ee2, [], &(0x7f0000000300)}) sendfile(r1, r2, 0x0, 0x80000001) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000000)=0x64) 22:41:16 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_dgram(r0, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 22:41:16 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 294.524957] PPPIOCDETACH file->f_count=2 22:41:16 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x13, 0x4, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') sendfile(r2, r3, 0x0, 0x8) syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x9, 0x20000) 22:41:17 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2a79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000080)={0x2, 0x70, 0x5, 0x8000, 0x0, 0x9, 0x0, 0x3, 0x12004, 0x8, 0xffff, 0x2, 0x1, 0x8dd, 0x8, 0xfffffffffffffe1e, 0x3, 0x52, 0x4, 0x2d2b, 0x8, 0x8000, 0x0, 0x101, 0x1, 0x6, 0x101, 0x10001, 0x5, 0xfffffffffffffc00, 0x7fff, 0x7f, 0x1000, 0x2, 0x5, 0x100000000, 0x100, 0xbe, 0x0, 0x200, 0x1, @perf_config_ext={0x800, 0x7}, 0x3a000, 0x100, 0xaf3, 0x5, 0x5348, 0xffffffff, 0x8}) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r1, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x200, 0x0) ioctl$RTC_UIE_OFF(r2, 0x7004) 22:41:17 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.swap.current\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f00000000c0)=0x26e) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 294.610582] PPPIOCDETACH file->f_count=2 22:41:17 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000040)=0x5d8e) 22:41:17 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) r1 = socket(0x10, 0x3, 0x0) linkat(r0, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x1000) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:17 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2a79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000080)={0x2, 0x70, 0x5, 0x8000, 0x0, 0x9, 0x0, 0x3, 0x12004, 0x8, 0xffff, 0x2, 0x1, 0x8dd, 0x8, 0xfffffffffffffe1e, 0x3, 0x52, 0x4, 0x2d2b, 0x8, 0x8000, 0x0, 0x101, 0x1, 0x6, 0x101, 0x10001, 0x5, 0xfffffffffffffc00, 0x7fff, 0x7f, 0x1000, 0x2, 0x5, 0x100000000, 0x100, 0xbe, 0x0, 0x200, 0x1, @perf_config_ext={0x800, 0x7}, 0x3a000, 0x100, 0xaf3, 0x5, 0x5348, 0xffffffff, 0x8}) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r1, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x200, 0x0) ioctl$RTC_UIE_OFF(r2, 0x7004) 22:41:17 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_dgram(r1, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 22:41:17 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) 22:41:17 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x40000, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000003c0)="818e9648dbc107ec883e1f1b91db4c4d989ba9ed4c943f3aaadee8a089da08dc02eddadacdb102064db77286e0971a983626b2045633097e24e19bf6784ed980d99b95454e693bdcb48b269e4809e52044d7afad2820e57b65eb3f324a7a98ac2123ff8ca22ae14cc9314e9843d6419a82195610aa1ebb28d7586873839895922660a18dc38ef8bd78c0f0a6eb28c53bcfd4dcf6f76c41d037f808611bc5abd20625b0e2b5b3b7eaac908f2235daa0de326bd1e51385d4f30b993088ab49bb9781aa5d3442870bc517056942dc836734d5777e1cf67ec801cdbbff17d668306cb0b488e3423f0180e0d82b79f274cc92cc2e2453e6ee2d9f037d39d99b21533e") ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000140)) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) bind$llc(r2, &(0x7f00000000c0)={0x1a, 0xffff, 0x4, 0x0, 0xffffffff, 0xfffffffffffffffe, @local}, 0x10) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) sendmsg$alg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="a88bec242786efd1baa26abaa7c26d8a30343d0ebfdb484f581d12c75e50fec9d99b1d72b7d767200cf3e4d80096e5", 0x2f}, {&(0x7f0000000280)="6ea8e9080745393a6053dd59fda3994057d43e2978df12ee433803f730a35c31730440e66d6cf19626a1478f2f889d38be786cde75bc5e599b2cedbeb88505ef3d6e3663032c62b5f73d79afe9374141642f72148ea98dc58b7dca51c65f018ee3ef1d", 0x63}], 0x2, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}], 0x48, 0x800}, 0x80) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000004c0)={0x0, 0x97, "961b178f981543c80018205456c7ef6e1848b373fe7bb74c0b3df807fecdfb6a7764184c8b606d2de3a31c7f31f2b1c66f671957d101131815557c8e5ac6633c158ea32b0260dab954df2912be25b1646604d35fcb782c1c013d3f24f22056f5cc4413df4cc0ce6a138b5cea741af762925e21bb4726e8da8f8e04dd89eb7288441f4f7715e96255c3adb19ad7fc78f96693914f02ba92"}, &(0x7f0000000580)=0x9f) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000005c0)={r3, 0x9c92, 0x1, [0x10001]}, 0xa) 22:41:17 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) recvfrom$x25(r1, &(0x7f0000000280)=""/219, 0xdb, 0x100, &(0x7f0000000140)={0x9, @null=' \x00'}, 0x12) 22:41:17 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfe, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r3, 0x800, 0x7ff, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x1febf9c2, 0x2f526f66]}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfff}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x44090}, 0x48000) sendfile(r1, r2, 0x0, 0x80000001) 22:41:17 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2a79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000080)={0x2, 0x70, 0x5, 0x8000, 0x0, 0x9, 0x0, 0x3, 0x12004, 0x8, 0xffff, 0x2, 0x1, 0x8dd, 0x8, 0xfffffffffffffe1e, 0x3, 0x52, 0x4, 0x2d2b, 0x8, 0x8000, 0x0, 0x101, 0x1, 0x6, 0x101, 0x10001, 0x5, 0xfffffffffffffc00, 0x7fff, 0x7f, 0x1000, 0x2, 0x5, 0x100000000, 0x100, 0xbe, 0x0, 0x200, 0x1, @perf_config_ext={0x800, 0x7}, 0x3a000, 0x100, 0xaf3, 0x5, 0x5348, 0xffffffff, 0x8}) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r1, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x200, 0x0) ioctl$RTC_UIE_OFF(r2, 0x7004) 22:41:17 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x4, 0xfffffffffffffffc, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = getpgid(0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x1000, 0x10000}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={r4, 0x80, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x5, @empty, 0xfffffffffffffffe}, @in6={0xa, 0x4e24, 0x1, @rand_addr="eb7b59c8b45ba8d496f0dd256d72b442", 0x10001}, @in6={0xa, 0x4e21, 0x3, @rand_addr="d76a415769a1479cdb029e2768c2dedd", 0x9}, @in6={0xa, 0x4e20, 0x7, @rand_addr="df3b081137d779ac2fc1fbe811a602ce"}, @in={0x2, 0x4e22, @loopback}]}, &(0x7f0000000240)=0x10) r5 = syz_open_procfs(r3, &(0x7f0000000100)='fdinfo/3\x00') ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f0000000340)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) sendfile(r5, r0, 0x0, 0x80000001) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000280)={0x4cd8, 0x1, 'client1\x00', 0xffffffff80000004, "fd4a612eff57393a", "f1ada6731ee2929fb3df18cc5f774a17b479ff23c6719e27f84b3d0cc841d8a2", 0x4, 0x5}) [ 295.440542] PPPIOCDETACH file->f_count=2 22:41:17 executing program 0: io_setup(0x3f, &(0x7f0000000000)=0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x40000) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_cancel(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x4, r1, &(0x7f0000000140)="0517137538cda61651d806be76176bf1483524cb9af200b95bbd13fe7e63f418ad519bb4", 0x24, 0x1, 0x0, 0x0, r2}, &(0x7f0000000200)) r3 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r3, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r4 = socket(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r4, r5, 0x0, 0x80000001) 22:41:17 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2a79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000080)={0x2, 0x70, 0x5, 0x8000, 0x0, 0x9, 0x0, 0x3, 0x12004, 0x8, 0xffff, 0x2, 0x1, 0x8dd, 0x8, 0xfffffffffffffe1e, 0x3, 0x52, 0x4, 0x2d2b, 0x8, 0x8000, 0x0, 0x101, 0x1, 0x6, 0x101, 0x10001, 0x5, 0xfffffffffffffc00, 0x7fff, 0x7f, 0x1000, 0x2, 0x5, 0x100000000, 0x100, 0xbe, 0x0, 0x200, 0x1, @perf_config_ext={0x800, 0x7}, 0x3a000, 0x100, 0xaf3, 0x5, 0x5348, 0xffffffff, 0x8}) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r1, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x200, 0x0) [ 295.514951] PPPIOCDETACH file->f_count=2 22:41:18 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x10002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000200)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, r2}) r3 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f00000000c0)) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x400, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x3}) 22:41:18 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgid(0xffffffffffffffff) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x48000, 0x0) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000140)) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x9, 0x100, 0x2, 0x80000000, 0x0, 0x3, 0x204, 0x0, 0xfffffffffffffff9, 0x3, 0x1, 0xad4, 0x200, 0x10, 0x6, 0xbdf7, 0xfffffffffffffff7, 0x0, 0x2c7, 0x70d6, 0x7, 0x0, 0x9, 0x0, 0x8, 0x6, 0x2c, 0x5, 0x69fc, 0x80000000, 0x2, 0x3, 0x3, 0x0, 0x6, 0x9, 0x0, 0xebd, 0x2, @perf_config_ext={0xffff, 0x7}, 0x20000, 0x4, 0x1000, 0x0, 0x3, 0x3}, r1, 0x10, r0, 0x2) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:18 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') flistxattr(r1, &(0x7f00000001c0)=""/215, 0xd7) sendfile(r3, r4, 0x0, 0x80000001) 22:41:18 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_dgram(r1, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 22:41:18 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2a79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000080)={0x2, 0x70, 0x5, 0x8000, 0x0, 0x9, 0x0, 0x3, 0x12004, 0x8, 0xffff, 0x2, 0x1, 0x8dd, 0x8, 0xfffffffffffffe1e, 0x3, 0x52, 0x4, 0x2d2b, 0x8, 0x8000, 0x0, 0x101, 0x1, 0x6, 0x101, 0x10001, 0x5, 0xfffffffffffffc00, 0x7fff, 0x7f, 0x1000, 0x2, 0x5, 0x100000000, 0x100, 0xbe, 0x0, 0x200, 0x1, @perf_config_ext={0x800, 0x7}, 0x3a000, 0x100, 0xaf3, 0x5, 0x5348, 0xffffffff, 0x8}) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r1, 0x0) 22:41:18 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x6, 0x0) renameat(r1, &(0x7f0000000140)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') fsetxattr$security_smack_entry(r0, &(0x7f0000000280)='security.SMACK64IPIN\x00', &(0x7f00000000c0)='\x00', 0x1, 0x1) 22:41:18 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) write(r0, &(0x7f0000000080)="b77be3c5b8b6f76cbb8688829bd4645ff7c44e92c08e66562ecbf6f4ec623d2525c7091fb6f35883e39c168a8da822f5dd5d0297e48cef103d1d20357c10", 0x3e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) 22:41:18 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000000)) dup(r0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x9b, 0x111280) ioctl$EVIOCGREP(r2, 0x4004743c, 0x0) 22:41:18 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x100, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)) gettid() r2 = getpid() r3 = syz_open_procfs(r2, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x02\x00\x00') ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000080)) sendfile(r1, r3, 0x0, 0x80000001) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xdf12316565a482c7}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r4, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x8, 0x6, 0xfffffffffffffff9}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8005}, 0x20000000) 22:41:18 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2a79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r1, 0x0) 22:41:18 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000000)={0x80, "a5c6f6f632900e74f4d45d6def16cbd572c30292701bb3ee88ff0f634f3905a6", 0x0, 0x1}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:18 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000280)=""/4096, &(0x7f00000000c0)=0x1000) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:18 executing program 1: r0 = accept$ax25(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @bcast}, [@netrom, @null, @null, @bcast, @bcast, @remote, @remote, @default]}, &(0x7f00000000c0)=0x48) dup(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)=0x0) r5 = syz_open_procfs(r4, &(0x7f0000000100)='net/ipx\x00') mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) sendfile(r3, r5, 0x0, 0x80000001) 22:41:18 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:41:18 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 296.460377] PPPIOCDETACH file->f_count=2 [ 296.510519] PPPIOCDETACH file->f_count=2 22:41:19 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) ioctl$VFIO_CHECK_EXTENSION(r2, 0x3b65, 0x6) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) ioprio_get$uid(0x3, r3) getresuid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0) write$FUSE_ATTR(r2, &(0x7f0000000240)={0x78, 0x0, 0x5, {0xd08a, 0x1, 0x0, {0x5, 0x1, 0x400, 0x0, 0x100000001, 0x8, 0xc20, 0x2, 0x100000001, 0xff, 0xfffffffffffffff9, r4, r5, 0x2, 0x9}}}, 0x78) 22:41:19 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x2}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={r4, 0x6}, 0x8) 22:41:19 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_dgram(r1, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 22:41:19 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 22:41:19 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14, 0x80000) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x5c, r2, 0xc10, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x3b}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x28}}}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e21}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr="72637efc4f39d7d49c6b52061d7a8c28"}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_AF={0x8, 0x2, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8800}, 0x88c0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:19 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x404) rt_sigaction(0x15, &(0x7f0000000240)={&(0x7f00000001c0)="c401b5e86bf9c4c1f9284b080fc5f7000faa0f71e2c9c4416455b902000000c4e23546a524da7be2f3410f70f4c9c4627d1d4100c442413f7200", {0x1}, 0x40000000, &(0x7f0000000200)="41dbef0f0ffd8e3ef791f7000000440f0ff2bf666740dbc30f98dec4627d59f6660f38069100000021f0188800000000360f18be08000000"}, 0x0, 0x8, &(0x7f0000000280)) fsetxattr$security_smack_transmute(r0, &(0x7f00000003c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000400)='TRUE', 0x4, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/status\x00', 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000380)=@req={0x28, &(0x7f0000000340)={'hsr0\x00', @ifru_settings={0x3, 0x3f, @cisco=&(0x7f0000000300)={0x6, 0x55}}}}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000440)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) write$FUSE_GETXATTR(r2, &(0x7f0000000480)={0x18, 0xfffffffffffffff5, 0x6, {0x1}}, 0x18) r3 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x400, 0x12c2d980f85fa2c6) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x100, 0x30}, &(0x7f00000000c0)=0x18) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={r4, 0x38, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x400, @rand_addr="6ef15bd15ca7dbfd7c6bcd9bea286676", 0x68e7}, @in6={0xa, 0x4e22, 0x8d27, @local, 0x2}]}, &(0x7f0000000180)=0x10) 22:41:19 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 22:41:19 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_dgram(r1, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 22:41:19 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 297.123310] selinux_nlmsg_perm: 17 callbacks suppressed [ 297.123319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=16572 comm=syz-executor.0 [ 297.129528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=16574 comm=syz-executor.1 22:41:19 executing program 4: socket$inet_dccp(0x2, 0x6, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2a79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:19 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) [ 297.210732] PPPIOCDETACH file->f_count=2 22:41:19 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_dgram(r1, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 22:41:19 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) ptrace$pokeuser(0x6, r1, 0x8, 0xe3d4) r2 = epoll_create(0x201) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:41:19 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) read$char_usb(r0, &(0x7f00000001c0)=""/148, 0x94) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) 22:41:19 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:19 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_dgram(r0, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 22:41:19 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2a79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 297.319124] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=16601 comm=syz-executor.0 22:41:19 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) write$P9_RXATTRWALK(r0, &(0x7f0000000000)={0xf, 0x1f, 0x1, 0xfffffffffffffffb}, 0xf) r1 = socket(0x10, 0x3, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000140)=ANY=[@ANYBLOB="070600002f000000e2af278d6558eb557b24d1d815e4a0b5a4564a7d18939861f89d85f62f5458a1e06e8973e08c233b9973493fd50747e9000000"]) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000001840)=0xc) syz_open_procfs(r2, &(0x7f0000000100)='fdinfo/3\x00') r3 = accept4(r0, &(0x7f0000001680)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000001700)=0x80, 0x80000) sendmsg$inet(r0, &(0x7f00000017c0)={&(0x7f00000001c0)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000000200)="d0c5c681c6046cf2b7318c8124589ca356bd93d0a65018bf3836fcdaed5f153c3ef71bdf95e2b105db84bd1719f42dc0", 0x30}, {&(0x7f0000000240)="e95b06bbe1d158776a0646a8b044820051d625207c74ec927b2abbeeb3b36dc461ab8fadcd", 0x25}, {&(0x7f0000000280)="1c1f8a6ef3f0b0b5ca66df8cebd5e393f662285591d95de6a40fc7f86a87143fbd651ae5c58b156f", 0x28}, {&(0x7f00000002c0)="758bc4838acfe6824e6977b341cde084e8a3b28481ba6d61686dc684bd4fdadd9f1149650667b7eff877e7442ec1e6a91bccdf9d51b8f3b6973f8055370f276718439e6b279a28bfc4b3ad479b36c85f2215302e5d199b1c81477adfc8d30ece4454445c2fe5504953a608f2693ff0c6ec4aa013b09cd44a26ae20c075e370cb4c546772e1a0d2826ad01868ff4063e6ac9a0644916cf154d52d97cbf893bbd9b1", 0xa1}, {&(0x7f0000000380)="fd4e484dad6dfeccfcedc1bace9c7fd83c0a9fff550a2efc1faeb75b74bad8c6a457f7a0ae95fd8f2a34cff8393489bf3341aa94a2db8c27d9074c337acf08e9332ffb4422aac80697329b307a57", 0x4e}, {&(0x7f0000000400)="98f4243ddad1f53e780493e869479550f6b2dc8ba1612b3e888cb764557595022481d32d46550ba6f093563821c7d98a28bb35645611323a0ae9c759dfa5d69ec6c8866fe00c2637c4", 0x49}, {&(0x7f0000000480)="e0a412d3105a0eb9243201841abe4ff4936870433d7fc8756809f7ffdbc34577b6ae9226fb9e914cd5a01bc0375d81aed07880efa22e901f5aeef23193674ad1fd41fe8c8d4bb1cd50d703a1181f0b484fd63ba4aa31f4213d777ad2f273624b04865cdd1b7d1d1bc66d6cca6388d618672d137dd715ef7ba3dc1133077c19f72578420a1723c2d9b6a1f7580c3404bfd7d27d0d8aebced07f5ac311f0393cebf165154157994638f9981ff7805764f2b30505c4208e108160a1", 0xba}, {&(0x7f0000000540)="144d3555dc16e9628d22e49c20f6de997fbf74bac1bfff573c5b8cd023617c15aead33d84208112ddf7086e1", 0x2c}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="6b010e7b8233bbe02b75927fb92f175acf709d14a65bf9e789ef6cdc003d449f8382d05a70ce9e4496546f438a39267383865bf5", 0x34}], 0xa, &(0x7f0000001740)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x80}, 0x20048800) sendfile(r1, r3, 0x0, 0x8) [ 297.423103] PPPIOCDETACH file->f_count=2 22:41:19 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8080}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x3, 0x401) r2 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x60, 0x80000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x4, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @loopback}, 0x1, 0x0, 0x4, 0x4}}, 0x26) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000001c0)={0xffffffffffffffff, 0x100000000, 0x5, 0x0, 0x1, 0x8000, 0xfffffffffffffff9, 0x3ff, 0xfffffffffffffffe, 0x3, 0x142, 0x81, 0x0, 0x8, 0x4, 0x80, 0x70b23bc9, 0x5, 0xff}) 22:41:19 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_dgram(r0, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 22:41:19 executing program 4: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 297.444297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=16619 comm=syz-executor.1 22:41:19 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) accept$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:41:19 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:19 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000000)={r0, 0x401, 0x7dfbe0e8, r1}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x100000000}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x1000}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000200)={r3, 0x6, 0x92a, 0x9, 0x4, 0x9, 0xfff, 0x4, {r4, @in6={{0xa, 0x4e23, 0xffffffffffffffff, @loopback, 0x2}}, 0x5, 0x8001, 0x8a, 0x400, 0x4}}, &(0x7f00000002c0)=0xb0) sendfile(r1, r2, 0x0, 0x80000001) 22:41:19 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) pipe(&(0x7f0000000000)) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) 22:41:19 executing program 4: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:20 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_dgram(r0, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 22:41:20 executing program 4: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:20 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', r3}) r4 = socket(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r4, r5, 0x0, 0x80000001) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r5, 0x80dc5521, &(0x7f00000001c0)=""/77) 22:41:20 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_dgram(r1, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) [ 297.630182] PPPIOCDETACH file->f_count=2 [ 297.630377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=16650 comm=syz-executor.1 [ 297.655491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=16652 comm=syz-executor.0 22:41:20 executing program 5: r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name, &(0x7f00000000c0)=0x10, 0x2f00de0f80397454) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000100)={0x4}) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r1, 0x0) 22:41:20 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2a79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:20 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_dgram(r1, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 22:41:20 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)={0x110, 0x0, 0x7, [{0x5, 0x8, 0x9, 0x3f, '/dev/ppp\x00'}, {0x1, 0x9, 0x0, 0x28}, {0x3, 0x4, 0x7, 0x8, 'filter\x00'}, {0x5, 0x7, 0x9, 0xff, '/dev/ppp\x00'}, {0x0, 0x5, 0x9, 0x7, 'lovmnet0:'}, {0x4, 0x3, 0xc, 0x3, '\'{mime_type@'}, {0x3, 0x0, 0xa, 0xe2, 'ppp0md5sum'}]}, 0x110) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer2\x00', 0x40000, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000600)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7ff, 0x2000) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000080)=""/116) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000500)=""/246) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000100)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000b0000000beccfe427b32f850584f827dd79a57dae5b2f28d4dcb64e822b0b42f15b12c43c0e4468cabee6b9e3cde17ffad96d796a9be7cfa2823919c1f29881b21510655ca4016414a211ccbf09ee2b11f2a1aede7e967f670870824f3e6102d93c05f7ffbf274fcf2d148dff28efcd9eea7f6d80c0c52b0c7e53b488417e3a0c21273c1a15b1f9bc6365d5b35371e970fe07560a64429dc5dbb9b3cfabdc122a4be76d457b8bc319d373264957cb41daf6f1e9b"], &(0x7f0000000200)=0xd4) ioctl$SIOCX25GDTEFACILITIES(r3, 0x89ea, &(0x7f0000000480)) r4 = getpid() ptrace$getregs(0xe, r4, 0x8, &(0x7f00000003c0)=""/189) r5 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r5, &(0x7f0000000040)={0x100}) ioctl$EVIOCGREP(r3, 0x4004743c, 0x0) [ 297.743760] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=16670 comm=syz-executor.0 [ 297.785839] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=16667 comm=syz-executor.1 22:41:20 executing program 5: timerfd_create(0x5, 0x800) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000180)) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r1, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x400, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000280)="333fc279742885abff8506646c95211f6411b0afdede932834ec7b2eb47007e62d4975d7dd779cfb622a73556edaa9082f70b660be2fbe58fb5f81a3a21f2087847dcf96cedf0ea3103f82377f4b495ccab3e63605016a56f614b7d23f8332e2221a5a15759ce660e484839d3b8dca355c86930677938127", 0x78) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0xffffffffffffff7b) r3 = add_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000004c0)=0xe5) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000500)=@assoc_value={r4, 0x7fff}, &(0x7f0000000300)=0x5e) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000340)={0x0, 0x800}, &(0x7f0000000380)=0x8) keyctl$invalidate(0x15, r3) 22:41:20 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x6, 0x2000) sendfile(r1, r2, 0x0, 0x80000001) 22:41:20 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_dgram(r1, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 22:41:20 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_dgram(r1, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 22:41:20 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2a79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:20 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x80) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x4, 0x1, 'queue1\x00', 0x1}) r1 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x3) fcntl$lock(r1, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') ioctl$SIOCAX25NOUID(r3, 0x89e3, &(0x7f0000000000)=0x1) sendfile(r4, r4, 0x0, 0x80000001) fcntl$getflags(r1, 0x0) 22:41:20 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_dgram(r1, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) [ 297.925273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=16691 comm=syz-executor.0 22:41:20 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f00000000c0)) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r1, 0x0) 22:41:20 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x0, 0x61f08b8296811cae) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000500)=""/246) r2 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)) r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000000040)=""/99, &(0x7f0000000100)=0x63) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000140), 0x2) 22:41:20 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x105}) r1 = socket(0x5, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r1, 0x0, 0x7c) 22:41:20 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2a79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:20 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) getpgrp(0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000140)=0x0) r3 = getpgrp(r2) r4 = syz_open_procfs(r3, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r4, 0x0, 0x80000001) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000000)) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x2, 0x50000) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000240)={r0, r0, 0x3, 0x79, &(0x7f00000001c0)="64a3a7ff90042f96f1aab5cb27077ad5e0bb894cbab1fd5912a3f72ba343ff1fa06f9aedb8e4696ad8998965a7090748a1d90789ec8516856bcf7cae51c6e12f9b9b47cb201e80b41f230163d072c9980e463e364894b160536e0291812990ceb6ed7e77afdae940b6591a40843e8ea34dfcc435b787e84068", 0x2, 0x9, 0x10000000000, 0x18, 0x8, 0x1, 0x7, 'syz1\x00'}) 22:41:20 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_dgram(r1, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 22:41:20 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000040)=0x1, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:41:20 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2a79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:20 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000080)=""/53, 0x35) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:20 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, 0x0, 0x0) connect$vsock_dgram(r1, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 22:41:20 executing program 1: r0 = open(&(0x7f0000000000)='./file0\x00', 0xfc, 0x10) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={r2, 0x2, 0x82, 0x400, 0xff, 0x7, 0x5}) r3 = socket(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000040)=0x6) sendfile(r3, r1, 0x0, 0x80000003) 22:41:20 executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0x101400, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:20 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2a79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:20 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r0, 0x0, 0x2) 22:41:20 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 298.259860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=16752 comm=syz-executor.0 22:41:20 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x0, 0x5, 0x5) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0xb8, r4, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ifb0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x86}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000084}, 0x1) sendfile(r2, r3, 0x0, 0x80000001) [ 298.310508] PPPIOCDETACH file->f_count=2 22:41:20 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2a79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:20 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000100)=0x3, 0x4) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x2) socket$nl_crypto(0x10, 0x3, 0x15) 22:41:20 executing program 2: openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x40, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x41000}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x244, r2, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x24, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_LINK={0x84, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x28b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER={0x5c, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x99}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}]}, @TIPC_NLA_MEDIA={0x14, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_LINK={0xc8, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9f74}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe7a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2941}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff17e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfd3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r3 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:41:20 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2a79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:20 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r0, r1, 0x0, 0x80000001) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x7b, "528990087690681ad9f576fa1b26c02f57a98d4b5473f52df357b3576a80ffb0ef4f98486254a819bdd288e084fb9a5263788461bd258d054f5c22ae930731251b147701da6307db73f564360ad8f2b4822b7d67345ce72fa3ebd0d585ff3f1f5ce3b60d798be0225b3b6caeb703d469c4bc14c6f005103a586155"}, &(0x7f0000000000)=0x83) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={r3, 0xfffffffffffffffd}, &(0x7f0000000200)=0x8) [ 298.541354] PPPIOCDETACH file->f_count=2 [ 298.570422] PPPIOCDETACH file->f_count=2 22:41:21 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$setflags(r0, 0x2, 0x0) r1 = getpid() fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x101, r1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r0, 0x0, 0x2, &(0x7f0000000000)='#\x00', 0xffffffffffffffff}, 0x30) r5 = syz_open_procfs(r4, &(0x7f0000000140)='fdinfo/3\x00') sendfile(r3, r5, 0x0, 0x80000001) 22:41:21 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x100) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f00000000c0)=@netrom={'nr', 0x0}, 0x10) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:21 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, 0x0, 0x0) connect$vsock_dgram(r1, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 22:41:21 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2a79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:21 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000140)={r3}) sendfile(r1, r2, 0x0, 0x80000001) socket$packet(0x11, 0x2, 0x300) 22:41:21 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x1, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) fcntl$setflags(r0, 0x2, 0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:41:21 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, 0x0, 0x0) connect$vsock_dgram(r1, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 22:41:21 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000000)='./file0\x00', 0x80800, 0x81) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) 22:41:21 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 22:41:21 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:21 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x40, 0x1050c3) connect$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x5158dcd3b7dd0fab, {{0x0, 0x3}, 0x4}}, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, &(0x7f0000000180)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) sendfile(r1, r2, 0x0, 0x80000001) [ 299.190909] PPPIOCDETACH file->f_count=2 22:41:21 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 22:41:21 executing program 1: r0 = open(&(0x7f0000000040)='./file1\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="3bf9da00"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x3, 0x4, [0x1, 0x6, 0x81, 0x80000000]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000280)={r3, 0xb9da, 0x6, [0x100000001, 0x6, 0x7ff, 0xfffffffffffffffb, 0xc8, 0xebe6]}, &(0x7f0000000300)=0x14) r4 = socket(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r4, r5, 0x0, 0x80000001) 22:41:21 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc01}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ptmx\x00', 0x101000, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x4}) r3 = syz_open_pts(r2, 0x0) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) write(r3, &(0x7f00000001c0)="2a1d7d0c6ab33cd3c316b3", 0x2160c417) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x5, &(0x7f0000000100)={0x0, 0x0}) semctl$IPC_RMID(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) stat(0x0, 0x0) setpgid(0x0, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f00000000c0)=""/204) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:21 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [{0x20, 'vmnet1*'}, {0x20, '/dev/ppp\x00'}, {0x20, '/dev/ppp\x00'}, {0x20, '-*,^'}, {0x20, '/dev/ppp\x00'}, {0x20, '/dev/ppp\x00'}], 0xa, "04f4759fee0ee0c1c83af3f0badd823ffa04203252d17ee17c88d76483120d4696475439b1be003e7ff9ffb92421d00db89a9e3819a546bf777478e720565f31ea743ff06f937bd1e513dd36b2f5f2b5907897ab5a900e4736ff09425968ff86b37f823f3ebccf860985ff916fd084dbfee1b72aefcc86f1b2615bc1361af105e0daa2009af585a804ab9bb89f66613d66d2971192641d3194212eddf1f519173b5ac5a48ac17a58daf631c94e188d5fc10ae538bc63bf95e5e4c35eee5002c186d38490ea1e48d56f7971a14db2cdfd39fddece83f990034ccfab55aa8402a6072710b235"}, 0x125) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:41:21 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:21 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 22:41:21 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) gettid() ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000500)='fW\xe4nfo/3\x00\x83N\n\xa3>\xc3\xf8\xca\xff\x04 |\xab\x17\x80\x92~\xd2fJ>L2\'}\r\x1b\x03\x81n\x01<\x87\xc0\x97\x1e\xa6\xbd\x14\x16AlN\xa4\x10&\xa2tU\x91\x103\x98H\x03X\x87\x95\\\xce\xde\x19\x9f\xd7\x17\xbc\x8c\x1a\x1a\xa1\x9b\xec\xfc\xcb)\x95\xc9K\xd3\x98\xf8\x80*\xcdMUkLS1\n\x81\xf1n\x16\xfdn]$\xf9I\x8c\x98\xf4~t\xcfik\x87\x8a\x81C\xaa\t\xcb\xe7\xa9\xf2\xb6ZQ\t\x1b\xa4\x93\x1b\xad\x0f\xb8\x05\xb7\a\x7f\xe1\xeeg\x02c4\xe5\xd1j#Bq`\",\xcc\a\xd6\x80\x94`\x9e\x9f\x98\xc3\x91\xc4%\x99\x15\xfb\x18*M\xe1\xd5\xa6\xfe\xb3\x83\x19\xfc\xc7ER\x15_!\a{\xf0Q\r\xff\xa8R~5\xe5\xc8\x00h7\x97*\xd8p\xd4\xd8J\xe9T\xd4d\x16p\x00\x00\x00\t\xb7\x7f\">9aA\xba{!x\xca\xb4\xa8\x03\x85\xf0\xf3\xa6\xb8\x83|\x8a\x83G\xb6\x0f7 \x9fn\xafe\x89M\x16\x00\xf1\"Ae\xa4\xed|c\x0f\x8f{\xd7\x1c\x8d{\xc4\xf1\x83\xdbu\xe8\xed\xa3A\x93') sendfile(r1, r3, 0x0, 0x80000001) 22:41:21 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:21 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 22:41:21 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) r4 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x0, 0x2) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000380)='dctcp\x00', 0x6) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r0) [ 299.411808] PPPIOCDETACH file->f_count=2 22:41:21 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:21 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_dgram(r1, 0x0, 0x0) 22:41:21 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:21 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x403) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x8, 0x7f, 0x8f}, {0xffffffff, 0xffff, 0xfff, 0x8}, {0x0, 0x4, 0x3, 0x3}]}, 0x10) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000240)=0x6, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000000340)=ANY=[@ANYBLOB="8100000004000000a33a000089f8f23b351c26981c19e857891613124277cfde79ef70fd5975de9fdd4cec6e7cccdc2fe958354ebbe62a54e10368eda5d6a29e9e9fc61e316713210a430f6bcd56eed8b0a76afa34d8ae6956530bfff7d86fd2341f2e5cac7ad2b4f8a6033c995c04c2f80662eb3bcb260382284b255b33ba58f54b1cf6ba9683c8c7411cd7c79bac7699c422c1cfcb4843ca24a0afe0caef8c"]) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) ioprio_get$uid(0x3, r3) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000100)={0xffffffff, 0x80000000, 0xc, 0x80, 0x2, 0x1, 0xfffffffffffffffb, 0x9, 0x0}, &(0x7f0000000140)=0x20) write$cgroup_int(r2, &(0x7f0000000180)=0x7, 0x12) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000300)=@assoc_value={r4, 0xfff}, 0x7aa1386e2dfd6565) ioctl$EVIOCGREP(r2, 0x4004743c, 0x0) 22:41:22 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x200, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000180)={0x5, 0x0, 0x91, &(0x7f00000000c0)="b0af629e189472898844cd44f5a4796317e9c3ef80dba3e0d5929b6712c134bab2134b9ef26f1f6e94419b4544c4472dda28fa5db4326519b5393987403c81fd8a91391d85b20d382b41766d770da26a6290da53301063e8ac302a44a268d30876ff62e09c3c87bed6d026b27ee496357810ac77cc0b62f26ce3a0f6e5adc08a0eba815b154775280fe6d3b60abeea23b8"}) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:22 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) flistxattr(r1, &(0x7f00000001c0)=""/197, 0xc5) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) 22:41:22 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:22 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:22 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_dgram(r1, 0x0, 0x0) 22:41:22 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) fsetxattr(r0, &(0x7f0000000000)=@random={'osx.', '\x00'}, &(0x7f0000000040)='*nodev&nodevppp1\x00', 0x11, 0x3) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) fchdir(r1) 22:41:22 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_dgram(r1, 0x0, 0x0) 22:41:22 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:22 executing program 1: r0 = open(&(0x7f0000000380)='./file0\x00', 0x1a000, 0x186) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0xee, 0x101, r1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="cfafb68a048540ca4bcca1537de4611a95d0c5e86535f5db2fa6851849a8a39cc63d46dd6dc1641214867b6693b9bbefbe7f0d1e6d37d6779d134446053f240cf35d2a4760f2c44b7706a7ccfdd2df15ea70a01d13d299fe445fd435392e5a0c85959d96397fb02b947c39aa4e4be742be2d058f04147e6bf5a07b86c6b61048e3c08bfe06ebfeb0c8de6fc1ec5b4c6ab8309ada12e2ee0fd5c340852a81bfe973d108a1f9c968f9412bdc2088fb2ed391bbd0bb6826e61af0ae5dfd8e377e4e7818fc9c02e59cf1782cf90c9145fd41919230c882aa", 0xd6) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000480)={0x0, 0x100}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000500)={r4, 0x10001, 0x4, 0x7}, &(0x7f0000000540)=0x10) getsockname(r2, &(0x7f0000000580)=@ipx, &(0x7f0000000600)=0x80) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000080)=0x54) rename(&(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)='./file0\x00') r5 = socket(0x10, 0x3, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000040)={r0, 0x100000000}) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000140)=0x2) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') ioctl$KVM_SET_PIT2(r6, 0x4070aea0, &(0x7f0000000400)={[{0x8, 0xb5ae, 0x9, 0x246c, 0x1, 0x1, 0x401, 0x1ff, 0xfffffffffffeffff, 0x1, 0x84a, 0xffffffffffffffff, 0x3}, {0x647, 0x54d, 0x9, 0x6, 0xfffffffffffffffb, 0x618, 0x8, 0x7fffffff, 0x800, 0x55, 0xfffffffffffffff9, 0x1000, 0x7}, {0x1, 0x0, 0x6, 0x3, 0x100000000, 0x3f, 0x67a, 0x3, 0x10000, 0xffffffffffffffff, 0x0, 0x4, 0x6}], 0x653}) sendfile(r5, r6, 0x0, 0x80000001) 22:41:22 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/mls\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000200)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, r0, 0x0, 0x9, &(0x7f0000000080)='fdinfo/3\x00'}, 0x30) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000240)={0x0, 0x400}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r3, 0xfffffffffffffffc, 0x2}, &(0x7f0000000300)=0xc) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000180)=0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x8f, r5}) r6 = socket(0x10, 0x3, 0x0) ioctl$RTC_PIE_OFF(r1, 0x7006) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000740)={0x5, &(0x7f0000000440)=[{}, {}, {}, {}, {}]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'erspan0\x00', r8}) ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f00000007c0)={{0x2}, 0x8, 0x2040000, 0x5}) r10 = syz_open_dev$sndpcmc(&(0x7f0000000800)='/dev/snd/pcmC#D#c\x00', 0x3, 0x400001) sendfile(r0, r7, 0x0, 0x2) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f00000003c0)={r9, 0x1, 0x6}, 0x10) set_tid_address(&(0x7f0000000900)) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f0000000380)=@sack_info={r4, 0x4, 0x6}, 0xc) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000780)) ioctl$SIOCNRDECOBS(r1, 0x89e2) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000400)=0x8, 0x4) 22:41:22 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x1, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) fcntl$setflags(r0, 0x2, 0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) [ 300.249669] Unknown ioctl 4713 [ 300.268967] Unknown ioctl 4713 [ 300.284707] PPPIOCDETACH file->f_count=2 22:41:22 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:22 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3554855e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x7f) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000080)={0x9}, 0x4) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f00000000c0)={0x20, {{0x2, 0x4e22, @multicast2}}}, 0x88) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000000180)={0x0, 0x0, {0x81, 0x217e, 0x8, 0x2bd6}}) 22:41:22 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8, 0x2000) syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xfff, 0x480002) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x2, 0xb10e45319cbe7eec) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/enforce\x00', 0x800, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000200)=""/246) r2 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:41:22 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r3, r4, 0x0, 0x80000001) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f00000001c0)={[{0x7f, 0x5, 0xbe, 0x3, 0x3f, 0xce82, 0x1, 0x80, 0x7, 0x8, 0x4, 0x5, 0x3}, {0x9d, 0x800000000, 0x3, 0x0, 0x0, 0x18000, 0x400000009, 0xfffffffffffffffe, 0x3, 0xfffffffffffffeff, 0x7, 0xe77, 0x6}, {0xa5, 0x25b1, 0x2, 0x4, 0x5, 0x7, 0x2f2, 0x6, 0x5, 0x6, 0x935, 0x0, 0x6}], 0x5}) fcntl$dupfd(r1, 0x0, r3) 22:41:22 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xf9, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socket(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') 22:41:22 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 300.420498] PPPIOCDETACH file->f_count=2 22:41:22 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_dgram(r1, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 22:41:22 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) r2 = dup3(r1, r0, 0x7bbe4358fb3f0080) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:41:22 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:22 executing program 3: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:22 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x1, 0x20, 0x6c7b, 0x81}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x80, 0x6, 0x8, 0x11ab, 0x8000, 0x6, 0xfffffffffffffffb, 0x0, r1}, &(0x7f0000000200)=0x20) fcntl$addseals(r0, 0x409, 0x1) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080)=0x40, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) r4 = getpgrp(0x0) r5 = syz_open_procfs(r4, &(0x7f0000000000)='fdinfo/3\x00') sendfile(r3, r5, 0x0, 0x80000001) 22:41:22 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/120, 0x7ffff000}], 0x1}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r4, 0x0, 0x80000001) setns(r0, 0x10000000) 22:41:23 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x10000, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000140)={@multicast2, @empty, 0x0}, &(0x7f0000000180)=0xc) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, r1}, 0x14) getsockopt$inet_int(r0, 0x0, 0x13, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r2, 0x0) 22:41:23 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:23 executing program 3: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:23 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default]}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) [ 300.660818] PPPIOCDETACH file->f_count=2 22:41:23 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x4c2401, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20800}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xe4, r2, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x98, 0x4, [@TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x16f3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x18}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x8c1}, 0x24008044) prctl$PR_GET_SECCOMP(0x15) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:23 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='f\xfe\xf5\'\x8b\xdf\xfc)\x93') sendfile(r1, r2, 0x0, 0x80000001) [ 300.721017] PPPIOCDETACH file->f_count=2 22:41:23 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:23 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x6ad1, 0x1, 0x800, 0x8, 0x3, 0xd40}, 0xc) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:41:23 executing program 3: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:23 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2000000fffffff) r2 = socket(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000000)=0x5) sendfile(r2, r0, 0x0, 0x80000001) 22:41:23 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000180)={@broadcast, @initdev, 0x0}, &(0x7f00000001c0)=0xc) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x7fffffff, 0x1f, 0x6, 0x3, 0xffffffffffff098a}, 0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f0000000300)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@empty, @in=@local, 0x4e20, 0x2, 0x4e22, 0xe7, 0xa, 0xa0, 0x20, 0x3a, r2, r3}, {0xffffffffffffff3c, 0x7f, 0x200, 0x3, 0x91a4, 0x401, 0xbd, 0x6}, {0x52f, 0x9, 0x3, 0x77}, 0x5, 0x6e6bb7, 0x0, 0x0, 0x1, 0xec08c56cc2da7a19}, {{@in6=@empty, 0x4d4, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3506, 0x4, 0x2, 0x100000000, 0x9, 0x6, 0x6}}, 0xe8) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) sendfile(r1, r4, 0x0, 0x80000001) 22:41:23 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:23 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000280)={{0x5, 0x0, 0x1, 0x81, 'syz1\x00', 0x3f}, 0x0, [0x7, 0xffff, 0x7ff, 0x800000000, 0x7, 0x20000004, 0x8, 0x1, 0x3, 0x1, 0x2, 0x0, 0xbf, 0x38bcf4bd, 0x5, 0x400, 0x48000000000, 0x2, 0x2, 0x5, 0xd52, 0xf13, 0x6b, 0xf2aa, 0x100000001, 0x2fc, 0x7f, 0x40, 0x1, 0x0, 0x3b8, 0x5, 0x6, 0x5, 0x3f, 0x9, 0x1, 0x100000000, 0x8, 0x8, 0x8, 0x4, 0x5684, 0x8, 0x7, 0x7, 0x1000, 0x100000000, 0x1, 0x5, 0x12c31931, 0x0, 0xfffffffffffffffd, 0x1, 0x7, 0x0, 0x2, 0xffffffffffffff60, 0x6, 0x7fff, 0x6, 0x8, 0xffffffffffffffff, 0x0, 0x9, 0x0, 0x100000001, 0x791c, 0x4, 0x9, 0x10000, 0xa90, 0x85, 0xfffffffffffffff8, 0x5, 0xfffffffffffffff9, 0x8, 0xe9, 0x40, 0x7, 0x3, 0x4, 0x9816, 0x0, 0x100000000, 0x0, 0x7, 0x375, 0x3f, 0x9, 0xd3e, 0x5, 0xfff, 0x9, 0x5, 0x1, 0x6e4b, 0x9, 0x101, 0x7fffffff, 0x80, 0x8, 0x1, 0x80, 0x0, 0xf89e, 0x2, 0x5, 0xfff, 0x2, 0x0, 0x80000001, 0x100000000, 0x7c, 0x4, 0xef38, 0x6, 0x0, 0x1000, 0x7f, 0x80000000, 0x0, 0x8001, 0x800, 0x2e35b6e9, 0x9, 0x2, 0x9], {0x0, 0x989680}}) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r1, 0x0) 22:41:23 executing program 3: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:23 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x1a9) socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:23 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000000)=0x4) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) connect$bt_sco(r0, &(0x7f0000000080)={0x1f, {0x3b62, 0x5, 0xffff, 0x9c86, 0x98, 0x200}}, 0x8) r1 = socket(0x10, 0x3, 0x0) r2 = getpgid(0xffffffffffffffff) r3 = syz_open_procfs(r2, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r3, 0x0, 0x80000001) [ 300.960931] PPPIOCDETACH file->f_count=2 22:41:23 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:23 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:23 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000040)={0x53, 0x4, 0x7f, {0xfffffffffffffffc, 0x629}, {0x78eb00000000000, 0x4}, @ramp={0x6, 0xf4, {0x3, 0x3db, 0x8, 0x2}}}) r2 = epoll_create(0x400) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000080)={0x3, 0x5}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@local, @in6}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000000200)=0xe8) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:41:23 executing program 3: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80000001) 22:41:23 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r2, 0x2}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r3, r4, 0x0, 0x80000001) 22:41:23 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/157, 0x9d}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/145, 0x91}, {&(0x7f00000012c0)=""/235, 0xeb}], 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4000, 0x0) sendfile(r1, r2, 0x0, 0x80000001) faccessat(r2, &(0x7f00000013c0)='./file0\x00', 0x0, 0x400) bind$bt_rfcomm(r1, &(0x7f0000001400)={0x1f, {0x9, 0xff, 0x8, 0x8, 0x6, 0x6}, 0x8}, 0xa) 22:41:23 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 22:41:23 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x80, 0x0) r2 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000280)={{0x2, 0x6, 0x7fff, 0x4, 'syz1\x00', 0x1}, 0x4, 0x41, 0x7ff, r2, 0x3, 0x1, 'syz0\x00', &(0x7f0000000180)=['/dev/cec#\x00', '(lo$em1*vboxnet0\xadeth1securitykeyring[-proc+\x00', '\'!\x00'], 0x39, [], [0x8, 0x7f80000000000000, 0x8, 0x5]}) r3 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x3, 0x2) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000000c0)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x101000, 0x0) 22:41:23 executing program 3: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80000001) 22:41:23 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x0, 0x7, 0xfff) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:23 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x7ffffffe) [ 301.220526] PPPIOCDETACH file->f_count=2 22:41:23 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 22:41:23 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x2) 22:41:23 executing program 3: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80000001) 22:41:23 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x803, 0x0) bind$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, {0x100000001, 0x80000001, 0xfffffffffffffffb, 0x8, 0x8, 0x5b7}, 0x3ff}, 0xa) 22:41:23 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x444080, 0x0) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 22:41:23 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 22:41:23 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) 22:41:23 executing program 3: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x80000001) 22:41:23 executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0xfc, 0x80) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x5, 0x5, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:23 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0xffffff4c, 0xee65, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xafe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2000000040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4) ioctl(r0, 0x3, &(0x7f0000000280)="be43447afd40159d9a94d8fda6eaf72944282abcfb2141d9635b8aa7298c3d643ab77e5d4379ad810d87fb83755f215c4ffd72a2bdc9bd77c277acc4c15e02de83dafaf3acff0f1c79040620202adbf3edee644b113dc187cf7cd5550ff47850b4941f91a80f2e767ef75f809a92c96395c02e98ac96733d3e09148bba82b3f74ef701535bf0223c8daa2ade1131fdc5d8225311c875af1c424be27089e2b53a4360fe7d45b6b422da721a09727723924682c492a798105f27af0439f9fd9307646c453f751939ba0f70af1ef3591c9a93b5c9db8f43d26ce1a48cf84359dad5ef8f25b33d89665f367f52bd6005913129879052cb336778421c4141beb4073f53c3669ca1c604f3488b5eddd302cf37cb4a0da2e952ede3bd084259d132c353ba4192e46a88c02aa316281e4ebb0a57050f2018e9b325d42cdcf12cc83efe7f0776e2e3de78fae10dfbfb73dc4c1b5c0cd20c6134a55672635664f58317bfb2f2974579fa44ca37503d2137f19134a4fcf69d92a5d7bc094538f625b9ea89240d2d83cfe9212b3295c272dd631ef51b7c6dbbb1aeefb04414ea3a2d6cc2ae582d58d45713e76f22c196306a361ac77262eb032892bbf865a940ae8e257d250459a31dfd07a00507b5fc437771cd84a506bfb08a6418ae0d0925b0bd2c0a3d6e75aa91bc3c9f8f41a463a21d5ccf9f3a750bc184684afc9b7beea3f047a909b6e30a87f21d8175f6fcb7ff105e351e8eb1c3e8377f5b359eb3141ea3744e5304d9e7c87fc6bbf1c48a047b737548842f3b55396967ae9325fc67354317d577a0ebfbf390d08c4c88505359bddc00199d428721ab7e7c5b038bc1462f639915d9a0504d0aa14943f1063b530ae07b4003da1c54419a3c1d2d93dbe54bc42ff66e5c7a54e10c5259c99041bb6b84db47d9217fd04198a698eeaa4186343b65fd79f5766068b0bd0c2a491b0b5a5747b69c4792a4e694d56f3f9e96ec405eaf6a7c07827cab37c032765c08c04921efe1bac5873bc9937bde4311c987fdf925c5d29d07130b7a87553cb73304c2ef2acf1691c8bb5932ecbcd18d86d42b00110ae29b7389063b1c6cd70d95f715676a3c5039a79d2e8a2ee19da501f0f80ef13c83faf7025e50b816440e623211fc91e8e7b9a3c258c29828d26817fdbecd4f1d74bf600877f2cd0dc9a44f259649a806a0277c4ebec438058fa492941772e3406c61a823c3728370a38eea9e193232d0e024adf3365c8f2d00f94895253da3cefb446d01beca5b67c044bbf93406ce87fb7e7c933e94312786a6826d83aa835a4e4f0363aeb99288a6e9a5b5638057c20a4b02d8940d07306f80ad118f7116faa8348d0b9f2a5e0cbf7dc0ceded192546673a4152283f3ca77ae532d7a34ab13eee8485624ebbfad730684a6ea1bef41414059b8c1fb2bcc6a26f26170859e82fd6f6620ce41a10e7d67bef10b45c7846dcd9e9c1bc234821517bc241d938c6f95f356a5a5ce90359699e87862c692974342aa816777ffc51f6abf1f5e1c3aff5e914b5ffff851dacc360a35598e6c8a928080e571c1ef6989b7473f6c3f525feaabaf6f6b40392e0147a4a3f34c9171f1304ae0a21fa82123b7ad8d12678636aac8ed2db9f24d53b70475bc0b6dc2d20a507ed6696d5d8064287aff110a7d6f73f7710d64cae1ba78da00404a84c4219cd571afe22b1595146730d518fc9530625b980c7ade50f837abd4b8f10ab21ad5c588cea6dc488ca09a630c920dc701b0e0c7852174ddbd5ab96abfb2557b84356eb88aefcb83ad58b48cb8e250196837b8a0c1697e07551586314cb8b83b3aca90134db5a3b0e1ad1354fe4fbab0448bef4a49d4dbf4aade1ed706450c7446341c2f203820acd3475f21e571888b65354a55b6fbefcc3b7d536e810e88eb5090274ca492ecb52368530a36356b984e25060987218e2ec6771faf5da6d77ba3989248ddfa9921d7d302389db1e589146be833a8305b35ec3086e9be8aa3506df04d8b46f0521a20bbcf0233895a8b37916a59f5c9377b2725b34e1048b9101e97f0452fd29ccf715e0a6e17b32dc4318245f93422659cb924fe0649074bcd7655104ece69090b51f28041f9f595d8ae5f42c64798014308d05b9497126194c3802d74051a529b6364dd26ee6a36afc9d439d1674481542a97fd69f038391224b3399035cf70af77d5c297c0becfb3e36e579cb27814b0705e6de232d0e20e16b730046ccdc8a56b59324c523af120632f7d73540bf7ce1fdacb060c0160c9cca58f0216b127bb37616fb4de06ac0be9c0f7471be634fa328b2644157cfdef051cc3a32549551044de3443ccf033471197ee37edab8acfb870bb7b9a63447dcc57166a9a1f30215456efa548dbc4a3aeff3cad8b3e422de756c6055cc2f6e41eb71250cab7b8a004df6cf2ba509b18fac9465fb06f0ccbd1b803ad6264449fb661cc259b54ca87bf70d18c19b18d82773f423e07c0b75dc356683c4c67b867e2ffdd192fb4f682a8314b5ba6a190d007bbf13bd8cffc0c133d641e71722e574c9e45e9b39359176892c7d282edce6a747f4c460a132069e622a97a89cb71e989a8f625428ec0a1500bc179744098e4bef77eb625e0aa860024c4f2ffa7b57555d2e80862208fa526d46783e95c1bc9008446506b95b97dd0bd93bc6d9741e6d579d344fdbe9715a746df2494d02c417bf5660d77013d00ef63b63a89d9657a7b2dc60e6f0e585e161892a1ec23efaab217adcd6689ec6b9ea8c571b4d1c61534d54ce03f77f365953b60fc3bc75b440a25c1997259e67f18248eca9992cc3eb08c1223594a91e39ed3f0a05f47ee590b9e947456f789b7b7455a9017bc02fb73c4ca882e5adbd71992589cc6a6f3eff94d59d3e366301da75b7f5ba45fb2af68f800210d759f6d6b1eac7cd19e375fd991987a0b192f123b679911daceba45c085cd1baf131e715b6664a3701ea32048cc6f3dbe44d2c972aca0598cd6d45b64ec6c84d1787c0eeade4bb25c35577e498ea34f4ce474b93d243e57bc236e3f7c3a157b1fdc4530529254547b3c4b25542c1586bc116f0874152811f476de43f9abfad2db40a7a95922af08757af9c9a9f9a11b1967dc7738e11f9ea24decbb504119c47f8d4423cd0e5ca47761ddb0d52b1d67c7737226f0bb7f767838b76061cdc8e6e2c8692b5d4d675abaccd9ddd59fc3ffcfe3194a535a4e8b04a4c4bbb022082f938618de0ea7eba36bdc5fb1faaf7155c77087c22edf97b45ebc8b11a70b9e248b9b0735fd144e39ac3f78ad78ae57b190194070266fcc0fe0163eedc1a6b734ced5a0ef830df4b2c36850328402c3d5dc6771e1c7c3a3b00b2986851f26e59ff2b4c67afabd0746fb1ca6dc1655274453cd85904b4efcbc258a8da41d8f7757e3a5fbdd4c04f7c0458b8ee3bec9801f8f3f452b53fc0dde1fec26d4ce4b5258157cb3c013358e9d518c5b9d3b776220b385c6a7ce1d14afb02af04e9b9101033ba80d034c9f6509fabd16ed4096928559380a14e060cbca3bb948b229a96f1a265e891a6ccfdf1446a47a3356c7db40e720c8598e1388f1342047550b9cad330e27422f63e5fc3baff34e77d25def6eb980f1b786d3189f7432f193864690b1cdbad51cfd8fdcd37cb901953668a4107d721b20598bdee8cc797e293a8ad2b0fb22fcde4417102b56cf70498b551a0d2b588d5835de9d0b6ec563c4f64e8bf22fb73f8a74205f6957fe187fd379f9c80523d26ed67919aca6adcb0ed4177734b9f33bf0aef8cace5b5cea6736b50a837112b73745e515d18effd04e698be43033adb1a191b8a07dfcc20d6fa03d89109de745256cb48f1b7326e8bf89a7fb33983093b0861ad070e407a93add3fe14de8b0624a278af7222d69fc93275512b2619f695da734b4460786df9cdf3f2f2b2c9567fd2f95e1d48b25e873de509ab7808ec9217b3e1cfd6c2de9f04eacb7c79bea9f7a1182849e889baf9fb9ec216efcfda3bec6e377900151e2c7bea4ae57243fe0c6d87d05540b341a6263ff4f87d9e79d786dc1e699b5a55653c8fd8aa193156c503993a314d01b8b206c9485ae9444369bff208109e7ce765e7368a45262b67a6d690cd5be26e210c08b719d85640d58d08225b3c6eb1e5b44bd2bc9074df963625f7b07abe59a49ab0dedead95811013b453997d939df3255512c61c097a48f79643568aba682482c9586dc7bc5636240e274fb8a381a03ff15b1eb4f001dc1dfff83d7f5fb71acc7ca5597c4f3e38eae4e1e4a3caebb4cbb5ca775a1f2a7cabd5ab413d4332d5bade8319844a8df557b32be333361e6c323eb41714e3c4736983f8fedcc285c7b848250b0f370a8eeeb1a768c7f5c9f88f0364c717ba70712831f91aeb24a49040c702ebed4b6ad594d96b8914cf98667712a3f3f37a8a1402c8cf5b21ab9fcfb62f0763198c9d644d03636ce52081f935d7e5b033e2e86fbbd6e18c0f63bd962fda50419710d38d378fc46df52782877462930811bf77f2db15b600d7f3f694895cf8fdcc52a49d8a7796fa65e7a55e3d50127fb1531e6693619e345069e9da328a4dc1e9077d72f0399c49ebfa9bf021ba68f4ee29e98d239b9fc20a1380429d8168ce5a5423c0e70d8c9523352e6d8e27dd4d808d6ab1bd39464f0d93c7f0ab54740d7a84fa3485c75fa320f96409cfbeb7142352cee04c22fc1d9a75a49a64dcae774097fd0f8bdb20fffd2d4d19659c4639e98a3d2f315751199b9e85933af4648fed31b1164bab8d4d7b53929e6e34c9f59eb6a1dab88e3778c1d72e1fa45c2c5f6c0c672c3bc6ba8f31e47a3ed4a0ea73dcd8368505552bad457edb8be4d4aa0ca003cd245c1a1e6a8c1481ea021a1535c3eb0eefeabf5029aea86928ada4578b75a0295f89b7342fac22596bd1093593170da979a123a1c84777a0676506a86d68f59688169579aec2dd415fb1791482f8147f144980f6f83c5a1b97f8d8c4314b3f0f768545e6dc20cc09348e604e094329fa69e6eebdf7438cd9b91e6cf67ad3119d8e6600c2b3e2ab86ed45be2a8016f4dde1cad91dda5d892df6d3281c8ed08998f2ee7372b4c11c25e48bcfeb637752740b0f7408905fb44809860ae5b27917c31804134c04e477535148f57bbeaf07ae5cfbf6fcba80be394d7ce15e4e402cac098de4717abed033505e58633133207fd0a034b59751b7bc3286f9abf9bad7571546bccde3931f776a9f499bc1c72074f5564524f99f20a4c2a104f602712ec0a3c9563874f9471ed03b51985b060fc43c28591265cb3bf20f8ad87c4f2fa461e67d048096e8d960d63f5ab6ec405165526f082179028063613a01babba3cba1b6941deeec1fbed1900a9bd0e5e0c331ea9c4b56cec017508281776e0a5bf7c784d18dd913eef8db171930dca7ddf17830eff445231dcc75c977838013978467ce1b671309d4f9794fa13c1d0ab8ca06bc9e8e358cd8415eb365f48e35b7ab136b088c193bc57e11d6215358663fe3c980514a624998ac67feb5bd02e643994c24144b9a1db3f4b7f90c340581911f0ce82c8a020be0637aa82cfcdfb3d930300babd124b2b4aec121decd239573e806887ca7d6697218a2a26ef3d978f37836c090e382a05d21cf03076b0a94b913097931f0cefa4c1766b33c57a104576d2bfff2d2e8445a456ac6b0655c59176639774ba8a1d605c46545aae96766e00d75b16c8d62ad9d846a757b5f378ea6b2ab8c65f4379d9478d78f44622756961a22bb91c06af2f12973319bb71a7") perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:23 executing program 4 (fault-call:1 fault-nth:0): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:23 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000080)) r2 = socket(0x10, 0x3, 0x0) connect$llc(r2, &(0x7f0000000000)={0x1a, 0x205, 0x1c0000, 0x4, 0xa4, 0x0, @random="be403262ac3f"}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) 22:41:23 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x2000, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0x66, "8085057064d3b4f8fb47174770ca8573cb47f9cad37001aabc8acbad0c569fb97daa27880a1d532b78d9e135e867f3bf465a94ab1551c975da37b8dda8f77b51baf98e434d73dcc34a87a39fc0687f1b05c5f07307e7b7024198c34e57d2ef49f36ab3e8754f"}, &(0x7f0000000140)=0x6e) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000180)={r2, 0x7}, 0x8) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 301.530834] PPPIOCDETACH file->f_count=2 22:41:23 executing program 4: keyctl$set_reqkey_keyring(0xe, 0xe00d50e9b0f00abf) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x7cec, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:23 executing program 3: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x80000001) 22:41:24 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000000)={0x5, 0x2, 0x101, 0xff, 'syz0\x00', 0x20}) 22:41:24 executing program 0: r0 = open(&(0x7f0000000280)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) fstat(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="776f726b6469723d2e2f66696c65302c6e66735f6578706f72743d6f6e2c78696e6f3d6175746f2c736d61636b66736465663d6664696e666f2f33002c6673757569643d00323538376663722d666362392d356636332d313700342d30373831356166312c6f626a5f726f6c653d6664696e666f2f33002c6673757569643d33643837366164322d003337382d368336332d316666392d35393800313563342c6673636f6e746578743d73797361646d5f752c61756469742c666f776e65723c", @ANYRESDEC=r3, @ANYBLOB="2c736563010000066c2c759eeaee6a8a69643e6eac72e72abf4e60fad44f000000000000000000", @ANYRESDEC=r4, @ANYBLOB=',\x00']) 22:41:24 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x800, 0x0) timerfd_gettime(r1, &(0x7f00000000c0)) 22:41:24 executing program 3: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x80000001) 22:41:24 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/user\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x85f, 0x0, 0x3}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:24 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) getpgrp(0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r4, 0x0, 0x80000001) [ 301.697480] overlayfs: unrecognized mount option "nfs_export=on" or missing value 22:41:24 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x3, 0x8, 0x4, 0xe000, {0x0, 0x2710}, {0x5, 0xc, 0x100000000, 0x9, 0x401, 0x8, '\\Ke\x00'}, 0x3, 0x3, @fd=r0, 0x4}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='f\x91ijfo/3\x00') getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000), 0x2) sendfile(r1, r2, 0x0, 0x80000001) 22:41:24 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r0, r1, 0x0, 0x80000001) 22:41:24 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x200, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000300)={0x24000000000, 0x9, 0x3, 0x6, 0xb, 0x1, 0xed3d, 0xff, 0x2, 0x8, 0x1}) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000440)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, r2, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) r3 = perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r1, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000cc0)) r4 = getpgrp(0x0) getpgrp(0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x70, 0x6, 0x2, 0x3ff, 0x101, 0x0, 0x2, 0x7db967aca6ca788e, 0xc271c5d756100748, 0x8, 0x1, 0x0, 0x2, 0x8, 0x5, 0x1, 0x1, 0x9, 0x5, 0x7, 0x1, 0x9, 0x2, 0x7, 0xffffffff, 0x9, 0x5, 0x2, 0x2, 0x8dd5, 0x7f, 0x767, 0x7, 0x0, 0x1, 0xfffffffffffffff7, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f00000007c0), 0x1}, 0x0, 0xeab, 0x0, 0x2, 0xfff, 0x3}, r4, 0xf, 0xffffffffffffffff, 0x8) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000340)={0x8, 0x3, [{0x3, 0x0, 0xffffffffffffffff}, {0x5, 0x0, 0x1ff}, {0x401, 0x0, 0x37cc}, {0x9, 0x0, 0x10000}, {0x3, 0x0, 0xed7e}, {0x6}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x7}]}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) r6 = getpgrp(r5) gettid() r7 = perf_event_open$cgroup(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x9, 0x800, 0x6, 0x0, 0x401, 0x4c000, 0x4, 0x80000000, 0xc03b, 0x46, 0x1ff, 0x9, 0x2, 0x8, 0x35a80000000, 0x10000, 0x5, 0x1d, 0x3, 0x9f4, 0x65cf9058, 0x7, 0x40, 0x4, 0x34ff, 0x1000, 0x10000, 0x2000000, 0x10000, 0x5, 0x741, 0x0, 0x8, 0x2, 0x7ff, 0x0, 0x8, 0x4, @perf_config_ext={0x3, 0xe2}, 0x11000, 0x100, 0x4, 0x3, 0x1, 0x9, 0x10000}, 0xffffffffffffffff, 0x0, r3, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000540)={0x1, [0x0]}, &(0x7f0000000580)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x4e20, 0x2, @mcast1, 0xffffffffffffff45}}, 0x8, 0x3f}, &(0x7f0000000680)=0x90) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000900)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@initdev}}, &(0x7f0000000a00)=0xe8) getresgid(&(0x7f0000000a40), &(0x7f0000000a80)=0x0, &(0x7f0000000ac0)) stat(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = getgid() lsetxattr$system_posix_acl(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='system.posix_acl_access\x00', &(0x7f0000000bc0)={{}, {0x1, 0x1}, [{0x2, 0x2, r10}], {0x4, 0x4}, [{0x8, 0x2, r11}, {0x8, 0x5, r12}, {0x8, 0x2, r13}], {0x10, 0x4}, {0x20, 0x97027235f5c47583}}, 0x44, 0x2) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000006c0)={r8, 0x101, 0x0, 0x69, 0x2, 0xff, 0x7fffffff, 0x5, {r9, @in={{0x2, 0x4e21, @empty}}, 0x1, 0x3, 0x80000000, 0x800, 0xea}}, &(0x7f0000000780)=0xb0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x1, 0x4, 0x11, 0x8, 0x0, 0x40200, 0x850, 0xa, 0x8000, 0x8, 0x1000, 0x37, 0x8001, 0x2, 0x7f, 0x1, 0x8000, 0x2, 0x5, 0x2, 0x4, 0x101, 0x54, 0x4, 0x8001, 0xfffffffffffffffd, 0x100, 0x1, 0x82, 0x3, 0x7, 0x101, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0x1}, 0x0, 0x6, 0x0, 0x5, 0xea4, 0x5, 0x8}, r6, 0xb, r7, 0x103) [ 301.783709] PPPIOCDETACH file->f_count=2 22:41:24 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) fcntl$addseals(r0, 0x409, 0x4) 22:41:24 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000001c0)={0x0, 0xe3, "83f2a4e9b3317ee0ae996f16e1ebbe942c2fb96527635b1183a4711b4f2d86c76c324083d492b4742e4bcc3313d9b0f262ce1dd4a5d07d1c275f8ce266ae979e7aed763d9f0c9f443644d9f70427243d90910ee5423d6b0154c4801bd1006f18d2870b76f6e7379470cd62cefc1805ef93d3012cb3ea09edb1f71c90161ce43f33328cf1243d913c45965c07cef5696930e7841f35ca555923638e838c26b9536e3dce0d0b7f04880e56cd7f2227be0ab18bd6a6fe2ca2f10438fb32cdb7c788d0a4139b0f8febfb2021dac06a43349d6cd98f66aab41fedf4b3d3ecc553b53cb49ea6"}, &(0x7f0000000000)=0xeb) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={r4, 0xebb}, 0x8) sendfile(r2, r3, 0x0, 0x80000001) 22:41:24 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000000)={0x6, 0x9, 0x7}) sendfile(r1, r2, 0x0, 0x80000001) 22:41:24 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) epoll_create(0xbf) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xef, 0x101101) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x101400) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$EVIOCGREP(r2, 0x4004743c, 0x0) 22:41:24 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000140)) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000180)=0x787fac5d185a310d, 0x4) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RATTACH(r2, &(0x7f00000000c0)={0x14, 0x69, 0x2, {0xa4, 0x0, 0x2}}, 0x14) [ 301.924916] [ 301.926566] ====================================================== [ 301.932870] WARNING: possible circular locking dependency detected [ 301.934726] kobject: 'ppp0' (ffff88805e5aa970): kobject_add_internal: parent: 'net', set: 'devices' [ 301.939176] 4.14.140 #36 Not tainted [ 301.939180] ------------------------------------------------------ [ 301.939185] syz-executor.5/17168 is trying to acquire lock: [ 301.939188] (event_mutex){+.+.}, at: [] perf_trace_init+0x58/0xaa0 [ 301.949044] kobject: 'ppp0' (ffff88805e5aa970): kobject_uevent_env [ 301.952065] [ 301.952065] but task is already holding lock: [ 301.952068] (&cpuctx_mutex/1){+.+.}, at: [] perf_event_ctx_lock_nested+0x150/0x2c0 [ 301.952091] [ 301.952091] which lock already depends on the new lock. [ 301.952091] [ 301.952093] [ 301.952093] the existing dependency chain (in reverse order) is: [ 301.952095] [ 301.952095] -> #5 ( [ 301.958474] kobject: 'ppp0' (ffff88805e5aa970): fill_kobj_path: path = '/devices/virtual/net/ppp0' [ 301.964080] &cpuctx_mutex/1){+.+.}: [ 301.964100] lock_acquire+0x16f/0x430 [ 301.964108] __mutex_lock+0xe8/0x1470 [ 301.964116] mutex_lock_nested+0x16/0x20 [ 301.972326] kobject: 'queues' (ffff8880a7f65348): kobject_add_internal: parent: 'ppp0', set: '' [ 301.978356] SYSC_perf_event_open+0x134c/0x2690 [ 301.978365] SyS_perf_event_open+0x34/0x40 [ 301.978375] do_syscall_64+0x1e8/0x640 [ 301.978390] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 301.986267] kobject: 'queues' (ffff8880a7f65348): kobject_uevent_env [ 301.993660] [ 301.993660] -> #4 (&cpuctx_mutex){+.+.}: [ 301.993683] lock_acquire+0x16f/0x430 [ 301.993691] __mutex_lock+0xe8/0x1470 [ 301.993703] mutex_lock_nested+0x16/0x20 [ 302.002073] kobject: 'queues' (ffff8880a7f65348): kobject_uevent_env: filter function caused the event to drop! [ 302.009597] perf_event_init_cpu+0xc2/0x170 [ 302.009607] perf_event_init+0x2d8/0x31a [ 302.009617] start_kernel+0x3b6/0x6fd [ 302.009633] x86_64_start_reservations+0x29/0x2b [ 302.013500] kobject: 'rx-0' (ffff88809cc04010): kobject_add_internal: parent: 'queues', set: 'queues' [ 302.022492] x86_64_start_kernel+0x77/0x7b [ 302.022502] secondary_startup_64+0xa5/0xb0 [ 302.022504] [ 302.022504] -> #3 (pmus_lock){+.+.}: [ 302.022516] lock_acquire+0x16f/0x430 [ 302.022524] __mutex_lock+0xe8/0x1470 [ 302.026230] kobject: 'rx-0' (ffff88809cc04010): kobject_uevent_env [ 302.030513] mutex_lock_nested+0x16/0x20 [ 302.030520] perf_event_init_cpu+0x2f/0x170 [ 302.030529] cpuhp_invoke_callback+0x1ea/0x1ab0 [ 302.030535] _cpu_up+0x228/0x530 [ 302.030539] do_cpu_up+0x121/0x150 [ 302.030547] cpu_up+0x1b/0x20 [ 302.034918] kobject: 'rx-0' (ffff88809cc04010): fill_kobj_path: path = '/devices/virtual/net/ppp0/queues/rx-0' [ 302.039412] smp_init+0x157/0x170 [ 302.039420] kernel_init_freeable+0x30b/0x532 [ 302.039427] kernel_init+0x12/0x162 [ 302.039436] ret_from_fork+0x24/0x30 [ 302.049038] kobject: 'tx-0' (ffff88807682cc98): kobject_add_internal: parent: 'queues', set: 'queues' [ 302.053925] [ 302.053925] -> #2 (cpu_hotplug_lock.rw_sem){++++}: [ 302.053942] lock_acquire+0x16f/0x430 [ 302.053949] cpus_read_lock+0x3d/0xc0 [ 302.053956] static_key_slow_inc+0x13/0x30 [ 302.053965] tracepoint_probe_register_prio+0x4d6/0x6d0 [ 302.053974] tracepoint_probe_register+0x2b/0x40 [ 302.058887] kobject: 'tx-0' (ffff88807682cc98): kobject_uevent_env [ 302.063101] trace_event_reg+0x277/0x330 [ 302.063109] perf_trace_init+0x449/0xaa0 [ 302.063118] perf_tp_event_init+0x7d/0xf0 [ 302.063124] perf_try_init_event+0x164/0x200 [ 302.063130] perf_event_alloc.part.0+0xd90/0x25b0 [ 302.063139] SYSC_perf_event_open+0xad1/0x2690 [ 302.069084] kobject: 'tx-0' (ffff88807682cc98): fill_kobj_path: path = '/devices/virtual/net/ppp0/queues/tx-0' [ 302.075502] SyS_perf_event_open+0x34/0x40 [ 302.075512] do_syscall_64+0x1e8/0x640 [ 302.075521] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 302.075523] [ 302.075523] -> #1 (tracepoints_mutex){+.+.}: [ 302.322189] lock_acquire+0x16f/0x430 [ 302.326484] __mutex_lock+0xe8/0x1470 [ 302.330778] mutex_lock_nested+0x16/0x20 [ 302.335338] tracepoint_probe_register_prio+0x36/0x6d0 [ 302.341108] tracepoint_probe_register+0x2b/0x40 [ 302.346359] trace_event_reg+0x277/0x330 [ 302.350917] perf_trace_init+0x449/0xaa0 [ 302.355476] perf_tp_event_init+0x7d/0xf0 [ 302.360118] perf_try_init_event+0x164/0x200 [ 302.365023] perf_event_alloc.part.0+0xd90/0x25b0 [ 302.370370] SYSC_perf_event_open+0xad1/0x2690 [ 302.375444] SyS_perf_event_open+0x34/0x40 [ 302.380176] do_syscall_64+0x1e8/0x640 [ 302.384561] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 302.390241] [ 302.390241] -> #0 (event_mutex){+.+.}: [ 302.395602] __lock_acquire+0x2cb3/0x4620 [ 302.400247] lock_acquire+0x16f/0x430 [ 302.404554] __mutex_lock+0xe8/0x1470 [ 302.408847] mutex_lock_nested+0x16/0x20 [ 302.413410] perf_trace_init+0x58/0xaa0 [ 302.417887] perf_tp_event_init+0x7d/0xf0 [ 302.422530] perf_try_init_event+0xe6/0x200 [ 302.427342] perf_event_alloc.part.0+0xd90/0x25b0 [ 302.432678] SYSC_perf_event_open+0xad1/0x2690 [ 302.437755] SyS_perf_event_open+0x34/0x40 [ 302.442485] do_syscall_64+0x1e8/0x640 [ 302.446866] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 302.452568] [ 302.452568] other info that might help us debug this: [ 302.452568] [ 302.460686] Chain exists of: [ 302.460686] event_mutex --> &cpuctx_mutex --> &cpuctx_mutex/1 [ 302.460686] [ 302.471070] Possible unsafe locking scenario: [ 302.471070] [ 302.477100] CPU0 CPU1 [ 302.481738] ---- ---- [ 302.486377] lock(&cpuctx_mutex/1); [ 302.490066] lock(&cpuctx_mutex); [ 302.496095] lock(&cpuctx_mutex/1); [ 302.502302] lock(event_mutex); [ 302.505641] [ 302.505641] *** DEADLOCK *** [ 302.505641] [ 302.511760] 2 locks held by syz-executor.5/17168: [ 302.516570] #0: (&pmus_srcu){....}, at: [] perf_event_alloc.part.0+0xbaa/0x25b0 [ 302.525909] #1: (&cpuctx_mutex/1){+.+.}, at: [] perf_event_ctx_lock_nested+0x150/0x2c0 [ 302.535683] [ 302.535683] stack backtrace: [ 302.540160] CPU: 0 PID: 17168 Comm: syz-executor.5 Not tainted 4.14.140 #36 [ 302.547233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.556558] Call Trace: [ 302.559131] dump_stack+0x138/0x197 [ 302.562755] ? vprintk_func+0x65/0x159 [ 302.566620] print_circular_bug.isra.0.cold+0x1cc/0x28f [ 302.571958] __lock_acquire+0x2cb3/0x4620 [ 302.576092] ? trace_hardirqs_on+0x10/0x10 [ 302.580320] ? trace_hardirqs_on+0x10/0x10 [ 302.584533] lock_acquire+0x16f/0x430 [ 302.588309] ? perf_trace_init+0x58/0xaa0 [ 302.592438] ? perf_trace_init+0x58/0xaa0 [ 302.596560] __mutex_lock+0xe8/0x1470 [ 302.600339] ? perf_trace_init+0x58/0xaa0 [ 302.604469] ? perf_event_ctx_lock_nested+0x150/0x2c0 [ 302.609642] ? perf_trace_init+0x58/0xaa0 [ 302.613778] ? __mutex_lock+0x36a/0x1470 [ 302.617817] ? trace_hardirqs_on+0x10/0x10 [ 302.622026] ? perf_try_init_event+0xf2/0x200 [ 302.626496] ? mutex_trylock+0x1c0/0x1c0 [ 302.630532] ? perf_event_ctx_lock_nested+0x150/0x2c0 [ 302.635693] ? perf_try_init_event+0xf2/0x200 [ 302.640162] ? mutex_trylock+0x1c0/0x1c0 [ 302.644198] ? find_held_lock+0x35/0x130 [ 302.648336] ? perf_event_ctx_lock_nested+0x119/0x2c0 [ 302.653532] mutex_lock_nested+0x16/0x20 [ 302.657664] ? lock_downgrade+0x6e0/0x6e0 [ 302.661795] ? mutex_lock_nested+0x16/0x20 [ 302.666034] perf_trace_init+0x58/0xaa0 [ 302.669985] ? mutex_lock_nested+0x16/0x20 [ 302.674198] perf_tp_event_init+0x7d/0xf0 [ 302.678321] perf_try_init_event+0xe6/0x200 [ 302.682636] perf_event_alloc.part.0+0xd90/0x25b0 [ 302.687473] SYSC_perf_event_open+0xad1/0x2690 [ 302.692028] ? perf_event_set_output+0x460/0x460 [ 302.696761] ? SyS_clock_gettime+0xf8/0x180 [ 302.701074] SyS_perf_event_open+0x34/0x40 [ 302.705300] ? perf_bp_event+0x170/0x170 [ 302.709354] do_syscall_64+0x1e8/0x640 [ 302.713303] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 302.718125] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 302.723305] RIP: 0033:0x459879 22:41:25 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r3, 0x0, 0x2) [ 302.726471] RSP: 002b:00007f5b61f2ac78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 302.734154] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459879 [ 302.741400] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000140 [ 302.748645] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 302.755891] R10: 0000000000000005 R11: 0000000000000246 R12: 00007f5b61f2b6d4 [ 302.763137] R13: 00000000004c66f4 R14: 00000000004db770 R15: 00000000ffffffff 22:41:25 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x2) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0xca54c1b8301192f5, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18) fsync(r1) syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x1, 0x2) 22:41:25 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r0, r1, 0x0, 0x80000001) [ 302.773055] kobject: 'loop1' (ffff8880a4a3c9e0): kobject_uevent_env [ 302.782683] kobject: 'rx-0' (ffff88809cc04010): kobject_cleanup, parent ffff8880a7f65348 [ 302.797405] kobject: 'loop1' (ffff8880a4a3c9e0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 302.805971] selinux_nlmsg_perm: 34 callbacks suppressed [ 302.805980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=17182 comm=syz-executor.3 22:41:25 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x80) openat$cgroup_ro(r1, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0) 22:41:25 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r0, r1, 0x0, 0x80000001) 22:41:25 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)='bridge0\x00') r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80200, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x0, 0xedd0, 0x2d6e746d, 0x40, 0x9, 0x3, 0x53, {0x0, @in6={{0xa, 0x4e24, 0x0, @remote, 0x40}}, 0x5, 0x0, 0x6, 0x1, 0x3}}, &(0x7f0000000180)=0xb0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000001c0)={r3, 0x400}, 0x8) mlockall(0x4) [ 302.815674] kobject: 'rx-0' (ffff88809cc04010): auto cleanup 'remove' event [ 302.837807] kobject: 'loop0' (ffff888052fb8c20): kobject_uevent_env [ 302.844771] kobject: 'loop0' (ffff888052fb8c20): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 302.853376] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=17186 comm=syz-executor.0 [ 302.861398] kobject: 'rx-0' (ffff88809cc04010): kobject_uevent_env 22:41:25 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000007040)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1c000300000000000000000000440c0802e000000100000000000000001c000000000000000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aae000000100000000"], 0x40}}], 0x1, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip6_mr_vif\x00') ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0xd) 22:41:25 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x401}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000140)=r2, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r3, 0x0, 0x80000001) ioctl$KVM_GET_SREGS(r3, 0x8138ae83, &(0x7f0000000180)) [ 302.878933] kobject: 'loop3' (ffff8880a4ae0220): kobject_uevent_env [ 302.887434] kobject: 'rx-0' (ffff88809cc04010): fill_kobj_path: path = '/devices/virtual/net/ppp0/queues/rx-0' [ 302.907715] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=17193 comm=syz-executor.3 22:41:25 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000140)) 22:41:25 executing program 3: fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r0, r1, 0x0, 0x80000001) [ 302.916272] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=17199 comm=syz-executor.0 [ 302.920282] kobject: 'loop3' (ffff8880a4ae0220): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 302.942472] kobject: 'rx-0' (ffff88809cc04010): auto cleanup kobject_del [ 302.950567] kobject: 'rx-0' (ffff88809cc04010): calling ktype release [ 302.957741] kobject: 'rx-0': free name [ 302.962288] kobject: 'loop5' (ffff8880a4b5a320): kobject_uevent_env [ 302.969154] kobject: 'tx-0' (ffff88807682cc98): kobject_cleanup, parent ffff8880a7f65348 [ 302.974901] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=17204 comm=syz-executor.3 [ 302.977493] kobject: 'loop5' (ffff8880a4b5a320): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 302.999476] kobject: 'tx-0' (ffff88807682cc98): auto cleanup 'remove' event [ 303.004084] kobject: 'loop3' (ffff8880a4ae0220): kobject_uevent_env [ 303.013301] kobject: 'tx-0' (ffff88807682cc98): kobject_uevent_env [ 303.013916] kobject: 'loop3' (ffff8880a4ae0220): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 303.026200] kobject: 'tx-0' (ffff88807682cc98): fill_kobj_path: path = '/devices/virtual/net/ppp0/queues/tx-0' [ 303.029463] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=17203 comm=syz-executor.0 [ 303.041994] kobject: 'tx-0' (ffff88807682cc98): auto cleanup kobject_del [ 303.052951] kobject: 'loop5' (ffff8880a4b5a320): kobject_uevent_env [ 303.059163] kobject: 'tx-0' (ffff88807682cc98): calling ktype release [ 303.065336] kobject: 'loop5' (ffff8880a4b5a320): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 303.074827] kobject: 'tx-0': free name [ 303.085545] kobject: 'queues' (ffff8880a7f65348): kobject_cleanup, parent (null) [ 303.088536] kobject: 'loop3' (ffff8880a4ae0220): kobject_uevent_env [ 303.099585] kobject: 'queues' (ffff8880a7f65348): calling ktype release [ 303.100466] kobject: 'loop3' (ffff8880a4ae0220): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 303.107225] kobject: 'queues' (ffff8880a7f65348): kset_release [ 303.121011] kobject: 'loop0' (ffff888052fb8c20): kobject_uevent_env [ 303.124578] kobject: 'queues': free name [ 303.129120] kobject: 'loop0' (ffff888052fb8c20): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 303.133716] kobject: 'ppp0' (ffff88805e5aa970): kobject_uevent_env [ 303.149135] kobject: 'ppp0' (ffff88805e5aa970): fill_kobj_path: path = '/devices/virtual/net/ppp0' [ 303.197776] kobject: 'loop1' (ffff8880a4a3c9e0): kobject_uevent_env [ 303.204420] kobject: 'ppp0' (ffff88805e5aa970): kobject_cleanup, parent (null) [ 303.204821] kobject: 'loop1' (ffff8880a4a3c9e0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 303.215301] kobject: 'ppp0' (ffff88805e5aa970): calling ktype release [ 303.228781] kobject: 'ppp0': free name [ 303.234064] kobject: 'ppp0' (ffff88805f2127b0): kobject_add_internal: parent: 'net', set: 'devices' [ 303.243896] kobject: 'ppp0' (ffff88805f2127b0): kobject_uevent_env [ 303.250300] kobject: 'ppp0' (ffff88805f2127b0): fill_kobj_path: path = '/devices/virtual/net/ppp0' [ 303.259519] kobject: 'queues' (ffff888086a06448): kobject_add_internal: parent: 'ppp0', set: '' [ 303.268918] kobject: 'queues' (ffff888086a06448): kobject_uevent_env [ 303.275593] kobject: 'queues' (ffff888086a06448): kobject_uevent_env: filter function caused the event to drop! [ 303.285840] kobject: 'rx-0' (ffff88805c4729d0): kobject_add_internal: parent: 'queues', set: 'queues' [ 303.295260] kobject: 'rx-0' (ffff88805c4729d0): kobject_uevent_env [ 303.301811] kobject: 'rx-0' (ffff88805c4729d0): fill_kobj_path: path = '/devices/virtual/net/ppp0/queues/rx-0' [ 303.312929] kobject: 'tx-0' (ffff888096b537d8): kobject_add_internal: parent: 'queues', set: 'queues' [ 303.322538] kobject: 'tx-0' (ffff888096b537d8): kobject_uevent_env [ 303.328853] kobject: 'tx-0' (ffff888096b537d8): fill_kobj_path: path = '/devices/virtual/net/ppp0/queues/tx-0' [ 303.340282] kobject: 'rx-0' (ffff88805c4729d0): kobject_cleanup, parent ffff888086a06448 [ 303.348515] kobject: 'rx-0' (ffff88805c4729d0): auto cleanup 'remove' event [ 303.355621] kobject: 'rx-0' (ffff88805c4729d0): kobject_uevent_env [ 303.361969] kobject: 'rx-0' (ffff88805c4729d0): fill_kobj_path: path = '/devices/virtual/net/ppp0/queues/rx-0' [ 303.372351] kobject: 'rx-0' (ffff88805c4729d0): auto cleanup kobject_del [ 303.379185] kobject: 'rx-0' (ffff88805c4729d0): calling ktype release [ 303.385764] kobject: 'rx-0': free name [ 303.389655] kobject: 'tx-0' (ffff888096b537d8): kobject_cleanup, parent ffff888086a06448 [ 303.397934] kobject: 'tx-0' (ffff888096b537d8): auto cleanup 'remove' event [ 303.405053] kobject: 'tx-0' (ffff888096b537d8): kobject_uevent_env [ 303.411397] kobject: 'tx-0' (ffff888096b537d8): fill_kobj_path: path = '/devices/virtual/net/ppp0/queues/tx-0' [ 303.421728] kobject: 'tx-0' (ffff888096b537d8): auto cleanup kobject_del [ 303.428567] kobject: 'tx-0' (ffff888096b537d8): calling ktype release [ 303.435307] kobject: 'tx-0': free name [ 303.439198] kobject: 'queues' (ffff888086a06448): kobject_cleanup, parent (null) [ 303.447609] kobject: 'queues' (ffff888086a06448): calling ktype release [ 303.454364] kobject: 'queues' (ffff888086a06448): kset_release [ 303.460371] kobject: 'queues': free name [ 303.464591] kobject: 'ppp0' (ffff88805f2127b0): kobject_uevent_env [ 303.470940] kobject: 'ppp0' (ffff88805f2127b0): fill_kobj_path: path = '/devices/virtual/net/ppp0' 22:41:25 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x102, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x8000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000002c0)=0x24) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000300)={r2, 0x8001}, 0x8) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x800) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000100)=""/246) r4 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000240)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:41:25 executing program 3: fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r0, r1, 0x0, 0x80000001) 22:41:25 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r0, 0x0, 0x80000007) 22:41:25 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x76e7}, 0xffffffffffffffff, 0xe, r0, 0x0) 22:41:25 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x1, 0x18) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x1000, 0x20}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000140)={r2, 0x10000, 0x6, 0x7fffffff, 0x3e000000000, 0x9}, 0x14) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000180)={{0x1, 0x10000, 0x1d6, 0x3, 0xffffffff, 0x8}, 0xfffffffffffffffe}) 22:41:25 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f00000001c0)) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) 22:41:25 executing program 4: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/enforce\x00', 0x4000, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0}, &(0x7f0000000500)=0x14, 0x800) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10080844}, 0xc, &(0x7f00000009c0)={&(0x7f0000000540)=@deltfilter={0x468, 0x2d, 0x20, 0x70bd25, 0x25dfdbff, {0x0, r1, {0xc, 0xd35796bc219ed26c}, {0xd, 0xffe0}, {0xb, 0xfff1}}, [@filter_kind_options=@f_matchall={{0x10, 0x1, 'matchall\x00'}, {0x164, 0x2, [@TCA_MATCHALL_ACT={0x160, 0x2, @m_gact={0x15c, 0x11, {{0xc, 0x1, 'gact\x00'}, {0x88, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1, 0xf3fd009a5f531c4c}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x186e, 0x10000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x174e, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x4, 0x20000000, 0x3, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0xffff, 0x8, 0x2, 0x9bdb, 0xffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x131, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1ebd, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x0, 0x2, 0x1, 0x238001d2}}]}, {0xc0, 0x6, "512f2998479cab44e3a36096e9b97a70c1c2b8a5e38fb65a9277afed049b13a10f97239e7f862d80e45a61484230451506bafc995c5bb5732e77bb6133cf0e980cae63a3f0b5c2a5ff0625b7056e532e1bed8cc57b3afabd1d9963caf85145a350689db334d2e4b44823b1f225b9d54258e11078d7665269e6f26cf31e399cf50cec8b689f9e2e983b1d8f6742e782f43a72b89db4367fef4608b0cdf29d188e62fa017f8ad010b53e9889696c19b69094de174eeb016c74efd8ab54"}}}}]}}, @filter_kind_options=@f_flow={{0xc, 0x1, 'flow\x00'}, {0x38, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x6}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1ac9d}, @TCA_FLOW_POLICE={0xc, 0xa, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x6, 0xb}}, @TCA_FLOW_PERTURB={0x8}]}}, @filter_kind_options=@f_matchall={{0x10, 0x1, 'matchall\x00'}, {0x274, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0x4}}, @TCA_MATCHALL_ACT={0xd0, 0x2, @m_tunnel_key={0xcc, 0xb, {{0x10, 0x1, 'tunnel_key\x00'}, {0x4c, 0x2, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7f, 0x8, 0x4, 0x168, 0x6}, 0x2}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x8, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x6, 0x2, 0x4, 0x5, 0xffff}, 0x1}}]}, {0x68, 0x6, "3ad3880aa09f4f6d96dac215400c6e92b74bc84c44e3c6f77689d39f8a0eb38d870341d518b79ddb7f89305db448119c27f28d1a272b0826621a468094b4a2152fb9f624070af3ef52670095d3d08bab66891d02b9fe7fb03fc17288744759444c"}}}}, @TCA_MATCHALL_ACT={0x180, 0x2, @m_bpf={0x17c, 0x5, {{0x8, 0x1, 'bpf\x00'}, {0xb0, 0x2, [@TCA_ACT_BPF_OPS={0x34, 0x4, [{0x1f, 0x9, 0x7, 0x9}, {0x7fff, 0xe, 0x7fff, 0x401}, {0xffffffff, 0x1, 0x57, 0x1ff}, {0x400000000, 0x5, 0xffff}, {0x8, 0x1, 0x1ff, 0x8bd}, {0x9, 0x80000001, 0xffffffff, 0x66f7}]}, @TCA_ACT_BPF_OPS_LEN={0x8, 0x3, 0x2}, @TCA_ACT_BPF_OPS={0x44, 0x4, [{0x2, 0x9, 0x9, 0x101}, {0x40, 0x7, 0x9, 0xffffffff}, {0x400, 0x10001, 0x4, 0xffff}, {0xf923, 0x2, 0xffff, 0x9}, {0x8, 0xffffffffffffffff, 0x4, 0x3ff}, {0x4, 0x800, 0x0, 0x1000}, {0xffffffffffffffff, 0x6, 0x7, 0xb56}, {0x1, 0x100000001, 0x1, 0x7f}]}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x100000001, 0x1, 0xa88b, 0x9}]}, @TCA_ACT_BPF_OPS_LEN={0x8, 0x3, 0x4}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_OPS_LEN={0x8, 0x3, 0x2}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}]}, {0xbc, 0x6, "14c3d0fd6e6d6ed2978e72b368bf310709b5267ce1ae8a68cab67efec3c7c0c0842535c3920fde859886cf3f8308f5a9376019d0580300bf12056d174dd1eb62d41a531f2077d6115e986ee60363712d1c3423033ab9b30ce30bfd05007e0dcdd08f487ccab11835754ca6f5ce4a282b875ea1709ffaa6e2ed5d05cdf105f0dfc561956a1cec5a9b8d65820eac7c160b98c2c60b88dc9969d46f1ddf91f710a4c8bc36beebf6e9ec1579724786ff7fc0664e491cfaf4"}}}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffee, 0xe}}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x468}, 0x1, 0x0, 0x0, 0xc2cbe427beba469b}, 0x4000080) r4 = accept4(0xffffffffffffffff, &(0x7f0000000280)=@tipc=@id, &(0x7f0000000300)=0x80, 0x80000) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000340)) r5 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x282938dfcc66c4ec) write(r5, &(0x7f00000000c0)="c02b800ffd0cbf0ec4fd9082cc37737b67b1a010728d56380ba12c03dc457d12c93bf0afaf052134db9de78f2feb64549705d6202ecfd44865ebcc3ab1ce7229e38b631e51fc2dff960497220996e20b726625e71112f44c1bb66de4ca1a02ae28fc2cd0b49fde39bfbd96a0be9f4b3aec77e19df0a5e1a048246f63bff2432f80352c46de65d18939357ab4d56e8df36f413e79a953d6fe350df51d31f3f291b39eed3718378b770b053de9d3dff1438b39b744bb7d43ec899d1ca9d5ccbfb3b066b339b83967036028c4d0bde19931", 0xd0) r6 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r6, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x2800, 0x0) getsockopt$nfc_llcp(r6, 0x118, 0x9073e22d6926cc4d, &(0x7f0000000400)=""/134, 0x86) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x40000, 0x0) [ 303.520212] kobject: 'ppp0' (ffff88805f2127b0): kobject_cleanup, parent (null) [ 303.528481] kobject: 'ppp0' (ffff88805f2127b0): calling ktype release [ 303.535100] kobject: 'ppp0': free name [ 303.545923] kobject: 'loop2' (ffff8880a4a992e0): kobject_uevent_env 22:41:26 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') [ 303.567085] kobject: 'loop2' (ffff8880a4a992e0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 303.586703] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=17229 comm=syz-executor.1 [ 303.602812] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=17231 comm=syz-executor.3 22:41:26 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x3, 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)={0x2, [0x0, 0x0]}, &(0x7f0000000280)=0xc) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000002c0)={r2, 0xfffffffffffffffe, 0x80000001, 0x100000001, 0x80000001, 0x6, 0x3, 0x1, {r3, @in={{0x2, 0x4e22, @loopback}}, 0x7, 0x4, 0x20, 0xf4fb, 0x20}}, &(0x7f0000000380)=0xb0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:26 executing program 3: fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r0, r1, 0x0, 0x80000001) 22:41:26 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x100, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0x2}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x8902, 0xf5f16559b6661df9) fcntl$lock(r2, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x141}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000040)) r4 = socket(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r4, r5, 0x0, 0x80000001) 22:41:26 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) pwrite64(r1, &(0x7f0000000140)="f3bc03174c7e2a835bd9dcafeff1dc1e310d71f8ce7487ce501c299038100b002dbc", 0x22, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000180)={0x4441, 0x5, 0xfffffffffffffffb}) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000040)=0x1ff, &(0x7f0000000080)=0x2) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:41:26 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x100000000, 0x400000) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000300)=0x0) ioctl$KVM_SMI(r1, 0xaeb7) socket$inet(0x2, 0xa, 0x4) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x7fffffff, 0x4, 0x2, 0xd8c63c4, 0x0, 0x2, 0x1000, 0x9, 0x1, 0x6, 0x7, 0x62ff2d5d, 0x9, 0x3, 0xfffffffffffffffa, 0x1, 0x120, 0x3, 0x2, 0x2, 0x200, 0x1000, 0x9c1, 0x7, 0x89c0, 0x800, 0x6, 0x9, 0x1, 0x8, 0xa4e, 0x3, 0x1, 0x400, 0x1, 0x80000000, 0x0, 0x9, 0x2, @perf_config_ext={0xab, 0x80000000}, 0x500, 0xb6ad, 0x471, 0x0, 0xfffffffffffffe00, 0x4, 0x6}, r2, 0x2, r0, 0x1) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 303.603611] kobject: 'loop0' (ffff888052fb8c20): kobject_uevent_env 22:41:26 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x40000, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/tcp6\x00') ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000280)={0x4, &(0x7f0000000240)=[{0x4, 0x8}, {0x6, 0x7ff}, {0x2, 0x7}, {0x7, 0x5}]}) sendfile(r2, r2, 0x0, 0x101) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000002c0)=0x404, 0x4) r3 = socket$netlink(0x10, 0x3, 0x6) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000200)={0x0, 0x6, 0x7, &(0x7f0000000140)=0x9}) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000180)="480000001400190d09004beafd0d8c560284ed7a80000000625ebc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed4e00000000000000ab8b8596629d", 0x48}], 0x1) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000000340)) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000000)={0x2, 0x0, 0x4, 0x3, '\x00', 0x1}) 22:41:26 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)='bridge0\x00') r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80200, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x0, 0xedd0, 0x2d6e746d, 0x40, 0x9, 0x3, 0x53, {0x0, @in6={{0xa, 0x4e24, 0x0, @remote, 0x40}}, 0x5, 0x0, 0x6, 0x1, 0x3}}, &(0x7f0000000180)=0xb0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000001c0)={r3, 0x400}, 0x8) mlockall(0x4) [ 303.659401] kobject: 'ppp0' (ffff88805c4451b0): kobject_add_internal: parent: 'net', set: 'devices' [ 303.667398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=17249 comm=syz-executor.0 [ 303.673928] kobject: 'loop0' (ffff888052fb8c20): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 303.689944] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=17244 comm=syz-executor.3 [ 303.694171] kobject: 'ppp0' (ffff88805c4451b0): kobject_uevent_env 22:41:26 executing program 3: r0 = open(0x0, 0xfc, 0x0) fcntl$lock(r0, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:26 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r1, 0x0, 0x4000080000001) [ 303.724813] kobject: 'loop5' (ffff8880a4b5a320): kobject_uevent_env [ 303.733249] kobject: 'ppp0' (ffff88805c4451b0): fill_kobj_path: path = '/devices/virtual/net/ppp0' [ 303.751788] kobject: 'loop5' (ffff8880a4b5a320): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 303.761685] kobject: 'queues' (ffff8880a9f86148): kobject_add_internal: parent: 'ppp0', set: '' 22:41:26 executing program 3: r0 = open(0x0, 0xfc, 0x0) fcntl$lock(r0, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:26 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = add_key(&(0x7f0000000100)='blacklist\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="334ce2f1f509f63e0dd67d2871b04789db715d50019886d52edbd05b651709baa9ef21ed91b2e2f4272d8e14269d7a3503", 0x31, 0xfffffffffffffffa) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) ptrace(0x10, r2) keyctl$get_security(0x11, r1, &(0x7f00000001c0)=""/19, 0x13) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f00000000c0)) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) [ 303.773346] kobject: 'loop3' (ffff8880a4ae0220): kobject_uevent_env [ 303.779830] kobject: 'queues' (ffff8880a9f86148): kobject_uevent_env [ 303.788744] kobject: 'loop3' (ffff8880a4ae0220): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 303.802314] kobject: 'queues' (ffff8880a9f86148): kobject_uevent_env: filter function caused the event to drop! [ 303.815844] kobject: 'loop1' (ffff8880a4a3c9e0): kobject_uevent_env 22:41:26 executing program 3: r0 = open(0x0, 0xfc, 0x0) fcntl$lock(r0, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:26 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000140)='net/ip_mr_vif\x00') syz_open_procfs(r2, &(0x7f0000000000)='net/raw6\x00') sendfile(r1, r3, 0x0, 0x80000001) 22:41:26 executing program 3: r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) [ 303.822947] kobject: 'rx-0' (ffff88808a1dd790): kobject_add_internal: parent: 'queues', set: 'queues' [ 303.833355] kobject: 'loop1' (ffff8880a4a3c9e0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 303.843285] kobject: 'rx-0' (ffff88808a1dd790): kobject_uevent_env [ 303.862737] kobject: 'loop5' (ffff8880a4b5a320): kobject_uevent_env [ 303.869454] kobject: 'rx-0' (ffff88808a1dd790): fill_kobj_path: path = '/devices/virtual/net/ppp0/queues/rx-0' [ 303.886112] kobject: 'loop5' (ffff8880a4b5a320): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 303.891702] kobject: 'tx-0' (ffff88808a08c058): kobject_add_internal: parent: 'queues', set: 'queues' [ 303.905265] kobject: 'tx-0' (ffff88808a08c058): kobject_uevent_env [ 303.911267] kobject: 'loop3' (ffff8880a4ae0220): kobject_uevent_env [ 303.911997] kobject: 'tx-0' (ffff88808a08c058): fill_kobj_path: path = '/devices/virtual/net/ppp0/queues/tx-0' [ 303.918478] kobject: 'loop3' (ffff8880a4ae0220): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 303.939381] kobject: 'rx-0' (ffff88808a1dd790): kobject_cleanup, parent ffff8880a9f86148 [ 303.947093] kobject: 'loop0' (ffff888052fb8c20): kobject_uevent_env [ 303.951718] kobject: 'rx-0' (ffff88808a1dd790): auto cleanup 'remove' event [ 303.954624] kobject: 'loop0' (ffff888052fb8c20): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 303.961440] kobject: 'rx-0' (ffff88808a1dd790): kobject_uevent_env [ 303.972980] kobject: 'loop3' (ffff8880a4ae0220): kobject_uevent_env [ 303.977265] kobject: 'rx-0' (ffff88808a1dd790): fill_kobj_path: path = '/devices/virtual/net/ppp0/queues/rx-0' [ 303.983616] kobject: 'loop3' (ffff8880a4ae0220): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 303.994286] kobject: 'rx-0' (ffff88808a1dd790): auto cleanup kobject_del [ 304.003579] kobject: 'loop0' (ffff888052fb8c20): kobject_uevent_env [ 304.011913] kobject: 'rx-0' (ffff88808a1dd790): calling ktype release [ 304.016483] kobject: 'loop0' (ffff888052fb8c20): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 304.023174] kobject: 'rx-0': free name [ 304.034182] kobject: 'loop3' (ffff8880a4ae0220): kobject_uevent_env [ 304.037900] kobject: 'tx-0' (ffff88808a08c058): kobject_cleanup, parent ffff8880a9f86148 [ 304.042853] kobject: 'loop3' (ffff8880a4ae0220): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 304.051219] kobject: 'tx-0' (ffff88808a08c058): auto cleanup 'remove' event [ 304.060951] kobject: 'loop0' (ffff888052fb8c20): kobject_uevent_env [ 304.069083] kobject: 'tx-0' (ffff88808a08c058): kobject_uevent_env [ 304.074321] kobject: 'loop0' (ffff888052fb8c20): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 304.080828] kobject: 'tx-0' (ffff88808a08c058): fill_kobj_path: path = '/devices/virtual/net/ppp0/queues/tx-0' [ 304.094132] kobject: 'loop5' (ffff8880a4b5a320): kobject_uevent_env [ 304.102004] kobject: 'tx-0' (ffff88808a08c058): auto cleanup kobject_del [ 304.111234] kobject: 'loop5' (ffff8880a4b5a320): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 304.113647] kobject: 'tx-0' (ffff88808a08c058): calling ktype release [ 304.131154] kobject: 'tx-0': free name [ 304.135953] kobject: 'queues' (ffff8880a9f86148): kobject_cleanup, parent (null) [ 304.152151] kobject: 'queues' (ffff8880a9f86148): calling ktype release [ 304.159397] kobject: 'queues' (ffff8880a9f86148): kset_release [ 304.165901] kobject: 'queues': free name 22:41:26 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x400000, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x0) [ 304.172213] kobject: 'ppp0' (ffff88805c4451b0): kobject_uevent_env [ 304.182317] kobject: 'ppp0' (ffff88805c4451b0): fill_kobj_path: path = '/devices/virtual/net/ppp0' [ 304.199503] kobject: 'loop1' (ffff8880a4a3c9e0): kobject_uevent_env [ 304.206162] kobject: 'loop1' (ffff8880a4a3c9e0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 304.217692] kobject: 'loop1' (ffff8880a4a3c9e0): kobject_uevent_env [ 304.224444] PPPIOCDETACH file->f_count=2 [ 304.227896] kobject: 'loop1' (ffff8880a4a3c9e0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 304.231198] kobject: 'ppp0' (ffff88805c4451b0): kobject_cleanup, parent (null) [ 304.247444] kobject: 'ppp0' (ffff88805c4451b0): calling ktype release [ 304.254231] kobject: 'ppp0': free name [ 304.258466] kobject: 'ppp0' (ffff88807f569130): kobject_add_internal: parent: 'net', set: 'devices' [ 304.268482] kobject: 'ppp0' (ffff88807f569130): kobject_uevent_env [ 304.274863] kobject: 'ppp0' (ffff88807f569130): fill_kobj_path: path = '/devices/virtual/net/ppp0' [ 304.284176] kobject: 'queues' (ffff88809761d548): kobject_add_internal: parent: 'ppp0', set: '' [ 304.293555] kobject: 'queues' (ffff88809761d548): kobject_uevent_env [ 304.300056] kobject: 'queues' (ffff88809761d548): kobject_uevent_env: filter function caused the event to drop! [ 304.310334] kobject: 'rx-0' (ffff888095c7f6d0): kobject_add_internal: parent: 'queues', set: 'queues' [ 304.319702] kobject: 'rx-0' (ffff888095c7f6d0): kobject_uevent_env [ 304.326063] kobject: 'rx-0' (ffff888095c7f6d0): fill_kobj_path: path = '/devices/virtual/net/ppp0/queues/rx-0' [ 304.336320] kobject: 'tx-0' (ffff888093862ad8): kobject_add_internal: parent: 'queues', set: 'queues' [ 304.345797] kobject: 'tx-0' (ffff888093862ad8): kobject_uevent_env [ 304.352130] kobject: 'tx-0' (ffff888093862ad8): fill_kobj_path: path = '/devices/virtual/net/ppp0/queues/tx-0' [ 304.363593] kobject: 'rx-0' (ffff888095c7f6d0): kobject_cleanup, parent ffff88809761d548 [ 304.371843] kobject: 'rx-0' (ffff888095c7f6d0): auto cleanup 'remove' event [ 304.378929] kobject: 'rx-0' (ffff888095c7f6d0): kobject_uevent_env [ 304.386226] kobject: 'rx-0' (ffff888095c7f6d0): fill_kobj_path: path = '/devices/virtual/net/ppp0/queues/rx-0' [ 304.396552] kobject: 'rx-0' (ffff888095c7f6d0): auto cleanup kobject_del [ 304.403412] kobject: 'rx-0' (ffff888095c7f6d0): calling ktype release [ 304.410108] kobject: 'rx-0': free name [ 304.414003] kobject: 'tx-0' (ffff888093862ad8): kobject_cleanup, parent ffff88809761d548 [ 304.422238] kobject: 'tx-0' (ffff888093862ad8): auto cleanup 'remove' event [ 304.429324] kobject: 'tx-0' (ffff888093862ad8): kobject_uevent_env [ 304.435659] kobject: 'tx-0' (ffff888093862ad8): fill_kobj_path: path = '/devices/virtual/net/ppp0/queues/tx-0' [ 304.445949] kobject: 'tx-0' (ffff888093862ad8): auto cleanup kobject_del [ 304.452832] kobject: 'tx-0' (ffff888093862ad8): calling ktype release [ 304.459394] kobject: 'tx-0': free name [ 304.463297] kobject: 'queues' (ffff88809761d548): kobject_cleanup, parent (null) [ 304.471891] kobject: 'queues' (ffff88809761d548): calling ktype release [ 304.478625] kobject: 'queues' (ffff88809761d548): kset_release [ 304.484622] kobject: 'queues': free name [ 304.488861] kobject: 'ppp0' (ffff88807f569130): kobject_uevent_env [ 304.495203] kobject: 'ppp0' (ffff88807f569130): fill_kobj_path: path = '/devices/virtual/net/ppp0' 22:41:26 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=0xc) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={0x1}, 0x8, 0x80800) sendmsg$nl_generic(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="8c0200002100000126bd7000fcdbdf250500000014004d00100030002f6465762f7070700000000008004b00ffffffff54000400850ea00621afcce5d83261dd8314ed84bb0920187d2332cb0504d129acd01c6f42cd6c38783684054a8319f5c88e0bd3d1543fc4b7563375a5424d6e2277510353b5d9793df286046bbfb7c372cd802608000500", @ANYRES32=r1, @ANYBLOB="00026a00d9149c06468da79da139b0731ed430b99a4d7cab1ee6f43c2722d4065fac3b7f61f46969a7bd655031f7540adc3f7f9d80783d99f262c9c8f635a9ba58d0aa10bb6ffabfd8b51f097f9b96b84793d79efbaada4b34230b1585f5fe1c1efb1f304ee46aaa4732ec84733f08328f4d80e821772f6b48b67c5f1821a6019fcd27902ac4cd7e7ab8f845da1c1db93c1c13e36549a0de8ec3279386b07a0929da239671153126ffd4e7fe1ce0facc00000000000000a20000000000", @ANYRES32=r2, @ANYBLOB="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"], 0x28c}, 0x1, 0x0, 0x0, 0x8280d23cfabdbb97}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000500)=""/246) getsockopt$inet6_dccp_int(r0, 0x21, 0xb, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r4 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)) ioctl$EVIOCGREP(r3, 0x4004743c, 0x0) 22:41:26 executing program 3: r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:26 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x402, 0x0) mq_getsetattr(r1, &(0x7f00000000c0)={0xacef, 0xfffffffffffffab5, 0x8, 0x80, 0x8, 0x5, 0x4e3515ca}, &(0x7f0000000100)) socket$rxrpc(0x21, 0x2, 0xa) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000004180)={@multicast1, @broadcast, 0x0}, &(0x7f00000041c0)=0xc) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x16) r4 = geteuid() setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000004200)={{{@in=@multicast1, @in6=@rand_addr="854ff3de026948b6fb070b8f4f4cd0b5", 0x4e23, 0x8001, 0x4e24, 0x0, 0x2, 0xa0, 0x80, 0x2e, r3, r4}, {0x7f, 0x3ff, 0x1, 0x0, 0x9, 0x80d, 0x1, 0x8}, {0x3f, 0x2, 0x2, 0x8}, 0x7f, 0x6e6bbc, 0x0, 0x1, 0xf71690a87ebf56a8, 0x3}, {{@in6=@rand_addr="97d313fdf27e1f25e51b74e694694f75", 0x4d3, 0x7c}, 0x2, @in=@multicast1, 0x0, 0x4, 0x3, 0xfffffffffffffff8, 0x8, 0x401, 0x7}}, 0xe8) 22:41:26 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80080001) 22:41:26 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)='bridge0\x00') r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80200, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x0, 0xedd0, 0x2d6e746d, 0x40, 0x9, 0x3, 0x53, {0x0, @in6={{0xa, 0x4e24, 0x0, @remote, 0x40}}, 0x5, 0x0, 0x6, 0x1, 0x3}}, &(0x7f0000000180)=0xb0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000001c0)={r3, 0x400}, 0x8) mlockall(0x4) 22:41:26 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0x11, 0x80f, 0x8) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') [ 304.550217] kobject: 'ppp0' (ffff88807f569130): kobject_cleanup, parent (null) [ 304.558485] kobject: 'ppp0' (ffff88807f569130): calling ktype release [ 304.565106] kobject: 'ppp0': free name [ 304.578815] kobject: 'loop2' (ffff8880a4a992e0): kobject_uevent_env [ 304.587431] kobject: 'loop2' (ffff8880a4a992e0): fill_kobj_path: path = '/devices/virtual/block/loop2' 22:41:27 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)='bridge0\x00') r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80200, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x0, 0xedd0, 0x2d6e746d, 0x40, 0x9, 0x3, 0x53, {0x0, @in6={{0xa, 0x4e24, 0x0, @remote, 0x40}}, 0x5, 0x0, 0x6, 0x1, 0x3}}, &(0x7f0000000180)=0xb0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000001c0)={r3, 0x400}, 0x8) mlockall(0x4) 22:41:27 executing program 3: r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) [ 304.604158] kobject: 'ppp0' (ffff888056f9a5f0): kobject_add_internal: parent: 'net', set: 'devices' [ 304.625018] kobject: 'loop3' (ffff8880a4ae0220): kobject_uevent_env [ 304.628983] kobject: 'ppp0' (ffff888056f9a5f0): kobject_uevent_env [ 304.643539] kobject: 'loop3' (ffff8880a4ae0220): fill_kobj_path: path = '/devices/virtual/block/loop3' 22:41:27 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x8, &(0x7f0000000300)={0xffffffffffffffff}, 0x767f43d234d6c3d9, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000380)={0x15, 0x110, 0xfa00, {r1, 0x4, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}, @in={0x2, 0x4e24, @rand_addr=0x1f}}}, 0x118) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') fsetxattr$security_smack_entry(r2, &(0x7f0000000080)='security.SMACK64IPOUT\x00', &(0x7f0000000140)='^vmnet0lo^\x00', 0xb, 0x259ea1c45e1faf5a) sendfile(r2, r3, 0x0, 0x2) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000000)={0x2}) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000002c0)={0x2455, 0x3, 0xff, 0x0, 0x1}) write$selinux_load(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x102) 22:41:27 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x400040, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000340)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f00000003c0)={0x9, 0x108, 0xfa00, {r2, 0x4f, '\n\x00?', "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"}}, 0x110) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000500)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib={0x1b, 0x3, 0x5, {"6d77051c28e596eea702631b15d0625e"}, 0x7, 0x9c77, 0x1000}}}, 0x90) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x1, 0x140) connect$ax25(r3, &(0x7f0000000080)={{0x3, @default, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) getsockopt$inet_mreq(r3, 0x0, 0x24, &(0x7f0000000280)={@remote, @multicast1}, &(0x7f00000002c0)=0x8) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r3) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 304.655679] kobject: 'ppp0' (ffff888056f9a5f0): fill_kobj_path: path = '/devices/virtual/net/ppp0' [ 304.663945] kobject: 'loop5' (ffff8880a4b5a320): kobject_uevent_env [ 304.681912] kobject: 'queues' (ffff8880a9f86348): kobject_add_internal: parent: 'ppp0', set: '' [ 304.685333] kobject: 'loop5' (ffff8880a4b5a320): fill_kobj_path: path = '/devices/virtual/block/loop5' 22:41:27 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r0, r1, 0x0, 0x80000001) 22:41:27 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') accept4$netrom(r1, 0x0, &(0x7f0000000000), 0x800) sendfile(r1, r2, 0x0, 0x80000001) [ 304.694295] kobject: 'queues' (ffff8880a9f86348): kobject_uevent_env [ 304.711069] kobject: 'queues' (ffff8880a9f86348): kobject_uevent_env: filter function caused the event to drop! [ 304.721933] kobject: 'loop0' (ffff888052fb8c20): kobject_uevent_env [ 304.730895] kobject: 'rx-0' (ffff888092413250): kobject_add_internal: parent: 'queues', set: 'queues' [ 304.737346] kobject: 'loop0' (ffff888052fb8c20): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 304.756109] kobject: 'loop0' (ffff888052fb8c20): kobject_uevent_env [ 304.759396] kobject: 'rx-0' (ffff888092413250): kobject_uevent_env [ 304.763886] kobject: 'loop0' (ffff888052fb8c20): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 304.772742] kobject: 'rx-0' (ffff888092413250): fill_kobj_path: path = '/devices/virtual/net/ppp0/queues/rx-0' [ 304.797178] kobject: 'tx-0' (ffff88805de54858): kobject_add_internal: parent: 'queues', set: 'queues' [ 304.801300] kobject: 'loop0' (ffff888052fb8c20): kobject_uevent_env [ 304.816146] kobject: 'tx-0' (ffff88805de54858): kobject_uevent_env [ 304.818064] kobject: 'loop0' (ffff888052fb8c20): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 304.822652] kobject: 'tx-0' (ffff88805de54858): fill_kobj_path: path = '/devices/virtual/net/ppp0/queues/tx-0' [ 304.844247] kobject: 'rx-0' (ffff888092413250): kobject_cleanup, parent ffff8880a9f86348 [ 304.852713] kobject: 'rx-0' (ffff888092413250): auto cleanup 'remove' event [ 304.861350] kobject: 'loop1' (ffff8880a4a3c9e0): kobject_uevent_env [ 304.864533] kobject: 'rx-0' (ffff888092413250): kobject_uevent_env [ 304.867851] kobject: 'loop1' (ffff8880a4a3c9e0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 304.874082] kobject: 'rx-0' (ffff888092413250): fill_kobj_path: path = '/devices/virtual/net/ppp0/queues/rx-0' [ 304.874289] kobject: 'rx-0' (ffff888092413250): auto cleanup kobject_del [ 304.900845] kobject: 'rx-0' (ffff888092413250): calling ktype release [ 304.907468] kobject: 'rx-0': free name [ 304.911517] kobject: 'tx-0' (ffff88805de54858): kobject_cleanup, parent ffff8880a9f86348 [ 304.919745] kobject: 'tx-0' (ffff88805de54858): auto cleanup 'remove' event [ 304.927138] kobject: 'tx-0' (ffff88805de54858): kobject_uevent_env [ 304.933514] kobject: 'tx-0' (ffff88805de54858): fill_kobj_path: path = '/devices/virtual/net/ppp0/queues/tx-0' [ 304.943830] kobject: 'tx-0' (ffff88805de54858): auto cleanup kobject_del [ 304.950722] kobject: 'tx-0' (ffff88805de54858): calling ktype release [ 304.957285] kobject: 'tx-0': free name [ 304.961205] kobject: 'queues' (ffff8880a9f86348): kobject_cleanup, parent (null) [ 304.969591] kobject: 'queues' (ffff8880a9f86348): calling ktype release [ 304.976367] kobject: 'queues' (ffff8880a9f86348): kset_release [ 304.982348] kobject: 'queues': free name [ 304.986558] kobject: 'ppp0' (ffff888056f9a5f0): kobject_uevent_env [ 304.992930] kobject: 'ppp0' (ffff888056f9a5f0): fill_kobj_path: path = '/devices/virtual/net/ppp0' [ 305.011166] kobject: 'loop5' (ffff8880a4b5a320): kobject_uevent_env [ 305.017633] kobject: 'loop5' (ffff8880a4b5a320): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 305.040495] PPPIOCDETACH file->f_count=2 [ 305.045693] kobject: 'ppp0' (ffff888056f9a5f0): kobject_cleanup, parent (null) [ 305.053941] kobject: 'ppp0' (ffff888056f9a5f0): calling ktype release [ 305.060560] kobject: 'ppp0': free name [ 305.064911] kobject: 'ppp0' (ffff888090ed4cf0): kobject_add_internal: parent: 'net', set: 'devices' [ 305.074952] kobject: 'ppp0' (ffff888090ed4cf0): kobject_uevent_env [ 305.081302] kobject: 'ppp0' (ffff888090ed4cf0): fill_kobj_path: path = '/devices/virtual/net/ppp0' [ 305.090689] kobject: 'queues' (ffff88809705db48): kobject_add_internal: parent: 'ppp0', set: '' [ 305.100084] kobject: 'queues' (ffff88809705db48): kobject_uevent_env [ 305.106576] kobject: 'queues' (ffff88809705db48): kobject_uevent_env: filter function caused the event to drop! [ 305.118095] kobject: 'rx-0' (ffff88805ca4e610): kobject_add_internal: parent: 'queues', set: 'queues' [ 305.127516] kobject: 'rx-0' (ffff88805ca4e610): kobject_uevent_env [ 305.133857] kobject: 'rx-0' (ffff88805ca4e610): fill_kobj_path: path = '/devices/virtual/net/ppp0/queues/rx-0' [ 305.144245] kobject: 'tx-0' (ffff88807e8dfcd8): kobject_add_internal: parent: 'queues', set: 'queues' [ 305.153726] kobject: 'tx-0' (ffff88807e8dfcd8): kobject_uevent_env [ 305.160084] kobject: 'tx-0' (ffff88807e8dfcd8): fill_kobj_path: path = '/devices/virtual/net/ppp0/queues/tx-0' [ 305.171619] kobject: 'rx-0' (ffff88805ca4e610): kobject_cleanup, parent ffff88809705db48 [ 305.179949] kobject: 'rx-0' (ffff88805ca4e610): auto cleanup 'remove' event [ 305.187154] kobject: 'rx-0' (ffff88805ca4e610): kobject_uevent_env [ 305.193677] kobject: 'rx-0' (ffff88805ca4e610): fill_kobj_path: path = '/devices/virtual/net/ppp0/queues/rx-0' [ 305.204040] kobject: 'rx-0' (ffff88805ca4e610): auto cleanup kobject_del [ 305.210951] kobject: 'rx-0' (ffff88805ca4e610): calling ktype release [ 305.217503] kobject: 'rx-0': free name [ 305.221424] kobject: 'tx-0' (ffff88807e8dfcd8): kobject_cleanup, parent ffff88809705db48 [ 305.229634] kobject: 'tx-0' (ffff88807e8dfcd8): auto cleanup 'remove' event [ 305.236727] kobject: 'tx-0' (ffff88807e8dfcd8): kobject_uevent_env [ 305.243049] kobject: 'tx-0' (ffff88807e8dfcd8): fill_kobj_path: path = '/devices/virtual/net/ppp0/queues/tx-0' [ 305.253382] kobject: 'tx-0' (ffff88807e8dfcd8): auto cleanup kobject_del [ 305.260242] kobject: 'tx-0' (ffff88807e8dfcd8): calling ktype release [ 305.266797] kobject: 'tx-0': free name [ 305.270697] kobject: 'queues' (ffff88809705db48): kobject_cleanup, parent (null) [ 305.279079] kobject: 'queues' (ffff88809705db48): calling ktype release [ 305.285833] kobject: 'queues' (ffff88809705db48): kset_release [ 305.291802] kobject: 'queues': free name [ 305.296020] kobject: 'ppp0' (ffff888090ed4cf0): kobject_uevent_env [ 305.302542] kobject: 'ppp0' (ffff888090ed4cf0): fill_kobj_path: path = '/devices/virtual/net/ppp0' 22:41:27 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000240)=0x100000001, 0x2, 0x2) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x121001, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000280)=""/86) ioctl$sock_bt_hci(r2, 0x400448dc, &(0x7f0000000300)="b7f8379caf619a9913f7649a66e84215e4473494f18f76b62212f26be157ae57c0368da328ad6687b98a6e8bdabc13eac0161581094e66364632ed6221b9f5ce8b0163e874e1a8eeb920c5b7edbd5cd7f31427e17ce54ac4c1e52d964e478e2b933aa3c23de350ab3769faee06be2e077666a13033edf7942066875bc22d5e97b806c61fcfd648fa5e9dd02b592a0fbbf9f53ea2d5042eeecb8c9c7a6563dd5da08bbdc96718ac1a4d591502822b277ac9e35a9cf87d5f2dea") ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f0000000100)={{0x4, 0x1, 0x6, 0x6, 'syz0\x00', 0x1000}, 0x6, 0x10000000, 0x3, r3, 0x1, 0x20, 'syz1\x00', &(0x7f0000000080)=['wlan0vmnet1eth0[(vmnet0\x00'], 0x18, [], [0x4, 0x7, 0x1, 0x1]}) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:41:27 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r0, r1, 0x0, 0x80000001) 22:41:27 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000000c0)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000100)={r2, 0x0, 0x9}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x7, 0x5e0, 0x9, 0xa7e, 0x0, 0x3, 0x22009, 0xe, 0x3, 0x7, 0x709, 0x0, 0x7e8, 0xfffffffffffffffd, 0xfffffffffffffc01, 0x5, 0x40, 0x2, 0x10001, 0xfff, 0x8, 0x3, 0x7ff, 0x8001, 0x5, 0x200, 0x9, 0x3, 0xffffffffffffffff, 0xffffffffffff1f45, 0x800, 0x10000, 0x1, 0x5, 0x3, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x80000000, 0x401}, 0x10800, 0x4, 0x77, 0x0, 0x1f, 0x0, 0x2}, r3, 0x9, 0xffffffffffffffff, 0xa) 22:41:27 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @multicast2}, 0x8) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:27 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') prctl$PR_SET_SECUREBITS(0x1c, 0x22) sendfile(r2, r3, 0x0, 0x80000001) truncate(&(0x7f0000000000)='./file0\x00', 0x5) 22:41:27 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)='bridge0\x00') r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80200, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x0, 0xedd0, 0x2d6e746d, 0x40, 0x9, 0x3, 0x53, {0x0, @in6={{0xa, 0x4e24, 0x0, @remote, 0x40}}, 0x5, 0x0, 0x6, 0x1, 0x3}}, &(0x7f0000000180)=0xb0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000001c0)={r3, 0x400}, 0x8) [ 305.350194] kobject: 'ppp0' (ffff888090ed4cf0): kobject_cleanup, parent (null) [ 305.358571] kobject: 'ppp0' (ffff888090ed4cf0): calling ktype release [ 305.365188] kobject: 'ppp0': free name [ 305.379966] kobject: 'loop2' (ffff8880a4a992e0): kobject_uevent_env 22:41:27 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)='bridge0\x00') openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80200, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x0, 0xedd0, 0x2d6e746d, 0x40, 0x9, 0x3, 0x53, {0x0, @in6={{0xa, 0x4e24, 0x0, @remote, 0x40}}, 0x5, 0x0, 0x6, 0x1, 0x3}}, &(0x7f0000000180)=0xb0) 22:41:27 executing program 0: socketpair(0x8, 0x4, 0x5c5f, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x8, 0x0, 0x8000, 0x400, 0x2, 0x20, 0x8, 0xced, 0x0}, &(0x7f0000000140)=0x20) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000180)={r1, 0x401, 0x38}, 0x8) r2 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r2, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r3 = socket(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r3, r4, 0x0, 0x80000001) 22:41:27 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x5c8ca9c61b30f28c, 0x80000, 0xfb) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) 22:41:27 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r0, r1, 0x0, 0x80000001) [ 305.393506] kobject: 'loop2' (ffff8880a4a992e0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 305.417086] kobject: 'ppp0' (ffff888074df10f0): kobject_add_internal: parent: 'net', set: 'devices' [ 305.433923] kobject: 'loop5' (ffff8880a4b5a320): kobject_uevent_env 22:41:27 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r2, @ANYBLOB="040026bd7000fbdbdf25010000000c00030004000000000000000c00060001000000000000001c00070008000100", @ANYRES32=r1, @ANYBLOB="0a00e0ff", @ANYRES32=r1, @ANYBLOB="02fd1937bbb514ec78c1d4171f4b3864ee8d32ffc282950be271c16b355cea7029e3ff58a891850c0734e1e7f66ccddd5d41492847630ce428c122ca", @ANYRES32=r1, @ANYBLOB="0c00040001000080000000000c000200ff000000000000000c00080001000000000000000c000800080000000000000008000100000000000c00080001000000ffffffff"], 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) ioprio_get$uid(0x3, r3) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/checkreqprot\x00', 0x200182, 0x0) write$P9_RMKDIR(r4, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x88, 0x1}}, 0x14) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r4, 0x80dc5521, &(0x7f0000000900)=""/193) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000340)={0x0, 0x5, 0x9fff, 0x5, 0x80000000, 0xffffffffffffff29}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000000480)={{0x1, 0x80}, {0x4, 0x8}, 0x6d1, 0x4, 0x9b}) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x5}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={r5, 0x7fff}, &(0x7f0000000180)=0x8) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5c7, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 305.461764] kobject: 'ppp0' (ffff888074df10f0): kobject_uevent_env [ 305.472498] kobject: 'loop5' (ffff8880a4b5a320): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 305.485927] kobject: 'ppp0' (ffff888074df10f0): fill_kobj_path: path = '/devices/virtual/net/ppp0' [ 305.499621] kobject: 'loop0' (ffff888052fb8c20): kobject_uevent_env 22:41:27 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x9, 0x7, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r3, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'teql0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x220}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) sendfile(r1, r2, 0x0, 0x80000001) [ 305.506056] kobject: 'queues' (ffff8880a61a2648): kobject_add_internal: parent: 'ppp0', set: '' [ 305.506083] kobject: 'queues' (ffff8880a61a2648): kobject_uevent_env [ 305.506090] kobject: 'queues' (ffff8880a61a2648): kobject_uevent_env: filter function caused the event to drop! [ 305.506114] kobject: 'rx-0' (ffff88808f2b6cd0): kobject_add_internal: parent: 'queues', set: 'queues' [ 305.506187] kobject: 'rx-0' (ffff88808f2b6cd0): kobject_uevent_env [ 305.530311] kobject: 'loop0' (ffff888052fb8c20): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 305.535919] kobject: 'rx-0' (ffff88808f2b6cd0): fill_kobj_path: path = '/devices/virtual/net/ppp0/queues/rx-0' [ 305.578636] kobject: 'tx-0' (ffff88808b545298): kobject_add_internal: parent: 'queues', set: 'queues' [ 305.588679] kobject: 'loop1' (ffff8880a4a3c9e0): kobject_uevent_env [ 305.593157] kobject: 'tx-0' (ffff88808b545298): kobject_uevent_env [ 305.597062] kobject: 'loop1' (ffff8880a4a3c9e0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 305.601493] kobject: 'tx-0' (ffff88808b545298): fill_kobj_path: path = '/devices/virtual/net/ppp0/queues/tx-0' [ 305.611401] kobject: 'loop3' (ffff8880a4ae0220): kobject_uevent_env [ 305.627512] kobject: 'loop3' (ffff8880a4ae0220): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 305.637901] kobject: 'loop0' (ffff888052fb8c20): kobject_uevent_env [ 305.638069] kobject: 'rx-0' (ffff88808f2b6cd0): kobject_cleanup, parent ffff8880a61a2648 [ 305.644347] kobject: 'loop0' (ffff888052fb8c20): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 305.648271] kobject: 'loop3' (ffff8880a4ae0220): kobject_uevent_env [ 305.654353] kobject: 'rx-0' (ffff88808f2b6cd0): auto cleanup 'remove' event [ 305.668067] kobject: 'loop3' (ffff8880a4ae0220): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 305.668969] kobject: 'rx-0' (ffff88808f2b6cd0): kobject_uevent_env [ 305.678306] kobject: 'loop5' (ffff8880a4b5a320): kobject_uevent_env [ 305.685263] kobject: 'rx-0' (ffff88808f2b6cd0): fill_kobj_path: path = '/devices/virtual/net/ppp0/queues/rx-0' [ 305.691731] kobject: 'loop5' (ffff8880a4b5a320): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 305.698389] kobject: 'rx-0' (ffff88808f2b6cd0): auto cleanup kobject_del [ 305.741511] kobject: 'rx-0' (ffff88808f2b6cd0): calling ktype release [ 305.748168] kobject: 'rx-0': free name [ 305.752132] kobject: 'tx-0' (ffff88808b545298): kobject_cleanup, parent ffff8880a61a2648 [ 305.760376] kobject: 'tx-0' (ffff88808b545298): auto cleanup 'remove' event [ 305.767460] kobject: 'tx-0' (ffff88808b545298): kobject_uevent_env [ 305.774077] kobject: 'tx-0' (ffff88808b545298): fill_kobj_path: path = '/devices/virtual/net/ppp0/queues/tx-0' [ 305.784475] kobject: 'tx-0' (ffff88808b545298): auto cleanup kobject_del [ 305.791432] kobject: 'tx-0' (ffff88808b545298): calling ktype release [ 305.797992] kobject: 'tx-0': free name [ 305.802031] kobject: 'queues' (ffff8880a61a2648): kobject_cleanup, parent (null) [ 305.810480] kobject: 'queues' (ffff8880a61a2648): calling ktype release [ 305.817214] kobject: 'queues' (ffff8880a61a2648): kset_release [ 305.823354] kobject: 'queues': free name [ 305.827547] kobject: 'ppp0' (ffff888074df10f0): kobject_uevent_env [ 305.833894] kobject: 'ppp0' (ffff888074df10f0): fill_kobj_path: path = '/devices/virtual/net/ppp0' [ 305.852627] kobject: 'loop1' (ffff8880a4a3c9e0): kobject_uevent_env [ 305.859033] kobject: 'loop1' (ffff8880a4a3c9e0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 305.880241] PPPIOCDETACH file->f_count=2 [ 305.885612] kobject: 'ppp0' (ffff888074df10f0): kobject_cleanup, parent (null) [ 305.893923] kobject: 'ppp0' (ffff888074df10f0): calling ktype release [ 305.900695] kobject: 'ppp0': free name [ 305.904949] kobject: 'ppp0' (ffff8880756c2eb0): kobject_add_internal: parent: 'net', set: 'devices' [ 305.915072] kobject: 'ppp0' (ffff8880756c2eb0): kobject_uevent_env [ 305.921447] kobject: 'ppp0' (ffff8880756c2eb0): fill_kobj_path: path = '/devices/virtual/net/ppp0' [ 305.930796] kobject: 'queues' (ffff8880a06eda48): kobject_add_internal: parent: 'ppp0', set: '' [ 305.940189] kobject: 'queues' (ffff8880a06eda48): kobject_uevent_env [ 305.946678] kobject: 'queues' (ffff8880a06eda48): kobject_uevent_env: filter function caused the event to drop! [ 305.957116] kobject: 'rx-0' (ffff888091c8e610): kobject_add_internal: parent: 'queues', set: 'queues' [ 305.966501] kobject: 'rx-0' (ffff888091c8e610): kobject_uevent_env [ 305.972868] kobject: 'rx-0' (ffff888091c8e610): fill_kobj_path: path = '/devices/virtual/net/ppp0/queues/rx-0' [ 305.983140] kobject: 'tx-0' (ffff8880a8d5c558): kobject_add_internal: parent: 'queues', set: 'queues' [ 305.992775] kobject: 'tx-0' (ffff8880a8d5c558): kobject_uevent_env [ 305.999107] kobject: 'tx-0' (ffff8880a8d5c558): fill_kobj_path: path = '/devices/virtual/net/ppp0/queues/tx-0' [ 306.010837] kobject: 'rx-0' (ffff888091c8e610): kobject_cleanup, parent ffff8880a06eda48 [ 306.019087] kobject: 'rx-0' (ffff888091c8e610): auto cleanup 'remove' event [ 306.026205] kobject: 'rx-0' (ffff888091c8e610): kobject_uevent_env [ 306.032560] kobject: 'rx-0' (ffff888091c8e610): fill_kobj_path: path = '/devices/virtual/net/ppp0/queues/rx-0' [ 306.042929] kobject: 'rx-0' (ffff888091c8e610): auto cleanup kobject_del [ 306.049772] kobject: 'rx-0' (ffff888091c8e610): calling ktype release [ 306.056448] kobject: 'rx-0': free name [ 306.060419] kobject: 'tx-0' (ffff8880a8d5c558): kobject_cleanup, parent ffff8880a06eda48 [ 306.068708] kobject: 'tx-0' (ffff8880a8d5c558): auto cleanup 'remove' event [ 306.075859] kobject: 'tx-0' (ffff8880a8d5c558): kobject_uevent_env [ 306.082192] kobject: 'tx-0' (ffff8880a8d5c558): fill_kobj_path: path = '/devices/virtual/net/ppp0/queues/tx-0' [ 306.092498] kobject: 'tx-0' (ffff8880a8d5c558): auto cleanup kobject_del [ 306.099333] kobject: 'tx-0' (ffff8880a8d5c558): calling ktype release [ 306.105906] kobject: 'tx-0': free name [ 306.109788] kobject: 'queues' (ffff8880a06eda48): kobject_cleanup, parent (null) [ 306.118192] kobject: 'queues' (ffff8880a06eda48): calling ktype release [ 306.124937] kobject: 'queues' (ffff8880a06eda48): kset_release [ 306.131049] kobject: 'queues': free name [ 306.135262] kobject: 'ppp0' (ffff8880756c2eb0): kobject_uevent_env [ 306.141615] kobject: 'ppp0' (ffff8880756c2eb0): fill_kobj_path: path = '/devices/virtual/net/ppp0' 22:41:28 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) ioctl$int_out(r0, 0x5460, &(0x7f0000000200)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000000)='/dev/ppp\x00', 0xffffffffffffffff}, 0x30) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x10000, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x2, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f00000002c0)=0x1, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)='/dev/ppp\x00', 0xffffffffffffffff}, 0x30) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000280)=[@in={0x2, 0x4e21, @multicast1}], 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r2, r3, 0x0, 0x9, &(0x7f0000000100)='/dev/ppp\x00', r5}, 0x30) ioctl$KVM_SET_XSAVE(r4, 0x5000aea5, &(0x7f0000000800)={"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"}) 22:41:28 executing program 3: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:28 executing program 4: perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x20010, 0x0, 0xae1e, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 22:41:28 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, [], @bt={0x4, 0x7, 0x100000000, 0x2, 0xfff, 0x80000001, 0x4, 0x9}}) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:28 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)='bridge0\x00') openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80200, 0x0) 22:41:28 executing program 1: r0 = open(&(0x7f0000000080)='./file0\x00', 0xfd, 0x2) r1 = syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1105511, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "d000"}) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) mknodat(r0, &(0x7f0000000000)='./file0\x00', 0x2, 0x8) setsockopt$packet_buf(r3, 0x107, 0x6, &(0x7f0000000040)="d72a48782726", 0x6) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r3, r3, 0x0, 0x80000001) [ 306.190183] kobject: 'ppp0' (ffff8880756c2eb0): kobject_cleanup, parent (null) [ 306.198420] kobject: 'ppp0' (ffff8880756c2eb0): calling ktype release [ 306.205991] kobject: 'ppp0': free name [ 306.217336] kobject: 'loop2' (ffff8880a4a992e0): kobject_uevent_env [ 306.226996] kobject: 'loop2' (ffff8880a4a992e0): fill_kobj_path: path = '/devices/virtual/block/loop2' 22:41:28 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x400) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) 22:41:28 executing program 0: open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r0, r1, 0x0, 0x80000001) [ 306.238488] kobject: 'ppp0' (ffff8880583707b0): kobject_add_internal: parent: 'net', set: 'devices' [ 306.263281] kobject: 'ppp0' (ffff8880583707b0): kobject_uevent_env [ 306.271201] kobject: 'loop0' (ffff888052fb8c20): kobject_uevent_env [ 306.277883] kobject: 'loop0' (ffff888052fb8c20): fill_kobj_path: path = '/devices/virtual/block/loop0' 22:41:28 executing program 3: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:28 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socket(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e20, @empty}, {0x2, 0x4e22, @local}, 0x2, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)='gretap0\x00', 0x9, 0xd67f, 0x1}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r1, 0x0, 0x2000) 22:41:28 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x200000, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 306.281512] kobject: 'ppp0' (ffff8880583707b0): fill_kobj_path: path = '/devices/virtual/net/ppp0' [ 306.298610] kobject: 'loop3' (ffff8880a4ae0220): kobject_uevent_env [ 306.312636] kobject: 'loop3' (ffff8880a4ae0220): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 306.333696] kobject: 'queues' (ffff88805c9a0e48): kobject_add_internal: parent: 'ppp0', set: '' [ 306.346616] kobject: 'queues' (ffff88805c9a0e48): kobject_uevent_env [ 306.353485] kobject: 'queues' (ffff88805c9a0e48): kobject_uevent_env: filter function caused the event to drop! [ 306.366172] kobject: 'rx-0' (ffff888097e57850): kobject_add_internal: parent: 'queues', set: 'queues' [ 306.376009] kobject: 'rx-0' (ffff888097e57850): kobject_uevent_env [ 306.382520] kobject: 'rx-0' (ffff888097e57850): fill_kobj_path: path = '/devices/virtual/net/ppp0/queues/rx-0' [ 306.396512] kobject: 'tx-0' (ffff888098480c98): kobject_add_internal: parent: 'queues', set: 'queues' [ 306.410520] kobject: 'tx-0' (ffff888098480c98): kobject_uevent_env [ 306.419988] kobject: 'tx-0' (ffff888098480c98): fill_kobj_path: path = '/devices/virtual/net/ppp0/queues/tx-0' [ 306.432209] kobject: 'rx-0' (ffff888097e57850): kobject_cleanup, parent ffff88805c9a0e48 22:41:28 executing program 3: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) [ 306.436232] kobject: 'loop3' (ffff8880a4ae0220): kobject_uevent_env [ 306.449515] kobject: 'rx-0' (ffff888097e57850): auto cleanup 'remove' event [ 306.451904] kobject: 'loop3' (ffff8880a4ae0220): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 306.459929] kobject: 'rx-0' (ffff888097e57850): kobject_uevent_env [ 306.469432] kobject: 'loop1' (ffff8880a4a3c9e0): kobject_uevent_env [ 306.493782] kobject: 'rx-0' (ffff888097e57850): fill_kobj_path: path = '/devices/virtual/net/ppp0/queues/rx-0' [ 306.498785] kobject: 'loop1' (ffff8880a4a3c9e0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 306.513667] kobject: 'rx-0' (ffff888097e57850): auto cleanup kobject_del [ 306.518782] kobject: 'loop0' (ffff888052fb8c20): kobject_uevent_env [ 306.525038] kobject: 'rx-0' (ffff888097e57850): calling ktype release [ 306.528761] kobject: 'loop0' (ffff888052fb8c20): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 306.535515] kobject: 'rx-0': free name [ 306.545422] kobject: 'loop5' (ffff8880a4b5a320): kobject_uevent_env [ 306.547470] kobject: 'tx-0' (ffff888098480c98): kobject_cleanup, parent ffff88805c9a0e48 [ 306.554492] kobject: 'loop5' (ffff8880a4b5a320): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 306.563418] kobject: 'tx-0' (ffff888098480c98): auto cleanup 'remove' event [ 306.581383] kobject: 'tx-0' (ffff888098480c98): kobject_uevent_env [ 306.587732] kobject: 'tx-0' (ffff888098480c98): fill_kobj_path: path = '/devices/virtual/net/ppp0/queues/tx-0' [ 306.598082] kobject: 'tx-0' (ffff888098480c98): auto cleanup kobject_del [ 306.604975] kobject: 'tx-0' (ffff888098480c98): calling ktype release [ 306.611733] kobject: 'tx-0': free name [ 306.615625] kobject: 'queues' (ffff88805c9a0e48): kobject_cleanup, parent (null) [ 306.624032] kobject: 'queues' (ffff88805c9a0e48): calling ktype release [ 306.630795] kobject: 'queues' (ffff88805c9a0e48): kset_release [ 306.636751] kobject: 'queues': free name [ 306.641068] kobject: 'ppp0' (ffff8880583707b0): kobject_uevent_env [ 306.647481] kobject: 'ppp0' (ffff8880583707b0): fill_kobj_path: path = '/devices/virtual/net/ppp0' [ 306.700175] PPPIOCDETACH file->f_count=2 [ 306.705327] kobject: 'ppp0' (ffff8880583707b0): kobject_cleanup, parent (null) [ 306.713612] kobject: 'ppp0' (ffff8880583707b0): calling ktype release [ 306.725444] kobject: 'ppp0': free name [ 306.729842] kobject: 'ppp0' (ffff888055d5c5f0): kobject_add_internal: parent: 'net', set: 'devices' [ 306.739892] kobject: 'ppp0' (ffff888055d5c5f0): kobject_uevent_env [ 306.746471] kobject: 'ppp0' (ffff888055d5c5f0): fill_kobj_path: path = '/devices/virtual/net/ppp0' [ 306.755785] kobject: 'queues' (ffff8880791d5148): kobject_add_internal: parent: 'ppp0', set: '' [ 306.765171] kobject: 'queues' (ffff8880791d5148): kobject_uevent_env [ 306.771680] kobject: 'queues' (ffff8880791d5148): kobject_uevent_env: filter function caused the event to drop! [ 306.781926] kobject: 'rx-0' (ffff88807befe550): kobject_add_internal: parent: 'queues', set: 'queues' [ 306.791341] kobject: 'rx-0' (ffff88807befe550): kobject_uevent_env [ 306.797660] kobject: 'rx-0' (ffff88807befe550): fill_kobj_path: path = '/devices/virtual/net/ppp0/queues/rx-0' [ 306.807985] kobject: 'tx-0' (ffff8880a1f7cd18): kobject_add_internal: parent: 'queues', set: 'queues' [ 306.817416] kobject: 'tx-0' (ffff8880a1f7cd18): kobject_uevent_env [ 306.823769] kobject: 'tx-0' (ffff8880a1f7cd18): fill_kobj_path: path = '/devices/virtual/net/ppp0/queues/tx-0' [ 306.835144] kobject: 'rx-0' (ffff88807befe550): kobject_cleanup, parent ffff8880791d5148 [ 306.844295] kobject: 'rx-0' (ffff88807befe550): auto cleanup 'remove' event [ 306.851408] kobject: 'rx-0' (ffff88807befe550): kobject_uevent_env [ 306.857753] kobject: 'rx-0' (ffff88807befe550): fill_kobj_path: path = '/devices/virtual/net/ppp0/queues/rx-0' [ 306.868980] kobject: 'rx-0' (ffff88807befe550): auto cleanup kobject_del [ 306.876015] kobject: 'rx-0' (ffff88807befe550): calling ktype release [ 306.882706] kobject: 'rx-0': free name [ 306.886628] kobject: 'tx-0' (ffff8880a1f7cd18): kobject_cleanup, parent ffff8880791d5148 [ 306.894865] kobject: 'tx-0' (ffff8880a1f7cd18): auto cleanup 'remove' event [ 306.902064] kobject: 'tx-0' (ffff8880a1f7cd18): kobject_uevent_env [ 306.908387] kobject: 'tx-0' (ffff8880a1f7cd18): fill_kobj_path: path = '/devices/virtual/net/ppp0/queues/tx-0' [ 306.918737] kobject: 'tx-0' (ffff8880a1f7cd18): auto cleanup kobject_del [ 306.925858] kobject: 'tx-0' (ffff8880a1f7cd18): calling ktype release [ 306.932437] kobject: 'tx-0': free name [ 306.936324] kobject: 'queues' (ffff8880791d5148): kobject_cleanup, parent (null) [ 306.944814] kobject: 'queues' (ffff8880791d5148): calling ktype release [ 306.951628] kobject: 'queues' (ffff8880791d5148): kset_release [ 306.957589] kobject: 'queues': free name [ 306.961870] kobject: 'ppp0' (ffff888055d5c5f0): kobject_uevent_env [ 306.968204] kobject: 'ppp0' (ffff888055d5c5f0): fill_kobj_path: path = '/devices/virtual/net/ppp0' 22:41:29 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7, 0x2000) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000100)=""/168) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)=0x0) ptrace$peekuser(0x3, r3, 0x6) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:41:29 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x210000, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x4) 22:41:29 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) write$P9_RSTATFS(r0, &(0x7f0000000140)={0x43, 0x9, 0x1, {0x1e4a, 0x7fffffff, 0x8001, 0x4, 0x8, 0x8, 0x2, 0x3, 0x3}}, 0x43) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:29 executing program 4: perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 22:41:29 executing program 3: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x6, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:29 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)='bridge0\x00') [ 307.020213] kobject: 'ppp0' (ffff888055d5c5f0): kobject_cleanup, parent (null) [ 307.028473] kobject: 'ppp0' (ffff888055d5c5f0): calling ktype release [ 307.035728] kobject: 'ppp0': free name [ 307.046979] kobject: 'loop2' (ffff8880a4a992e0): kobject_uevent_env [ 307.057430] kobject: 'loop2' (ffff8880a4a992e0): fill_kobj_path: path = '/devices/virtual/block/loop2' 22:41:29 executing program 3: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x6, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:29 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={r1, &(0x7f00000000c0)="8ab423cd32ea8072eaac8834e1fb92c71befdebcb075cc06bf114d0004c3537eaa218b3d47afba1badba5636d2bc38e693932384525492905d6cb79b548932c54af7258ea11ec3c8cebcaa14246321e71029bdac6d5c8a0c3d2d5f619d409d9b46897ff275726011b20d55835d977fc8d29fec5eb103a7d90b0a4eb2c9c7d7829815088f4bd4b2976435e9d6892327f6f8a1e209722f21808f9a146477f925470a4ac01ceff95f1d094c5df52519a01f504fee3c43208ddf30f3ce2c492010d2", &(0x7f0000000180)=""/71}, 0x18) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f00000002c0)={0x18, 0x0, {0x1, @random="43b40c79b23a", 'sit0\x00'}}) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 307.077810] kobject: 'ppp0' (ffff88809fd2e8f0): kobject_add_internal: parent: 'net', set: 'devices' [ 307.097382] kobject: 'loop3' (ffff8880a4ae0220): kobject_uevent_env [ 307.101920] kobject: 'ppp0' (ffff88809fd2e8f0): kobject_uevent_env [ 307.117779] kobject: 'ppp0' (ffff88809fd2e8f0): fill_kobj_path: path = '/devices/virtual/net/ppp0' 22:41:29 executing program 0: fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r0, r1, 0x0, 0x80000001) 22:41:29 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r0, 0x0, 0xe, &(0x7f0000000080)='&bdevvboxnet1\x00', 0xffffffffffffffff}, 0x30) r2 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x400, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) ioctl$KDMKTONE(r2, 0x4b30, 0x5) kcmp(r1, r3, 0x6, r0, r0) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000280)={0x100000000, {{0xa, 0x4e24, 0xdb, @mcast2, 0x6}}}, 0x88) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:29 executing program 3: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x6, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) [ 307.122390] kobject: 'loop3' (ffff8880a4ae0220): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 307.144586] kobject: 'queues' (ffff88809705dd48): kobject_add_internal: parent: 'ppp0', set: '' [ 307.155653] kobject: 'queues' (ffff88809705dd48): kobject_uevent_env [ 307.159253] kobject: 'loop0' (ffff888052fb8c20): kobject_uevent_env 22:41:29 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000000000)) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') accept4$bt_l2cap(r2, 0x0, &(0x7f0000000080), 0xbd160bc6a64dd22b) sendfile(r1, r2, 0x0, 0x80000001) [ 307.169396] kobject: 'loop0' (ffff888052fb8c20): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 307.177002] kobject: 'queues' (ffff88809705dd48): kobject_uevent_env: filter function caused the event to drop! [ 307.198737] kobject: 'rx-0' (ffff888087fb8f10): kobject_add_internal: parent: 'queues', set: 'queues' [ 307.205604] kobject: 'loop3' (ffff8880a4ae0220): kobject_uevent_env [ 307.211363] kobject: 'rx-0' (ffff888087fb8f10): kobject_uevent_env [ 307.221231] kobject: 'rx-0' (ffff888087fb8f10): fill_kobj_path: path = '/devices/virtual/net/ppp0/queues/rx-0' [ 307.232206] kobject: 'loop3' (ffff8880a4ae0220): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 307.232463] kobject: 'tx-0' (ffff88809ded7cd8): kobject_add_internal: parent: 'queues', set: 'queues' [ 307.267253] kobject: 'tx-0' (ffff88809ded7cd8): kobject_uevent_env [ 307.272725] kobject: 'loop0' (ffff888052fb8c20): kobject_uevent_env [ 307.273694] kobject: 'tx-0' (ffff88809ded7cd8): fill_kobj_path: path = '/devices/virtual/net/ppp0/queues/tx-0' [ 307.280462] kobject: 'loop0' (ffff888052fb8c20): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 307.300608] kobject: 'rx-0' (ffff888087fb8f10): kobject_cleanup, parent ffff88809705dd48 [ 307.308861] kobject: 'rx-0' (ffff888087fb8f10): auto cleanup 'remove' event [ 307.316450] kobject: 'rx-0' (ffff888087fb8f10): kobject_uevent_env [ 307.322806] kobject: 'rx-0' (ffff888087fb8f10): fill_kobj_path: path = '/devices/virtual/net/ppp0/queues/rx-0' [ 307.333163] kobject: 'rx-0' (ffff888087fb8f10): auto cleanup kobject_del [ 307.340055] kobject: 'rx-0' (ffff888087fb8f10): calling ktype release [ 307.346621] kobject: 'rx-0': free name [ 307.350760] kobject: 'tx-0' (ffff88809ded7cd8): kobject_cleanup, parent ffff88809705dd48 [ 307.358975] kobject: 'tx-0' (ffff88809ded7cd8): auto cleanup 'remove' event [ 307.366190] kobject: 'tx-0' (ffff88809ded7cd8): kobject_uevent_env [ 307.372581] kobject: 'tx-0' (ffff88809ded7cd8): fill_kobj_path: path = '/devices/virtual/net/ppp0/queues/tx-0' [ 307.382953] kobject: 'tx-0' (ffff88809ded7cd8): auto cleanup kobject_del [ 307.389791] kobject: 'tx-0' (ffff88809ded7cd8): calling ktype release [ 307.396390] kobject: 'tx-0': free name [ 307.400297] kobject: 'queues' (ffff88809705dd48): kobject_cleanup, parent (null) [ 307.408675] kobject: 'queues' (ffff88809705dd48): calling ktype release [ 307.415430] kobject: 'queues' (ffff88809705dd48): kset_release [ 307.421400] kobject: 'queues': free name [ 307.425603] kobject: 'ppp0' (ffff88809fd2e8f0): kobject_uevent_env [ 307.431959] kobject: 'ppp0' (ffff88809fd2e8f0): fill_kobj_path: path = '/devices/virtual/net/ppp0' [ 307.451132] kobject: 'loop1' (ffff8880a4a3c9e0): kobject_uevent_env [ 307.457560] kobject: 'loop1' (ffff8880a4a3c9e0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 307.467369] kobject: 'loop5' (ffff8880a4b5a320): kobject_uevent_env [ 307.473826] kobject: 'loop5' (ffff8880a4b5a320): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 307.480347] PPPIOCDETACH file->f_count=2 [ 307.492311] kobject: 'ppp0' (ffff88809fd2e8f0): kobject_cleanup, parent (null) [ 307.500689] kobject: 'ppp0' (ffff88809fd2e8f0): calling ktype release [ 307.507258] kobject: 'ppp0': free name [ 307.511539] kobject: 'ppp0' (ffff8880535dc5f0): kobject_add_internal: parent: 'net', set: 'devices' [ 307.521826] kobject: 'ppp0' (ffff8880535dc5f0): kobject_uevent_env [ 307.528162] kobject: 'ppp0' (ffff8880535dc5f0): fill_kobj_path: path = '/devices/virtual/net/ppp0' [ 307.537737] kobject: 'queues' (ffff88809078f048): kobject_add_internal: parent: 'ppp0', set: '' [ 307.547377] kobject: 'queues' (ffff88809078f048): kobject_uevent_env [ 307.553876] kobject: 'queues' (ffff88809078f048): kobject_uevent_env: filter function caused the event to drop! [ 307.564167] kobject: 'rx-0' (ffff8880755889d0): kobject_add_internal: parent: 'queues', set: 'queues' [ 307.573577] kobject: 'rx-0' (ffff8880755889d0): kobject_uevent_env [ 307.579889] kobject: 'rx-0' (ffff8880755889d0): fill_kobj_path: path = '/devices/virtual/net/ppp0/queues/rx-0' [ 307.590245] kobject: 'tx-0' (ffff88809845fd58): kobject_add_internal: parent: 'queues', set: 'queues' [ 307.599681] kobject: 'tx-0' (ffff88809845fd58): kobject_uevent_env [ 307.606028] kobject: 'tx-0' (ffff88809845fd58): fill_kobj_path: path = '/devices/virtual/net/ppp0/queues/tx-0' [ 307.617407] kobject: 'rx-0' (ffff8880755889d0): kobject_cleanup, parent ffff88809078f048 [ 307.625773] kobject: 'rx-0' (ffff8880755889d0): auto cleanup 'remove' event [ 307.632905] kobject: 'rx-0' (ffff8880755889d0): kobject_uevent_env [ 307.639228] kobject: 'rx-0' (ffff8880755889d0): fill_kobj_path: path = '/devices/virtual/net/ppp0/queues/rx-0' [ 307.649578] kobject: 'rx-0' (ffff8880755889d0): auto cleanup kobject_del [ 307.656561] kobject: 'rx-0' (ffff8880755889d0): calling ktype release [ 307.663304] kobject: 'rx-0': free name [ 307.667194] kobject: 'tx-0' (ffff88809845fd58): kobject_cleanup, parent ffff88809078f048 [ 307.675556] kobject: 'tx-0' (ffff88809845fd58): auto cleanup 'remove' event [ 307.682688] kobject: 'tx-0' (ffff88809845fd58): kobject_uevent_env [ 307.689037] kobject: 'tx-0' (ffff88809845fd58): fill_kobj_path: path = '/devices/virtual/net/ppp0/queues/tx-0' [ 307.699366] kobject: 'tx-0' (ffff88809845fd58): auto cleanup kobject_del [ 307.706246] kobject: 'tx-0' (ffff88809845fd58): calling ktype release [ 307.712858] kobject: 'tx-0': free name [ 307.716738] kobject: 'queues' (ffff88809078f048): kobject_cleanup, parent (null) [ 307.725154] kobject: 'queues' (ffff88809078f048): calling ktype release [ 307.731903] kobject: 'queues' (ffff88809078f048): kset_release [ 307.737850] kobject: 'queues': free name [ 307.742162] kobject: 'ppp0' (ffff8880535dc5f0): kobject_uevent_env [ 307.748476] kobject: 'ppp0' (ffff8880535dc5f0): fill_kobj_path: path = '/devices/virtual/net/ppp0' 22:41:30 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x400) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x20000, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000040)=0x3, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 22:41:30 executing program 3: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x6, &(0x7f00000000c0)) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 22:41:30 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @netrom}, [@default, @default, @bcast, @bcast, @remote, @remote, @netrom, @rose]}, &(0x7f0000000100)=0x48) ioctl$sock_ax25_SIOCDELRT(r1, 0x890c, &(0x7f0000000140)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, 0x1, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) 22:41:30 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000000)={0x5, 0x8}) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000140)=0x3, 0x4) mkdir(&(0x7f0000000080)='./file0\x00', 0x1) 22:41:30 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 22:41:30 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000000)={0xd891, 0x2, 0x1ff}) sendfile(r0, r3, 0x0, 0x80000001) [ 307.810212] kobject: 'ppp0' (ffff8880535dc5f0): kobject_cleanup, parent (null) [ 307.818550] kobject: 'ppp0' (ffff8880535dc5f0): calling ktype release [ 307.826281] kobject: 'ppp0': free name [ 307.837962] kobject: 'loop2' (ffff8880a4a992e0): kobject_uevent_env [ 307.851643] selinux_nlmsg_perm: 32 callbacks suppressed 22:41:30 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 22:41:30 executing program 3: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x6, &(0x7f00000000c0)) r1 = socket(0x0, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) [ 307.851650] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=17467 comm=syz-executor.3 [ 307.853384] kobject: 'loop2' (ffff8880a4a992e0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 307.877239] kobject: 'ppp0' (ffff88807d494d30): kobject_add_internal: parent: 'net', set: 'devices' [ 307.896416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=17474 comm=syz-executor.0 22:41:30 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee65, 0x3, 0x0, 0x0, 0x0, 0x0, 0x62b9d774ed42d5ac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x40000, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') accept$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000680)={@empty, 0x0}, &(0x7f00000006c0)=0x14) getsockname(0xffffffffffffffff, &(0x7f0000000700)=@hci={0x1f, 0x0}, &(0x7f0000000780)=0x80) accept$packet(0xffffffffffffffff, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000800)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f000000e9c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f000000ea00)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f000000ea40)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@initdev}}, &(0x7f000000eb40)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000eb80)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@dev}}, &(0x7f000000ec80)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000ed80)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f000000edc0)={{{@in=@remote, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f000000eec0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f000000ef00)={'vcan0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f000000ef80)={{{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f000000f080)=0xe8) accept4$packet(0xffffffffffffffff, &(0x7f000000f0c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f000000f100)=0x14, 0x80000) getsockname$packet(0xffffffffffffffff, &(0x7f000000f140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f000000f180)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f000000f1c0)={'vcan0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f000000f880)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000184}, 0xc, &(0x7f000000f840)={&(0x7f000000f200)={0x63c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x74, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r5}, {0x1f4, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffff8}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r9}, {0xc0, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x80, 0x2, [{0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x10001}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x258, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x100}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x386}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r15}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x400}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r17}}}]}}]}, 0x63c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 22:41:30 executing program 5: perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 22:41:30 executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101}) r1 = socket(0x10, 0x3, 0x8000) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0xcb, "56ce87deea1faa921c4a24d708644852e6af2be493d56936c1beac2e56979b51c6a3d27ab02f1538af0c4abff8631028e12e84ce53dba1a8597d029c4f2db61d1dd95b6aba3dceceb0f4ea5e6e5df4c0b7bb0f731bc2186422fd320ce22aa2d228cdf9686b5596750b4068adb5d793287be7dbc7229b2dd3084a143ab1566022521a21cad83d6ebcff136dcadd89e227bdc8f87d37d1d4748498c125a397b56981fd7bf8036814b265da89a8323a0f1c5996cd9c09e0c3aa057de5a9a6854d5c62ef79305c657e6b385340"}, &(0x7f0000000040)=0xd3) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e22, 0xfffffffffffffffb, @dev={0xfe, 0x80, [], 0xd}, 0x4a5}}, 0x9, 0x1, 0x4, 0xc0, 0x40}, &(0x7f0000000080)=0x98) sendfile(r1, r2, 0x0, 0x80000001) syz_open_dev$sndmidi(&(0x7f0000000300)='/dev/snd/midiC#D#\x00', 0x1, 0x151000) keyctl$set_reqkey_keyring(0xe, 0x86c03380b56db6a8) 22:41:30 executing program 3: r0 = open(&(0x7f0000000040)='./file0\x00', 0xfc, 0x0) fcntl$lock(r0, 0x6, &(0x7f00000000c0)) r1 = socket(0x0, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) [ 307.905006] kobject: 'ppp0' (ffff88807d494d30): kobject_uevent_env [ 307.929280] kobject: 'loop5' (ffff8880a4b5a320): kobject_uevent_env [ 307.946338] kobject: 'ppp0' (ffff88807d494d30): fill_kobj_path: path = '/devices/virtual/net/ppp0' [ 307.961436] kobject: 'loop5' (ffff8880a4b5a320): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 307.973378] kobject: 'queues' (ffff8880604a6a48): kobject_add_internal: parent: 'ppp0', set: '' [ 307.980553] kobject: 'loop3' (ffff8880a4ae0220): kobject_uevent_env [ 307.995589] kobject: 'queues' (ffff8880604a6a48): kobject_uevent_env [ 308.001004] kobject: 'loop3' (ffff8880a4ae0220): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 308.011389] kobject: 'queues' (ffff8880604a6a48): kobject_uevent_env: filter function caused the event to drop! [ 308.025345] kobject: 'loop0' (ffff888052fb8c20): kobject_uevent_env [ 308.027058] kobject: 'rx-0' (ffff88809cf46b50): kobject_add_internal: parent: 'queues', set: 'queues' [ 308.038601] kobject: 'loop0' (ffff888052fb8c20): fill_kobj_path: path = '/devices/virt