, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfea}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x800}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x800}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e22}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x4a04e}, 0x40000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r3, r4, 0x0, 0x4, &(0x7f0000000140)='*.}\x00'}, 0x30) ptrace$cont(0xffffffffffffffff, r8, 0x101, 0x2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) lsetxattr$security_capability(&(0x7f00000004c0)='./bus\x00', &(0x7f0000000540)='security.capability\x00', &(0x7f0000000580)=@v2={0x2000000, [{0xa54e, 0xfff}, {0xbca, 0x9b}]}, 0x14, 0x1) 06:14:15 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_open_dev$vcsn(&(0x7f0000000080), 0x511, 0x80080) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e22, 0x7ff, @mcast2, 0x4def}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x6c) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x6, 0x3, &(0x7f00000000c0), 0x200000c0) 06:14:15 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './bus/../file0'}}]}) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000040)='./bus/../file0\x00', &(0x7f0000000180)={0x8b, 0x0, "39d4c36407df79e901f4a6424c5a6d54cf6e80c2e69c2f144121d8e3318caf5bd4ea61c2f498959f82cf900c1080b705a6257c108a0276d06b76c34e964a8e5a6388391c511d2f402d29a86bc119b2bd30c37b9b49faef8c6a56f8006d00608e331b8dbed33951bf12399fee013864ee94438056615050d1a102b1f238965305f8f59a"}, &(0x7f0000000240), 0x1200) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1066.018090] overlayfs: option "workdir=./bus/../file0" is useless in a non-upper mount, ignore [ 1066.028177] overlayfs: missing 'lowerdir' [ 1066.136159] overlayfs: option "workdir=./bus/../file0" is useless in a non-upper mount, ignore [ 1066.159474] overlayfs: missing 'lowerdir' [ 1066.160303] overlayfs: option "workdir=./bus/../file0" is useless in a non-upper mount, ignore [ 1066.180169] overlayfs: missing 'lowerdir' 06:14:16 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x6, 0x3, &(0x7f00000000c0), 0x200000c0) r1 = syz_open_procfs(0x0, &(0x7f0000004280)='net/if_inet6\x00') r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000004300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f00000043c0)={&(0x7f00000042c0)={0x10, 0x0, 0x0, 0x888142}, 0x7, &(0x7f0000004380)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=r2, @ANYBLOB="080025bd7000fcdbdf25040000001400070008000100e90000000800010008000000100004000c00010073797a310000000004000100"], 0x3}, 0x1, 0x0, 0x0, 0x4098001}, 0x80) 06:14:16 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="776f726b6469723d2e2f6275732f2e2e2f66696c65302c0098812de3c46c3a4945640c0cc40912b43be659d9e691bc638d7ecfdfb876396d4c63df09b6beb95eca099b5abe9c49e18829786c94b601989fbc770bf535abde0100000057ea0dc4d11d1e79"]) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x2) 06:14:16 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000140)={0x7}, 0x23d) ftruncate(r2, 0x208200) fcntl$setstatus(r1, 0x4, 0x3fffe) io_setup(0x2, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r4, 0x2007fff) getuid() fsync(r2) 06:14:16 executing program 5: r0 = syz_open_dev$radio(0x0, 0x1, 0x2) accept4$rose(r0, 0x0, &(0x7f0000000040), 0x1400) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(r1, &(0x7f0000000340)=ANY=[@ANYRESOCT=r2], 0x17) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x100, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f00000000c0)=0x53, &(0x7f0000000100)=0x1) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r5, r5, &(0x7f0000000000), 0x8080fffffffe) pwrite64(r5, &(0x7f0000000b40)="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", 0x1000, 0x0) sendfile(r4, r4, 0x0, 0x8080fffffffe) [ 1066.527811] overlayfs: option "workdir=./bus/../file0" is useless in a non-upper mount, ignore [ 1066.551477] overlayfs: missing 'lowerdir' 06:14:16 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14"], 0xf) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000040)) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) 06:14:16 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x6, 0x3, &(0x7f00000000c0), 0x200000c0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40000, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x10) 06:14:16 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) fgetxattr(r0, &(0x7f0000000040)=@random={'trusted.', '\xf3em1[-\x00'}, &(0x7f0000000180), 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './bus/../file0'}}]}) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) 06:14:16 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000140)={0x7}, 0x23d) ftruncate(r2, 0x208200) fcntl$setstatus(r1, 0x4, 0x3fffe) io_setup(0x2, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000040)='./bus\x00', 0x480003, 0x3d) ftruncate(r4, 0x2007fff) fsync(r2) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x80, 0x7f, 0x5, 0x40, 0x4}, &(0x7f00000001c0)=0x98) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000180)=0x4) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) fcntl$getflags(r5, 0xb) 06:14:16 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x6, 0x3, &(0x7f00000000c0), 0x200000c0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000100)=r1) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000240)=@urb_type_interrupt={0x1, {0xd}, 0x7, 0x0, &(0x7f0000000140)="03343357c405dc7e6b2e3825c6baa64fc68b902afe388150e404e65c19d1b2c742cf7f436a1b2ad4f4aa42e7c473feb8b1cb930bcbab3f772e3c", 0x3a, 0x7fffffff, 0x35d, 0x0, 0xffffffff, 0x5, &(0x7f0000000180)="4ce2e58e802dc430a68b2d0521f06a16"}) write$P9_RREADLINK(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="b000"/17], 0x11) sendfile(r3, r3, &(0x7f0000000000), 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6gre0\x00', r5}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0x5, 0x4, 0x101, 0x30, 0x8, 0x3f, 0x8}, 0xc) [ 1066.829495] overlayfs: option "workdir=./bus/../file0" is useless in a non-upper mount, ignore [ 1066.843581] overlayfs: missing 'lowerdir' 06:14:16 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) stat(&(0x7f0000000040)='./bus/../file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000200)='./bus\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus/../file0'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'GPLem1'}}, {@seclabel='seclabel'}, {@fowner_eq={'fowner', 0x3d, r2}}, {@euid_eq={'\b\xfd\xdd\x94', 0x3d, r3}}]}) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f00000000c0)={0x21, 0x3, 0x0, {0x2}}, 0x21) 06:14:16 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$FUSE_IOCTL(r3, &(0x7f0000000240)={0x20, 0xfffffffffffffff5, 0x3, {0x83a, 0x8, 0x5, 0x9c}}, 0x20) write$P9_RXATTRCREATE(r2, &(0x7f0000000140)={0x7}, 0x23d) ftruncate(r2, 0x208200) fcntl$setstatus(r1, 0x4, 0x3fffe) io_setup(0x2, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r5, 0x2007fff) fsync(r2) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="3a210500d763a7714bdef64346ef14b7b0"], 0x11) sendfile(r6, r6, &(0x7f0000000000), 0x8080fffffffe) write$P9_RLERRORu(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="1600001f14b2cf4f5f95b08bef3bbb78330007020009"], 0x16) 06:14:16 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xd9, 0x80) ioctl$USBDEVFS_DISCARDURB(r2, 0x550b, &(0x7f0000000080)=0xfffffffffffffa35) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x18) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7707, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 06:14:16 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$setsig(0x4203, r1, 0x7, &(0x7f0000000180)={0x9, 0x6, 0x3ff}) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './bus/../file0'}}]}) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1067.007621] overlayfs: unrecognized mount option "smackfstransmute=GPLem1" or missing value 06:14:16 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x82001}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x884) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './bus/../file0'}}]}) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1067.058063] overlayfs: option "workdir=./bus/../file0" is useless in a non-upper mount, ignore [ 1067.067861] overlayfs: missing 'lowerdir' [ 1067.145061] overlayfs: option "workdir=./bus/../file0" is useless in a non-upper mount, ignore [ 1067.154423] overlayfs: missing 'lowerdir' 06:14:16 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) getpeername$llc(r2, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="776f828e9dc72eb0656fe88332e9956f3f726b6469723d2e2f6275732f2e2e2f66696c65302c00"]) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1067.237072] overlayfs: unrecognized mount option "wo‚ŽÇ.°eočƒ2é•o?rkdir=./bus/../file0" or missing value [ 1067.255221] overlayfs: unrecognized mount option "wo‚ŽÇ.°eočƒ2é•o?rkdir=./bus/../file0" or missing value 06:14:17 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="b7"], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x4a40, 0x0) getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000080)=0x1551, &(0x7f00000000c0)=0x4) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) 06:14:17 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x33d98719fc265e1c, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="776f726b65302c000000004cdc8e8c00"/28]) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000180)={0x9a6, 0x7a6e, 0xffffffff, 0x0, 0x0, [], [], [], 0x8, 0x80}) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x8}, &(0x7f00000002c0)=0x8) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) 06:14:17 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="a5ce67b195e2ffffaa006d6e8c91b3ca7b701e1464a1c13bdceed9cf510715acf1ba3c433bbdd3331e2812f989f3eb494b26c1d4afbfd260e62da8350b22195799ac3de56d30c59c27f7f86830b12da117fa4295425c1e78b9822066166984001a5c5c4de904509a3f8ceb1607dbc31dabd73f7fd6536f73b21ef3a5f36efa9cc115b0be38376e8b5113384908f7c895a7b7b81fca92"], 0x96) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000100)={0x9, 0x9, 0x0, 0x101, 0x15, 0xd0, 0x20, 0x1, 0x0, 0x2}) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) 06:14:17 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x6, 0x3, &(0x7f00000000c0), 0x200000c0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x152141, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e22, 0xdf, @loopback, 0x3}, {0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}, 0x1, [0x2, 0x800009, 0x6, 0x6, 0x3a, 0x1, 0x7, 0x403]}, 0x5c) 06:14:17 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) r1 = open(0x0, 0x141042, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) r5 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x1f, 0x210100) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r6, r6, &(0x7f0000000000), 0x8080fffffffe) r7 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r7) r8 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r8) io_submit(r4, 0x5, &(0x7f0000000540)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x7ff, r1, &(0x7f0000000080)="3d0ff72220d8ccc1131033105717ecb8c978e33c2d47e8de4341ac63a8bd20955cf70597d990bd1a78880e5ee96daa9621d6b583dc1fd43033c650b805f02ddc13a2ff7dbdf1de9f25659febec4f01ef6863e94e7924b16eb8e638a01cb349252994944c909a2280", 0x68, 0x7, 0x0, 0x2, r5}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x65b349ef51a65eb3, 0x2, r6, &(0x7f0000000200)="2404ca476557901edbb148d2cbb22336d77274dc81f51e4887856d2168ef513ed6f1afb928852fc166e68be565ace492da3ca30256d39c54d170594881469f2a01df5ef3d970fdadced0beef7825586b6a28f9b5483c1aeed71888a8ad4fc9bba23ab54268d088226be97f114ef2e42b95ca384882f06b100e0771e142b70c68d500e2c02e8a00488c57942b9f195dc5be0c3d136ec7f2651ccdd1aa0acb0bc669ae430c0b8cf328c731ac9592cc4191759bb08709a59829c37f7b236545fa54f0cdd648658e0421ab73da7c84aa", 0xce, 0x2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x8, r2, &(0x7f0000000340)="3a703addb474939f", 0x8, 0x7, 0x0, 0x3}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x4, r7, &(0x7f00000003c0)="a1711f2f53c0131382d4fab73c85955d9dd389e49f4e85b680a04914d8f258faf5234aaf3a39c6290e98859d055c8ce9c01f6544714eb6927c44d963f566f28693d1f0017cb38bf2bdcb85b8cca123ac634fd976a3", 0x55, 0x100000001, 0x0, 0x1, r8}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x5, r2, &(0x7f0000000480)="57d8e081df1357129330f9e6f5ded40d477e928b1645a2f8fd855f5cd759c93830fa24f6e746325f70e05fa47ec295bec26188c634dea27dbcb9576eda4095f0c47e3fadd8f06f9f", 0x48, 0x3d99, 0x0, 0x2}]) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) 06:14:17 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x6, 0x3, &(0x7f00000000c0), 0x200000c0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) getpgrp(r1) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x3e, 0x2, 0x1}, 0x355) [ 1067.840872] overlayfs: unrecognized mount option "worke0" or missing value 06:14:17 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000040)=""/27) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="776f726b44cfb1a969723d2e2f6275732f2e2e2f01696c65"]) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1067.889978] overlayfs: unrecognized mount option "worke0" or missing value 06:14:17 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000140)={0x7}, 0x23d) ftruncate(r2, 0x208200) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video1\x00', 0x2, 0x0) fcntl$setstatus(r1, 0x4, 0x3fffe) io_setup(0x2, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r4, 0x2007fff) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bded64306ff14b7b0"], 0x11) sendfile(r5, r5, &(0x7f0000000000), 0x8080fffffffe) ioctl$KVM_GET_DEVICE_ATTR(r5, 0x4018aee2, &(0x7f00000001c0)={0x0, 0x9c, 0x2, &(0x7f0000000180)=0x100000000}) fsync(r2) [ 1067.939205] overlayfs: unrecognized mount option "workDĎąŠir=./bus/../ile" or missing value 06:14:19 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000000000bc7000000000009500af00000000000000000000000000000800000000"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./bus\x00', &(0x7f0000000640)='trusted.overlay.nlink\x00', &(0x7f0000000680)={'U-', 0x3}, 0x28, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xb, &(0x7f00000003c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000000}, @call={0x85, 0x0, 0x0, 0x2f}, @ldst={0x2, 0x2, 0x96ea67857620718e, 0x6, 0x2, 0x6, 0xffffffffffffffff}, @ldst={0x1, 0x3, 0x1, 0x3, 0x8, 0xffffffffffffffc0, 0xffffffffffffffff}, @ldst={0x1, 0x2, 0x0, 0x4, 0x2, 0x7fffffffffffff17}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @map={0x18, 0xd, 0x1, 0x0, r1}], &(0x7f0000000440)='GPL\x00', 0x1, 0x2a, &(0x7f0000000480)=""/42, 0x41000, 0x7, [], 0x0, 0x8, r2, 0x8, &(0x7f00000004c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x7}, 0x10}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r3, 0xfccb, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x28) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000600)={r4}, 0xc) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r4}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r5, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x7f, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x6c, 0x101}, &(0x7f0000000140)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0x7}}, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r7, r7, &(0x7f0000000000), 0x8080fffffffe) execve(&(0x7f00000006c0)='./bus\x00', &(0x7f0000000980)=[&(0x7f0000000700)='GPL\x00', &(0x7f0000000740)='\x00', &(0x7f0000000780)='^\x00', &(0x7f00000007c0)='self\x00', &(0x7f0000000800)='trusted.overlay.nlink\x00', &(0x7f0000000840)='trusted.overlay.nlink\x00', &(0x7f0000000880)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746', &(0x7f0000000940)='trusted&\x00'], &(0x7f0000000a80)=[&(0x7f00000009c0)='wlan1}user(\x8f\x00', &(0x7f0000000a00)='trusted.overlay.nlink\x00', &(0x7f0000000a40)='U-']) ioctl$KVM_DEASSIGN_DEV_IRQ(r7, 0x4040ae75, &(0x7f00000002c0)={0x2, 0x80000000, 0x5, 0x2}) getsockopt$bt_BT_SECURITY(r6, 0x6, 0x3, &(0x7f0000000340), 0x2) 06:14:19 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000180)) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = fcntl$dupfd(r3, 0x0, r0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r6, r6, &(0x7f0000000000), 0x8080fffffffe) r7 = dup2(r5, r6) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './bus/../file0'}}]}) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) 06:14:19 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="b7"], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) 06:14:19 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14"], 0xf) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x18) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x24c000, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300), r5, 0x0, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000340)={0x6, 0x118, 0xfa00, {{0x10001, 0x6, "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", 0x65, 0x3f, 0x8, 0x12, 0x20, 0xb1, 0x9}, r5}}, 0x120) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$VIDIOC_G_TUNER(r3, 0xc054561d, &(0x7f0000000100)={0xe16d, "a3532137ced5c4ed950ae6c076670f44378e35382be79c2da31831c8130c3b7e", 0x81d57560071b33c9, 0x20, 0x400, 0xd9, 0x4, 0x3, 0x74ee, 0x1}) 06:14:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000001480)=""/64) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000001440)={0x5, &(0x7f0000000140)=""/190, &(0x7f00000013c0)=[{0x80000001, 0x9, 0x80, &(0x7f0000000000)=""/9}, {0x6, 0xaa, 0xc81, &(0x7f0000000200)=""/170}, {0x80, 0x1000, 0x7, &(0x7f00000002c0)=""/4096}, {0x1, 0x3c, 0x2be, &(0x7f0000000080)=""/60}, {0x7, 0xd3, 0x0, &(0x7f00000012c0)=""/211}]}) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x18) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7707, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 06:14:19 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7}, 0x7) ftruncate(r2, 0x208200) fcntl$setstatus(r1, 0x4, 0x3fffe) io_setup(0x2, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r4, 0x2007fff) fsync(r2) [ 1070.069785] overlayfs: option "workdir=./bus/../file0" is useless in a non-upper mount, ignore [ 1070.078738] overlayfs: missing 'lowerdir' 06:14:19 executing program 4 (fault-call:4 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB=':!'], 0x2) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) 06:14:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x9, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x18) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7707, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1070.125094] overlayfs: option "workdir=./bus/../file0" is useless in a non-upper mount, ignore [ 1070.134893] overlayfs: missing 'lowerdir' 06:14:19 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000140)={0x7}, 0x23d) ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, &(0x7f0000000100)=0x6) ftruncate(r2, 0x208200) fcntl$setstatus(r1, 0x4, 0x3fffe) io_setup(0x2, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r4, 0x2007fff) fsync(r2) 06:14:19 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b09800596f5f3166e654f48616e5f172750bd87262e5cf03e3c2a97bd89e8728dbfc52a221aa923cd360767b66cf045165d3cd6ba103889124f671d46dd9154d76449565f176b637f8c68900e76aa5d332e1a535c8db9d4d75b22329a303f6ff7f00001f62a8ce5ea978fd379e9ac4c98b54af419216a6025ea216f41857419b00875c229cfe1716e4945ad0a4ddd5173421c3e31b5e49f38ba314cc186f43fad936fe546868af3ac9e4445be83a32093d6c2c8c0100000000000000c82928833d472ce40bbafb553a398c0da1fcbc6920e6795de0b387c1ff85e1c24e89fc24781cb0120837b50af2f4ae0ee8462dcc42f9aa47e1b4de5adb56cfdfca3eaba3dc8d8653761ad54cbb828295156258"], 0x11) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x4e21, @rand_addr=0xfffffc00}, {0x2, 0x4e23, @local}, {0x2, 0x9, @remote}, 0x120, 0x0, 0x0, 0x0, 0x101, 0x0, 0x3a, 0x7fffffff, 0x1}) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000140)) write$P9_RREADLINK(r1, &(0x7f0000000b00)=ANY=[@ANYBLOB="b7"], 0x1) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f00000000c0)={'icmp6\x00'}, &(0x7f0000000100)=0x1e) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x40042, 0x0) sendfile(r4, r4, 0x0, 0x8080fffffffe) [ 1070.227234] FAULT_INJECTION: forcing a failure. [ 1070.227234] name failslab, interval 1, probability 0, space 0, times 0 [ 1070.270179] CPU: 0 PID: 2950 Comm: syz-executor.4 Not tainted 4.14.149 #0 [ 1070.277162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1070.286690] Call Trace: [ 1070.289298] dump_stack+0x138/0x197 [ 1070.292958] should_fail.cold+0x10f/0x159 [ 1070.297123] should_failslab+0xdb/0x130 [ 1070.301108] kmem_cache_alloc_trace+0x2e9/0x790 [ 1070.305792] alloc_pipe_info+0xb0/0x380 [ 1070.309768] splice_direct_to_actor+0x5d2/0x7b0 [ 1070.314439] ? avc_policy_seqno+0x9/0x20 [ 1070.318509] ? selinux_file_permission+0x85/0x480 [ 1070.323344] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1070.328182] ? security_file_permission+0x89/0x1f0 [ 1070.333104] ? do_splice_to+0x170/0x170 [ 1070.337072] ? rw_verify_area+0xea/0x2b0 [ 1070.341127] do_splice_direct+0x18d/0x230 [ 1070.345268] ? splice_direct_to_actor+0x7b0/0x7b0 [ 1070.350107] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 1070.354882] ? __sb_start_write+0x153/0x2f0 [ 1070.359207] do_sendfile+0x4db/0xbd0 [ 1070.362924] ? do_compat_pwritev64+0x140/0x140 [ 1070.367500] ? kasan_check_write+0x14/0x20 [ 1070.371722] ? _copy_from_user+0x99/0x110 [ 1070.375863] SyS_sendfile64+0x9d/0x110 [ 1070.379828] ? SyS_sendfile+0x130/0x130 [ 1070.383906] ? do_syscall_64+0x53/0x640 [ 1070.387976] ? SyS_sendfile+0x130/0x130 [ 1070.391960] do_syscall_64+0x1e8/0x640 [ 1070.395834] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1070.400681] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1070.405874] RIP: 0033:0x459a59 [ 1070.409053] RSP: 002b:00007eff35e02c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1070.416942] RAX: ffffffffffffffda RBX: 00007eff35e02c90 RCX: 0000000000459a59 [ 1070.424222] RDX: 0000000020000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 1070.431496] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1070.438758] R10: 00008080fffffffe R11: 0000000000000246 R12: 00007eff35e036d4 [ 1070.446019] R13: 00000000004c748b R14: 00000000004dd038 R15: 0000000000000006 06:14:20 executing program 4 (fault-call:4 fault-nth:1): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB=':!'], 0x2) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) 06:14:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x18) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7707, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1070.617110] FAULT_INJECTION: forcing a failure. [ 1070.617110] name failslab, interval 1, probability 0, space 0, times 0 [ 1070.677375] CPU: 1 PID: 2989 Comm: syz-executor.4 Not tainted 4.14.149 #0 [ 1070.684323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1070.693803] Call Trace: [ 1070.696507] dump_stack+0x138/0x197 [ 1070.700150] should_fail.cold+0x10f/0x159 [ 1070.704411] should_failslab+0xdb/0x130 [ 1070.708377] __kmalloc+0x2f0/0x7a0 [ 1070.711913] ? kmem_cache_alloc_trace+0x623/0x790 [ 1070.716761] ? alloc_pipe_info+0x15c/0x380 [ 1070.720995] alloc_pipe_info+0x15c/0x380 [ 1070.725064] splice_direct_to_actor+0x5d2/0x7b0 [ 1070.729733] ? avc_policy_seqno+0x9/0x20 [ 1070.733796] ? selinux_file_permission+0x85/0x480 [ 1070.738635] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1070.743542] ? security_file_permission+0x89/0x1f0 [ 1070.748466] ? do_splice_to+0x170/0x170 [ 1070.752446] ? rw_verify_area+0xea/0x2b0 [ 1070.756504] do_splice_direct+0x18d/0x230 [ 1070.760649] ? splice_direct_to_actor+0x7b0/0x7b0 [ 1070.765497] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 1070.770241] ? __sb_start_write+0x153/0x2f0 [ 1070.774553] do_sendfile+0x4db/0xbd0 [ 1070.778282] ? do_compat_pwritev64+0x140/0x140 [ 1070.782867] ? kasan_check_write+0x14/0x20 [ 1070.787116] ? _copy_from_user+0x99/0x110 [ 1070.791267] SyS_sendfile64+0x9d/0x110 [ 1070.795160] ? SyS_sendfile+0x130/0x130 [ 1070.799131] ? do_syscall_64+0x53/0x640 [ 1070.803104] ? SyS_sendfile+0x130/0x130 [ 1070.807182] do_syscall_64+0x1e8/0x640 [ 1070.811094] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1070.815945] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1070.821136] RIP: 0033:0x459a59 [ 1070.824323] RSP: 002b:00007eff35de1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1070.832039] RAX: ffffffffffffffda RBX: 00007eff35de1c90 RCX: 0000000000459a59 [ 1070.839306] RDX: 0000000020000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 1070.846569] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1070.853837] R10: 00008080fffffffe R11: 0000000000000246 R12: 00007eff35de26d4 [ 1070.861092] R13: 00000000004c748b R14: 00000000004dd038 R15: 0000000000000006 06:14:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) getpgid(0xffffffffffffffff) r0 = getpid() r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x4}, 0x77b879f64cc13d1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000180)='/selinux/mls\x00', 0xffffffffffffffff}, 0x30) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="3a21d84bdef64346ff0500b0000081bf00"], 0x11) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) getsockopt$netrom_NETROM_N2(r4, 0x103, 0x3, &(0x7f0000000080)=0x820fc, &(0x7f0000000140)=0x4) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r6 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x8, 0x1) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000280)=0x5) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="0802001d0000"], 0x11) sendfile(r7, r7, &(0x7f0000000000), 0x8080fffffffe) r8 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r8) r9 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r9, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r9, r9, &(0x7f0000000000), 0x8080ffffffde) r10 = accept$inet(r9, &(0x7f00000002c0)={0x2, 0x0, @loopback}, &(0x7f0000000340)=0x100000070) getsockopt$inet_mtu(r10, 0x0, 0xa, &(0x7f0000000380), &(0x7f00000003c0)=0x4) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000200)=r5) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x18) ptrace$cont(0x18, r2, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7707, 0x0, 0x0, 0x3, 0x2a}) r11 = getpgrp(r0) ptrace$cont(0x9, r11, 0xfffffffffffffffe, 0x0) 06:14:20 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) accept4$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000180)=0x10, 0x800) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000140)={0x7}, 0x23d) ftruncate(r2, 0x208200) fcntl$setstatus(r1, 0x4, 0x3fffe) io_setup(0x2, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r4, 0x80000001) fsync(r2) 06:14:20 executing program 4 (fault-call:4 fault-nth:2): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB=':!'], 0x2) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) [ 1071.054280] FAULT_INJECTION: forcing a failure. [ 1071.054280] name failslab, interval 1, probability 0, space 0, times 0 [ 1071.065784] CPU: 1 PID: 3018 Comm: syz-executor.4 Not tainted 4.14.149 #0 [ 1071.072728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1071.082084] Call Trace: [ 1071.084673] dump_stack+0x138/0x197 [ 1071.088302] should_fail.cold+0x10f/0x159 [ 1071.092457] should_failslab+0xdb/0x130 [ 1071.096453] __kmalloc+0x2f0/0x7a0 [ 1071.099992] ? filemap_range_has_page+0x1e0/0x1e0 [ 1071.104838] ? iter_file_splice_write+0x141/0xad0 [ 1071.109683] iter_file_splice_write+0x141/0xad0 [ 1071.114366] ? generic_file_splice_read+0x3e7/0x600 [ 1071.119387] ? fsnotify+0x11e0/0x11e0 [ 1071.123202] ? default_file_splice_read+0x7b0/0x7b0 [ 1071.128250] ? add_to_pipe+0x340/0x340 [ 1071.132152] ? rw_verify_area+0xea/0x2b0 [ 1071.136212] ? default_file_splice_read+0x7b0/0x7b0 [ 1071.141226] direct_splice_actor+0x123/0x190 [ 1071.145628] splice_direct_to_actor+0x29e/0x7b0 06:14:20 executing program 0: ioctl$sock_proto_private(0xffffffffffffffff, 0x89ec, &(0x7f00000000c0)="d44f2c1c882a3fd23152a94f35c135eaee83e65ddcc9185304c4326955e837f86ebc64023a0de5802761e829946a9bc07be0d3875ffc8a30257938e299b51c2969d00a66565268e9c3041b1de5ffa72fffa19ca7a307be8486a1aefef6b9a3d10357849b06c668b589") r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) r1 = open(0x0, 0x145146, 0x48) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_hsr\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x10, 0x7, 0x0, 0x2, 0x249, r1, 0x3, [], r3, r0, 0x1, 0x4}, 0x3c) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) 06:14:20 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x6, 0x3, &(0x7f00000000c0), 0xffffffffffffffeb) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x400000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)={0x30, r3, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x17}}, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000240)={0xd9a2, 0x7, 0x8000, 0x3c, 0x7, 0x40, 0x8}, 0xc) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000180)=0x7ff, &(0x7f00000001c0)=0x4) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r3, 0x400, 0x70bd29, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000000}, 0x4000014) [ 1071.145642] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1071.145656] ? do_splice_to+0x170/0x170 [ 1071.145668] ? rw_verify_area+0xea/0x2b0 [ 1071.145681] do_splice_direct+0x18d/0x230 [ 1071.145693] ? splice_direct_to_actor+0x7b0/0x7b0 [ 1071.145709] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 1071.177803] ? __sb_start_write+0x153/0x2f0 [ 1071.182135] do_sendfile+0x4db/0xbd0 [ 1071.186036] ? do_compat_pwritev64+0x140/0x140 [ 1071.190693] ? kasan_check_write+0x14/0x20 [ 1071.195021] ? _copy_from_user+0x99/0x110 [ 1071.199180] SyS_sendfile64+0x9d/0x110 06:14:20 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x6, 0x3, &(0x7f0000000000), 0xfd6b) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="6d616e676c65000000000000400000000000000000000000000000000000000075000000479c8990f866e831cad3429634813d99da93e20f65bd3815e6b13d422b6a000000000096281ce505ceca3d38e7e4555f11872c185e47858959d7a7abf467ca62c664138a6b2f63e2270e61e575cd566804b0eaa379265340aa3ae6eb2e67c019330bd803a6165fb46a8eefbe8266e0c08870de6235"], &(0x7f0000000140)=0x99) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) sendfile(r2, r3, 0x0, 0x3) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000040)={0x9, 0x100, 0x2, 0x10000, 0x4, [{0x6b, 0x0, 0x1, 0x0, 0x0, 0x800}, {0x3, 0x5, 0x1, 0x0, 0x0, 0x205}, {0x8, 0x200, 0xff, 0x0, 0x0, 0x1103}, {0x100000000, 0x10001, 0x100000001, 0x0, 0x0, 0x2001}]}) [ 1071.203073] ? SyS_sendfile+0x130/0x130 [ 1071.207051] ? do_syscall_64+0x53/0x640 [ 1071.211029] ? SyS_sendfile+0x130/0x130 [ 1071.215019] do_syscall_64+0x1e8/0x640 [ 1071.218909] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1071.223761] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1071.228942] RIP: 0033:0x459a59 [ 1071.228948] RSP: 002b:00007eff35de1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1071.228962] RAX: ffffffffffffffda RBX: 00007eff35de1c90 RCX: 0000000000459a59 [ 1071.247120] RDX: 0000000020000000 RSI: 0000000000000005 RDI: 0000000000000005 06:14:20 executing program 4 (fault-call:4 fault-nth:3): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB=':!'], 0x2) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) [ 1071.247127] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1071.247132] R10: 00008080fffffffe R11: 0000000000000246 R12: 00007eff35de26d4 [ 1071.247138] R13: 00000000004c748b R14: 00000000004dd038 R15: 0000000000000006 06:14:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0xcd3bbbabe6f8b1f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x18) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7707, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)="ace3e019a5d0e8f4e280ec393da6e93952598345e7aea02427fb95e5e7679193b1329e9da0fdb612c6aa44bffb09607750058db4852f207e364f30577213c302c0507d92c7c0228bdbf314e95d9ea60dedf273391cddda08be1b23f908f2d876748157bfa5d442697015c4e8fbb2f0a35c", 0x71, 0xfffffffffffffffa) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f00000001c0)='md5sum)\x00', &(0x7f0000000200)) ptrace$cont(0x9, r0, 0x0, 0x0) 06:14:21 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x9) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000140)={0x7}, 0x23d) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x43) ftruncate(r2, 0x208200) fcntl$setstatus(r1, 0x4, 0x3fffe) fsetxattr$security_selinux(r3, &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:hald_keymap_exec_t:s0\x00', 0x28, 0x2) io_setup(0x2, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r5, 0x2007fff) fsync(r2) [ 1071.416721] FAULT_INJECTION: forcing a failure. [ 1071.416721] name failslab, interval 1, probability 0, space 0, times 0 [ 1071.428403] CPU: 1 PID: 3041 Comm: syz-executor.4 Not tainted 4.14.149 #0 [ 1071.435348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1071.444708] Call Trace: [ 1071.447310] dump_stack+0x138/0x197 [ 1071.450954] should_fail.cold+0x10f/0x159 [ 1071.455115] should_failslab+0xdb/0x130 [ 1071.455132] kmem_cache_alloc+0x2d7/0x780 [ 1071.455146] ? check_preemption_disabled+0x3c/0x250 [ 1071.455166] ext4_init_io_end+0x27/0x100 [ 1071.455178] ext4_writepages+0x1037/0x2fd0 [ 1071.455195] ? trace_hardirqs_on+0x10/0x10 [ 1071.455208] ? save_trace+0x290/0x290 [ 1071.455227] ? ext4_mark_inode_dirty+0x860/0x860 [ 1071.455237] ? __mark_inode_dirty+0x2b2/0x1040 [ 1071.455256] ? save_trace+0x290/0x290 [ 1071.455265] ? trace_hardirqs_on+0x10/0x10 [ 1071.455279] ? wbc_attach_and_unlock_inode+0x4c0/0x830 [ 1071.455287] ? find_held_lock+0x35/0x130 [ 1071.455297] ? ext4_mark_inode_dirty+0x860/0x860 [ 1071.455306] do_writepages+0xd0/0x250 [ 1071.455314] ? do_writepages+0xd0/0x250 [ 1071.455329] ? page_writeback_cpu_online+0x20/0x20 [ 1071.455345] ? _raw_spin_unlock+0x2d/0x50 [ 1071.455356] ? wbc_attach_and_unlock_inode+0x559/0x830 [ 1071.455372] __filemap_fdatawrite_range+0x23b/0x310 [ 1071.455385] ? replace_page_cache_page+0x630/0x630 [ 1071.455411] file_write_and_wait_range+0x8d/0xe0 [ 1071.455424] __generic_file_fsync+0x79/0x1a0 [ 1071.455438] ext4_sync_file+0x755/0x12d0 [ 1071.455450] ? ext4_getfsmap+0x880/0x880 06:14:21 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="b7"], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000b40)=""/4096) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) [ 1071.495150] vfs_fsync_range+0x10e/0x260 [ 1071.495171] ext4_file_write_iter+0x68a/0xe90 [ 1071.495180] ? splice_direct_to_actor+0x29e/0x7b0 [ 1071.495196] ? ext4_file_mmap+0x2c0/0x2c0 [ 1071.495213] ? __might_sleep+0x93/0xb0 [ 1071.495229] do_iter_readv_writev+0x418/0x670 [ 1071.495244] ? vfs_dedupe_file_range+0x8f0/0x8f0 [ 1071.495261] ? rw_verify_area+0xea/0x2b0 [ 1071.495274] do_iter_write+0x154/0x540 [ 1071.495284] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1071.495301] ? __kmalloc+0x376/0x7a0 [ 1071.495316] vfs_iter_write+0x77/0xb0 [ 1071.495329] iter_file_splice_write+0x572/0xad0 [ 1071.495353] ? default_file_splice_read+0x7b0/0x7b0 [ 1071.495376] ? rw_verify_area+0xea/0x2b0 [ 1071.495386] ? default_file_splice_read+0x7b0/0x7b0 [ 1071.637520] direct_splice_actor+0x123/0x190 [ 1071.641948] splice_direct_to_actor+0x29e/0x7b0 [ 1071.646610] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1071.651441] ? do_splice_to+0x170/0x170 [ 1071.655542] ? rw_verify_area+0xea/0x2b0 [ 1071.659609] do_splice_direct+0x18d/0x230 [ 1071.663921] ? splice_direct_to_actor+0x7b0/0x7b0 [ 1071.668765] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 1071.673618] ? __sb_start_write+0x153/0x2f0 [ 1071.677956] do_sendfile+0x4db/0xbd0 [ 1071.681690] ? do_compat_pwritev64+0x140/0x140 [ 1071.686346] ? kasan_check_write+0x14/0x20 [ 1071.690578] ? _copy_from_user+0x99/0x110 [ 1071.694738] SyS_sendfile64+0x9d/0x110 [ 1071.698621] ? SyS_sendfile+0x130/0x130 [ 1071.702604] ? do_syscall_64+0x53/0x640 [ 1071.706638] ? SyS_sendfile+0x130/0x130 [ 1071.710613] do_syscall_64+0x1e8/0x640 [ 1071.714517] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1071.719475] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1071.724649] RIP: 0033:0x459a59 [ 1071.727833] RSP: 002b:00007eff35de1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1071.735675] RAX: ffffffffffffffda RBX: 00007eff35de1c90 RCX: 0000000000459a59 [ 1071.742946] RDX: 0000000020000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 1071.750217] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1071.757582] R10: 00008080fffffffe R11: 0000000000000246 R12: 00007eff35de26d4 [ 1071.764956] R13: 00000000004c748b R14: 00000000004dd038 R15: 0000000000000006 06:14:21 executing program 4 (fault-call:4 fault-nth:4): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB=':!'], 0x2) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) [ 1071.890546] FAULT_INJECTION: forcing a failure. [ 1071.890546] name failslab, interval 1, probability 0, space 0, times 0 [ 1071.907506] CPU: 1 PID: 3053 Comm: syz-executor.4 Not tainted 4.14.149 #0 [ 1071.914554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1071.923913] Call Trace: [ 1071.926512] dump_stack+0x138/0x197 [ 1071.930156] should_fail.cold+0x10f/0x159 [ 1071.934310] ? __lock_is_held+0xb6/0x140 [ 1071.938384] ? mempool_free+0x1d0/0x1d0 [ 1071.942368] should_failslab+0xdb/0x130 [ 1071.946353] kmem_cache_alloc+0x47/0x780 [ 1071.950436] ? mempool_free+0x1d0/0x1d0 [ 1071.954416] mempool_alloc_slab+0x47/0x60 [ 1071.958564] mempool_alloc+0x138/0x300 [ 1071.962477] ? remove_element.isra.0+0x1b0/0x1b0 [ 1071.967242] ? lock_downgrade+0x740/0x740 [ 1071.971401] bio_alloc_bioset+0x368/0x680 [ 1071.975550] ? __unlock_page_memcg+0x70/0x100 [ 1071.980056] ? bvec_alloc+0x2e0/0x2e0 [ 1071.983870] ext4_bio_write_page+0x77c/0xe63 [ 1071.988297] mpage_submit_page+0x138/0x240 [ 1071.992545] mpage_process_page_bufs+0x418/0x510 [ 1071.997315] mpage_prepare_extent_to_map+0x489/0xb20 [ 1072.002438] ? __check_block_validity.constprop.0+0x200/0x200 [ 1072.008346] ? ext4_init_io_end+0x27/0x100 [ 1072.012584] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1072.018050] ? rcu_read_lock_sched_held+0x110/0x130 [ 1072.023069] ? kmem_cache_alloc+0x611/0x780 [ 1072.027385] ? check_preemption_disabled+0x3c/0x250 [ 1072.032411] ext4_writepages+0x105f/0x2fd0 [ 1072.036675] ? mark_buffer_dirty+0xdb/0x4a0 [ 1072.041010] ? ext4_mark_inode_dirty+0x860/0x860 [ 1072.045768] ? save_trace+0x290/0x290 [ 1072.049572] ? wbc_attach_and_unlock_inode+0x4c0/0x830 [ 1072.054851] ? find_held_lock+0x35/0x130 [ 1072.058908] ? ext4_mark_inode_dirty+0x860/0x860 [ 1072.063662] do_writepages+0xd0/0x250 [ 1072.067465] ? do_writepages+0xd0/0x250 [ 1072.071431] ? page_writeback_cpu_online+0x20/0x20 [ 1072.076352] ? _raw_spin_unlock+0x2d/0x50 [ 1072.080496] ? wbc_attach_and_unlock_inode+0x559/0x830 [ 1072.085841] __filemap_fdatawrite_range+0x23b/0x310 [ 1072.090859] ? replace_page_cache_page+0x630/0x630 [ 1072.095889] file_write_and_wait_range+0x8d/0xe0 [ 1072.100840] __generic_file_fsync+0x79/0x1a0 [ 1072.105254] ext4_sync_file+0x755/0x12d0 [ 1072.109322] ? ext4_getfsmap+0x880/0x880 [ 1072.113392] vfs_fsync_range+0x10e/0x260 [ 1072.117527] ext4_file_write_iter+0x68a/0xe90 [ 1072.122029] ? splice_direct_to_actor+0x29e/0x7b0 [ 1072.126886] ? ext4_file_mmap+0x2c0/0x2c0 [ 1072.131056] ? __might_sleep+0x93/0xb0 [ 1072.135214] do_iter_readv_writev+0x418/0x670 [ 1072.139700] ? vfs_dedupe_file_range+0x8f0/0x8f0 [ 1072.144569] ? rw_verify_area+0xea/0x2b0 [ 1072.148643] do_iter_write+0x154/0x540 [ 1072.152531] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1072.158102] ? __kmalloc+0x376/0x7a0 [ 1072.161925] vfs_iter_write+0x77/0xb0 [ 1072.165717] iter_file_splice_write+0x572/0xad0 [ 1072.170398] ? default_file_splice_read+0x7b0/0x7b0 [ 1072.175419] ? rw_verify_area+0xea/0x2b0 [ 1072.179467] ? default_file_splice_read+0x7b0/0x7b0 [ 1072.184475] direct_splice_actor+0x123/0x190 [ 1072.188943] splice_direct_to_actor+0x29e/0x7b0 [ 1072.193614] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1072.198456] ? do_splice_to+0x170/0x170 [ 1072.202433] ? rw_verify_area+0xea/0x2b0 [ 1072.206494] do_splice_direct+0x18d/0x230 [ 1072.210651] ? splice_direct_to_actor+0x7b0/0x7b0 [ 1072.215498] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 1072.220246] ? __sb_start_write+0x153/0x2f0 [ 1072.224628] do_sendfile+0x4db/0xbd0 [ 1072.228334] ? do_compat_pwritev64+0x140/0x140 [ 1072.232905] ? kasan_check_write+0x14/0x20 [ 1072.237147] ? _copy_from_user+0x99/0x110 [ 1072.241294] SyS_sendfile64+0x9d/0x110 [ 1072.245189] ? SyS_sendfile+0x130/0x130 [ 1072.249163] ? do_syscall_64+0x53/0x640 [ 1072.253133] ? SyS_sendfile+0x130/0x130 [ 1072.257097] do_syscall_64+0x1e8/0x640 [ 1072.260973] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1072.265820] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1072.271031] RIP: 0033:0x459a59 [ 1072.274209] RSP: 002b:00007eff35e02c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1072.282442] RAX: ffffffffffffffda RBX: 00007eff35e02c90 RCX: 0000000000459a59 06:14:21 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000140)={0x7}, 0x23d) ftruncate(r2, 0x208200) fcntl$setstatus(r1, 0x4, 0x3fffe) io_setup(0x2, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000100)=0x1) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)={0x30, r7, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x82000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r7, 0x400, 0x70bd25, 0x25dfdbfd, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0xb4d0}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r8 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r10 = socket(0x10, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000002640)={&(0x7f00000000c0), 0xc, &(0x7f0000002600)={&(0x7f0000002400)={0x1f0, r9, 0x300, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r11}, {0xa0, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x0, 0x0, 0xff, 0x6}, {0xffff, 0x0, 0x1, 0x5}, {0x2, 0x69, 0x8, 0xfffffff7}, {0x29, 0x5, 0x6, 0x916}, {0x4f96, 0x25, 0x1, 0x400}]}}}]}}, {{0x8, 0x1, r12}, {0x12c, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xc2f}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}]}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x7fd0d26ac7371d37}, 0x24010001) r13 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r13) getsockopt$inet6_mreq(r13, 0x29, 0x0, &(0x7f0000000300)={@ipv4={[], [], @broadcast}, 0x0}, &(0x7f0000000340)=0x14) r15 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r15) getsockopt$inet_pktinfo(r15, 0x0, 0x8, &(0x7f0000000400)={0x0, @dev, @loopback}, &(0x7f0000000480)=0xc) r17 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r17) ioctl$ifreq_SIOCGIFINDEX_team(r17, 0x8933, &(0x7f0000000580)={'team0\x00'}) r18 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r19 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r20 = socket(0x10, 0x803, 0x0) getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r18, &(0x7f0000002640)={&(0x7f00000000c0), 0xc, &(0x7f0000002600)={&(0x7f0000002400)={0x1f0, r19, 0x300, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r21}, {0xa0, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x0, 0x0, 0xff, 0x6}, {0xffff, 0x0, 0x1, 0x5}, {0x2, 0x69, 0x8, 0xfffffff7}, {0x29, 0x5, 0x6, 0x916}, {0x4f96, 0x25, 0x1, 0x400}]}}}]}}, {{0x8, 0x1, r22}, {0x12c, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xc2f}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}]}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x7fd0d26ac7371d37}, 0x24010001) r23 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r23) getsockopt$inet_pktinfo(r23, 0x0, 0x8, &(0x7f00000005c0)={0x0, @loopback, @local}, &(0x7f0000000600)=0xc) r25 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r25, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r25, r25, &(0x7f0000000000), 0x8080fffffffe) ioctl$ifreq_SIOCGIFINDEX_team(r25, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) r27 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r27, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r27, r27, &(0x7f0000000000), 0x8080fffffffe) getpeername$packet(r27, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000007c0)={@rand_addr, @dev, 0x0}, &(0x7f0000000800)=0xc) r30 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r31 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r32 = socket(0x10, 0x803, 0x0) getsockname$packet(r32, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r30, &(0x7f0000002640)={&(0x7f00000000c0), 0xc, &(0x7f0000002600)={&(0x7f0000002400)={0x1f0, r31, 0x300, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r33}, {0xa0, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x0, 0x0, 0xff, 0x6}, {0xffff, 0x0, 0x1, 0x5}, {0x2, 0x69, 0x8, 0xfffffff7}, {0x29, 0x5, 0x6, 0x916}, {0x4f96, 0x25, 0x1, 0x400}]}}}]}}, {{0x8, 0x1, r34}, {0x12c, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xc2f}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}]}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x7fd0d26ac7371d37}, 0x24010001) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000940)=0xe8) r36 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r37 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r38 = socket(0x10, 0x803, 0x0) getsockname$packet(r38, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r36, &(0x7f0000002640)={&(0x7f00000000c0), 0xc, &(0x7f0000002600)={&(0x7f0000002400)={0x1f0, r37, 0x300, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r39}, {0xa0, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x0, 0x0, 0xff, 0x6}, {0xffff, 0x0, 0x1, 0x5}, {0x2, 0x69, 0x8, 0xfffffff7}, {0x29, 0x5, 0x6, 0x916}, {0x4f96, 0x25, 0x1, 0x400}]}}}]}}, {{0x8, 0x1, r40}, {0x12c, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xc2f}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}]}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x7fd0d26ac7371d37}, 0x24010001) r41 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r41, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r41, r41, &(0x7f0000000000), 0x8080fffffffe) r42 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r43 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r44 = socket(0x10, 0x803, 0x0) getsockname$packet(r44, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r42, &(0x7f0000002640)={&(0x7f00000000c0), 0xc, &(0x7f0000002600)={&(0x7f0000002400)={0x1f0, r43, 0x300, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r45}, {0xa0, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x0, 0x0, 0xff, 0x6}, {0xffff, 0x0, 0x1, 0x5}, {0x2, 0x69, 0x8, 0xfffffff7}, {0x29, 0x5, 0x6, 0x916}, {0x4f96, 0x25, 0x1, 0x400}]}}}]}}, {{0x8, 0x1, r46}, {0x12c, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xc2f}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}]}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x7fd0d26ac7371d37}, 0x24010001) ioctl$ifreq_SIOCGIFINDEX_vcan(r41, 0x8933, &(0x7f0000000980)={'vcan0\x00', r45}) r48 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r49 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r50 = socket(0x10, 0x803, 0x0) getsockname$packet(r50, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r48, &(0x7f0000002640)={&(0x7f00000000c0), 0xc, &(0x7f0000002600)={&(0x7f0000002400)={0x1f0, r49, 0x300, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r51}, {0xa0, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x0, 0x0, 0xff, 0x6}, {0xffff, 0x0, 0x1, 0x5}, {0x2, 0x69, 0x8, 0xfffffff7}, {0x29, 0x5, 0x6, 0x916}, {0x4f96, 0x25, 0x1, 0x400}]}}}]}}, {{0x8, 0x1, r52}, {0x12c, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xc2f}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}]}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x7fd0d26ac7371d37}, 0x24010001) r53 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r54 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r55 = socket(0x10, 0x803, 0x0) getsockname$packet(r55, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r53, &(0x7f0000002640)={&(0x7f00000000c0), 0xc, &(0x7f0000002600)={&(0x7f0000002400)={0x1f0, r54, 0x300, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r56}, {0xa0, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x0, 0x0, 0xff, 0x6}, {0xffff, 0x0, 0x1, 0x5}, {0x2, 0x69, 0x8, 0xfffffff7}, {0x29, 0x5, 0x6, 0x916}, {0x4f96, 0x25, 0x1, 0x400}]}}}]}}, {{0x8, 0x1, r57}, {0x12c, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xc2f}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}]}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x7fd0d26ac7371d37}, 0x24010001) r58 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r58, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r58, r58, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_IP_XFRM_POLICY(r58, 0x0, 0x11, &(0x7f00000009c0)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000ac0)=0xe8) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000002580)={@multicast2, @empty, 0x0}, &(0x7f00000025c0)=0xc) r61 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r61, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r61, r61, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_mreqn(r61, 0x0, 0x23, &(0x7f0000002600)={@broadcast, @remote, 0x0}, &(0x7f0000002640)=0xc) r63 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r64 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r65 = socket(0x10, 0x803, 0x0) getsockname$packet(r65, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r63, &(0x7f0000002640)={&(0x7f00000000c0), 0xc, &(0x7f0000002600)={&(0x7f0000002400)={0x1f0, r64, 0x300, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r66}, {0xa0, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x0, 0x0, 0xff, 0x6}, {0xffff, 0x0, 0x1, 0x5}, {0x2, 0x69, 0x8, 0xfffffff7}, {0x29, 0x5, 0x6, 0x916}, {0x4f96, 0x25, 0x1, 0x400}]}}}]}}, {{0x8, 0x1, r67}, {0x12c, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xc2f}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}]}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x7fd0d26ac7371d37}, 0x24010001) getsockname(0xffffffffffffffff, &(0x7f0000002680)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000002700)=0x80) r69 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r70 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r71 = socket(0x10, 0x803, 0x0) getsockname$packet(r71, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r69, &(0x7f0000002640)={&(0x7f00000000c0), 0xc, &(0x7f0000002600)={&(0x7f0000002400)={0x1f0, r70, 0x300, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r72}, {0xa0, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x0, 0x0, 0xff, 0x6}, {0xffff, 0x0, 0x1, 0x5}, {0x2, 0x69, 0x8, 0xfffffff7}, {0x29, 0x5, 0x6, 0x916}, {0x4f96, 0x25, 0x1, 0x400}]}}}]}}, {{0x8, 0x1, r73}, {0x12c, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xc2f}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}]}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x7fd0d26ac7371d37}, 0x24010001) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000002740)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@initdev}}, &(0x7f0000002840)=0xe8) r75 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r76 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r77 = socket(0x10, 0x803, 0x0) getsockname$packet(r77, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r75, &(0x7f0000002640)={&(0x7f00000000c0), 0xc, &(0x7f0000002600)={&(0x7f0000002400)={0x1f0, r76, 0x300, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r78}, {0xa0, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x0, 0x0, 0xff, 0x6}, {0xffff, 0x0, 0x1, 0x5}, {0x2, 0x69, 0x8, 0xfffffff7}, {0x29, 0x5, 0x6, 0x916}, {0x4f96, 0x25, 0x1, 0x400}]}}}]}}, {{0x8, 0x1, r79}, {0x12c, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xc2f}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}]}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x7fd0d26ac7371d37}, 0x24010001) getpeername(0xffffffffffffffff, &(0x7f0000002940)=@hci={0x1f, 0x0}, &(0x7f00000029c0)=0x80) r81 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r82 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r83 = socket(0x10, 0x803, 0x0) getsockname$packet(r83, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r81, &(0x7f0000002640)={&(0x7f00000000c0), 0xc, &(0x7f0000002600)={&(0x7f0000002400)={0x1f0, r82, 0x300, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r84}, {0xa0, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x0, 0x0, 0xff, 0x6}, {0xffff, 0x0, 0x1, 0x5}, {0x2, 0x69, 0x8, 0xfffffff7}, {0x29, 0x5, 0x6, 0x916}, {0x4f96, 0x25, 0x1, 0x400}]}}}]}}, {{0x8, 0x1, r85}, {0x12c, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xc2f}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}]}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x7fd0d26ac7371d37}, 0x24010001) r86 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r87 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r88 = socket(0x10, 0x803, 0x0) getsockname$packet(r88, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r86, &(0x7f0000002640)={&(0x7f00000000c0), 0xc, &(0x7f0000002600)={&(0x7f0000002400)={0x1f0, r87, 0x300, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r89}, {0xa0, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x0, 0x0, 0xff, 0x6}, {0xffff, 0x0, 0x1, 0x5}, {0x2, 0x69, 0x8, 0xfffffff7}, {0x29, 0x5, 0x6, 0x916}, {0x4f96, 0x25, 0x1, 0x400}]}}}]}}, {{0x8, 0x1, r90}, {0x12c, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xc2f}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}]}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x7fd0d26ac7371d37}, 0x24010001) r91 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r91) ioctl$ifreq_SIOCGIFINDEX_team(r91, 0x8933, &(0x7f0000002a00)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002b00)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f0000002c00)=0xe8) r94 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r95 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r96 = socket(0x10, 0x803, 0x0) getsockname$packet(r96, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r94, &(0x7f0000002640)={&(0x7f00000000c0), 0xc, &(0x7f0000002600)={&(0x7f0000000b00)=ANY=[@ANYBLOB="f020f1006379950d647c9ff89454", @ANYRES16=r95, @ANYBLOB="000327bd7000fbdbdf250100000008000100", @ANYRES32=r97, @ANYBLOB="a000020040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000005c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000002c000400000000ff06000000ffff00010500000002006908f7ffffff2900050616090000964f25010004000008000100", @ANYRES32=r98, @ANYBLOB="2c01020040000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f61646361737400000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004002f0c00003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000000000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f616463617374000000"], 0x1f0}, 0x1, 0x0, 0x0, 0x7fd0d26ac7371d37}, 0x24010001) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000002c40)={0x0, @dev, @remote}, &(0x7f0000002c80)=0xc) accept4$packet(0xffffffffffffffff, &(0x7f0000002d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002dc0)=0x14, 0x800) getpeername$packet(0xffffffffffffffff, &(0x7f0000002e00)={0x11, 0x0, 0x0}, &(0x7f0000002e40)=0x14) r102 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r103 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r104 = socket(0x10, 0x803, 0x0) getsockname$packet(r104, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r102, &(0x7f0000002640)={&(0x7f00000000c0), 0xc, &(0x7f0000002600)={&(0x7f0000002400)={0x1f0, r103, 0x300, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r105}, {0xa0, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x0, 0x0, 0xff, 0x6}, {0xffff, 0x0, 0x1, 0x5}, {0x2, 0x69, 0x8, 0xfffffff7}, {0x29, 0x5, 0x6, 0x916}, {0x4f96, 0x25, 0x1, 0x400}]}}}]}}, {{0x8, 0x1, r106}, {0x12c, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xc2f}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}]}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x7fd0d26ac7371d37}, 0x24010001) r107 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r108 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r109 = socket(0x10, 0x803, 0x0) getsockname$packet(r109, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r107, &(0x7f0000002640)={&(0x7f00000000c0), 0xc, &(0x7f0000002600)={&(0x7f0000002400)={0x1f0, r108, 0x300, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r110}, {0xa0, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x0, 0x0, 0xff, 0x6}, {0xffff, 0x0, 0x1, 0x5}, {0x2, 0x69, 0x8, 0xfffffff7}, {0x29, 0x5, 0x6, 0x916}, {0x4f96, 0x25, 0x1, 0x400}]}}}]}}, {{0x8, 0x1, r111}, {0x12c, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xc2f}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}]}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x7fd0d26ac7371d37}, 0x24010001) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000003b80)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003b40)={&(0x7f0000002e80)={0xc98, r9, 0x20, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0xc0, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r14}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r16}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x58, 0x1, 0x80, 0x20}, {0xfffa, 0x5, 0x1, 0x397}, {0x4, 0x0, 0x2, 0x5}]}}}]}}, {{0x8, 0x1, r105}, {0x1e8, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x3ef, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r21}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r24}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r26}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r28}}}]}}, {{0x8}, {0x200, 0x2, [{0x4c, 0x1, @user_linkup={{{0x0, 0x1, 'user_linkup\x00'}}, {0x0, 0x6, r110}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r29}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x6, 0x9, 0x66}, {0x0, 0x4, 0xc0, 0x4}, {0x4, 0x3f, 0x7, 0x40}]}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x44, 0x4, [{0x101, 0x92, 0x0, 0x3a}, {0x3, 0x7f, 0x0, 0xabd}, {0x2, 0x2, 0x1f, 0x3}, {0x8000, 0x1, 0x6, 0x1}, {0x5, 0x9, 0x6, 0x4}, {0x4, 0x40, 0x9, 0xf7b}, {0xeb3e, 0x3, 0xd7, 0xe3}, {0xff, 0x66, 0x3, 0x6}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r33}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r35}}}]}}, {{0x8, 0x1, r39}, {0x130, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r47}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r51}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r56}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffff8}}}]}}, {{0x8, 0x1, r59}, {0x140, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @queue_id={{{0xffffffffffffffd5, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r60}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r62}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r66}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xfffffffd}}, {0x8}}}]}}, {{0x8, 0x1, r68}, {0x78, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r72}}}]}}, {{0x8, 0x1, r74}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r78}}}]}}, {{0x8, 0x1, r80}, {0xcc, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r84}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r89}, {0x1e8, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r92}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r93}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r97}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x381e}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r99}}}]}}, {{0x8, 0x1, r100}, {0x1b0, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x10001}}, {0x8, 0x6, r101}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xffffff80}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0xfffffcd5}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x3, 0x37, 0x7, 0xf09}, {0x494, 0x1, 0x8, 0x1ff}]}}}]}}]}, 0xc98}, 0x1, 0x0, 0x0, 0x20000000}, 0xec3f20c215e47a9e) ftruncate(r4, 0x2007fff) fsync(r2) 06:14:22 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94b052fa482841a4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0xb) getrlimit(0xc, &(0x7f0000000040)) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 1072.289883] RDX: 0000000020000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 1072.297154] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1072.304422] R10: 00008080fffffffe R11: 0000000000000246 R12: 00007eff35e036d4 [ 1072.311701] R13: 00000000004c748b R14: 00000000004dd038 R15: 0000000000000006 [ 1072.331166] IPVS: ftp: loaded support on port[0] = 21 06:14:22 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="b7"], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000040)={0x0, @reserved}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x1) 06:14:22 executing program 1: getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040), 0x326) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x85400, 0x0) write$P9_RLOPEN(r0, &(0x7f0000000100)={0x18, 0xd, 0x1, {{0x13, 0x2, 0x5}, 0x5}}, 0x18) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x400000, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000080)={0x80, 0x1, 0x7}) 06:14:22 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$int_in(r0, 0x2a29, &(0x7f0000000000)=0x10001) getsockopt$bt_BT_SECURITY(r0, 0x6, 0x3, &(0x7f00000000c0), 0x200000c0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x3}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100)={r1, 0x5}, 0x8) 06:14:22 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x6, 0x3, &(0x7f00000000c0), 0x200000c0) 06:14:22 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="b7"], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x80, 0x0, 0x0, 0x1}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) 06:14:22 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x6, 0x3, &(0x7f0000000000), 0xfffffffffffffd3f) 06:14:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$SEM_INFO(0xffffffffffffffff, 0x1, 0x13, &(0x7f00000000c0)=""/50) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="0000c98244e58bfd64cdd37fd8b2466027ea25e9ca03c5f820931c7c543df3ace8f3f8730934de545911556aade360255e983b2adf5bb6ca3b62db3c786e9c0c1b5f631920115ee91c796b42336cc9"], 0x2) sync() sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) unlinkat(r2, &(0x7f0000000100)='./bus\x00', 0x200) sendfile(r0, r0, 0x0, 0x8080fffffffe) 06:14:22 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x80c1) getsockopt$bt_BT_SECURITY(r0, 0x6, 0x3, &(0x7f00000000c0), 0x200000c0) 06:14:22 executing program 5: r0 = syz_open_dev$radio(0x0, 0x1, 0x2) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000b00)=ANY=[@ANYBLOB="b7"], 0x1) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000002b80)=ANY=[@ANYRES16=r1, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYRES64=r0, @ANYRESDEC=r1], @ANYBLOB="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", @ANYRES16=r3, @ANYRES64=0x0, @ANYPTR, @ANYRES64=r0, @ANYPTR64, @ANYBLOB="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"], 0x221) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10210}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r4, r4, 0x0, 0x8080fffffffe) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r5, r5, &(0x7f0000000000), 0x8080fffffffe) r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r6) ioctl$VIDIOC_SUBDEV_S_CROP(r6, 0xc038563c, &(0x7f0000000080)={0x0, 0x0, {0x3, 0x0, 0xf6c, 0x9}}) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000040)=0x1, 0x4) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x110, r2, 0x0) 06:14:22 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000140)={0x7}, 0x23d) ftruncate(r2, 0x208200) fcntl$setstatus(r1, 0x4, 0x3fffe) io_setup(0x2, &(0x7f00000004c0)=0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) bind$bt_rfcomm(r4, &(0x7f0000000100)={0x1f, {0x3b, 0x9, 0x3, 0xff, 0x9}, 0x20}, 0xa) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1}]) r5 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r5, 0x2007fff) fsync(r2) 06:14:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x290, 0x4) wait4(0x0, 0x0, 0x80000000, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f0000000240)={{0x2, 0x0, 0x2, 0x8, '\x00', 0x8}, 0x6, 0x40, 0x1, r1, 0x6, 0xfff, 'syz1\x00', &(0x7f0000000100)=['-lo\x00', 'em1\x00', '\x00', ',trusted{\x00', '', '\xe5\xf4+self\x00'], 0x1b, [], [0x1, 0x7, 0xffde, 0x200]}) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) bind$netrom(r3, &(0x7f0000000080)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]}, 0x48) tkill(r1, 0x18) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={[], 0x7707, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 06:14:23 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x6, 0x3, &(0x7f0000000000), 0x2) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x1d5242, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211dc63a7724bdef6cc46ff14b7b0"], 0x11) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) syz_genetlink_get_family_id$nbd(&(0x7f0000000440)='nbd\x00') r2 = openat(r1, &(0x7f0000000040)='./file0\x00', 0x482600, 0x20) setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000080)=0x9, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000000c0), &(0x7f0000000340)=0x4) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f00000014c0)=ANY=[], 0x0) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x8100, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000003c0)={0x4, 0x1, 0x7d, 0x3, 0x0, 0x80, 0x81, 0x8, 0x2, 0xf7, 0x34}, 0xb) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) readv(r4, &(0x7f0000001440)=[{&(0x7f00000014c0)=""/4100, 0x1000}, {&(0x7f00000000c0)}, {&(0x7f0000000200)=""/194, 0xc2}, {&(0x7f0000001340)=""/211, 0xd3}, {&(0x7f0000000100)=""/166, 0xab}], 0x1000000000000205) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000400)={0x6, 0x4, 0x422}) 06:14:23 executing program 3: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) write$FUSE_IOCTL(r0, &(0x7f0000000100)={0x20, 0xfffffffffffffffe, 0x7, {0xffffffff, 0x4, 0x3d80909b, 0x3}}, 0x20) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r3, &(0x7f0000000140)={0x7}, 0x23d) ftruncate(r3, 0x208200) fcntl$setstatus(r2, 0x4, 0x3fffe) io_setup(0x2, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r5, 0x2007fff) fsync(r3) 06:14:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802142221bfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x18) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7707, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 06:14:23 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) r1 = open(0x0, 0x141042, 0x0) poll(&(0x7f0000000040)=[{r1, 0x40}], 0x1, 0xffffffff) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) sendfile(r3, r2, &(0x7f0000000000)=0x4000000000000000, 0x8080fffffffb) [ 1073.408812] audit: type=1800 audit(1571033663.082:354): pid=3137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=16690 res=0 06:14:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x18) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x5707, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 06:14:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x18) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7707, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$cont(0x7, r2, 0x1000000003, 0x0) [ 1073.456069] audit: type=1400 audit(1571033663.122:355): avc: denied { getopt } for pid=3135 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:14:23 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x21d}) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, [0x4791, 0x7ff, 0x2, 0x401, 0x3acb, 0x3, 0x2, 0xdc32, 0x2, 0x6, 0x8, 0x3b, 0x200, 0x6d9f0dad, 0x80000000]}, &(0x7f0000000040)=0x100) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={r4, 0x6}, 0x8) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r5, r5, &(0x7f0000000000), 0x8080fffffffe) accept$unix(r5, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e) getsockopt$bt_BT_SECURITY(r0, 0x6, 0x3, &(0x7f00000000c0), 0x200000c0) 06:14:23 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="b7"], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) write$nbd(r0, &(0x7f00000000c0)={0x67446698, 0x0, 0x0, 0x4, 0x1, "785c06739b9195d4a91c18a9508772cae4cc5a07c1a6b002910e5142c1b6c7ce858540d24b23a5186aa741ce89b29c3109f580f4721b73bae02d90002b74d599533f55df79c4ca233b1f2e02ab2469d7d91f243cbb660bb09a162942c1586e060e361c1db9aa10e7dee843632d4e353c83480fd8"}, 0x84) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x30080, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) setsockopt$inet_mreq(r2, 0x0, 0x24, &(0x7f0000000040)={@loopback, @multicast1}, 0x8) sendfile(r1, r1, 0x0, 0x8080fffffffe) 06:14:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x18) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7707, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 06:14:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) memfd_create(&(0x7f0000000180)='trusted.overlay.redirect\x00', 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x6) tkill(r0, 0x18) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7707, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 06:14:23 executing program 4: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x200000000d8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, r0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="a62a7923724135b77395bb522c033ac21f1b68fd6c9e09b558fc558a7936a90b8abca824860a1f31c07034068bccc0051ed52fd2585da42b28025c5129993554149fc63fb19e6ce9d6da3ff633075c5f3bfe4d2ef40169ba0dd32483ad85281f3421ed376a151ce613f411befb60b300df3a1817eefeebbd2ffaba31cfa9cb2daf5d4db8b9e7812f1656d618f369e7d9d794c574266800bc70ade5df761c06515c8f63549142e479d6026bddbf0112e9fded7f932829377a5da15380bc31bc7042c5c4d92eded0a080f94d43c4b4a4090d2f"], 0x2) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r7) r8 = accept$inet6(r7, &(0x7f0000000540)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000580)=0x1c) r9 = syz_open_dev$loop(&(0x7f00000005c0)='/dev/loop#\x00', 0x3, 0x8000) r10 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r10, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r10, r10, &(0x7f0000000000), 0x8080fffffffe) r11 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r11, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r11, r11, &(0x7f0000000000), 0x8080fffffffe) r12 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r12) r13 = openat$cgroup_int(r2, &(0x7f0000000600)='cpuset.memory_spread_slab\x00', 0x2, 0x0) r14 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r14) r15 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r15) r16 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r16, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r16, r16, &(0x7f0000000000), 0x8080fffffffe) sendmsg$unix(r4, &(0x7f0000000700)={&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000340)="5f5d6275c613544cf56e1ea2c84c98c8472c24e03e6b77c810bb3966657d7bacbb73929b7d73efd79fa2a0315788898e253e6b111d58e1c8a3d3237244d849ff0a0943629c792210111beb2fbbd6128d696f8aa29e8921c7dd5d784ac374a0dd3a6f6e648475cfdcec15112de9111da34130b856b498f05f2620ea5f514deafc871eeb81e2ec928a7e3d45d8dae1596da67c7a67243ab195b753e11e062be39a0c16ddcd0a41a9a7ef7f3ea9a5ab81374622e7fe8b067bff6b488326b35841195e27bdf47654ef7e108696175faaf251aa80d4da82c68587b7fda02b46ada3238016ecc7f9", 0xe5}, {&(0x7f0000000440)="91fedca015fbd28dc3485d364d76c290ddfeb0d9239183c3d42c04a839598df3281ade0c1871c1e4a8ad6035bc880482895c3dbca285c55bdfc9b4a5c85546a305a40a611183bf78d37387262ca54c9f916b063a7dec2c09418045ef51ec1809c99644271d95289e08b597af13d09ddc337bb7e43df25c7973bb9d43", 0x7c}, {&(0x7f00000004c0)="0738e57e70944de712d2f402c1c8edf067776e59ca830e72f04ee6dbe90fbf06fb18cd6cc19dfd1148f1ebf4169179266c9c6450db22b54498825c93e22ab0e1019ea51dc7abb38e9b591657f0eae7caf6b0ec9f422855d1a6bdc3", 0x5b}], 0x3, &(0x7f0000000640)=[@rights={{0x28, 0x1, 0x1, [r5, r2, r6, r0, r1, r8]}}, @rights={{0x24, 0x1, 0x1, [r9, r10, 0xffffffffffffffff, r0, r11]}}, @rights={{0x28, 0x1, 0x1, [r0, r12, r13, r14, r2, r3]}}, @rights={{0x1c, 0x1, 0x1, [r15, 0xffffffffffffffff, r16]}}], 0x98, 0x4001811}, 0x20000084) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) sendfile(r2, r2, 0x0, 0x8080fffffffe) r17 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote}, &(0x7f0000000080)=0x12, 0x80000) r18 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r18, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r18, r18, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r17, r18}) 06:14:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x18) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7707, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0xfffffffffffffffe, &(0x7f0000000000)="a4bb8235e1540df94ee7bd2a9d650a1ec193516f3c3c385eda47e294d7e43411") ptrace$cont(0x9, r0, 0x0, 0x0) 06:14:24 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x18) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7707, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 06:14:24 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x4) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000140)={0x7}, 0x23d) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x1080, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f0000000180)) ftruncate(r2, 0x208200) fcntl$setstatus(r1, 0x4, 0x3fffe) io_setup(0x6, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r5, 0x2007fff) fsync(r2) 06:14:24 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x6, 0x3, &(0x7f00000000c0), 0x200000c0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x10400, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000140)=""/57) r2 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000040)=0x10, 0x80800) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video0\x00', 0x2, 0x0) signalfd(r2, &(0x7f0000000080)={0x7}, 0x8) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f00000001c0)) 06:14:24 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000240)) faccessat(r0, &(0x7f0000000080)='./bus\x00', 0x60, 0x1280) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000100)={0x8, 0x1}) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="3a2182000000010029a55980568987264e820400000000000000488c09dca0f852377d00008000000000000000000000005700"], 0x11) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) write$P9_RAUTH(r2, &(0x7f0000000040)={0x14, 0x67, 0x2, {0x3, 0x0, 0x5}}, 0x14) syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0xbe, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') r4 = syz_open_dev$vcsn(&(0x7f00000003c0)='/dev/vcs#\x00', 0xff, 0x1) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)={0x30, r3, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vga_arbiter\x00', 0x0, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x1, 0x2) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40010608}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x1c, r3, 0xaf91a86557ed977d, 0x70bd2a, 0x259fdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4009024}, 0x814) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r6, r6, &(0x7f0000000000), 0x8080fffffffe) 06:14:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x18) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)={0x20, @tick=0x4, 0xfa, {0x2, 0x4d}, 0x7, 0x2, 0x48}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7707, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 06:14:24 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x6, 0x3, &(0x7f00000000c0), 0x200000c0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000000)=0x200) 06:14:24 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x1a4) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000140)={0x7}, 0x23d) ftruncate(r2, 0x208200) fcntl$setstatus(r1, 0x4, 0x3fffe) io_setup(0x2, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r4, 0x2007fff) fsync(r2) 06:14:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x18) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x62, 0x8000, 0x8001, 0x3, 0x0}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, [], 0x13}, 0x2}}, 0x80, 0x6}, 0x90) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7707, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 06:14:24 executing program 1: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="20f6a51d89183935b3ffd8e0fa3b40b657f4f7dcfadec893558b0aa302c2a88f5a966174c55a68a8815b821f44ffbd9b601d7d31c7100e07df63999f6479", 0x3e) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x6, 0x3, &(0x7f0000000000), 0x2) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000002}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x338, r2, 0x2, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x6c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x8, @mcast1, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'ib', 0x3a, 'veth1_to_bridge\x00'}}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x6c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'syz_tun\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5c}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'nr0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xd92, @empty, 0x81}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x401, @remote, 0x5}}}}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x1c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}]}, @TIPC_NLA_MEDIA={0x14, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x300000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}]}, @TIPC_NLA_BEARER={0x124, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @local, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2178}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8000}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}]}, 0x338}, 0x1, 0x0, 0x0, 0x5141}, 0x20000000) 06:14:24 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000140)={0x7}, 0x23d) ftruncate(r2, 0x208200) fcntl$setstatus(r1, 0x4, 0x3fffe) io_setup(0x2, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) write$binfmt_script(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x93) ftruncate(r4, 0x2007fff) fsync(r2) 06:14:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB=':!'], 0x2) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) 06:14:24 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0xeff6f0f8ac70ea41) write$P9_RREADLINK(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB='\b'], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="26218211f66300000000f64b46ff79b7b0"], 0x11) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) open(&(0x7f0000000080)='./file0\x00', 0x4000, 0x40) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x10001, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000040)=0x4f73f0c3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r4, r4, 0x0, 0x8080fffffffe) 06:14:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='posix_acl_access\x00'}, 0x10) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r1 = socket$l2tp(0x18, 0x1, 0x1) connect(r1, &(0x7f0000000140)=@in6={0xa, 0x4e23, 0x6, @rand_addr="a34e26f95d0c97164588316bb01a5e1f", 0x5}, 0x80) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x18) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7707, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 06:14:24 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x6, 0x3, &(0x7f00000000c0), 0x200000c0) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000040)=0xe8d) 06:14:24 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000100)={0x18, 0x1, 0x0, {0x3}}, 0x18) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000140)={0x7}, 0x23d) ftruncate(r2, 0x208200) fcntl$setstatus(r1, 0x4, 0x3fffe) io_setup(0x2, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r4, 0x2007fff) fsync(r2) 06:14:25 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x40100, 0x0) fchdir(r1) getsockopt$bt_BT_SECURITY(r0, 0x6, 0x3, &(0x7f00000000c0), 0xfffffffffffffe2f) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x3, 0x0, {0x5, 0x6, 0x0, 'vmnet0'}}, 0x27) 06:14:25 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x400, 0x60) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7764bf4014446f914"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) setsockopt$inet6_tcp_int(r2, 0x6, 0x0, &(0x7f0000000080)=0xe0000000, 0x4) 06:14:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r3 = geteuid() fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000800)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000680)=0xe8) r9 = getegid() r10 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, 0x0, 0x0) sendmsg(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="240000005a0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) r11 = dup(r10) r12 = geteuid() write$P9_RGETATTR(r11, &(0x7f0000000480)={0xa0, 0x19, 0x2, {0x1b04, {0x20, 0x3, 0x8}, 0x0, r12, r9, 0x9309, 0x6, 0x9, 0x24, 0x5, 0x6f, 0x3ff, 0xf97d, 0x5, 0x1, 0xc474, 0xfffffffffffffffc, 0x2, 0x8, 0x7}}, 0xa0) getgroups(0x2, &(0x7f0000000700)=[r9, 0xee01]) setxattr$system_posix_acl(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f00000009c0)={{}, {0x1, 0x2}, [{0x2, 0xc, r3}, {0x2, 0xa, r4}, {0x2, 0x1, r5}, {0x2, 0x4, r7}, {0x2, 0x5, r8}], {0x4, 0x5}, [{0x8, 0x4, r9}, {0x8, 0x0, 0xffffffffffffffff}], {0x10, 0x8}, {0x20, 0x2}}, 0x5c, 0x1) r13 = add_key$user(0x0, &(0x7f0000000080)={'syz'}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23", 0xc0, r2) keyctl$dh_compute(0x17, &(0x7f0000000000)={0x0, r13}, &(0x7f0000000700)=""/243, 0xf3, 0x0) r14 = request_key(&(0x7f0000000080)='big_key\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)=']\x00', 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f00000002c0)={r13, 0x0, r14}, &(0x7f0000000300)=""/237, 0xed, &(0x7f0000000480)={&(0x7f0000000400)={'tgr160-generic\x00'}, &(0x7f0000000440)="9c5b9beb424c177d3cf14a6f5971e43e155b2fccdd947269af63afe225a0a3fa", 0x20}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x18) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7707, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r15 = getpid() r16 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r16) getsockopt$inet6_IPV6_IPSEC_POLICY(r16, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@mcast2, @in6=@dev}}, {{@in=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000000)=0xe8) r17 = syz_open_dev$cec(&(0x7f00000004c0)='/dev/cec#\x00', 0x3, 0x2) ioctl$VT_ACTIVATE(r17, 0x5606, 0x7fffffff) sched_setattr(r15, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$cont(0xfffffffffffffff6, r15, 0x5, 0x0) 06:14:25 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) timer_create(0x6, &(0x7f0000000180)={0x0, 0x2d, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) fchdir(r0) eventfd(0x7) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000140)={0x7}, 0x23d) ftruncate(r2, 0x208200) fcntl$setstatus(r1, 0x4, 0x3fffe) io_setup(0x2, &(0x7f00000004c0)=0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x200000, 0x0) io_submit(r3, 0x2000000000000176, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r4, 0x2007fff) fsync(r2) 06:14:25 executing program 1: r0 = gettid() prlimit64(r0, 0x2, &(0x7f0000000000)={0x3f, 0x100000001}, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x6, 0x3, &(0x7f00000000c0), 0x200000c0) [ 1075.497085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=537 sclass=netlink_route_socket pig=3295 comm=syz-executor.2 06:14:25 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x6, 0x3, &(0x7f00000000c0), 0x200000c0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2c2001, 0x0) r2 = syz_open_dev$audion(&(0x7f0000002b40)='/dev/audio#\x00', 0x7, 0x80000) ioctl$TCGETS(r2, 0x5401, &(0x7f0000002b80)) sendmmsg$alg(r1, &(0x7f0000009cc0)=[{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)="9932d8614adbb6092b0f113d1561cb06cf4f7381d23a267f1461c68a7071e7fc5c3a702b2f6876e351957cd222bde9bb4833f5db5ef325eadae08966fba6eda8e368dc7576faa00df58eda8e920fca4cd72e9570f947a824c60782697f17f7c88e09aacdabd67d818ae952e53c7dec8bd28f526091817bcd209968120246f128bb5cfc33f9d52c14f342242b09c3eb1b28de64b55b6aa91157c11df51028668b41410d76e235378d22d13820b44f5fe3f89b275ad04e7d04643bfbeafc194101ac6d45eceff499223ffb3fdb1a1b1da1100685ef480497c6b6c231a57a31f121326d0a71", 0xe4}, {&(0x7f0000000040)="bc95e1cc7b5ac07ecdfdd8f17b34f376e8f6bf076649948dc81defa4fb14711aa5da741849", 0x25}, {&(0x7f0000001200)="1ba34e12dd5d80edc1b7d16fcf5ea4b3c8ddd4470c71f500c9b2f081849a5afad4db1fa9908163dce66c637bd8a6d824db48d651a484ebbd257362b9208d5e41333851f0a0847618c1c974d801e079e8dd4464edae3afa9bc47b08d2dfb45763", 0x60}, {&(0x7f0000001280)="e506c43b4009332e592bcb53689715dcbb417c527c6c4c3e33f69fb83ccab8cbeeb2e96ca900605228245d3af5974b08a16bc188873ed6cc7bf8f60c42646e6f8b4dc73a2c518820b2bccb825969d544b5128496e70e1f170b0cd351a6b7a678b72173c0b827c81d915491d76fdce244cf48160db5", 0x75}, {&(0x7f0000000080)="36b1", 0x2}, {&(0x7f0000001300)="92ffb2bfab8e71d9c0b41d22c4d170f7abe00165b74a8d7f861d0c25a00bc033f7d16642ad9fa677814df24858dec658823015e123b20f74a7af1e5f989ea6696862dfb161", 0x45}, {&(0x7f0000001380)="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", 0x1000}], 0x8, &(0x7f0000002400)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0xdbaafc592b9927d}, {0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000002440)="ea1b27a44af27f6fb762ee2444ebf296091d4dec95f184c221332b312292c5db2d3df1a305a647279ae6ca2aa517793a69b238188e3b9ff36abcf9d5a40ed067dfb066e91ae5208b036c997c9a90ad29ad3655db26a6222015b62c85f3fb7fd05b00fc5cd450deb00fbaa4caab76fa97e276bacfb09d30456384aeb99b90", 0x7e}, {&(0x7f00000024c0)="17530ac956120373725f05db7d397ad4a8dfed01e1edbff566711708a3e3954b4371f03858e6a1654d721af3224be02b77bc1a7c8a995374db7522d14f4a185246049c9db11b22340a6dbf2c17653697f991c7339f03fd96fb0be4b2bb76d46c68ba46dc72fcd3fb9028f8c17b0528eb9b6712b1919e4677bf406d8949949d45c1ac8b6d1f77011d9dc7abbc43fd97f8afcd6fa1d88decde808d72e2dd4447fdfe2f52b393066695a182225dd1e4d9f874aff2abb0c2b1d5de6fb0955f81eabc7aee7950fb90ea707674cd", 0xcb}, {&(0x7f00000025c0)="244ad8749226e85d1930cb10147f2e93c39dbb69d09f445dd2d3b9009caff6dc207f2fd8ec4962ccd8dc49f1cdd3dcbfbded4524fa448ee7bd7d23db9ccd983038ad8eab94806aea96adde9fc9a21d1c8764a76ffea06b747c73ced4e145a89a3e1a8de70aee6eccc15599a75f240cb01a047fa84d76b5d33d6e4cde583e10f99cb294085c781191693b399d78a81b9c9f9733d75288b2e9d6cd8550ed51a65f7c2aa3a38b9e63b80bd57b886feb06bfeda782f17b1d", 0xb6}, {&(0x7f0000002680)="6f6a91e95197ddbfdcc0ab4b15b986b1db6252accdaf86e5a1aa1a96c965e73ff0283a8e0307c05d2309666ae09be3976b820911b9cb4c94f43c25fcb2a582050fe93787cfa98bbfa2ac3058f2b8be72b0a6eca1c4cfd7a13f717dbe84a557157b1ef055ff72c49ce0eba7fec124077e06feea222f74d20a5e71d3de92918a66bea77497e44c17296f255db335e482517a77f87fab9dff10e91477c67aa1f6ee03475b3a5a4f47c9bdba8295a4c28b8933", 0xb1}, {&(0x7f0000002740)="ddc579f53e16eabb5acc1edb7bf96453d51ea39390bf4f58eaa6fa36c21d057ae89916c5b3069fd1b28b1504dc9b3e78f6e19570477620d8347571de3d3f9d5991343cabbf9c93dbe485051e5848957b9236e6ea65649d6d06b6e9608ce48d62399bb02f05e15c49fc31dbbbbb48217fc433e51ddf32714d35cd637e3afb0ded4a7adc2dc6de4f42dddc6fde28937bca8dbef4382f5b4ed78d50ecf9c54f57c0d16347d1814e389d776ab9db107751a9e4c266d0510de01e97119135950891d33244bac29b103e5b", 0xc8}, {&(0x7f0000002840)="9d20882048f4134eca7e0e637e8e54435f452d5709f66636d3a45e9eaeaec6cff2c7ef4524d961c249e85da69eaed7ba27ba135bdb68ed13e484278b21da01955e43333c03bebae6f8241602331e26a4fb256dc7372f95dc90d8b5ba94e6d164785a9db9d31218d1c4535f9a203c9d21c3e37c65e0951268fa17b774c043a9f2e5ac1221e3022b735638", 0x8a}, {&(0x7f0000002900)="4ab1465bb700a7b9884250eb6a0db11323daf358ac6b3dcc72323862c40d3dd55b8e9b17f458c1ca9a61d27c50b685fa001fa431048be95e93a9f607d0696aeea696e84459b00266d04cac9bbb21d76b6d79025b645639a858af2224912d994d57fe1b943d63241e586aa7077a6ba3aa847f51825dd09795dbf3a2ddcb027b1ef6", 0x81}, {&(0x7f00000029c0)="1f299ada1441a84307a30b1523115a52497cb526b38225d87fd5b691666c397f98b4900af3b10302bb661c2a4306ec3645ab685b4d2c8af3cf2c264c46e2809b5d2e566b7891c4456af7f495c5a88c62a29904ab8347bf4cb63668f0786923deef531d64711228bbd8cb2514c1338b250a3fb6bf30dcdb26b49a4d1983cf32258500dafea97b20b16c2262004d698dc2551b547dd82cd6e1aab9659bb91e11b575b2e5256589f7eb6863dff060709377b332d0b8ab2fd11af3718eba6f72fde270a1e47a93cf54b6a363454e73abb4408cef2c949db73712ff588fde2157da8e40f2b8724408de2705ed76967e33b9d7dd5fe2e852", 0xf5}], 0x8, &(0x7f0000009f00)=ANY=[@ANYBLOB="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"/460], 0x1c8, 0x40040}, {0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002d40)="2e74c59fcabe588c8b270a63e65fe39994445a514e4521557d36929a3960e64b83f0c7f49f5f3f6ba8c935177735a9addad8b2a0f1a1c1684b3837918d748c020a9bb38ba5af2d7c2b7dd5de3dbd041b29b454064b33c7d6cbd20073e5fe54c5b591fc86bf7194f70a67f225157018454f19a73db5abd74343a63bde831f", 0x7e}, {&(0x7f0000002dc0)="9687ddaacf902d61c6b892afc04a32f98d7c5b8895b081e0adce4c5a844c25d0c9cb263adfa324b49c68d40715332342b892fedf0057d5ac1b3fae4acb7a552af6008aa3fbe25c20dfbd625618747d96a423369d64209d7cac58a38e8855e340edf7ab622e4e8e9e14d424d2495784fee5ee91e58f045bf468fa9ce7788ebff12f18d7040fb77d11b0aaa2d56dd826e382fb4e39bee6f1950500a9b961f849a99f", 0xa1}, {&(0x7f0000002e80)="8ccbab50d0ddba52ab8ee26acc3abedefcd40bc4291e46b3fce8e582155af2776f3c60703a5e3b9f152da1d2893bd7091cf9ad4387c029abb341ed233186e401ee2ed990e536aac8ca160b0d117ccbbb37685b2b66790ba47e4404c1a95fdfa3d0ca84870507891e40469ccecf0ce19fae6949bdd50c8101064071255d3fab77da19c3369d5d65b1a8d1ba4367351f56c0d7e25b02e6b4d78b32c1a5752f8617f36722ead60511167d9ddeb7829ff51b28e28862476c1bac3ba874379c10656a4618f78b1e4d7754fa3b0ef9f174f1292059f20b0ab80a68951b7c9e4a921e310f0c4e80b041375ccd3087dd0a322f3fcd", 0xf1}], 0x3, &(0x7f0000002fc0)=[@assoc={0x18, 0x117, 0x4, 0x7903}, @iv={0xf0, 0x117, 0x2, 0xd9, "3a845b37393bf9207a490bb2150fd9d83b22015770b4b17b5776baf91f52e8dae8b2b47f2625ddfafa051a73dbafacc8e4c9cba256f587bacb935b159828059662a985d54deaa6888f4dd6327e82d4292243ab1023806f0baf159afcd5051c2afba21025607df1404d2b1fdc74495081643815bcbe9695feab425137825ab190cd2a94c792b44a3e05216a2679648bdf3fb1e49637114264066e864b40eef591eab7e2494e27fc24f0d081da4cb3e531ee36abc925b5893097323f743f5f4ac5ac56444f1bd91cdbf76ea101b4f899fb1bc8f9a55a6ba8fca0"}], 0x108, 0x8000}, {0x0, 0x0, &(0x7f0000003440)=[{&(0x7f0000003100)="0e8e74debf1f9cb85d353048721f89e4b96abf5f8c03d7235b7ddd94d52b212a81214233f9953d5ced6b2cc5cd98f9d700078fddc982755d8af8a9c0710826c9c1162b95", 0x44}, {&(0x7f0000003180)}, {&(0x7f00000031c0)="e7b13778df43a71c7ac20d5588baf64a8cb2b3bb8062da7c4df8caf492f277dd11e662c47c543e8bd5f6a30880d9f776967b7461f5cd947bedddd31b9a9180663794e419fe06673943a730ed2933ae353766c1bfbdc5a8501bf935aa2b4c15db735a64ce8a7a6d1b87bb5ffd80f3459bac5e65790e1841cacce2da0d7a117b97c80baa2df946e248c35acc7b69f4922b3a2c56b5fb73bdb0d1afd3c97734010e", 0xa0}, {&(0x7f0000003280)="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", 0xfe}, {&(0x7f0000003380)="ee112f7c4766ad7e0bc86b836932b1cc22c3bda6cea6dbe044868f0d63cc3faf24f97536a8452322be53a6a362037558258bf9ee38714da61ad338aa8649e84e9c3275f544f8010d3ce0291a3d67985c5551f9a8a1ab39d6a3e0b34882158d4bdcaa97bd8bfc03d2e3ca5c1c921a6cb7d770a849a98d5599d57485ab07a5256b2c3e9783b7e9b4f6fee28c759552e613ab9de429de1860fd053ac628cadadeba7449de1c5490528c7cdc8435cdf7787b78440d5199b89a2c0707f5", 0xbb}], 0x5, &(0x7f000000a100)=ANY=[@ANYBLOB="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"], 0x100, 0x804c000}, {0x0, 0x0, &(0x7f0000004b00)=[{&(0x7f00000035c0)="4ec866c4421882539e343aeb6faf0d316f9f08d3bc4904ecb69badfe72d6dcfee4c15ae247a418c178423defaa3b3c5fc752696b55447dce563f37dff5a8f389a22adb419a7d", 0x46}, {&(0x7f0000003640)="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", 0x1000}, {&(0x7f0000004640)="bfe10a2fe69cc9b3f75389e5cec642d6da3d8d59c086bd851d8db02603918c9406c5e966417819363c6537c7a6c4fabb1a4ef2ca25d11d94fa7d5893739a607da84181d237596b899c76f4efd9dde10976e8326458b3b471bd5cb6367f4a202cc3e5ad40f640b195f7b4366546ac99f38c1aeef34c3d6e91cccdd760dbcd109368262fd03a93cfed329693e5eef6acdee1aeb139fdd2c1b6549c8b09b8b587a30399821d04582fc0f399946bde139463810bcb2a81c956856eff8972cb22593b7266ab8393f1b6760b3032d208acff380f050940ae1047b5cad4335375705acca8c0b21d844525eabf062d6a40f6a3b402e0f3750a99a48046", 0xf9}, {&(0x7f0000004740)="7708a85f67c71f00b256ae083088e3c478d13f63ac3070d7aa556b42d2c9a919935d2cd84b0d7d09d7cc0bc9134dcf135ede31bdaabb530a831b21815bf50bbf66c05935afe63bfd63e1d5d9dfbdf8cd6eb8db1260c479856d71c906ccb0b32fc185efbcabec3403038ba0dbf58b7e2e50be250c557691965cb9e8f8c3f4707ec7305fff432dd4c1642a103b4b835de39fce6cc8e098edef4cf943a213a65d79efd4fbc25872f6ad42b4174047bc66f6fa283bf301bc37b90e95ebbe131f8f030f519e30ee5254c9084433bb8770de5720481661976d102dca0923737cd230b69e7713fbe59cb5", 0xe7}, {&(0x7f0000004840)="eb57cf1de69909ea29dd3ffd22e54e6936a47c3b80dae1a029d809ace50c587ba8e8e7ac13a028ae167305df81e4264cd654142d2695dedb085757c35bd923ddc72672b62e64ba945174f30bd17b528f35fa06840bbadb72a61b3395749847a767ea93b92547", 0x66}, {&(0x7f00000048c0)="cb1adce480a6b79ebf35f38d96e722b29bf46af45f223624c05a569682f6035bcafa3946f48ac111bd68a6b281bfdd532cd13eddd30e76f0255efabc1743c1eb794d36f7fa9382bf0ab8a417d07dff4b150a616a2448b783e01907963656d0dd72aa8bd64e60f725d59dfdf2e6411a54fed9aefd2df9bf2be2734a85d6b0a9452b4adc45a00677d5ff885ed1ba2531dc7e87c73d4ac09af6560910b71fac4a55f5a996d5b21a401d40f35b269f4e908e2c76c11b273d7e2a2a3e11a75fee75", 0xbf}, {&(0x7f0000004980)="d4d667d6ae0017e7701fdec281e988dab06215d5dcc3e28547ff2f42de13185c600309e96b9392faa609a3d41461fa35a62855c1777af40134ee4bb17f27a9fb260b7e31ec27aed69aa09d501b75279239dc97d755c0cf4819b7056826855ecc64429eb58d78f68a036f2adf22dba7d777421ec1968a250b37b91160f09afee7254860ee30f74b1a69ba22d89cf79a6089335bdb685b9ec8b07285895911acda83e6d79611be4f91cc3758bb468c895edf8fdada00d21b601b2b43a56727aa756b455ae6e2b8eed7e3c84c060fa889581f9eaacb17b22182e541708891fabc1674b68944", 0xe4}, {&(0x7f0000004a80)="fd6789a7f4a70dae67", 0x9}, {&(0x7f0000004ac0)="66328164fc5a5221c78a848fe9ad7a29bd293c3e4acd14b7", 0x18}], 0x9, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000004cc0)=[{&(0x7f0000004bc0)="c84027d8e381f5ebde2d1ef94f40b4b5fd9da656d9f8b411a88270d5c363afe13f138dfef1a0f7588b77bff71bf730820fcfecdb573056e03364fad9d40e5bea3bc84b668f7a07141e03e3aea9d4fc6eaf96e1717ddc21273d667c7cb3ebadb86729be3197cfb2a9f294aef69091a917f29583070ccd945cbd9008561b8b0440b12d3897671177450ada137a289192564759a83bf40616cee3090ebad218a5274e2e5b171086c2a5d4199bebbd3bc1139deb20f893f8e8523e54d0d60716e993fb0b0ef189f6", 0xc6}], 0x1, &(0x7f0000004d00)=[@iv={0xa0, 0x117, 0x2, 0x8a, "216ac69ab6be6fd4a7041d8199ff41c8e55611949de077d219b73a3eeea30f8b071e61ef41933c1c895e3ee6db73e8e80caf88cfa3c460f5b7f0ce43d9a3568009f2e65981ed7103576b4833369fc7154f59506cd5a9e8fc4b828e8ac4c3c38d16b6bed6808ea41c2a68611280c9f6ea225908d7e1fd45ef863c042c480a13fbf1bc7f7ac9fd4a35ee69"}], 0xa0, 0x840}, {0x0, 0x0, &(0x7f0000005200)=[{&(0x7f0000004dc0)="27d2100eae91b75c3c3e1f2bcd75dbffb40c28eb92c59762a314abb107f39fdaee7c3004f126a5de0249aebffa4b53dce1", 0x31}, {&(0x7f0000004e00)="70ab4a5caf7f2d9ac16a596d989786b15c1b14512e5137bee8fe05c395af2610c8737b24fedcbaf77b1e31b22d84c8222280a3b5d3a8058ce980f3acf59a8829ea1b381f401881808187", 0x4a}, {&(0x7f0000004e80)="11ff17762249ec5926045c7896c918c8a3e2a7683a8d32e6fb63c6feca8440c155a0d7e393501caad4097e10106ced", 0x2f}, {&(0x7f0000004ec0)="a28bd827c9097f6b", 0x8}, {&(0x7f0000004f00)="ffbd7ba4041f4cc0da13c951f6aab321d2a22af645f1121110f8471829ac1316dc3b3df232286c271d8f9289ebe18574a10bf3137d83798347baf0d62eb6e4550a9748ec30e744e4189943484ded3eece6a8a1fc9573be8fd0caea3a30bf22260152beac281f1c14d5674f7e6cdb07e72703d5c8513e5fdc616e2969d828c60e6957c08fd9a746de5ae03d20fd0abbe8a8c0ea154a725f15823e1060e8067091f19a718c40b7badf6510a806e8888bd7dcc1bb839f54266332d0ee6b0f16032e8acdbf70c31abb406291c77b0c87974f6a0e67eae317bc9e71774871378b1e1d", 0xe0}, {&(0x7f0000005000)="b3611d687bd87953df8f5caf5008d811985db7c0768e5c2a9b5dff3e61299e1a2fdc7268268fe639de266fdeef79fefe43895a31e05eba8b9c6baee5f11075b1b6fd63530252a43464a187eafaf1502326ffe2b03bcae1ef8841dcb0c84e4561741d6f69d204342cf42d99ff188ba95f5e3c8a38b1bac2823f94d07cc8b0aa6b2e124c31950f5e6e0665982134a6ca48a9ce8127f4f6d2ac3f05a8e0342f3117d1ba0ebed9a55eb95e58425430385d37671f08", 0xb3}, {&(0x7f00000050c0)="4c5432a9d747e11ad093fa24f9031671bf7d2f8bb67c4b90a5a69978d27d5142092553b8ef7b2ab2cb3eeb87917acc4134199c2a0a61570a6cfd93ba33c5059d1111f515cef1f0bc02a5ee9b4032d1f0a0c87f2f1f8a23e10093d9c42991e3a0d7550dd60a7be003365ddaba7f38632c61042f284680320e1f39a2", 0x7b}, {&(0x7f0000005140)="a145cffeba5ea8f6e248a90ffe5a007d7acdb7e190f8e344ae0ad819945d669ee135399f982a9f516e3bb2a6c4fde276015775b6f80752ed1cb6f3006916a848919c0eb397b49b79fed5064d647d884a12c5841379ea47f24e6adba0b120255d428d577797b279aefd70e4bd7bd13aa94483885b98208a1d823f23459454339106949534e7153c975ec7814a674e", 0x8e}], 0x8, 0x0, 0x233, 0x24050081}, {0x0, 0x0, &(0x7f00000062c0)=[{&(0x7f0000005280)="011220e6da320effd1b69ab1a718f060fb55b5100000b185a0b17bbe528cd3917e09f6f448de3e9561e157a2beb9fc2ee1e26a341bcc14462b750a", 0x3b}, {&(0x7f00000052c0)="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", 0x1000}], 0x2, &(0x7f0000006300)=[@iv={0x78, 0x117, 0x2, 0x61, "9a71c420275318455e0f9c250dd08335899497d50eb38a9f50987cb76ef29de02ced387fa15f17394dfdf21b454b86040e57fb0fe3a62eb0937fcf2bdf343c62e55243c932c43f1635b8864483e0d1a69f4430d21760c99cd75c5a08c7816cb92e"}, @op={0x18}, @op={0x18}], 0xa8, 0x4000000}, {0x0, 0x0, &(0x7f0000007700)=[{&(0x7f00000063c0)="36913243f3380decddcd0f43ca6fdbb932b4e12f2067e23fccca5e301e6e6256fd7d38b6e7cb58e3191f5c5b37df8f1be37bafccf1283bfcf7592a91d10b7bd75f699211feaf448733a564c473712c817b3707121c95896e6c293090c9699b11b6601089f2588bcbfeb685d4a755e39cf3f56c837df4087f61b036c609247f9bd1069f4316046d5dcdb1eac38c5cc361e4f6d735f93bb4df4df10ab86b2b7b1bc9c38f0e8023177ba09cd9ae307e779443147e24c34163bba65c290e42dabeb7017e703d202915b017e3c558ee33addf77bd6af632e07a485ee4f1eb86213871dcf51adede9dd34afac8ee88bfe09fb7c7ade08d6065372b6e8b4c80b87d75433b9c330d647f26fd00713e1abfa47ea5f7f8a4431d4e66822c65d4a1713156fe8f720dd111daf14f1ec34377744a714fd9308826e37216d76e7428ff9b47ee8f4a693abc76c6e71db3487d6a84179b6764fd44e2d8efabedb25d7bb9f3b00e9f16782caa6d46924b0b122ce0ae8825abe0d2ec0f86840ea9aab062d6e9da02c9030962e12bd276d135e87c5851a4af221b5373d25e30468a74682b37263553cf3c6769d2d18cda7d3dbd7e0d53878bf9ab602c4b77c55cbf45ed25f6411221466db5d891b28286b22a81bccfd049418cef843e5fa98ff0106d8c5ef1e3545f0f79e8818a1e85f9c0a76d8116f857a46dfa708df0ec9127729b9345a5f6b17e80e3b4e65f2ec07d70796b7d67c603047a52939743f00baed6917f4069f9f3e0e18a493c6d75e18e7cb8e4eb19255202fd9dd4a2dfe972a48e267a1d4c3ff5b62a7d887e803cab674f4236c174ac0912e3fc1ac8eaa86b46aa277bdbf894bae6d1f99641381be6dc88bbc1a14628ce694154f7a74c124f855f1569434a4f10df23291889d4dade6728c9070c9ab578f5e545b3d5530a66ce6e2a5f7a4e63cd7c0f8cad647281a2b77a30d92c9fa852b7cf07447985675bfb47a66e4e4776ee994259bbea1ea402905a75cbc1cd4b24ae143bd9385685ba01e7626047c6f44fe512928fc8546417ecbec25750eb4da6b54305511e7bc5d36546b2b126ec4274726e31897f0d13040cc80e744175236d45c19562d9a9a1917b24cca27ac04285ba06f9c2d0b86c06bbc5ba56d82f9ca6d3589ef5406e4ef02aec61a9d0723a5ec3dff3b8b2807dbcbc9e571402dd2cdfad7ed85e16dee673d7d5da8fb779f1224d4e7f30282c6acf69461b66959b9c135fdec99dda5e86816808ed8f6312777fccf9b361c9b926039ea32258e1b795c05fb954b13e6c46f0b5d59cf106a8e2a308404e7f6f4c19f18481b6a8c9ff66fe35e10dd0903d612c906ad8ac92204fb7f2cd4833efe7ccfaa60659d24ffccf9c9a791546ca70a3b2ac3b0bd8a2aba74deeb21d9eba6428fc8b37d0dfb8996ba372016605612685aaa26127ee8f7621a176f2ab6e24ef07a050a30430bf7974ce6d1dcf5dd5f7d36fc352b5346a838744b3b2776df38b2c2744a5a588724a0a8311aa8a37227a475d1628511848bb84fcb64d4020805ef447b0d159e2c0c9c9decbbe5080a89f12a52e57319cbaf88eab5f9133bfbe459e64e3504158f67e7df69ca0e11774183718a5fac55ccf8f8f7df4ea27060b4f4014fe20edd9a889657a7c6ace5641b22bca91c51e40a521ad4cebdd42d2327b18ae40f80b5e65b3b2f587045b166a18b8609bacfd92a05eb94dcf2e784e09ac233eb54b2b79f2bbeeb9f946c5ef7f01365259bb709c1d9e0cafbfc3919e1aa54f0ada7642187257239d333365f3f1c5cbf76bb6964a2e1c66e8b3feafca78e3c83d25d33a548d37c9d8707d3724f38b4b02e7f712527735680d10c7d8b97c79fa64ca391e7701b6a73659ef8cb0c379462e0fa706ec4f669af096a339528c8692341cd980a20495623a40bb9e5e9b46325a8e62837fcf023d3b4dfd48cf8ebca31f6d3dcb7312dd66d36df5f30c6860d71a88b0f3bc19390338fc9563b2d0e11ef3dd60519e8b6c3662d593df687559406a005fcabe4ce3e728596f2281d7be6fe769e8d9201dd2005acac43c58b119efef841a87c3d757d5ff4407358343d4e721a6b712932e3d72192b99cc52ad8f2d8b46a2db8e8c6a3bbbb3aca78ea8a605d5f57c145154b25e6c681375d00b619604e0776749c055fb2bde82b3d4400bb64f78215e5f49941a9cc9c0cf3f08da0f58a7fd80cd74ddefbba6b8b0260cc086f20940ca614e47d10286250ea32a1f2ba79fd511c022a90496e8768e4714ec76d165e086be86ba0a0cf1fda99a791231349544c70f192537d82ceb29c24ea3e682fd929342f943d0ab591c5b1dc6612c6772237136f69a221a86e462e79895871bc02d38650723bd14e287cd852d173e351b2f7999591068ecaf16b360c769a1f03c5a428a8715c1b3e7a9f0cb20e9649d3e9b859319ac7d60ebfd83fb9d507dd23fc5737e41554e72a0251ea99c7bec8d1c6c13e122beba670453a0d7a2eea32bac347c8417f1e4b7258103e941d371969a14bdb97202fe4a4aaae6a74b230fd6fcecd5cdfc724a82303a991eedf86b51fb76b4febe03e1eaca410ed8eb2b18c4a4d27772896296e8016ba82f284312e0ae79dde7ff5bf691c618c42949792a061de2ed8418454638ca4d6a800cdfe3e187fb2ab5dbeca2bd0ba0c8227e424f5607cf985446e2fea75564101d4e9aa5cd7a0fe50a786150e17332d5d797c0c5f6a1909a73ed9ed07b0a13942660dec397c2c71a88cba11354b81bda5a0cbf4c5b0e9bd17d2fbb4aa9a74e744fa6f9c33053c0da118dc5510fb030787e87c408d1da0a0e97718080ea55df0aec5b746a058232828cb7448d4a0803d8ef8abb6ecaed6d0a9f4d592090fae4bb1531e259a48b76f2c867ff1a3d264802daa8b0bbda7f7435db8b735dc90e860397c03a1293f184afad24d2728e8965bddcf3d41a12090d09e33b301d0d849693bc6819b75f67806104ddc41e4995a9fa51d52d18085dc2cb329a5ec85fa53be8cf8adf7e0a7e842baed9137125ba7e22aa8bc22e5c03e55b7449f5896c7ddbe0d0fc8d9bf654879c0d32369ea560058b1cded58caf0e447134524963d70682d600f7c36765cbb251bc1cf235b9f2985aa813d7b029774985a042d5ae055161b6536c3df4e19fd5aaeaa366937794d111c3f28c7cc1c3e603d3555d71aa2b0b4e3fe0b32b7af44c410531949a06ceb8c6a281e3902b32bb9889b0745970d2d6890607c9f08af9660764afb646d0a6ae44837ed3d295ffcd007add29b202e7161322c40c4efa7605084f8809d348c69181a1e83d0d52596402f002734513b4a80f5a58e062367e1cef2ca1f6972160256e35aa0c456393e30579f6c17b43cb98933c2546c4b31c1b7c3e3499a8120a8be234f29ab57bf7545228202395a15f539c0fa2f71429d3b8e419782be053ad8cb4ccfb15523fc8cbfa2670c91e9f100935b35ff0b53a28ec2b708f48da2aefcaab1f7921ca8447b9366902632aff075d186687f7b83724a2fe618de593baa519843496bb94fcb0372af1cda10de8dba5ef605d9859f6d1a8f17b34a63fe5dd01e3e5ffa6aacd0b8fbf2fa40210a51962de2780447a53f24d43632bc3c8118cad3195c55325fe25cae4361ff95fed1f1bfdea7d42032656d9df8d3f2f3862325f959be6cddd2904849c79cf08f32928d17ddc1652439085dcf1b93590be4d168c979a15c6aa4fa489bb3c85c18691061c3a9f1803b0d0d986ab6c7811ffa28bcd733bede021442851f608b19162b6980d23a36f052ea7ffa60177fa93b11f071d3090e4bd091d37dc9b1f4a953865ea41481ce5b274b9c02ad0d8ea8e13b3490b5a0ae178f812fdf31ec5ce58a87f65d79a36fef82c48097367107c7388e57d2907a429b653bc1d801748571651119586e980c231b2e8844d445c276b476eee67c1cd35ea47673a42dc43c5987d4567b301daa8660c767f5d4bdc21d9bb023d740bf2ff306df29d78ed8639d9c8197342019dd3ba34c4d4d0b5879cb371f4bf30def076f903c60c59ac34ebb1da646e809e764e1247d275468ace0e6a0ec2e1ef73fec0a67e764c1d65a12d8e009023a0939e640550a4b6abed6bf3cb922c404a9fb973ea98af9dda0089962b13e6b99fef37473bda974930a07e1185da29481aaf0be17c58880c019704ea3fa666c81777887046f3883926083c15e1b7988a5877f3292a16089cc5a4c69a65d1de4cdc477f51a52c152d7931535f776ab30b480c8dd0b473239c5b9b88331215e8391a39aa9b3ddf2674019990733769ff9e4a52e59514707ab47f73b426460a5777231a21bdeb246f5466b36c8ba0c26d1012d27bfc73eb532fb6c64e3f4cd8c26056da92e9b76892959bd97a6ccd936e32f777975967b6e4fcffc28229aa9c4d99af903c88d0f0d56efdd4e0da2a96b76552669e1df9e0536235752ed01e0f2825c016f4433bfa70c38f819165f5a08c3d543659f18904766e9be10d6552b9b1483e341cfb7611ef897c6840b9cf8e46464e3ad6042565df1ce6a9708705ae03fac6f7c55e240ddd64fdbacc94a88dbdf35fb18c4f1b969812f5638efe9c73bdb5c4f88ff6d9fbf08e48321cd79a085dabbf18356073ea54672482e3e5c12e03c12feb7b92fe5b72ca9ed3961be5311c0569ab1d67a55b17030f21e326ac9d5440e76738980ace31a584575d4339f95463d22efc9ab6fd2163732c81c4341f2845aa48d17328bbf5c796c743c1c83156ec67fa04483c748612ace43090bdde29f41c783ac80b503b32415be9ed70188ab45b7cc626d0382a174b409a795870fd6a662c0f05296f5fb0ae1296088c214c9c30b21525b12d97e9b016bb6a2e0f13cf3ef20913254ed94724227ec1d64779e2272eab16ff3d1d4835b154f19333fcc7e5c589e94cf8da25a7b4b8da95c890f26ec5b76cdc9b59fbca9fe85a9538b15d86fe1692a0bf4d430061565a90c9b308547d6b7a8f8998ca8fd2c848eb81c1fc9bf75f713b0a338407a39368c0eb761d703acdf7eb86687461a2bdd5c14bf9337cf21c645b2e953e0c4b37c5dd4527acb7da9062ae126bf6494bf1c314174631ab5280a1c6cb2b9b94c68bf92ee72b7051381885e64c5851621ffa55d6b06b71251296412863e887ac3d5868fabc7c7347010d4e398604baa5f68130f8c890aece7c3ab14b408c91cab7cc3a3cc5810f3de22982f07d9e1677fc51e3e04f81a377c39ccd8e44c333c22a8288fe9c420b47d54c71ca0a4bd809a64c285d23e0287363b77b06d4ac1b1d168b7f874b984e2d83e282c9a05a109ad585d6e9beed51096209f2664d5ee87d5b04defa22760693dff09f97172ee8250dc6a9134211f23c7179e28b7e121533cf8b98d631c7103671fc84d61a271a2e782a9917c3e63c143699f204c9eb662f2d3765627e3f59e5094237faf3408aa19b4ad3399bfaeca547d06a5d9ea1b32866238ccb71c20649e0b2f38c1a32501e77ac4d2732a85a5ccccb17e15916f724f83ae087f3b5d41c437a3b9d4067f8a9906304054efd64da7f99171d6a2c89110339ba294d2b63dcca17f0af6da3ffbd4c7b015a640b2c580e56513ee64435ddbabd1a15373be99d7b0cd94214577017f3bb3f6727915f83819e58c2053c8c34f394bd41e8d73ba4398a87b330ebf75cb78fe4ef84b6ff7b3d880bf12950082231dd12f7365b1e041f88bb20fe370fff38c632ee0ef1b5f89df216ee705e530ba4ce9cf18d253820e787781fa9c748c687c01ecbd3f9add5bf5b497cb13fcecee652c061a8b55402", 0x1000}, {&(0x7f00000073c0)="8d5dc5b5051787cd9e14dcc558fb9ce3f7483740ebf8f5da9deca34f6a11c160f4f6693186f1ae0e0d8c6e5dfda851eefec09f3af4b2e06c389d4f189529c4b69e49cd7799e1cefc2c812632c738a7d569327e7344e05640492dfbb53e6be1482a886075d403c64ed2707ed7b55c6cddbcdb0838c648", 0x76}, {&(0x7f0000007440)="85d45c6471943d9e9637a754d80f94cb80a861fb33bd353d2b9b03ad6f5bb5fce49ad86090d0d7dec6bfe283b6238c85d196a6b8deebd5c73fc2b6ae28f1cbaa7194f3e2a4bf79889040c7047414be6179d9d2e2a0ed16ffe331fa3981c1c4cf3019398b450fbd20394967f957cc2cc0d1b5989cd7638d4ccbc4e45e5206476a64222730b74125e9d7c1daa454bc3c7f4ff9beb70bbe0ac3eb4642110af682ef151a70a4489b34fa26305d4db2a2091daedfe0c0e3f34cdf060c9c0011898440d49ca4cffa2d280825dacdb21e4bf7301eda644f2e1bc97f89affda4d147317a6bda0c3c0a70a2c9", 0xe8}, {&(0x7f0000007540)="0e8eb48fdc431aa0fc0fd53fe6cc3c89dcf78f92c09476c7b7684ff9f8ef2b", 0x1f}, {&(0x7f0000007580)="956cdc91e031282f897596b48d5b9f8fb997878155c5a4756e5a76a423449410736103fa487557faa8ed410a50d1e5bd714ddab1357271cfcf9a426b3f7f022a2a4c30b59eec0138f6fd5fccc51d81c28f2af69d62774eee792f2a565448edf5c128eb608f9cba299dd1c25dc57d5b8e150d", 0x72}, {&(0x7f0000007600)="5ad2265f16be38c2209cee37f6", 0xd}, {&(0x7f0000007640)="9d64b9c3334e39dfe40c8166b473da6dfdde3fc6df08fafa457ad73de490e1ca120d975e89a559793c011c4f939642e7ffc7485c12f6a64ed323c1305557398172642a43aad948f4a8b305dfad9fe573dd30f2a4a926443fb5152c9fe54557303207d9ed", 0x64}, {&(0x7f00000076c0)="ea", 0x1}], 0x8, &(0x7f0000007780)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x90, 0x117, 0x2, 0x7b, "8a069d1f2ef1737009564eb9972a1fd891dfce0a2caa755aede627bf642c273d6e8be518aeb41cfd4c4bd88cf4186825ea51bc8fffaf86e13942d376a28024d5ac0b43bd5888eacedead8c754aa305c848d412d20411025e9575959497731af691575aaa9efe5eaa0b24b65ac65a01b749aabe0c8639f02d8b007c"}, @iv={0x58, 0x117, 0x2, 0x40, "49337e1b9adfaa3ec639bdfb275680ee71498ebae1676013464223334bc38e01e4592140c72d4dac4f9ecb55c6c339f434c73b9c0d15a91a55571d547fc2eec1"}, @assoc={0x18, 0x117, 0x4, 0x80}, @op={0x18}, @op={0x18}, @iv={0x110, 0x117, 0x2, 0xfc, "99a42ae8effc68956d8751c00bae8efb5fc7d57ba20de88e1b5e385bbb0d87ff5b5f5268a50a4ed042ecfed4050f4671bcd3c06d9e325f749364dc3e24880fede590f9a376b666b16f61d0f9859f0651f3baf0276eef1482491426f7d9792d00a9a0ac96b67929a0b22c5c1c653fcbd7332040531ed7a57ca17154785eb4b1a3b2353a32e70b0b4922f313a9af29dfdbff64a3d319669a5b7e0bef122babaeb854fc90ebd6784187e8542606a4cbf54c141caf9608573d929500f19b73daea96054d157e3921931889ac83a7e84b366490c4fb3e17fa801d1781e22a8864876da546d57ef5ee17dd886b1c01a9db5ca772a5ada9374294e2a0db279c"}], 0xfffffffffffffcb6}, {0x0, 0x0, &(0x7f0000009b80)=[{&(0x7f0000007a00)="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", 0x1000}, {&(0x7f0000008a00)="db", 0x1}, {&(0x7f0000008a40)="f09632a2533cb94cf587b796c9b96ac3053e9caaf48849c9a3465b6ed2bc5b9aa43c209d8a1a0f2300945948e32d191045ef", 0x32}, {&(0x7f0000008a80)="7de990278e13fd45cc89247c2ba0003a0a3e61f3444476cebb09021c7ddd7bf1606a83dc1e512d3cc04811ebda2ec15502bbb909b52fdf1b221c9f8a77f495221477509f571dc3ffcc5471c77b82192d7eb2b0d4fdf95cd02d42d6292eb2237932a4a62d76a44483096568b433d5ac07e97095e1f8da8292e6d9131671acc1eed9e3b8195d178f4e65291f9396bf67220d96bcb01ef68a2ec6b9436421d28263c0fb47e65b13e9c7611178ccca02c699f83742edaa75147620a3751d57792365e88a54d6ed38e45c8af626956d18bdcadbee8dfc215fee0a71d27169a54c6ee4560bf3bae082776784cffb1b5cc8e1cecd1aab2cf4393578981c80bab4eaf5c0e187793468f843255d774243efd63432602a15e819b822cfceb8af63ef43d3b422d4e05db7fe1fe35c2cac586ec8405fbb56da8f90c78b7136f1dc72fb55ceafcbd73adf62ebd16ec02f7088c7328fb4b8a5a2093bb77385f1ddf8fd0fd4c821009fe842f1ac700df760e6ec54ccb0996be94980275c73da0a5a89b83ec48170c4acd045d31c49a9562e3b4dcddafc4b12c3fc959b222a0fa8de682b3838b867b3f87535d7414cbda4c51912c52b26e34f8b3ab9e27a1b4f6939e25d70d061b162ad6a1668813ed35b1724e15d9becd1b963718793fbf837491ee9e500894868cb89583791d81e5b2ab3cea3ff5f09c2ceababe025299250ac2c18f6f07db0b44b197137fb258e43f7f1747b76fc91a4d1fef7de7d8576e0d7ae6ed2d5ee6a7051a96b847a1a94fcbf01a945969197106e6eca67154dc8d94d2032ebf519bcc8a985fa20ebfe9a47ccd096189299e0e8beeed7ce39abcffe87d07560318d840d9e48cc301d39fd3f0f1559249e0f0ed36061922c86677a2c17f97d63c9d0be1104efc567d1559933231c4663e60019842c7eb58674b2376bc6f5b9b34262fc10c2636253b25f22f76419a6e3ad5166361964cd732f341179ff7aef47c4e9a55887f6b9b15d26fe24b5d2ee15331dd74b21f78e62f0ea1325ac6f2e958e1f8ac5b5717dcf9f22495e6068b27fa467ab55fe883a772d1c07e5156e18ef7582c2cabe159106f30ff0f46225f9e3f9b617a9eb8d061bad109baee76d0ecbf59a617a2e25d5e51662e200d7fd44dbea92b9465edea68de3682406cf306a4f910476ed1b6129aaea8db54ca9483b8fb3d6e78ae254b1ef5a207633644d8a4b028859c26f37223fc67cd02c76ca14643765c0e537b331e5e93f08cbf8be79496871c431a740bf492ba64bd659c352ec2c0a2f7967de7f552f5dc7cf25ff8e42b9b4afe45b665e17724620f89b367e80e6d117b4b5646c9e0b26e414d45d16b6b7767266d501a6be1fa04109dae567431374831142d176e00ed001097f3e8a2dd9b58d9bf8f23c617e39946a54e8bcfb6f8a6a9c88b10719f2c932f13dc994eab85cce5f4e74be11b97ad9abaa2e80dd1a9c651156f8ce73810e5f5a2d44836ab35a67795656a46e9cebe3f7c60b4f6c67e16b1bdda0ad68e00f9a2b1fc0e3456432fa85cfb716386501c44fb99dd36aaf9ac74498c7414fd37cdd6279c23f2b0c638b32a3538cad14e8646e24d8c80147942c2ac16615a0c53c5da8dbe49cea52a2d6128ea238ab007e3bc7cca20310daff8133a072a7d497f37f98f78bae4705e8d3d8ff62ff6a54c9a5939fbc1721db9a9d6ed3333497c34144a8c81097af0e6bdfb5fd829589d80866f32a2e82b5c6c64ad2c7672e2d2699cc580358493114d186870007394836a7042425c6a2712df339b919ad79b114b6a55a600d9cff5e6b9b2dffeb04ba7814c0970ae3ac423c1e93e8c31ce7ed46cbf4d826997645c7bff5ed080fa92c9a8033142d1c5ab6878aa68971e4b89559b0119066f4a0dd8cf1a7208c5a6f4c8b296dfa94d24087ac1088f90d092f44556ce7d9bdd28c49ec716485592ace355fc470408772a539e2240c76c0aa6f39bdb0974cdc33a4bd9ca90e5b50964b2c03a83d34a61fc0867c0ce834f1352f1b1424840af736f2941450ec9d94c91c91614d4029e1321b621eed72b62db051598bcbfc09e02a071aa9345c0ca6f673fb14936dbb72dd74cf14cf5016692e677fc8e0d35eb1a377ea268af7f21386b159d47170251c5544753b434bed657f5d68a5fd762923b3085c26ddd8951f77c5ebf834ae4091de8e82d0752051926c8a0fe05c2895f5219964b8af8568ea6ada068e88d4cfbe8ddd8aba4ad037be7ff0b7fc9b89b253b849336c14269e7bae4637cfee1a667923f01068f68e2fd194736115be1aaac329bdf8e47b70d66dcb1be8bf2e1891073eb0a6e55283ba7e289d5043be1f9e840adc59934a9d63cd65190c25a1a75d572b9f0c9f07c4ebfbfdff2b3b9dd35cf5896425b97791b7ec076e951dd8743ea7caa0a12fdb958565d619f00e3fafb9eb215e27c5a920160ab95d6642f03921e2a92c4faed65f1d73bc963838713b48a00ec7c771ebe1dfb9a1da67fd04a79f01b4b352e9a8bd9764bb5b494d540a67b1cb9d4a5e0f1c4a5064eab1324b9116e63ad5e3f6c34cacc8540e882c3ddd7750288d9ceeaf2b1dd328f56317475052c377d65f2a03814cd0199801a05be0d72708bff15b40d1d13ff7c7265e00bfae78f6297727a5ce3f4cf5605aee74487b7315224f7c03248e1bd64eeb75d656258e706bf917776434f255b961b4b3073e2b7e847766da3f8bca275437d177d34cbadfc164e43ad30e4785fa72bc37320e52f8082cfd462850466b498a55a898682e3511113641709ec11b4cc30104b1321033138d129461efaf330b78b57e7f372c915a404bd220e1c079f31b17d93d16558667c8f8bd31afb3bfe89ae075a6e268609544d3591fd315e8bcee8c810e9fd6f349c8a3d6465261804cbd968d7dec9acc2dbc38d1c54afba2bd767c2f547240ed557e1852d0f2a23b50231c9af84f55c4f7a26c3fc6944b3ba7be43eba601f63a61fdea21f595d382726c721181fd2d6c7dfa35a72e37509d606d24d52ae36281525054003beeb711e0588f9cb4d9590298f3c59c54b6faa6e52f489e6b4b4728d424a89ce04e9ecd5c47ea8883c6cc08083ec13712fd0abadf51d35a2a270403132d780ad94fbc8dbdc961d79dab31420971238c76fae5b9cc5f496f535c91eb2df58da618de6add040bf21a95b971c0daf9df964fdf174d844f37d41c044209eaee8ae935ed46d98518bdbe369441f59206d0bca82dacb3eb2437b4d29b6bcd864ebc64110cdb837edac701c0b66a779478a4385cab297a715bfc4647680df8f4f36658e7cf0359080066b651371b6d3c0355787044ae3974899557e3985e1c8c688d4e1e7f3625a3a5c2eb8ba7b6aa8d4ba5a8b859502fcbc0c17d7832c8cbb6dc0951f27e9b3a4e92b8b5eb101e37654814a1ac0443c69a0d956c140502e79e87a3f0b928dfef09fd7698f12ec21e87fe272ae9b16737cefca3ca60aace8bf9647e930852f4d2e03d529309a21d2e7a3ad3474a25441ce8ab3da95211c153928574471a92d033a542359f95e1ccfde5456df1da0b34243eb8bffa58c137f53741d41e2219076b8555c70a21d7e3036dcf295ef87d73414c4250efcc888d4a21904cf80def98f53e40cdcf1c01d17cdebc8f2d03d328274680de7933d0ea7e05a70c05270cdf35f226da7c7d73fa683940c6873aa848f77520d9a4cca6be833535c08727240397d354fe3b3a4cf9f3615fc2ad213368f3143026d18a619aff733022ecfb1ada9dec624e3e6913fff687eeadcf9bee2159b0cbc20d282cfe73b67d9be5934e4093e9b6a88ebc69caf9890bc66985046386ae4de81c9ae769241b72201cbfbc34daa4410d24c88d164c862f0cadca58ef543f05137c766b24707fcf3a0e35013724757748f283ab135a475721c9fe1439b662ede1a1ebdc0aa1218de14e3f78d9906c294142c024c94033f978e71c2dd3e6bc58b0f13226daf731e6da02adb40b310aad19ed9afecb96bb441cc3f2f2a9645487b0202baeedff726c62a80b6eb02c33399a7433a591c477e43d5ce53f5963852afbf681bf7ce457c329fc748082ce1032de0f380e9b518a06f169b4d3d7eebb0a09d1d7a5197f411dc3d3b9fcb6e6cddc31e787f4d92f7817697e9724944bf8e9a995a7770bf4e9ee47959e9f472a591782134443993b770bf50c294287b41d7e0e8b271a8656621759e4e9bb2a062b703874c35092f66fc11bd97610eb009a65bf86579158cd289081fe2c65923de7f7bbfe8d94a289b99370e71378c7d1320ae45cf88593b1e1ea47daf1dd0443b3d986d2cfadfa919f49b8cb00a7b0a78c0ff3a1ed8eb0c3a4b28d813911ffb4240eecb9934f555432042d2427f1d1f3dd48576bfe5c525d1b308b3755c3254ea78a274502f8abd244df5d3cb34092efe5f233f2356b9ac9054b035f75ecaadfb94c341dce65c3e9b480222179e8c2cf106021ab98c658bce1d7feff594cc9152f89da26d2a822f83cd14bc7a6e123fd66ab5565b87172ded6851d908a76598771d2652708a1e04434b075813ee797bc4a32bb4fb902c7cf7037921d302cda5a091cba48d7200de8b524c47a1851ae3f365241c2d65e50052691ad16f350add862e8a429995787e0bbd65f1ded4dbf4309a905e32a8b07590754790435530cb087da98a0c6c27f1dbca754cddf5564b2909cf520ba39d11604c0657887348154e99a33bc2e04db36f2b06057da28653eb9378b6224b8bfd4246c1363265e16466b253bda1711b699b43cfa8a4b8e79883c882b12220c99cd60262e9db58cd0fe182635f417ffabcec37e321f8c48d36738693d6643a85cf4d08e82cfd68419cd7d294dbcaa645c1400fe9af1f102b11e9ddfa906d4c0a794649e795735560e57370020880a4935eac313e103cfe4dadeb16dc9e6e7858637085eacea02c0b5a7ef2842f45d545451d562a147f1071b966512ed91edf1a04f0579f87e76cf377c1b6839c8b7af8dc91d8f10453a879ba6c10c7e4ba0a54b71ce026cfdbd3577185a8cbd4a27c4c67e65fd60a246bd082a2f9566bfba4c18e134168c3d88095c9023c910b9704c2f41d71f99db8873341cbaa9218a4d87d104c674af8cbd6c654d36753518f6c7417868945327dcee2f49514f823360aac39884fc17eb6850d12d61c25afbc01c9e391619f12e4465345d0d0cc72383c7c24f8050ff6b308bfcf7762422d1b698fd8ef9fdb3aac1a878f616d4954c18fcc178458c35efb4175059a8c425acfe8092eb74c1da2d97c745f3496bf355f4a5123b35c67356ef7ac4932ae68a974baa6f3ab72a7f25d2c490c60710d4dbbab6113528d461fa93bb1d4a1f4039c03a0fe9dc2050419f609acd9e2771cef13a298e644e3a209bbb940f0d78273386ed80ea80214384aae454f2c14b15db764dee9336b6f71a91cf21181146e9dd3ee0c834ce06f990a58e374893e2648be618c15256d385358c2c354b97055ed2bbe1d4678dda25919cd97daf6ff73c5860a3fe2149cde198897ae99fb723e9f048f5dfc78040d8c9f641cc0262ca57e215349233a3f97b917863c6ba1ef741c8f6275efeb5ffe0a8d99496cab62e01864789766d21fb0d60d909d7efe41c51afad5dce9676b53f17817e2da08ce1d4d747b8984df311a25e90ba67c65e1a7f5f0b549f73d5b968e6009fc2e2fcfc674dcd40a89f3fc83afa56aaec910df055cc7e3f17cb1234c2c553fd45d9ba2ac9460d80e1a44e7b9aa776f56ef1049f47fad83b70135178303df07f9672c07a420e1a0b73b8f3decd2d866b9a", 0x1000}, {&(0x7f0000009a80)="8e0938cba1406999583f0c99ebb77e24337acb2f81173a48fe780774c6b364fb1c2d4396a68a6fe6e3ca7014c7db0da383aa73612d45359047234ed151960afbb48680246a7c86462e84df468213ce4c8aa9ab950ec0fc96cc1552009d5c252bdb11536164d40ac2925719ec97e275c719cc157df962c429af6d6546fae4012b641a7d0ecbefd6b64f343cc8392140349e850f5820661a73cc2a7fd1505b024f3ccf986457d2630c03d1a3f5eec4d46ae2a2e2d317eef426b9d4178c9bba58201f3803663d36983c7ce4bbfe23e3a7e185a1e47b018f109f6ab2796b4d9e827f4f75458d13cd180f55c7", 0xea}], 0x5, &(0x7f0000009c00)=[@assoc={0x18, 0x117, 0x4, 0x10001}, @iv={0x60, 0x117, 0x2, 0x49, "17eb872d6b43299da704da5ac57aae6f1d5ef3004bfb6104f1bf69c3efdcd6683dfa53d3c7b635d6be5df3b5db195e388b899dd8a24265dbd5c90e676c240ad9aa077e860423d55435"}, @op={0x18, 0x117, 0x3, 0x1}], 0x90}], 0xa, 0x4) 06:14:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x2, 0x100010) tkill(r0, 0x18) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7707, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0x1e, r0, 0x100000, &(0x7f0000000080)="8b192a3b9678c1545b24b4f4165ed386385b") ptrace$cont(0x9, r0, 0x0, 0x0) [ 1075.578879] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=537 sclass=netlink_route_socket pig=3295 comm=syz-executor.2 06:14:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB=':!'], 0x2) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x80, 0x0) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000080)={{0x2, 0x4e22, @multicast1}, {0x306, @dev={[], 0x1b}}, 0x10, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x23}}, 'veth0_to_bridge\x00'}) sendfile(r0, r0, 0x0, 0x8080fffffffe) 06:14:25 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='attr/fscreate\x00') r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) fgetxattr(r2, &(0x7f0000000100)=@random={'osx.', 'wlan1,selinuxuserself.em1\x00'}, &(0x7f0000000140)=""/31, 0x1f) getsockopt$bt_BT_SECURITY(r1, 0x6, 0x3, &(0x7f00000000c0), 0x2) 06:14:25 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r3, &(0x7f0000000140)={0x7}, 0x23d) r4 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x4, 0x80) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e23, @rand_addr=0x9}, {0x2, 0x4e21, @empty}, {0x2, 0x4e23, @multicast2}, 0x100, 0x0, 0x0, 0x0, 0x101, 0x0, 0x54, 0x80, 0x6}) ftruncate(r3, 0x208200) fcntl$setstatus(r1, 0x4, 0x3fffe) io_setup(0x2, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000040)='./bus\x00', 0x8001541c02, 0x40) ftruncate(r6, 0x2007fff) fsync(r3) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000440)=0x8048) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]) 06:14:25 executing program 2 (fault-call:8 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef6"], 0xb) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) 06:14:25 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="b7"], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="26686e96d2352c5aeac25d9c99409a5c", 0x10) sendfile(r1, r1, 0x0, 0x8080fffffffe) 06:14:25 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x6, 0x3, &(0x7f00000000c0), 0x200000c0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000002640)={&(0x7f00000000c0), 0xc, &(0x7f0000002600)={&(0x7f0000000440)=ANY=[@ANYBLOB="f001000013abfa32326ff88b45492141076ec719a43e9b630071ef38bc3fc5240713a6fbdd804a44804bad25a2a5aa4d0de1ed723602792637483a81a4374922dfb8be375203213e851f4433035b0b7a8205fe922ddf7e37047ed3d382cfea9eea3d779dc8", @ANYRES16=r3, @ANYBLOB="000327bd7000fbdbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="a000020040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000005c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000002c000400000000ff06000000ffff00010500000002006908f7ffffff2900050616090000964f25010004000008000100", @ANYRES32=r6, @ANYBLOB="2c01020040000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f61646361737400000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004002f0c00003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000000000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f616463617374000000"], 0x1f0}, 0x1, 0x0, 0x0, 0x7fd0d26ac7371d37}, 0x24010001) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000280)=0xc) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in=@empty, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4e23, 0x9, 0x4e23, 0xc7, 0xa, 0x80, 0x100, 0x6c, r5, r7}, {0x7, 0x4, 0x7, 0x8, 0xffffffffffff27b0, 0x0, 0x5b32db8a}, {0x1, 0x400, 0x6, 0x7d}, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1}, {{@in=@local, 0x4d4, 0xff}, 0x2, @in6=@dev={0xfe, 0x80, [], 0x16}, 0x3504, 0x4, 0x3dc862956a42acb5, 0x1a, 0x3, 0x0, 0x61e9}}, 0xe8) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f65189cb63a7724bdef64346ff"], 0x11) r8 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r8, r8, &(0x7f0000000000), 0x8080fffffffe) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) recvmmsg(r8, &(0x7f0000000180), 0x0, 0x40, &(0x7f0000000240)={r9, r10+30000000}) r11 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r11, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r11, r11, &(0x7f0000000000), 0x8080fffffffe) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r11, 0x10e, 0x1, &(0x7f00000002c0)=0x10, 0x4) r12 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TUNSETLINK(r12, 0x400454cd, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f0000000080)={{r13, r14+10000000}, {r15, r16+10000000}}, &(0x7f0000000100)) [ 1076.264279] FAULT_INJECTION: forcing a failure. [ 1076.264279] name failslab, interval 1, probability 0, space 0, times 0 [ 1076.279043] CPU: 1 PID: 3345 Comm: syz-executor.2 Not tainted 4.14.149 #0 [ 1076.286185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1076.295532] Call Trace: [ 1076.298133] dump_stack+0x138/0x197 [ 1076.301768] should_fail.cold+0x10f/0x159 [ 1076.305936] should_failslab+0xdb/0x130 [ 1076.309909] kmem_cache_alloc_trace+0x2e9/0x790 [ 1076.314596] alloc_pipe_info+0xb0/0x380 [ 1076.318578] splice_direct_to_actor+0x5d2/0x7b0 [ 1076.323264] ? avc_policy_seqno+0x9/0x20 [ 1076.328280] ? selinux_file_permission+0x85/0x480 [ 1076.333119] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1076.337956] ? security_file_permission+0x89/0x1f0 [ 1076.342891] ? do_splice_to+0x170/0x170 [ 1076.346853] ? rw_verify_area+0xea/0x2b0 [ 1076.350902] do_splice_direct+0x18d/0x230 [ 1076.355061] ? splice_direct_to_actor+0x7b0/0x7b0 [ 1076.359893] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 1076.364661] ? __sb_start_write+0x153/0x2f0 [ 1076.368989] do_sendfile+0x4db/0xbd0 [ 1076.372709] ? do_compat_pwritev64+0x140/0x140 [ 1076.377320] ? kasan_check_write+0x14/0x20 [ 1076.381546] ? _copy_from_user+0x99/0x110 [ 1076.385691] SyS_sendfile64+0x9d/0x110 [ 1076.389582] ? SyS_sendfile+0x130/0x130 [ 1076.393559] ? do_syscall_64+0x53/0x640 [ 1076.397530] ? SyS_sendfile+0x130/0x130 [ 1076.401495] do_syscall_64+0x1e8/0x640 [ 1076.405456] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1076.410333] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1076.415523] RIP: 0033:0x459a59 [ 1076.419658] RSP: 002b:00007fd87f51ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1076.427372] RAX: ffffffffffffffda RBX: 00007fd87f51ac90 RCX: 0000000000459a59 [ 1076.434818] RDX: 0000000020000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1076.444100] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1076.451365] R10: 00008080fffffffe R11: 0000000000000246 R12: 00007fd87f51b6d4 [ 1076.458627] R13: 00000000004c748b R14: 00000000004dd038 R15: 0000000000000005 [ 1076.522341] audit: type=1804 audit(1571033666.202:356): pid=3313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir017720076/syzkaller.4NQquk/976/bus" dev="sda1" ino=16682 res=1 [ 1076.564551] audit: type=1804 audit(1571033666.242:357): pid=3313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir017720076/syzkaller.4NQquk/976/bus" dev="sda1" ino=16682 res=1 [ 1076.597438] audit: type=1804 audit(1571033666.242:358): pid=3359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir017720076/syzkaller.4NQquk/976/bus" dev="sda1" ino=16682 res=1 06:14:26 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a2128eef663a7724bdef64346ff14"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) r1 = open(0x0, 0x141042, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=0x0) ftruncate(r2, 0x4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/raw\x00') perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0xff, 0x9, 0x53, 0x3, 0x0, 0xabf4c97, 0x100, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7ff, 0x2, @perf_bp={&(0x7f0000000040), 0xaff364ec8433a4bc}, 0x2cc27, 0x7fff, 0x9, 0x9, 0x8, 0x1, 0x1ff}, r4, 0x0, r5, 0x6b6f83cb8eb67e23) 06:14:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f3f8b35a1f0d11e5be7dadcd90d1a0b226d6f5b36adffded0f8d49482c37"], 0x2) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) 06:14:26 executing program 2 (fault-call:8 fault-nth:1): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef6"], 0xb) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) 06:14:26 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000140)={0x7}, 0x23d) ftruncate(r2, 0x208200) fcntl$setstatus(r1, 0x4, 0x3fffe) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x30080, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000001c0)={0x4, 0x4, 0x5, 0x9}, 0x6) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) fadvise64(r4, 0x0, 0x40000000, 0x0) io_setup(0x2, &(0x7f00000004c0)=0x0) io_submit(r5, 0x200000000000011b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000, 0x0, 0x0, 0x1}]) r6 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) umount2(&(0x7f0000000240)='./bus\x00', 0x2f26bc089b65435c) ftruncate(r6, 0x2007fff) openat$cgroup_ro(r2, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) fsync(r2) [ 1076.757323] FAULT_INJECTION: forcing a failure. [ 1076.757323] name failslab, interval 1, probability 0, space 0, times 0 [ 1076.773817] CPU: 0 PID: 3376 Comm: syz-executor.2 Not tainted 4.14.149 #0 [ 1076.780782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1076.790244] Call Trace: [ 1076.792838] dump_stack+0x138/0x197 [ 1076.796468] should_fail.cold+0x10f/0x159 [ 1076.800620] should_failslab+0xdb/0x130 [ 1076.804603] __kmalloc+0x2f0/0x7a0 [ 1076.808131] ? kmem_cache_alloc_trace+0x623/0x790 [ 1076.812978] ? alloc_pipe_info+0x15c/0x380 [ 1076.817208] alloc_pipe_info+0x15c/0x380 [ 1076.821267] splice_direct_to_actor+0x5d2/0x7b0 [ 1076.825940] ? avc_policy_seqno+0x9/0x20 [ 1076.829997] ? selinux_file_permission+0x85/0x480 [ 1076.834837] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1076.839785] ? security_file_permission+0x89/0x1f0 [ 1076.844701] ? do_splice_to+0x170/0x170 [ 1076.848674] ? rw_verify_area+0xea/0x2b0 [ 1076.852731] do_splice_direct+0x18d/0x230 [ 1076.856865] ? splice_direct_to_actor+0x7b0/0x7b0 [ 1076.861808] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 1076.866560] ? __sb_start_write+0x153/0x2f0 [ 1076.870900] do_sendfile+0x4db/0xbd0 [ 1076.874612] ? do_compat_pwritev64+0x140/0x140 [ 1076.879188] ? kasan_check_write+0x14/0x20 [ 1076.883417] ? _copy_from_user+0x99/0x110 [ 1076.887564] SyS_sendfile64+0x9d/0x110 [ 1076.891445] ? SyS_sendfile+0x130/0x130 [ 1076.895404] ? do_syscall_64+0x53/0x640 [ 1076.899366] ? SyS_sendfile+0x130/0x130 [ 1076.903337] do_syscall_64+0x1e8/0x640 [ 1076.907223] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1076.912076] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1076.917274] RIP: 0033:0x459a59 [ 1076.920453] RSP: 002b:00007fd87f51ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1076.928614] RAX: ffffffffffffffda RBX: 00007fd87f51ac90 RCX: 0000000000459a59 [ 1076.935878] RDX: 0000000020000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1076.943143] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1076.950405] R10: 00008080fffffffe R11: 0000000000000246 R12: 00007fd87f51b6d4 [ 1076.957668] R13: 00000000004c748b R14: 00000000004dd038 R15: 0000000000000005 06:14:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a06"], 0x2) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) ioctl$NBD_DISCONNECT(r2, 0xab08) sendfile(r0, r0, 0x0, 0x8080fffffffe) 06:14:26 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14"], 0xf) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:14:26 executing program 2 (fault-call:8 fault-nth:2): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef6"], 0xb) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) 06:14:26 executing program 5: r0 = syz_open_dev$radio(0x0, 0x1, 0x2) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000b00)=ANY=[@ANYBLOB="b7"], 0x1) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) sendfile(r2, r2, 0x0, 0x8080fffffffe) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000200)={0x9, {{0xa, 0x4e24, 0x13, @loopback, 0xfffffffd}}, 0x0, 0x4, [{{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xd0db}}, {{0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, [], 0xb}, 0xea31}}, {{0xa, 0x4e22, 0x1, @empty, 0x8}}, {{0xa, 0x4e24, 0x5, @local, 0x4}}]}, 0x290) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) setsockopt(r4, 0x8, 0x3f, &(0x7f0000000040)="5024d63e9967786f611a0bbfd636d1cf29d81ba3429ae7535d2abc8d6affc7e982029c587cd53f5688d46629752ae80f34f0e6caa1506372ac32942d70d98fad2439289e744ef44c4db1d23c816dd29683ce06146e937b20482483e4b91ba7909f54d9aa9c08d762844d0bbe6ffca59ceebfed67ca94cb789e88a889a323f761", 0x80) 06:14:26 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x80, 0x40000) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000080)={0xfffffff7, 0x8, 0x4, 0xfffffe00, 0x1}) getsockopt$bt_BT_SECURITY(r0, 0x6, 0x3, &(0x7f0000000000), 0x2) [ 1077.213520] FAULT_INJECTION: forcing a failure. [ 1077.213520] name failslab, interval 1, probability 0, space 0, times 0 [ 1077.225219] CPU: 1 PID: 3404 Comm: syz-executor.2 Not tainted 4.14.149 #0 [ 1077.232151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1077.241502] Call Trace: [ 1077.244099] dump_stack+0x138/0x197 [ 1077.247745] should_fail.cold+0x10f/0x159 [ 1077.251906] should_failslab+0xdb/0x130 [ 1077.255891] __kmalloc+0x2f0/0x7a0 [ 1077.259441] ? filemap_range_has_page+0x1e0/0x1e0 [ 1077.264290] ? iter_file_splice_write+0x141/0xad0 [ 1077.269238] iter_file_splice_write+0x141/0xad0 [ 1077.273923] ? generic_file_splice_read+0x3e7/0x600 [ 1077.278942] ? fsnotify+0x11e0/0x11e0 [ 1077.282743] ? default_file_splice_read+0x7b0/0x7b0 [ 1077.287759] ? add_to_pipe+0x340/0x340 [ 1077.291690] ? rw_verify_area+0xea/0x2b0 [ 1077.295754] ? default_file_splice_read+0x7b0/0x7b0 [ 1077.300777] direct_splice_actor+0x123/0x190 [ 1077.305197] splice_direct_to_actor+0x29e/0x7b0 [ 1077.309863] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1077.314709] ? do_splice_to+0x170/0x170 [ 1077.318674] ? rw_verify_area+0xea/0x2b0 [ 1077.322722] do_splice_direct+0x18d/0x230 [ 1077.326943] ? splice_direct_to_actor+0x7b0/0x7b0 [ 1077.331775] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 1077.336527] ? __sb_start_write+0x153/0x2f0 [ 1077.340857] do_sendfile+0x4db/0xbd0 [ 1077.344586] ? do_compat_pwritev64+0x140/0x140 [ 1077.349160] ? kasan_check_write+0x14/0x20 [ 1077.353381] ? _copy_from_user+0x99/0x110 [ 1077.357524] SyS_sendfile64+0x9d/0x110 [ 1077.361414] ? SyS_sendfile+0x130/0x130 [ 1077.365396] ? do_syscall_64+0x53/0x640 [ 1077.369370] ? SyS_sendfile+0x130/0x130 [ 1077.373337] do_syscall_64+0x1e8/0x640 [ 1077.377222] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1077.382066] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1077.387249] RIP: 0033:0x459a59 [ 1077.390431] RSP: 002b:00007fd87f51ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1077.398139] RAX: ffffffffffffffda RBX: 00007fd87f51ac90 RCX: 0000000000459a59 [ 1077.406352] RDX: 0000000020000000 RSI: 0000000000000004 RDI: 0000000000000004 06:14:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="3a7f9e03349fab1d636d816486266818d5a5eca4daff19cc2666348f3e3cfbddb792a99eeba82731be47da84fb43cc8953ded3bb9874b77f569658450cb8796a3d1f2c5d0eb82811194d2eaa67f2ec94db5b3baf72362d178b4607caf8f3fc46619685b5abf480a4936d0d918a85aecdda745e"], 0x2) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) 06:14:27 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x3, 0x10e, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 06:14:27 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x6, 0x3, &(0x7f00000000c0), 0x200000c0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x400000, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000040)=""/113) [ 1077.413612] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1077.421397] R10: 00008080fffffffe R11: 0000000000000246 R12: 00007fd87f51b6d4 [ 1077.428684] R13: 00000000004c748b R14: 00000000004dd038 R15: 0000000000000005 06:14:27 executing program 2 (fault-call:8 fault-nth:3): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef6"], 0xb) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) 06:14:27 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a16c6aef663a7724bdef64346ff14b7b0"], 0x11) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) recvfrom$rxrpc(r1, &(0x7f0000000100)=""/252, 0xfc, 0x20, 0x0, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x6, 0x3, &(0x7f00000000c0), 0x200000c0) 06:14:27 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff1426405052c68b66bad9f3daf665aad1574bb4455bceea30c288651248923c8956c0e9a8d4442cd694"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 06:14:27 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000140)={0x5}, 0x14f) ftruncate(r2, 0x208200) fcntl$setstatus(r1, 0x4, 0x3fffe) io_setup(0x2, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r4, 0x2007fff) fsync(r2) 06:14:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="6580aff75ec48b5f8806d0712651c2a9871b051258df6dbf1928d3ef7d1c446a13e9758d85732471998bc35612a565b2fae88e5da9221f9278f5031642a5eedd89fa9839a5c2bc9a8a98bdfea3a5da2d57348e39d829012b49913e2ed15db1d9b3065e8bb9c6ab34e59f3d643da05c735e9dff527ec0fc05e88eca2dc8c3f81bf279937a34d35ece26a880000000009fd7e93cf6"], 0x2) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) [ 1077.633274] FAULT_INJECTION: forcing a failure. [ 1077.633274] name failslab, interval 1, probability 0, space 0, times 0 [ 1077.677924] CPU: 1 PID: 3434 Comm: syz-executor.2 Not tainted 4.14.149 #0 [ 1077.684894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1077.694250] Call Trace: [ 1077.696852] dump_stack+0x138/0x197 [ 1077.700499] should_fail.cold+0x10f/0x159 [ 1077.704664] should_failslab+0xdb/0x130 [ 1077.708651] kmem_cache_alloc+0x2d7/0x780 [ 1077.712804] ? check_preemption_disabled+0x3c/0x250 [ 1077.717837] ext4_init_io_end+0x27/0x100 [ 1077.721904] ext4_writepages+0x1037/0x2fd0 [ 1077.726158] ? trace_hardirqs_on+0x10/0x10 [ 1077.730401] ? save_trace+0x290/0x290 [ 1077.734213] ? ext4_mark_inode_dirty+0x860/0x860 [ 1077.738970] ? __mark_inode_dirty+0x2b2/0x1040 [ 1077.743567] ? save_trace+0x290/0x290 [ 1077.747372] ? trace_hardirqs_on+0x10/0x10 [ 1077.751616] ? wbc_attach_and_unlock_inode+0x4c0/0x830 [ 1077.756891] ? find_held_lock+0x35/0x130 [ 1077.761045] ? ext4_mark_inode_dirty+0x860/0x860 [ 1077.765805] do_writepages+0xd0/0x250 [ 1077.769597] ? do_writepages+0xd0/0x250 [ 1077.773567] ? page_writeback_cpu_online+0x20/0x20 [ 1077.778505] ? _raw_spin_unlock+0x2d/0x50 [ 1077.782664] ? wbc_attach_and_unlock_inode+0x559/0x830 [ 1077.787940] __filemap_fdatawrite_range+0x23b/0x310 [ 1077.792951] ? replace_page_cache_page+0x630/0x630 [ 1077.797903] file_write_and_wait_range+0x8d/0xe0 [ 1077.802694] __generic_file_fsync+0x79/0x1a0 [ 1077.807119] ext4_sync_file+0x755/0x12d0 [ 1077.811190] ? ext4_getfsmap+0x880/0x880 [ 1077.815248] vfs_fsync_range+0x10e/0x260 [ 1077.819300] ext4_file_write_iter+0x68a/0xe90 [ 1077.823782] ? splice_direct_to_actor+0x29e/0x7b0 [ 1077.828626] ? ext4_file_mmap+0x2c0/0x2c0 [ 1077.832777] ? __might_sleep+0x93/0xb0 [ 1077.836671] do_iter_readv_writev+0x418/0x670 [ 1077.841176] ? vfs_dedupe_file_range+0x8f0/0x8f0 [ 1077.845957] ? rw_verify_area+0xea/0x2b0 [ 1077.850012] do_iter_write+0x154/0x540 [ 1077.853893] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1077.859342] ? __kmalloc+0x376/0x7a0 [ 1077.863064] vfs_iter_write+0x77/0xb0 [ 1077.866870] iter_file_splice_write+0x572/0xad0 [ 1077.871559] ? default_file_splice_read+0x7b0/0x7b0 06:14:27 executing program 4: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) write$P9_RLERROR(r0, &(0x7f00000000c0)={0x9, 0x7, 0x1}, 0x9) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f000001d000)={0x2, 0xeb, 0x200000000d8, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000300)=ANY=[@ANYBLOB=':!'], 0x2) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) sendfile(r2, r2, 0x0, 0x8080fffffffe) [ 1077.876594] ? rw_verify_area+0xea/0x2b0 [ 1077.880657] ? default_file_splice_read+0x7b0/0x7b0 [ 1077.885689] direct_splice_actor+0x123/0x190 [ 1077.890097] splice_direct_to_actor+0x29e/0x7b0 [ 1077.890114] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1077.890128] ? do_splice_to+0x170/0x170 [ 1077.890139] ? rw_verify_area+0xea/0x2b0 [ 1077.890151] do_splice_direct+0x18d/0x230 [ 1077.890163] ? splice_direct_to_actor+0x7b0/0x7b0 [ 1077.890180] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 1077.890189] ? __sb_start_write+0x153/0x2f0 [ 1077.925718] do_sendfile+0x4db/0xbd0 [ 1077.929451] ? do_compat_pwritev64+0x140/0x140 [ 1077.934044] ? kasan_check_write+0x14/0x20 [ 1077.938285] ? _copy_from_user+0x99/0x110 [ 1077.942441] SyS_sendfile64+0x9d/0x110 [ 1077.946329] ? SyS_sendfile+0x130/0x130 [ 1077.950306] ? do_syscall_64+0x53/0x640 [ 1077.954287] ? SyS_sendfile+0x130/0x130 [ 1077.958269] do_syscall_64+0x1e8/0x640 [ 1077.962160] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1077.967016] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1077.972204] RIP: 0033:0x459a59 06:14:27 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'/15], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 1077.975394] RSP: 002b:00007fd87f51ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1077.983114] RAX: ffffffffffffffda RBX: 00007fd87f51ac90 RCX: 0000000000459a59 [ 1077.990383] RDX: 0000000020000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1077.997646] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1077.997654] R10: 00008080fffffffe R11: 0000000000000246 R12: 00007fd87f51b6d4 [ 1077.997659] R13: 00000000004c748b R14: 00000000004dd038 R15: 0000000000000005 06:14:27 executing program 1: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$CAPI_GET_FLAGS(r0, 0x80044323, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x6, 0x3, &(0x7f00000000c0), 0x200000c0) 06:14:27 executing program 2 (fault-call:8 fault-nth:4): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef6"], 0xb) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) 06:14:27 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="b7"], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000040)={0x158, 0x0, 0x5, [{0x4, 0x9, 0x2f, 0x81, ':+nodev[eth1#\fuservmnet0[^(lo\'self-cpusetvmnet1'}, {0x2, 0x4, 0xb, 0x0, 'cgroupproc\''}, {0x3, 0x1000, 0x20, 0x1, '$vboxnet1vmnet1%posix_acl_access'}, {0x2, 0x3, 0x1d, 0xfffff001, 'wlan0nodev%\\vboxnet1wlan0user'}, {0x6, 0x566e1bca, 0xb, 0x7, 'keyringppp1'}, {0x0, 0xa6d8, 0x5, 0x100, 'nodev'}, {0x5, 0x0, 0x2, 0xffff, ')-'}]}, 0x158) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) 06:14:27 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000100)='\x00') r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000140)={0x7}, 0x23d) ftruncate(r2, 0x208200) fcntl$setstatus(r1, 0x4, 0x3fffe) io_setup(0x2, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r4, 0x2007fff) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) dup(r5) fsync(r2) 06:14:27 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000100)={0x10000, 0x7ff, 0x6d7, 0x6, 0xa62, 0x7}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r6, r6, &(0x7f0000000000), 0x8080fffffffe) r7 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) r8 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r8, r8, &(0x7f0000000000), 0x8080fffffffe) r9 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r9, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r9, r9, &(0x7f0000000000), 0x8080fffffffe) fcntl$lock(r9, 0x7, &(0x7f0000027000)={0x1, 0x4, 0x0, 0x6}) io_setup(0xc0, &(0x7f0000000040)=0x0) io_submit(r10, 0x1, &(0x7f00000005c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r7, 0x0, 0x0, 0x3}]) r11 = creat(&(0x7f0000000000)='./file0/bus\x00', 0x0) dup2(r11, r7) r12 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, r12, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000006c0)=[@in={0x2, 0x0, @loopback}], 0x10) sendto$inet(r12, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r11, 0x84, 0x19, &(0x7f0000000240)={r13, 0x9}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000580)={r13, 0x6}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000640)={r14, 0x2c, &(0x7f0000000600)=[@in6={0xa, 0x4e24, 0x4, @loopback, 0x10001}, @in={0x2, 0x4e21, @empty}]}, &(0x7f0000000680)=0x10) write$P9_RREADLINK(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) sendmsg$unix(r4, &(0x7f0000000440)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{}, {&(0x7f0000000240)="b7b1e7e0a62df394970d9c77eb78f6912bc57114012cbb1da4790bc0be8990bc45257ecd48c0bc87391a8508acf49cea1aee61fd01c74766d48b3deace17a78c50fc5f979669920ce5059fd445cbacc4f1b59b36c42179e4d21196528bd4c985e58254679360629d7e31536ac2611d6a8d35e982d31afcb1fe927a14c6c9ea21d09ab375ef0cf5f61e43d41f3d512d3e3b8a18982d99c20797edb1dd4605d5d37ce20d343a9ec1ec74e7cceaf0cd05aef13b7b50bc3707c7abed67b70f4e860ec3bf614b1bb3520c94b814b65419fa545b554cecd4ee2f57595056323ca1eeaaf26d31422660dd65e4b7179a0b", 0xed}, {&(0x7f0000000340)="cd14dc99a488a74fe670fa19cb022a4bb391c2125bfc745836f045a6b00a54aafd3fd53c5b480840e18969a7dfa13bd80975ca9bb6cd8b9da302f001d4bbd7161a95907b3ae358882e3bbee87e699521526040b3380be138856f8c63e8c5392829ceef92088291bfcf55bb6b940805a45c7745f3112370578d1b40d602f3738b86222dfa326b91181447d7e7f4c4e1839482", 0x92}], 0x3, 0x0, 0x0, 0x40001}, 0x805) setuid(r3) r15 = getegid() r16 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r16, 0x1, 0x1a, 0x0, 0x0) sendmsg(r16, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="240000005a0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) r17 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r17) r18 = dup(0xffffffffffffffff) r19 = geteuid() write$P9_RGETATTR(r18, &(0x7f0000000480)={0xa0, 0x19, 0x2, {0x10, {0x20, 0x3, 0x8}, 0x0, r19, r15, 0x9309, 0x6, 0x9, 0x24, 0x5, 0x6f, 0x3ff, 0xf97d, 0x5, 0x1, 0xc474, 0xfffffffffffffffc, 0x2, 0x8, 0x7}}, 0xa0) fstat(r2, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r21) fstat(r21, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000840)=[0xffffffffffffffff, r20, r22, r15]) r23 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x4) fchdir(r23) ioctl$sock_netrom_SIOCADDRT(r23, 0x890b, &(0x7f0000000080)={0x1, @default, @rose={'rose', 0x0}, 0x20, 'syz0\x00', @bcast, 0xffffffff, 0x5, [@default, @default, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) fchown(r0, r3, r15) [ 1078.266646] FAULT_INJECTION: forcing a failure. [ 1078.266646] name failslab, interval 1, probability 0, space 0, times 0 [ 1078.285258] CPU: 1 PID: 3475 Comm: syz-executor.2 Not tainted 4.14.149 #0 [ 1078.292223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1078.301582] Call Trace: [ 1078.304279] dump_stack+0x138/0x197 [ 1078.307925] should_fail.cold+0x10f/0x159 [ 1078.312084] ? __lock_is_held+0xb6/0x140 [ 1078.316144] ? mempool_free+0x1d0/0x1d0 [ 1078.321022] should_failslab+0xdb/0x130 [ 1078.324999] kmem_cache_alloc+0x47/0x780 [ 1078.329134] ? mempool_free+0x1d0/0x1d0 [ 1078.333104] mempool_alloc_slab+0x47/0x60 [ 1078.337270] mempool_alloc+0x138/0x300 [ 1078.341582] ? remove_element.isra.0+0x1b0/0x1b0 [ 1078.346395] ? lock_downgrade+0x740/0x740 [ 1078.350533] bio_alloc_bioset+0x368/0x680 [ 1078.354684] ? __unlock_page_memcg+0x70/0x100 [ 1078.359177] ? bvec_alloc+0x2e0/0x2e0 [ 1078.362980] ext4_bio_write_page+0x77c/0xe63 [ 1078.367388] mpage_submit_page+0x138/0x240 [ 1078.371619] mpage_process_page_bufs+0x418/0x510 [ 1078.376365] mpage_prepare_extent_to_map+0x489/0xb20 [ 1078.381562] ? __check_block_validity.constprop.0+0x200/0x200 [ 1078.387436] ? ext4_init_io_end+0x27/0x100 [ 1078.391669] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1078.397137] ? rcu_read_lock_sched_held+0x110/0x130 [ 1078.402166] ? kmem_cache_alloc+0x611/0x780 [ 1078.406487] ? check_preemption_disabled+0x3c/0x250 [ 1078.411508] ext4_writepages+0x105f/0x2fd0 [ 1078.415792] ? trace_hardirqs_on+0x10/0x10 [ 1078.420042] ? ext4_mark_inode_dirty+0x860/0x860 [ 1078.424806] ? __mark_inode_dirty+0x2b2/0x1040 [ 1078.429402] ? save_trace+0x290/0x290 [ 1078.433209] ? wbc_attach_and_unlock_inode+0x4c0/0x830 [ 1078.438489] ? find_held_lock+0x35/0x130 [ 1078.442548] ? ext4_mark_inode_dirty+0x860/0x860 [ 1078.447301] do_writepages+0xd0/0x250 [ 1078.451105] ? do_writepages+0xd0/0x250 [ 1078.455109] ? page_writeback_cpu_online+0x20/0x20 [ 1078.460050] ? _raw_spin_unlock+0x2d/0x50 [ 1078.464200] ? wbc_attach_and_unlock_inode+0x559/0x830 [ 1078.469484] __filemap_fdatawrite_range+0x23b/0x310 [ 1078.474497] ? replace_page_cache_page+0x630/0x630 [ 1078.479680] file_write_and_wait_range+0x8d/0xe0 [ 1078.484428] __generic_file_fsync+0x79/0x1a0 [ 1078.490372] ext4_sync_file+0x755/0x12d0 [ 1078.494441] ? ext4_getfsmap+0x880/0x880 [ 1078.498503] vfs_fsync_range+0x10e/0x260 [ 1078.502566] ext4_file_write_iter+0x68a/0xe90 [ 1078.507047] ? splice_direct_to_actor+0x29e/0x7b0 [ 1078.511888] ? ext4_file_mmap+0x2c0/0x2c0 [ 1078.516063] ? __might_sleep+0x93/0xb0 [ 1078.520080] do_iter_readv_writev+0x418/0x670 [ 1078.524574] ? vfs_dedupe_file_range+0x8f0/0x8f0 [ 1078.529327] ? rw_verify_area+0xea/0x2b0 [ 1078.533375] do_iter_write+0x154/0x540 [ 1078.537263] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1078.542729] ? __kmalloc+0x376/0x7a0 [ 1078.546549] vfs_iter_write+0x77/0xb0 [ 1078.550363] iter_file_splice_write+0x572/0xad0 [ 1078.555042] ? default_file_splice_read+0x7b0/0x7b0 [ 1078.560070] ? rw_verify_area+0xea/0x2b0 [ 1078.564241] ? default_file_splice_read+0x7b0/0x7b0 [ 1078.569275] direct_splice_actor+0x123/0x190 [ 1078.573692] splice_direct_to_actor+0x29e/0x7b0 [ 1078.578506] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1078.583470] ? do_splice_to+0x170/0x170 [ 1078.587454] ? rw_verify_area+0xea/0x2b0 [ 1078.591521] do_splice_direct+0x18d/0x230 [ 1078.595672] ? splice_direct_to_actor+0x7b0/0x7b0 [ 1078.600523] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 1078.605285] ? __sb_start_write+0x153/0x2f0 [ 1078.609713] do_sendfile+0x4db/0xbd0 [ 1078.613445] ? do_compat_pwritev64+0x140/0x140 [ 1078.618029] ? kasan_check_write+0x14/0x20 [ 1078.622275] ? _copy_from_user+0x99/0x110 [ 1078.627573] SyS_sendfile64+0x9d/0x110 [ 1078.631458] ? SyS_sendfile+0x130/0x130 [ 1078.635437] ? do_syscall_64+0x53/0x640 [ 1078.639432] ? SyS_sendfile+0x130/0x130 [ 1078.643405] do_syscall_64+0x1e8/0x640 [ 1078.647307] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1078.652152] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1078.657342] RIP: 0033:0x459a59 [ 1078.660521] RSP: 002b:00007fd87f51ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1078.668237] RAX: ffffffffffffffda RBX: 00007fd87f51ac90 RCX: 0000000000459a59 [ 1078.675507] RDX: 0000000020000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1078.682782] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1078.690054] R10: 00008080fffffffe R11: 0000000000000246 R12: 00007fd87f51b6d4 [ 1078.697324] R13: 00000000004c748b R14: 00000000004dd038 R15: 0000000000000005 06:14:28 executing program 2 (fault-call:8 fault-nth:5): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef6"], 0xb) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) 06:14:28 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000140)={0x7}, 0x23d) ftruncate(r2, 0x208200) fcntl$setstatus(r1, 0x4, 0x3fffe) io_setup(0x2, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r4, 0x2007fff) fsync(r0) [ 1078.826458] FAULT_INJECTION: forcing a failure. [ 1078.826458] name failslab, interval 1, probability 0, space 0, times 0 [ 1078.842174] CPU: 0 PID: 3498 Comm: syz-executor.2 Not tainted 4.14.149 #0 [ 1078.849131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1078.858477] Call Trace: [ 1078.861264] dump_stack+0x138/0x197 [ 1078.864898] should_fail.cold+0x10f/0x159 [ 1078.869041] ? __lock_is_held+0xb6/0x140 [ 1078.873104] ? mempool_free+0x1d0/0x1d0 [ 1078.877079] should_failslab+0xdb/0x130 [ 1078.881062] kmem_cache_alloc+0x47/0x780 [ 1078.885131] ? mempool_free+0x1d0/0x1d0 [ 1078.889103] mempool_alloc_slab+0x47/0x60 [ 1078.893239] mempool_alloc+0x138/0x300 [ 1078.897220] ? mempool_free+0x1d0/0x1d0 [ 1078.901190] ? remove_element.isra.0+0x1b0/0x1b0 [ 1078.905934] ? remove_element.isra.0+0x1b0/0x1b0 [ 1078.910690] bvec_alloc+0xd1/0x2e0 [ 1078.914224] bio_alloc_bioset+0x419/0x680 [ 1078.918362] ? bvec_alloc+0x2e0/0x2e0 [ 1078.922151] ext4_bio_write_page+0x77c/0xe63 [ 1078.926556] mpage_submit_page+0x138/0x240 [ 1078.931748] mpage_process_page_bufs+0x418/0x510 [ 1078.936510] mpage_prepare_extent_to_map+0x489/0xb20 [ 1078.941609] ? __check_block_validity.constprop.0+0x200/0x200 [ 1078.947574] ? ext4_init_io_end+0x27/0x100 [ 1078.951800] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1078.957248] ? rcu_read_lock_sched_held+0x110/0x130 [ 1078.962258] ? kmem_cache_alloc+0x611/0x780 [ 1078.966582] ? check_preemption_disabled+0x3c/0x250 [ 1078.971608] ext4_writepages+0x105f/0x2fd0 [ 1078.975833] ? trace_hardirqs_on+0x10/0x10 [ 1078.980068] ? ext4_mark_inode_dirty+0x860/0x860 [ 1078.984825] ? __mark_inode_dirty+0x2b2/0x1040 [ 1078.989401] ? save_trace+0x290/0x290 [ 1078.993197] ? wbc_attach_and_unlock_inode+0x4c0/0x830 [ 1078.998467] ? find_held_lock+0x35/0x130 [ 1079.002517] ? ext4_mark_inode_dirty+0x860/0x860 [ 1079.007258] do_writepages+0xd0/0x250 [ 1079.011071] ? do_writepages+0xd0/0x250 [ 1079.015058] ? page_writeback_cpu_online+0x20/0x20 [ 1079.019994] ? _raw_spin_unlock+0x2d/0x50 [ 1079.024144] ? wbc_attach_and_unlock_inode+0x559/0x830 [ 1079.029422] __filemap_fdatawrite_range+0x23b/0x310 [ 1079.034426] ? replace_page_cache_page+0x630/0x630 [ 1079.039349] file_write_and_wait_range+0x8d/0xe0 [ 1079.044192] __generic_file_fsync+0x79/0x1a0 [ 1079.048589] ext4_sync_file+0x755/0x12d0 [ 1079.052744] ? ext4_getfsmap+0x880/0x880 [ 1079.056789] vfs_fsync_range+0x10e/0x260 [ 1079.060837] ext4_file_write_iter+0x68a/0xe90 [ 1079.065331] ? splice_direct_to_actor+0x29e/0x7b0 [ 1079.070177] ? ext4_file_mmap+0x2c0/0x2c0 [ 1079.074314] ? __might_sleep+0x93/0xb0 [ 1079.078186] do_iter_readv_writev+0x418/0x670 [ 1079.083774] ? vfs_dedupe_file_range+0x8f0/0x8f0 [ 1079.088517] ? rw_verify_area+0xea/0x2b0 [ 1079.092563] do_iter_write+0x154/0x540 [ 1079.096533] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1079.101968] ? __kmalloc+0x376/0x7a0 [ 1079.105668] vfs_iter_write+0x77/0xb0 [ 1079.109456] iter_file_splice_write+0x572/0xad0 [ 1079.114117] ? default_file_splice_read+0x7b0/0x7b0 [ 1079.119125] ? rw_verify_area+0xea/0x2b0 [ 1079.123182] ? default_file_splice_read+0x7b0/0x7b0 [ 1079.128181] direct_splice_actor+0x123/0x190 [ 1079.132588] splice_direct_to_actor+0x29e/0x7b0 [ 1079.137243] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1079.142070] ? do_splice_to+0x170/0x170 [ 1079.146026] ? rw_verify_area+0xea/0x2b0 [ 1079.150073] do_splice_direct+0x18d/0x230 [ 1079.156200] ? splice_direct_to_actor+0x7b0/0x7b0 [ 1079.161032] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 1079.165778] ? __sb_start_write+0x153/0x2f0 [ 1079.170084] do_sendfile+0x4db/0xbd0 [ 1079.173802] ? do_compat_pwritev64+0x140/0x140 [ 1079.178367] ? kasan_check_write+0x14/0x20 [ 1079.182601] ? _copy_from_user+0x99/0x110 [ 1079.186732] SyS_sendfile64+0x9d/0x110 [ 1079.190616] ? SyS_sendfile+0x130/0x130 [ 1079.194573] ? do_syscall_64+0x53/0x640 [ 1079.198531] ? SyS_sendfile+0x130/0x130 [ 1079.202491] do_syscall_64+0x1e8/0x640 [ 1079.206372] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1079.211206] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1079.216390] RIP: 0033:0x459a59 [ 1079.219561] RSP: 002b:00007fd87f51ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1079.227250] RAX: ffffffffffffffda RBX: 00007fd87f51ac90 RCX: 0000000000459a59 [ 1079.234512] RDX: 0000000020000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1079.241777] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1079.249030] R10: 00008080fffffffe R11: 0000000000000246 R12: 00007fd87f51b6d4 [ 1079.256283] R13: 00000000004c748b R14: 00000000004dd038 R15: 0000000000000005 06:14:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x0, 0x3}}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB=':!'], 0x2) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000080)) sendfile(r0, r0, 0x0, 0x8080fffffffe) 06:14:29 executing program 2 (fault-call:8 fault-nth:6): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef6"], 0xb) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) 06:14:29 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000140)={0x7}, 0x23d) ftruncate(r2, 0x208200) fcntl$setstatus(r1, 0x4, 0x3fffe) io_setup(0x2, &(0x7f00000004c0)=0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) ioctl$IMGETVERSION(r4, 0x80044942, &(0x7f0000000100)) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x0, r1, &(0x7f0000000000), 0x0, 0x80, 0x0, 0x2}]) r5 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r5, 0x2007fff) fsync(r2) 06:14:29 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x6, 0x3, &(0x7f0000000000), 0x2) 06:14:29 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) r1 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0x80000001) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) 06:14:29 executing program 5: r0 = syz_open_dev$radio(0x0, 0x1, 0x2) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000b00)=ANY=[@ANYBLOB="b7"], 0x1) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x202481, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r6) setsockopt$RDS_GET_MR(r6, 0x114, 0x2, &(0x7f00000003c0)={{&(0x7f0000000b40)=""/4096, 0x1000}, &(0x7f0000000180), 0x2}, 0x20) fchdir(r5) r7 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r7) write$P9_RREADLINK(r2, &(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRES16=r3, @ANYRESOCT=r1, @ANYBLOB="eb367baaa3d7a96a7dd5a1b23fd23edf2fdab91b0ebfb4a6f435ac941d63a7ace467b7ad8df99abc6483797d641b9497df5bc97e9ccfa461f30a885bf3d3f66f8ae92184815ba6d14a821775dc295e2fccc42685852976517b081567500a5b757314c61d00f76430daf4bb6dd671a71153567261892d9a0677ad95b3e9fa65518171", @ANYBLOB="2e48dadfdd66890aef49ac531f152a0dfb580d30c3e0f47aecb015c99da9ade6a62a9a703718bf85a9f24f1bdc5b74a20ffa40f46acab9cacb9503cb45b9dd30f20a968524ed25e905cb250a94afd70d328977900e24feef3a1456cb445053219f265443dfc9334784aec3801c7b2d4e", @ANYRES16=0x0, @ANYRES16, @ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES16=0x0, @ANYRES16=r1, @ANYPTR, @ANYPTR, @ANYPTR64, @ANYRESOCT=0x0, @ANYRES32=r1]], @ANYRES16=0x0, @ANYRES64=r5, @ANYRESDEC=r7, @ANYRES64, @ANYRESOCT=r1, @ANYRES32=r0, @ANYPTR64, @ANYPTR=&(0x7f0000000140)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRESDEC=0x0, @ANYPTR64, @ANYPTR, @ANYRES64=r7, @ANYPTR64, @ANYRES32=r4]]], 0x59) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x15000, 0x0) r8 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r8, r8, 0x0, 0x8080fffffffe) [ 1079.518542] FAULT_INJECTION: forcing a failure. [ 1079.518542] name failslab, interval 1, probability 0, space 0, times 0 [ 1079.538743] CPU: 1 PID: 3518 Comm: syz-executor.2 Not tainted 4.14.149 #0 [ 1079.545711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1079.555071] Call Trace: [ 1079.557675] dump_stack+0x138/0x197 [ 1079.561320] should_fail.cold+0x10f/0x159 [ 1079.565485] should_failslab+0xdb/0x130 [ 1079.569466] kmem_cache_alloc_node+0x56/0x780 [ 1079.573966] ? __lock_is_held+0xb6/0x140 [ 1079.578035] create_task_io_context+0x31/0x3d0 [ 1079.582629] generic_make_request_checks+0x1505/0x1ac0 [ 1079.588862] ? release_pages+0x7be/0xb90 [ 1079.592925] ? blk_cleanup_queue+0x610/0x610 [ 1079.597490] ? mpage_submit_page+0x187/0x240 [ 1079.601894] ? __activate_page+0xb00/0xb00 [ 1079.606144] generic_make_request+0x7d/0xa40 [ 1079.610553] ? __pagevec_release+0x5d/0xb0 [ 1079.614784] ? mpage_prepare_extent_to_map+0x876/0xb20 [ 1079.620168] ? blk_queue_enter+0x520/0x520 [ 1079.624418] submit_bio+0x1a5/0x3f0 [ 1079.628062] ? submit_bio+0x1a5/0x3f0 [ 1079.631857] ? generic_make_request+0xa40/0xa40 [ 1079.636522] ? rcu_read_lock_sched_held+0x110/0x130 [ 1079.641528] ? kmem_cache_alloc+0x611/0x780 [ 1079.645837] ? check_preemption_disabled+0x3c/0x250 [ 1079.650873] ext4_io_submit+0x180/0x210 [ 1079.654857] ext4_writepages+0x106e/0x2fd0 [ 1079.659100] ? trace_hardirqs_on+0x10/0x10 [ 1079.663345] ? ext4_mark_inode_dirty+0x860/0x860 [ 1079.668098] ? __mark_inode_dirty+0x2b2/0x1040 [ 1079.672681] ? save_trace+0x290/0x290 [ 1079.676474] ? wbc_attach_and_unlock_inode+0x4c0/0x830 [ 1079.681828] ? find_held_lock+0x35/0x130 [ 1079.685888] ? ext4_mark_inode_dirty+0x860/0x860 [ 1079.690646] do_writepages+0xd0/0x250 [ 1079.694450] ? do_writepages+0xd0/0x250 [ 1079.698432] ? page_writeback_cpu_online+0x20/0x20 [ 1079.703362] ? _raw_spin_unlock+0x2d/0x50 [ 1079.707505] ? wbc_attach_and_unlock_inode+0x559/0x830 [ 1079.712794] __filemap_fdatawrite_range+0x23b/0x310 [ 1079.717800] ? replace_page_cache_page+0x630/0x630 [ 1079.722818] file_write_and_wait_range+0x8d/0xe0 [ 1079.727579] __generic_file_fsync+0x79/0x1a0 [ 1079.731991] ext4_sync_file+0x755/0x12d0 [ 1079.736050] ? ext4_getfsmap+0x880/0x880 [ 1079.740108] vfs_fsync_range+0x10e/0x260 [ 1079.744163] ext4_file_write_iter+0x68a/0xe90 [ 1079.748652] ? splice_direct_to_actor+0x29e/0x7b0 [ 1079.753497] ? ext4_file_mmap+0x2c0/0x2c0 [ 1079.757651] ? __might_sleep+0x93/0xb0 [ 1079.761538] do_iter_readv_writev+0x418/0x670 [ 1079.766023] ? vfs_dedupe_file_range+0x8f0/0x8f0 [ 1079.770768] ? rw_verify_area+0xea/0x2b0 [ 1079.774821] do_iter_write+0x154/0x540 [ 1079.778707] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1079.784161] ? __kmalloc+0x376/0x7a0 [ 1079.787876] vfs_iter_write+0x77/0xb0 [ 1079.791703] iter_file_splice_write+0x572/0xad0 [ 1079.796381] ? default_file_splice_read+0x7b0/0x7b0 [ 1079.801402] ? rw_verify_area+0xea/0x2b0 [ 1079.805447] ? default_file_splice_read+0x7b0/0x7b0 [ 1079.810453] direct_splice_actor+0x123/0x190 [ 1079.814851] splice_direct_to_actor+0x29e/0x7b0 [ 1079.819776] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1079.824618] ? do_splice_to+0x170/0x170 [ 1079.828581] ? rw_verify_area+0xea/0x2b0 [ 1079.832634] do_splice_direct+0x18d/0x230 [ 1079.836777] ? splice_direct_to_actor+0x7b0/0x7b0 [ 1079.841627] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 1079.846451] ? __sb_start_write+0x153/0x2f0 [ 1079.850764] do_sendfile+0x4db/0xbd0 [ 1079.854484] ? do_compat_pwritev64+0x140/0x140 [ 1079.859063] ? kasan_check_write+0x14/0x20 [ 1079.863347] ? _copy_from_user+0x99/0x110 [ 1079.867753] SyS_sendfile64+0x9d/0x110 [ 1079.871636] ? SyS_sendfile+0x130/0x130 [ 1079.875598] ? do_syscall_64+0x53/0x640 [ 1079.879562] ? SyS_sendfile+0x130/0x130 [ 1079.883583] do_syscall_64+0x1e8/0x640 [ 1079.887460] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1079.892314] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1079.897497] RIP: 0033:0x459a59 [ 1079.900679] RSP: 002b:00007fd87f51ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1079.908379] RAX: ffffffffffffffda RBX: 00007fd87f51ac90 RCX: 0000000000459a59 06:14:29 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1204}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x80ac8bdd6198ac0e, 0x0) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0xfffffffffffffff9, 0x7}) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/user\x00', 0x2, 0x0) ioctl$int_in(r2, 0x2a29, &(0x7f0000000080)=0x6) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 06:14:29 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) getsockopt$bt_BT_SECURITY(r0, 0x6, 0x3, &(0x7f00000000c0), 0xb7dea5) [ 1079.915653] RDX: 0000000020000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1079.922920] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1079.930179] R10: 00008080fffffffe R11: 0000000000000246 R12: 00007fd87f51b6d4 [ 1079.937480] R13: 00000000004c748b R14: 00000000004dd038 R15: 0000000000000005 06:14:29 executing program 1: r0 = open(&(0x7f0000000100)='./file0\x00', 0xa1263b0345c537a9, 0x80) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000080)={0x200, @dev={[], 0x2a}}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x203, 0xffffffffffffffff) read$rfkill(r1, &(0x7f0000000000), 0x8) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000000c0), 0x200000c0) 06:14:29 executing program 2 (fault-call:8 fault-nth:7): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef6"], 0xb) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) 06:14:29 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000140)={0x7}, 0x23d) ftruncate(r2, 0x208200) fcntl$setstatus(r1, 0x4, 0x3fffe) io_setup(0x2, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000100)='./bus\x00', 0x8001101042, 0x0) ftruncate(r4, 0x1) fsync(r2) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) sendto$rose(r5, &(0x7f0000000180)="ed5740ddaea39b363c8386898b4e90b64458b04a3ea3cf69f6f9824b9d0bf22c653c3d0159a81684925e8504fccd11be7859e8376c0cf6c20bff9137ed1287828cd4ee08cecd2449", 0x48, 0x48840, 0x0, 0x0) 06:14:29 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1400, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000040)=0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x6, 0x3, &(0x7f00000000c0), 0x200000c0) sched_yield() r2 = socket(0x1, 0x6, 0x40) r3 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r3, 0x7, &(0x7f0000027000)={0x1}) io_setup(0xc0, &(0x7f0000000040)=0x0) io_submit(r4, 0x1, &(0x7f00000005c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0, 0x0, 0x3}]) r5 = creat(&(0x7f0000000000)='./file0/bus\x00', 0x0) dup2(r5, r3) r6 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x0, @loopback}], 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000240)={r7, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000080)={r7, 0x7}, &(0x7f0000000100)=0x8) [ 1080.159806] FAULT_INJECTION: forcing a failure. [ 1080.159806] name failslab, interval 1, probability 0, space 0, times 0 [ 1080.176387] CPU: 0 PID: 3550 Comm: syz-executor.2 Not tainted 4.14.149 #0 [ 1080.183454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1080.196839] Call Trace: [ 1080.199420] dump_stack+0x138/0x197 [ 1080.203042] should_fail.cold+0x10f/0x159 [ 1080.207176] ? __lock_is_held+0xb6/0x140 [ 1080.211221] ? mempool_free+0x1d0/0x1d0 [ 1080.215179] should_failslab+0xdb/0x130 [ 1080.219142] kmem_cache_alloc+0x47/0x780 [ 1080.223203] ? mempool_free+0x1d0/0x1d0 [ 1080.227174] mempool_alloc_slab+0x47/0x60 [ 1080.231312] mempool_alloc+0x138/0x300 [ 1080.235192] ? remove_element.isra.0+0x1b0/0x1b0 [ 1080.239951] ? prepare_to_wait_exclusive+0x113/0x340 [ 1080.245048] ? schedule+0x9c/0x1c0 [ 1080.248576] bio_alloc_bioset+0x368/0x680 [ 1080.252717] ? bvec_alloc+0x2e0/0x2e0 [ 1080.256511] ? out_of_line_wait_on_bit_lock+0xba/0xd0 [ 1080.261689] submit_bh_wbc+0xf6/0x720 [ 1080.265469] ? bit_waitqueue+0x30/0x30 [ 1080.269340] __sync_dirty_buffer+0xcf/0x260 [ 1080.273730] sync_dirty_buffer+0x1b/0x20 [ 1080.278305] ext4_write_inode+0x3c2/0x450 [ 1080.282443] ? ext4_iget_normal+0xd0/0xd0 [ 1080.286572] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1080.292005] __writeback_single_inode+0xb44/0x1120 [ 1080.296917] writeback_single_inode+0x1fa/0x380 [ 1080.301567] sync_inode_metadata+0x8c/0xb0 [ 1080.305785] ? sync_inode+0x30/0x30 [ 1080.309412] __generic_file_fsync+0x130/0x1a0 [ 1080.313924] ext4_sync_file+0x755/0x12d0 [ 1080.317980] ? ext4_getfsmap+0x880/0x880 [ 1080.322031] vfs_fsync_range+0x10e/0x260 [ 1080.326082] ext4_file_write_iter+0x68a/0xe90 [ 1080.330579] ? splice_direct_to_actor+0x29e/0x7b0 [ 1080.335421] ? ext4_file_mmap+0x2c0/0x2c0 [ 1080.339566] ? __might_sleep+0x93/0xb0 [ 1080.343447] do_iter_readv_writev+0x418/0x670 [ 1080.347928] ? vfs_dedupe_file_range+0x8f0/0x8f0 [ 1080.352668] ? rw_verify_area+0xea/0x2b0 [ 1080.356822] do_iter_write+0x154/0x540 [ 1080.360691] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1080.366127] ? __kmalloc+0x376/0x7a0 [ 1080.369824] vfs_iter_write+0x77/0xb0 [ 1080.373609] iter_file_splice_write+0x572/0xad0 [ 1080.378265] ? default_file_splice_read+0x7b0/0x7b0 [ 1080.383274] ? rw_verify_area+0xea/0x2b0 [ 1080.387328] ? default_file_splice_read+0x7b0/0x7b0 [ 1080.392325] direct_splice_actor+0x123/0x190 [ 1080.396714] splice_direct_to_actor+0x29e/0x7b0 [ 1080.401378] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1080.406220] ? do_splice_to+0x170/0x170 [ 1080.410190] ? rw_verify_area+0xea/0x2b0 [ 1080.414240] do_splice_direct+0x18d/0x230 [ 1080.418376] ? splice_direct_to_actor+0x7b0/0x7b0 [ 1080.423207] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 1080.427944] ? __sb_start_write+0x153/0x2f0 [ 1080.432248] do_sendfile+0x4db/0xbd0 [ 1080.435951] ? do_compat_pwritev64+0x140/0x140 [ 1080.440516] ? kasan_check_write+0x14/0x20 [ 1080.444733] ? _copy_from_user+0x99/0x110 [ 1080.448863] SyS_sendfile64+0x9d/0x110 [ 1080.452733] ? SyS_sendfile+0x130/0x130 [ 1080.456689] ? do_syscall_64+0x53/0x640 [ 1080.460655] ? SyS_sendfile+0x130/0x130 [ 1080.464622] do_syscall_64+0x1e8/0x640 [ 1080.468499] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1080.473330] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1080.478504] RIP: 0033:0x459a59 [ 1080.481677] RSP: 002b:00007fd87f51ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1080.489376] RAX: ffffffffffffffda RBX: 00007fd87f51ac90 RCX: 0000000000459a59 [ 1080.496626] RDX: 0000000020000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1080.503876] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1080.511127] R10: 00008080fffffffe R11: 0000000000000246 R12: 00007fd87f51b6d4 [ 1080.518386] R13: 00000000004c748b R14: 00000000004dd038 R15: 0000000000000005 06:14:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) socket$kcm(0x29, 0x5, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB=':!'], 0x2) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$CAPI_GET_ERRCODE(r1, 0x80024321, &(0x7f0000000040)) 06:14:30 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x6, 0x3, &(0x7f00000000c0), 0x200000c0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdeb448f27f24f643"], 0x11) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000000)={r0, 0x0, 0x2, 0x5, 0x96}) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000040)={0x386, "1f"}) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000100)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x40001, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000340)={0x0, 0x0, 0x2080}) 06:14:30 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000140)={0x7}, 0x23d) ftruncate(r2, 0x208200) fcntl$setstatus(r1, 0x4, 0x3fffe) io_setup(0x2, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x12280, 0x4) ftruncate(r4, 0x2007fff) fsync(r2) 06:14:30 executing program 2 (fault-call:8 fault-nth:8): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef6"], 0xb) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) 06:14:30 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="b7"], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x8c9800, 0x0) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f00000002c0)="4b08979a923fc66982aa2fe54fb9eb9266dfd7d1c3ff04b0232e0d6a21c69a8d0da96dbbbf87467e1ba9f9c6e7b77cd686c3b323e214346743c8ce262f1b21de55b9ccf5634d46705e3f820ab0bf29660557ae1b797c84ac5a90224626fb93a0240e81f77c948b2fd308c53206d254d74048f79cf13de1e820faaf2a9348f189fcbcc8d757faca3f68fc63bf3a5aedaef10aba283180825349b234b915100f3135fe092825d5f03dacd44fac474648afbbb7be6dfdc26d3199958e7728fab1347b28f4c143ef3272f1932d64c1") fchdir(r2) r4 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r4, 0x7, &(0x7f0000027000)={0x1}) io_setup(0xc0, &(0x7f0000000040)=0x0) io_submit(r5, 0x1, &(0x7f00000005c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r4, 0x0, 0x0, 0x3}]) r6 = creat(&(0x7f0000000000)='./file0/bus\x00', 0x0) dup2(r6, r4) r7 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, r7, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x0, @loopback}], 0x10) sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000000240)={r8, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={r8, 0x6}, &(0x7f0000000080)=0x8) r9 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r9, 0x7, &(0x7f0000027000)={0x1}) io_setup(0xc0, &(0x7f0000000040)=0x0) io_submit(r10, 0x1, &(0x7f00000005c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r9, 0x0, 0x0, 0x3}]) r11 = creat(&(0x7f0000000000)='./file0/bus\x00', 0x0) dup2(r11, r9) r12 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, r12, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r12, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x0, @loopback}], 0x10) sendto$inet(r12, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r11, 0x84, 0x19, &(0x7f0000000240)={r13, 0x9}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r13, @in6={{0xa, 0x4e21, 0x2, @remote, 0xcf}}, 0x0, 0x0, 0x2, 0xfd2, 0x2}, &(0x7f0000000180)=0x98) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 1080.825015] FAULT_INJECTION: forcing a failure. [ 1080.825015] name failslab, interval 1, probability 0, space 0, times 0 [ 1080.836981] CPU: 0 PID: 3580 Comm: syz-executor.2 Not tainted 4.14.149 #0 [ 1080.843917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1080.853364] Call Trace: [ 1080.855941] dump_stack+0x138/0x197 [ 1080.859558] should_fail.cold+0x10f/0x159 [ 1080.863689] ? __lock_is_held+0xb6/0x140 [ 1080.867747] ? mempool_free+0x1d0/0x1d0 [ 1080.871712] should_failslab+0xdb/0x130 [ 1080.875668] kmem_cache_alloc+0x47/0x780 [ 1080.879719] ? mempool_free+0x1d0/0x1d0 [ 1080.883687] mempool_alloc_slab+0x47/0x60 [ 1080.887822] mempool_alloc+0x138/0x300 [ 1080.891754] ? remove_element.isra.0+0x1b0/0x1b0 [ 1080.896505] ? __generic_file_fsync+0x143/0x1a0 [ 1080.901169] ? find_held_lock+0x35/0x130 [ 1080.905220] ? __generic_file_fsync+0x143/0x1a0 [ 1080.909881] bio_alloc_bioset+0x368/0x680 [ 1080.914025] ? bvec_alloc+0x2e0/0x2e0 [ 1080.917812] ? file_check_and_advance_wb_err+0x95/0x380 [ 1080.923262] blkdev_issue_flush+0xf2/0x330 [ 1080.927495] ext4_sync_file+0xa78/0x12d0 [ 1080.931549] ? ext4_getfsmap+0x880/0x880 [ 1080.935603] vfs_fsync_range+0x10e/0x260 [ 1080.939662] ext4_file_write_iter+0x68a/0xe90 [ 1080.944214] ? splice_direct_to_actor+0x29e/0x7b0 [ 1080.949050] ? ext4_file_mmap+0x2c0/0x2c0 [ 1080.953185] ? __might_sleep+0x93/0xb0 [ 1080.957068] do_iter_readv_writev+0x418/0x670 [ 1080.961568] ? vfs_dedupe_file_range+0x8f0/0x8f0 [ 1080.966319] ? rw_verify_area+0xea/0x2b0 [ 1080.970377] do_iter_write+0x154/0x540 [ 1080.974254] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1080.979690] ? __kmalloc+0x376/0x7a0 [ 1080.983401] vfs_iter_write+0x77/0xb0 [ 1080.987183] iter_file_splice_write+0x572/0xad0 [ 1080.991838] ? default_file_splice_read+0x7b0/0x7b0 [ 1080.996855] ? rw_verify_area+0xea/0x2b0 [ 1081.000934] ? default_file_splice_read+0x7b0/0x7b0 [ 1081.005932] direct_splice_actor+0x123/0x190 [ 1081.010329] splice_direct_to_actor+0x29e/0x7b0 [ 1081.014986] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1081.019822] ? do_splice_to+0x170/0x170 [ 1081.023786] ? rw_verify_area+0xea/0x2b0 [ 1081.027838] do_splice_direct+0x18d/0x230 [ 1081.031967] ? splice_direct_to_actor+0x7b0/0x7b0 [ 1081.036796] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 1081.041534] ? __sb_start_write+0x153/0x2f0 [ 1081.045856] do_sendfile+0x4db/0xbd0 [ 1081.049566] ? do_compat_pwritev64+0x140/0x140 [ 1081.054139] ? kasan_check_write+0x14/0x20 [ 1081.058366] ? _copy_from_user+0x99/0x110 [ 1081.062511] SyS_sendfile64+0x9d/0x110 [ 1081.066392] ? SyS_sendfile+0x130/0x130 [ 1081.070349] ? do_syscall_64+0x53/0x640 [ 1081.074307] ? SyS_sendfile+0x130/0x130 [ 1081.078263] do_syscall_64+0x1e8/0x640 [ 1081.082142] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1081.087010] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1081.092180] RIP: 0033:0x459a59 [ 1081.095366] RSP: 002b:00007fd87f51ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1081.103055] RAX: ffffffffffffffda RBX: 00007fd87f51ac90 RCX: 0000000000459a59 [ 1081.110309] RDX: 0000000020000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1081.117561] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 06:14:30 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 1081.124811] R10: 00008080fffffffe R11: 0000000000000246 R12: 00007fd87f51b6d4 [ 1081.132072] R13: 00000000004c748b R14: 00000000004dd038 R15: 0000000000000005 06:14:30 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x51) write$P9_RXATTRCREATE(r2, &(0x7f0000000140)={0x7}, 0x23d) ftruncate(r2, 0x208200) fcntl$setstatus(r1, 0x4, 0x3fffe) io_setup(0x2, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r4, 0x2007fff) fsync(r2) 06:14:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="00008d250561a7f6cdd8d735db8aecec93cb8a7ce4aa724cf2391c00000000000000"], 0x2) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) 06:14:30 executing program 2 (fault-call:8 fault-nth:9): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef6"], 0xb) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) 06:14:31 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="b7"], 0x1) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x1, 0x40000000, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) [ 1081.372243] FAULT_INJECTION: forcing a failure. [ 1081.372243] name failslab, interval 1, probability 0, space 0, times 0 [ 1081.391754] CPU: 0 PID: 3600 Comm: syz-executor.2 Not tainted 4.14.149 #0 [ 1081.398821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1081.408299] Call Trace: [ 1081.410893] dump_stack+0x138/0x197 [ 1081.414542] should_fail.cold+0x10f/0x159 [ 1081.418738] should_failslab+0xdb/0x130 [ 1081.422704] __kmalloc+0x2f0/0x7a0 [ 1081.426234] ? filemap_range_has_page+0x1e0/0x1e0 [ 1081.431080] ? iter_file_splice_write+0x141/0xad0 [ 1081.435939] iter_file_splice_write+0x141/0xad0 [ 1081.440612] ? generic_file_splice_read+0x3e7/0x600 [ 1081.445616] ? fsnotify+0x11e0/0x11e0 [ 1081.449406] ? default_file_splice_read+0x7b0/0x7b0 [ 1081.454416] ? add_to_pipe+0x340/0x340 [ 1081.458322] ? rw_verify_area+0xea/0x2b0 [ 1081.462383] ? default_file_splice_read+0x7b0/0x7b0 [ 1081.467488] direct_splice_actor+0x123/0x190 [ 1081.471887] splice_direct_to_actor+0x29e/0x7b0 [ 1081.476563] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1081.481450] ? do_splice_to+0x170/0x170 [ 1081.485433] ? rw_verify_area+0xea/0x2b0 [ 1081.489505] do_splice_direct+0x18d/0x230 [ 1081.493657] ? splice_direct_to_actor+0x7b0/0x7b0 [ 1081.498505] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 1081.503257] ? __sb_start_write+0x153/0x2f0 [ 1081.507576] do_sendfile+0x4db/0xbd0 [ 1081.511305] ? do_compat_pwritev64+0x140/0x140 [ 1081.516860] ? kasan_check_write+0x14/0x20 [ 1081.521097] ? _copy_from_user+0x99/0x110 [ 1081.525328] SyS_sendfile64+0x9d/0x110 [ 1081.529209] ? SyS_sendfile+0x130/0x130 [ 1081.533181] ? do_syscall_64+0x53/0x640 [ 1081.537154] ? SyS_sendfile+0x130/0x130 [ 1081.541118] do_syscall_64+0x1e8/0x640 [ 1081.545090] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1081.549929] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1081.555129] RIP: 0033:0x459a59 [ 1081.558319] RSP: 002b:00007fd87f53bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 06:14:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x18) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="6d5d3481cd8c8508c762176f30265bd7314bb530d00e1c9e57835b43b37688e9989cd27342a0318f40f0caf5b10a676f2ebe825947dd148f078225f215c8439d2ea3c4e9a589ea2d63df4e0b3fb23271e18e646f71"], 0x2) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) 06:14:31 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x402600, 0x10) getsockopt$bt_BT_SECURITY(r0, 0x6, 0x3, &(0x7f00000000c0), 0x3) [ 1081.566029] RAX: ffffffffffffffda RBX: 00007fd87f53bc90 RCX: 0000000000459a59 [ 1081.574674] RDX: 0000000020000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1081.581938] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1081.589207] R10: 00008080fffffffe R11: 0000000000000246 R12: 00007fd87f53c6d4 [ 1081.596555] R13: 00000000004c748b R14: 00000000004dd038 R15: 0000000000000005 06:14:31 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000140)={0x7}, 0x23d) ftruncate(r2, 0x208200) fcntl$setstatus(r1, 0x4, 0x3fffe) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0xc00, 0x0) ioctl$TIOCSSERIAL(r3, 0x541f, &(0x7f0000000240)={0x1, 0x5, 0x1, 0x0, 0x20, 0xdeb, 0x7fffffff, 0x7f, 0x1000, 0x5, 0x97, 0x4, 0x9, 0x80, &(0x7f0000000180)=""/84, 0x7, 0x1, 0x7}) io_setup(0x2, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r5, 0x2007fff) fsync(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r7) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380)='overlay\x00', 0x800000, &(0x7f00000003c0)=ANY=[]) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f00000002c0)={0x61, [0x4, 0x6, 0x5, 0xfff, 0x8, 0x81, 0xffff, 0x6, 0x6cfe, 0x8001, 0x400, 0x0, 0x1, 0x20, 0x3, 0x3, 0x2, 0x4, 0x3, 0x2, 0x7f, 0x1ff, 0x9, 0xff, 0xffff, 0x0, 0x2, 0x7f, 0x7f, 0x9, 0x6, 0x6, 0x400, 0x4bc, 0x3f, 0x3ff, 0x2, 0x1000, 0x289, 0x6, 0x9, 0x3d84, 0x4, 0x0, 0x8, 0x2, 0x9, 0x2], 0x7}) getpid() 06:14:31 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x8) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 06:14:31 executing program 5: r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x6, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000100)={{0xed, 0x1}, 'port1\x00', 0x80, 0xad7faf5a70e3ac39, 0x5, 0x4, 0x1, 0x10000, 0x2, 0x0, 0x1, 0x10000}) syz_open_dev$radio(0x0, 0x1, 0x2) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x40000, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000040)) write$P9_RREADLINK(r1, &(0x7f0000000b00)=ANY=[@ANYBLOB='\x00'], 0x1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x504000, 0x0) write$P9_RREAD(r2, &(0x7f0000000240)={0xdb, 0x75, 0x1, {0xd0, "8bc2955a50ed92fbcc6e6c6173fcb098947a861e475892ebf496fe60967743a58e910daff81a713946a5ad6c2e073b4ac6bd0d4a616e183bc57231229f3d6ac1f3b1aa4bb7f0579bcb82ae3eeb32edcc3cbb5f13e296f2b34794233e07f0387ab0d3773404b8bbdb96db0118bde8bce46b5a0538a14841979af9835a0c4d72141c248300084973f7590748d17ea71300c98e459f4937ebc68e27a606a5b847654bdfd21dcebac8ff1025f3d0685a9742bc8f925af6f0ed31f0dcc662f2a339afd3e656d8d1d2b31ba6d31de58bd0c849"}}, 0xdb) sendfile(r1, r1, &(0x7f0000000000), 0x4008080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r3, r3, 0x0, 0x8080fffffffe) 06:14:31 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x6, 0x3, &(0x7f00000000c0), 0x200000c0) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000100)={0x0, [0x1ff, 0x101, 0x1, 0x1, 0x2800, 0x1, 0x8000, 0x8, 0x9, 0x4bd, 0x0, 0x3ff, 0x8000, 0x8, 0x9, 0xff01, 0x2, 0x80, 0x0, 0x8, 0x344, 0x1, 0x8, 0x71, 0x400, 0x6, 0x7, 0x4, 0x6, 0x6d8, 0x8, 0x6, 0x8, 0x3ff, 0x5, 0x100, 0x4, 0x4, 0xcc, 0x1000, 0x6, 0x6, 0x0, 0x4, 0x9, 0x800, 0x3fb9, 0x9], 0x9}) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000080)={0x3, 0x1284, 0x6, 0x4e0, 0x6, 0xffffffff}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x7f, &(0x7f0000000040)=0x2) 06:14:31 executing program 2 (fault-call:8 fault-nth:10): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef6"], 0xb) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) 06:14:31 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000140)={0x7}, 0x23d) ftruncate(r2, 0x208200) fcntl$setstatus(r1, 0x4, 0x3fffe) io_setup(0x2, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) lstat(&(0x7f0000000100)='./bus\x00', &(0x7f0000000180)) r4 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r4, 0x2007fff) fsync(r2) 06:14:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB=':!'], 0x2) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') 06:14:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(r0, 0x5427) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) getsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000040), &(0x7f0000000080)=0x10) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef6"], 0xb) r4 = open(&(0x7f0000000b80)='./file0\x00', 0x191580, 0x60) fchdir(r4) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x758, 0x368, 0x368, 0x368, 0x1f0, 0xc8, 0x6c0, 0x6c0, 0x6c0, 0x6c0, 0x6c0, 0x6, &(0x7f0000000140), {[{{@ip={@rand_addr=0x1f, @dev={0xac, 0x14, 0x14, 0x1d}, 0xff, 0x0, 'veth1\x00', 'bond0\x00', {0x1fe}, {0xff}, 0x84, 0x3, 0x4}, 0x0, 0x98, 0xc8}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x3e5, @loopback, 0x4e21}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x14}, @multicast1, 0x7fffff7f, 0xff, 'erspan0\x00', 'tunl0\x00', {0xff}, {}, 0x5e, 0x3, 0x10}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@set={0x40, 'set\x00', 0x0, {{0x7f80, [0x81, 0x7fff, 0x3ff, 0x7, 0x20, 0x14e], 0x40}}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x4}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x5}}}, {{@ip={@multicast2, @empty, 0x0, 0xffffff00, 'ip_vti0\x00', 'bond_slave_0\x00', {0x80}, {0x17e}, 0x6, 0x3, 0x4}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x0, 0x2, 0x0, 0x2}}, @common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x7, 0x2, 0x2, 0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xff, 0x0, 0x7fffffff}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x14}, @rand_addr=0xffff, 0x7fffff80, 0x0, 'veth1_to_team\x00', 'nlmon0\x00', {0xff}, {0xbd45f053916f1f6a}, 0x0, 0x2, 0x40}, 0x0, 0x208, 0x248, 0x0, {}, [@common=@inet=@sctp={0x148, 'sctp\x00', 0x0, {0x4e21, 0x4e24, 0x4e20, 0x4e23, [0xf4, 0x10000, 0xfffffff8, 0x9, 0xffff8000, 0xd2, 0x1, 0x5, 0x1, 0xd8, 0xf7, 0x10001, 0x3, 0xff, 0x5, 0x80, 0x3, 0x0, 0x9, 0x8, 0xffffee47, 0x0, 0x63, 0x101, 0xe4c8c17b, 0xd949, 0xffffffd0, 0x400, 0x0, 0x8, 0xbd0, 0x61744df8, 0x3, 0x1, 0x0, 0xf7c, 0x1, 0x0, 0x0, 0xfffffff9, 0x4, 0x80000000, 0x80000001, 0x4, 0x8001, 0x200, 0xacf2, 0x0, 0x7, 0x94a, 0x8000, 0xba, 0x8, 0xf7, 0x2, 0x8, 0xffffffff, 0x5, 0x3f, 0x88cc, 0x0, 0x200, 0x5, 0x5], 0x0, [{0x3, 0x3, 0x9}, {0x1, 0x6, 0x9}, {0x6, 0x81, 0x40}, {0x8, 0x20, 0xe4}], 0x2, 0x1, 0x1}}, @common=@ttl={0x28, 'ttl\x00', 0x0, {0x3, 0x71}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv4=@empty, 0x4e22}}}, {{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0x0, 'syz_tun\x00', 'ifb0\x00', {0x7f}, {0x101}, 0x0, 0x0, 0x1}, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz1\x00', 0x7, 0x1c, 0x1, 0x1}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x1}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x7b8) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) r5 = fcntl$getown(r4, 0x9) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@RTM_NEWNSID={0x1c, 0x58, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x24008040) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r6, r6, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) 06:14:31 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x400, 0x50) 06:14:31 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="b7"], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r6) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES16=r6, @ANYRESOCT, @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRESDEC=r3, @ANYRES32=r4, @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRESHEX=r1, @ANYPTR64, @ANYBLOB="dc19c2554cab2f039de09f14a08518d690768db2ec045184e7d290e8e3a825045e6af011c0174f20a723cdd501f2a6ad5e8a25187408c806", @ANYRES64=r5, @ANYRESHEX=0x0, @ANYRES32, @ANYRES64=r0, @ANYRESDEC=r0], @ANYBLOB="9d061bf0cfa9c49498ffdd33de13c98312970a0cd4d245ea6bed929c7cadd6e4fb7541aacf74e44c1eac7b6e34444b15310df908782189bcb0d80f442c8a68929552e5085af600637d27a7211d27976ba21eb7049f"], @ANYRES64=0x0, @ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES64, @ANYRESHEX]], 0xffffffffffffff38) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r7, r7, 0x0, 0x8080fffffffe) 06:14:31 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) bind$pptp(r1, &(0x7f00000001c0)={0x18, 0x2, {0x1, @local}}, 0x1e) write$P9_RXATTRCREATE(r2, &(0x7f0000000140)={0x7}, 0x23d) ftruncate(r2, 0x208200) fcntl$setstatus(r1, 0x4, 0x3fffe) setsockopt$rose(r1, 0x104, 0x0, &(0x7f0000000240)=0x80000000, 0x4) io_setup(0x2, &(0x7f00000004c0)) io_setup(0x7, &(0x7f0000000180)=0x0) io_submit(r3, 0x1ffffffffffffd71, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000100)="f319d7a93d1b83341da5521d1649d9227d69", 0x10000, 0x1, 0x0, 0x1}]) r4 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r4, 0x2007fff) fsync(r2) 06:14:31 executing program 4: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000000040)={0x7d}) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB=':!'], 0x2) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) sendfile(r1, r1, 0x0, 0x8080fffffffe) 06:14:31 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000040)={{0x5, 0x4, 0x1, 0x1, 0x8}, 0x6, 0x1f, 'id1\x00', 'timer1\x00', 0x0, 0x1ff, 0x8, 0x3ff, 0x80}) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r3, 0x4008ae48, &(0x7f0000000140)=0x103000) [ 1082.196241] audit: type=1804 audit(1571033671.872:359): pid=3670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir017720076/syzkaller.4NQquk/986/bus" dev="sda1" ino=16777 res=1 06:14:32 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4000000000001b9, 0x0) 06:14:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB=':!'], 0x2) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl$TIOCLINUX5(r2, 0x541c, &(0x7f0000000040)={0x5, 0x10d4, 0x0, 0x3, 0x3}) 06:14:32 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/relabel\x00', 0x2, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) write$selinux_access(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x23) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x101000, 0x0) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000240)=""/156) getsockopt$bt_BT_SECURITY(r1, 0x6, 0x3, &(0x7f0000000040), 0xfffffffffffffeab) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000080)) 06:14:32 executing program 3: getrandom(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCMGET(r0, 0x5415, 0x0) 06:14:32 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, 0xfffffffffffffdaf) 06:14:32 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x6551, 0xa00) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000080)={r2, r3}) fchdir(r0) getsockopt$bt_BT_SECURITY(r0, 0x6, 0x3, &(0x7f00000000c0), 0x1a789ee5) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x2, 0x32599cebc69e2798) 06:14:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="3a218211f663b5724bdef66cc02b48c800720c23b993f73fcce3a539facd24f7ff44ab994e8ea9612be8cb53cf921f559520f3c9b3f69cd06c00def1576a8712ca2f04a0ac592ad807cc9aafcf88ad2fa1b6798ce659f3b4188d2ef226c5d35f3bb3252b1b2219682fb92385fe2f5f4e172e5fb7ddd0be6c9f44383e55e7857f48b8dd574c292ba2ec7d5e9aadab5f0a94b14f0180f533bd893676d63a62"], 0xb) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) 06:14:32 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="b7cf44acd5932f1a29b1985b058eb6a3d20d80a0d24c37575402871ae59bfaec"], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) 06:14:32 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0x11a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 06:14:32 executing program 1: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$RTC_UIE_OFF(r0, 0x7004) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x6, 0x3, &(0x7f00000000c0), 0x200000c0) 06:14:32 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653a89907853639406d0e2319762433bb0c4a7fd009b8d63a583c52568e23603c4d635faed12f000000b4d80690574cef671a1c27e018e88b664c562b279d5fe0c4ee4ff7ef52dbf443761093efbe61eafdc50b7898255886712e68e13e", 0x5e}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 06:14:32 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) prctl$PR_SET_KEEPCAPS(0x8, 0x1) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 06:14:32 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211e6080000002919b0"], 0x11) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d800000018008105e00f80ecdb4cb904021d65ef0b007c05e8fe55a10a000500ac14142603000e00050000000000812fa800046c0f0063e3e558f030035c3b61c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x0) write(r2, &(0x7f0000000100)="bee479f29f7c6d013a5d0b5be9bbd74782d665d5d01ea3b472f50fac156bb3cd756e0e4983355d3b647acdb0e9d338a362be356df0789cec9f7600b0d0e22f44864a49f9ba34f95534e23eca30f49a84d55afaffdf6147e4a5aeb7440c5ffcc767bf9497fa820d98a9b4fcc9bcf295cc8a997f2ba708ac037a8a4eb40252ad5d253a40397ff8edff6c257dd7f5421b4bac7604efdee4224e2ca84d8e715add02827332cbaa01c7ddc1", 0xa9) fchdir(r1) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="b0"], 0x11) sendfile(r5, r5, &(0x7f0000000000), 0x8080fffffffe) r6 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)={0x0, 0x0}) r8 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r8, r8, &(0x7f0000000000), 0x8080fffffffe) r9 = dup2(r0, r8) fcntl$lock(r9, 0x7, &(0x7f0000027000)={0x2, 0x0, 0x7ff, 0x0, r7}) io_setup(0xc0, &(0x7f0000000040)=0x0) io_submit(r10, 0x1, &(0x7f00000005c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r6, 0x0, 0x0, 0x3}]) r11 = creat(&(0x7f0000000000)='./file0/bus\x00', 0x0) dup2(r11, r6) r12 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, r12, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r12, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x0, @loopback}], 0x10) sendto$inet(r12, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r11, 0x84, 0x19, &(0x7f0000000240)={r13, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000040)={r13, 0xb9d}, &(0x7f0000000080)=0x8) 06:14:33 executing program 5: r0 = syz_open_dev$radio(0x0, 0x2, 0x2) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="b750079682e081eb2d29e9dd7f3aa4fb7606dd6c4be0ca9e7f87053339d5ef42d7f481d33229ee13093d6bed0c466d6cbd7f98bb357e8d78feb25eb96b8a97ccb3ff19118344df6c35f58dbc0c3cf0247e9c9440cf3f99f5e95b16a30670a2611b139006620300dfe21155e5a4a6bb730282f2eaab889abbef855ea91354d652a0c43d4b48"], 0x1) creat(&(0x7f0000000140)='./file0\x00', 0x40) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0f6935f9eaae716a0469015f8c6445ba41a1880eebabea30298e85168fc9d587930349571c2fed66e12fbdb384cb9804f"], 0x11) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYBLOB="23ad05bca4fdabfd1e34d3"], @ANYRESDEC=r2, @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYRES64=0x0, @ANYBLOB="72fc7eda0f35ffa526f238ccb8fcff7cd1623ca60039aab859844d7ab193338919a410301186d3b79520fe7ab4691f8044957f54ee80ad2bc4c9018af71dd6c3e2422e92a0f15b1f43c8202eb6500c7fbf5d04d8127c9f56c24590eb4b5070e516d29bcd706fdc7758f38c46e22f49fc92927bedcdb9bcfce23ebf3e6d858c34a0afbe9413631990d8dfd39fb4d199daad08dee58d0074a3a927e16d515e839a57fc6c4e209a55269ca58e359b1c648402ba0bab3d7464e420b1ce633ef28d4d86dc1f88", @ANYRES16=0x0, @ANYPTR=&(0x7f0000000180)=ANY=[@ANYRESHEX=r3, @ANYRES32, @ANYPTR64, @ANYPTR64, @ANYRESDEC=r4], @ANYRESDEC, @ANYRESDEC=r3], 0x122) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r5, r5, 0x0, 0x8080fffffffe) 06:14:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000040), 0x4) sendfile(r0, r0, 0x0, 0x8080fffffffe) 06:14:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000080)={0x1, 0x9, "0c6e8b04f95b076d8cd0c218b966594482449664841f5904333f7ecf3dedb893", 0x3ff, 0xfff, 0x1f, 0x10000, 0x8}) r1 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$KDDISABIO(r0, 0x4b37) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="f6"], 0xb) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r3, r3, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r1, 0x80044946, 0x0) 06:14:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x200000000d8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x2) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = socket$packet(0x11, 0x3, 0x300) accept(r2, &(0x7f00000000c0)=@can, &(0x7f0000000140)=0x80) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./bus\x00') sendfile(r0, r0, 0x0, 0x8080fffffffe) [ 1083.553530] audit: type=1804 audit(1571033673.232:360): pid=3777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir054449185/syzkaller.otCMJi/1058/file0" dev="sda1" ino=16682 res=1 [ 1083.670130] protocol 88fb is buggy, dev hsr_slave_0 [ 1083.675402] protocol 88fb is buggy, dev hsr_slave_1 [ 1083.680756] protocol 88fb is buggy, dev hsr_slave_0 [ 1083.686032] protocol 88fb is buggy, dev hsr_slave_1 06:14:33 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14e5e13256c1ce472af1887468362a4e90e59f91e11f3cf8e8cff15addd5f16a33df4fe9c6bab022223a6006023780c2d499bd60a0066f7ccab2ba66cdcc"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) r1 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f00000000c0)={0x0, 0x4f, "c53f5f6d8bc490e8c637d1dc7857d0c42024d1e3c4b9d3071e314378d70392826b8211ac9e0c72a6ee88e933e6875f7788c9dd8bfa4f3c6fa2b849a98f36b2da88e94a33ce2a742d13d52e4a7594cd"}) [ 1084.230179] protocol 88fb is buggy, dev hsr_slave_0 [ 1084.235316] protocol 88fb is buggy, dev hsr_slave_1 [ 1084.240483] protocol 88fb is buggy, dev hsr_slave_0 [ 1084.245527] protocol 88fb is buggy, dev hsr_slave_1 06:14:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000002640)={&(0x7f00000000c0), 0xc, &(0x7f0000002600)={&(0x7f0000002400)={0x1f0, r3, 0x300, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0xa0, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x0, 0x0, 0xff, 0x6}, {0xffff, 0x0, 0x1, 0x5}, {0x2, 0x69, 0x8, 0xfffffff7}, {0x29, 0x5, 0x6, 0x916}, {0x4f96, 0x25, 0x1, 0x400}]}}}]}}, {{0x8, 0x1, r6}, {0x12c, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xc2f}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}]}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x7fd0d26ac7371d37}, 0x24010001) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xf21a9618a4b26f3}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@gettfilter={0x34, 0x2e, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, r5, {0xfff0, 0xffe0}, {0xd, 0x1}, {0x10, 0xfff2}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x40}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000080)={0x3, 0x3}) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef612ac744bcf31592c08367c322c70ff88a4b9c82e8529002a6e49da27594db33d5861ef8193912e4192e75c63facc638bd6f494387a290356a7da2c51448b97b88c2691e1049eb5353d3ff789ab934a4b0f245095091ef56154d238c9602b156c6ccc3aef9c302cf1f319e64d2488dc181f15cd709674a6a5936449832249a0efa8031c2579d21fa5375092de4fd05fe0a1e566709cffff878329"], 0xb) sendfile(r7, r7, &(0x7f0000000000), 0x8080fffffffe) pipe(&(0x7f0000000140)) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r8 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x21) sendfile(r8, r8, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x20) 06:14:34 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="b7"], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) 06:14:34 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000140)={0x1, 0x9}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x4200, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r2, 0x800443d3, &(0x7f0000000040)={{0x3, 0x3f, 0x4, 0x40, 0x5, 0x6}, 0x3f, 0x8000, 0x6}) getsockopt$bt_BT_SECURITY(r0, 0x6, 0x3, &(0x7f00000000c0), 0x200000c0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000080)) 06:14:34 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) open(0x0, 0x141042, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 06:14:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000001e80001dd0000040d000300ea1100000005000000", 0x29}], 0x1) 06:14:35 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="8a65e2dff2288d48d4e02211358afad3", 0x10) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f66369548cea1fd147d014b7b0"], 0x11) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xffffffffffffffa3, 0x44341) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x0, &(0x7f0000000200)=""/137, &(0x7f0000000140)=0x89) getsockopt$bt_BT_SECURITY(r1, 0x6, 0x3, &(0x7f0000000040), 0xfffffe9d) 06:14:35 executing program 4: r0 = open(&(0x7f0000000040)='./bus\x00', 0x149042, 0x8) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="7a4cd5eb09ad333a01b91ae88d19672260a6ead3d23de9369fd803028a7420d0c0406e590bb7bc9a770a739888e285c5b088f07d496ce9b1799e5569ef8159cc42491add6ccf8666040ebeda9f5e2797dabbee9cfee66fd845f9e20e266152d0881b1770723ec06385dd2d3d1d780c32428e25d7d64f8e9d6313a691e118bf6849fc"], 0x2) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000180)=0x3) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r2, r2, &(0x7f0000000000), 0x808100000000) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000140)) 06:14:35 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="3a218211f663ab000000f64346ff141bc07fb07330cbe12048278ca15ba602f61c6fea28b5ec1a262a621e844f4ae84d06271794429b9a52060119f27b1d"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 06:14:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0xfffffffffffffdb4, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x2000000000, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef6"], 0xb) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) 06:14:35 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0156b945b98a7c9b"], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) 06:14:35 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) 06:14:36 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)="9f", 0x1) 06:14:36 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="b7"], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) fchdir(r1) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000000200)={[], 0x3f, 0x7, 0x11, 0x0, 0x0, 0x1000, 0x2000, [], 0x6}) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000040)={0xffff, 0x1, 0x4, 0x2ac3, 0xb, 0x7f, 0x7f, 0x8, 0x7ff, 0xff}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r3, r3, 0x0, 0x8080fffffffe) 06:14:36 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x2001) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000004) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000300)={0x600, 0x60000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "abb4291ede5e270dd3f0a272134e83bbe886c41fc6faced4210500000000000000ffffff7ffff7ef0900020000d14704000000000000000000000013003e00", "141f2b09000000000000002850c94200ffff0000230000000000000200", "00800000000000001a4809ff1f48b823eb000000000000004f6fce49370600ce"}) 06:14:36 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(r0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r1], 0xfd96) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x200, 0x40) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) 06:14:36 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = dup(0xffffffffffffffff) write$P9_RLERROR(r0, 0x0, 0xfffffec7) 06:14:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in=@local, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f00000002c0)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000002640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000144a}, 0xfffffffffffffe86, &(0x7f0000002600)={&(0x7f0000000680)={0x1fc, r4, 0x300, 0x70bd24, 0x25dfdbfb, {}, [{{0x8, 0x1, r6}, {0xa0, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x68, 0x1, 'l\xd8\x00\x00\x00\x00\x00\x00\x00h_to_port_mapping\x00\x00\x00\x00\x02\x00'}, {0x8}, {0x8}}, {0xffffffffffffff65}}}, {0x5c, 0x1, @mcast_rejoin_interval={{0x0, 0x1, 'mcast_rejoin_interval\x00'}, {}, {0xfffffffffffffefa, 0x4, 0x1}}}]}}, {{0x0, 0x1, r7}, {0x138, 0x2, [{0x0, 0x1, @notify_peers_interval={{0x0, 0x1, 'notify_peers_interval\x00'}, {}, {0x0, 0x4, 0x800}}}, {0x0, 0x1, @bpf_hash_func={{0x0, 0x1, 'bpf_hash_func\x00'}, {}, {0x0, 0x4, [{0x6, 0x0, 0x9, 0x200}]}}}, {0x0, 0x1, @lb_port_stats={{{0x0, 0x1, 'lb_port_stats\x00'}, {}, {0x0, 0x4, 0x8}}, {0x0, 0x6, r8}}}]}}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x7fd0d26ac7371d37}, 0x24010001) sendmsg$can_bcm(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, r6}, 0x10, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x202, 0x7f, {0x77359400}, {0x0, 0x2710}, {0x4}, 0x1, @can={{0x3, 0x1, 0x1, 0x1}, 0x6, 0x7, 0x0, 0x0, "050637c405a986d3"}}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef6"], 0xb) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r9 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r10 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r10, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r10, r10, &(0x7f0000000000), 0x8080fffffffe) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000340)='team\x00') accept$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14) r13 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r14 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r15 = socket(0x10, 0x803, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r13, &(0x7f0000002640)={&(0x7f00000000c0), 0xc, &(0x7f0000002600)={&(0x7f0000002400)={0x1f0, r14, 0x300, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r16}, {0xa0, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x0, 0x0, 0xff, 0x6}, {0xffff, 0x0, 0x1, 0x5}, {0x2, 0x69, 0x8, 0xfffffff7}, {0x29, 0x5, 0x6, 0x916}, {0x4f96, 0x25, 0x1, 0x400}]}}}]}}, {{0x8, 0x1, r17}, {0x12c, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xc2f}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}]}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x7fd0d26ac7371d37}, 0x24010001) sendmsg$TEAM_CMD_NOOP(r10, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000800)={0x358, r11, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8, 0x1, r8}, {0x11c, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xffffffe8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xa463}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xcc}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xffff058e}}}]}}, {{0x8, 0x1, r12}, {0x44, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x44, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x180, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0xfff, 0x1f, 0x1, 0x8}, {0xea0, 0x8, 0x5, 0x4}, {0x9d48, 0x6, 0x2, 0x8}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xfffffeff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x2}}}]}}]}, 0x358}, 0x1, 0x0, 0x0, 0x800}, 0x200a0000) sendfile(r9, r9, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) 06:14:36 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r2, &(0x7f00000012c0)="20268a927f1f6588b967481241ba78600600f65ac623ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a92825a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x104eb, 0x800, 0x0, 0xc5da8938) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, 0x0, &(0x7f0000000040)) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r4, &(0x7f0000000440)=ANY=[@ANYRES64], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) r5 = creat(&(0x7f0000000400)='./file0\x00', 0x0) fstatfs(r5, &(0x7f0000000240)=""/45) [ 1086.581364] audit: type=1804 audit(1571033676.262:361): pid=3866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir054449185/syzkaller.otCMJi/1061/bus" dev="sda1" ino=17169 res=1 [ 1086.660090] audit: type=1804 audit(1571033676.292:362): pid=3866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir054449185/syzkaller.otCMJi/1061/bus" dev="sda1" ino=17169 res=1 [ 1086.763528] audit: type=1804 audit(1571033676.312:363): pid=3874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir054449185/syzkaller.otCMJi/1061/bus" dev="sda1" ino=17169 res=1 [ 1086.788618] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 1086.800809] audit: type=1804 audit(1571033676.332:364): pid=3874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir054449185/syzkaller.otCMJi/1061/bus" dev="sda1" ino=17169 res=1 [ 1086.810300] FAT-fs (loop1): Filesystem has been set read-only [ 1086.830759] audit: type=1804 audit(1571033676.422:365): pid=3882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir017720076/syzkaller.4NQquk/992/bus" dev="sda1" ino=17170 res=1 [ 1086.851572] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 1086.869789] audit: type=1804 audit(1571033676.542:366): pid=3889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir017720076/syzkaller.4NQquk/992/bus" dev="sda1" ino=17170 res=1 06:14:36 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000012c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f00000000c0)='mem\x00\x01y7SwaS.\x06\x95r\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x0, 0x0) r3 = semget$private(0x0, 0x2000000010a, 0x0) semop(0x0, &(0x7f0000000100)=[{}], 0x1ae) semop(r3, &(0x7f0000000100)=[{0x0, 0x0, 0x1000}], 0x1) [ 1090.977196] audit: type=1804 audit(1571033680.652:373): pid=4071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir903629541/syzkaller.VJmRQl/1090/file0" dev="sda1" ino=16804 res=1 06:14:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB=':!'], 0x2) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) 06:14:40 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r3, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) recvmmsg(r4, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000580)=""/169, 0xa9}, {&(0x7f0000000640)=""/155, 0x9b}], 0x3, &(0x7f00000004c0)=""/100, 0x64}, 0x3ff}, {{0x0, 0x0, &(0x7f0000000c80)=[{0x0}, {&(0x7f0000000a40)=""/158, 0x9e}], 0x2, &(0x7f0000000d00)=""/117, 0x75}, 0x8}, {{&(0x7f0000000d80)=@in, 0x80, 0x0}}], 0x3, 0x2, &(0x7f0000000200)={0x77359400}) 06:14:40 executing program 3: socketpair(0x22, 0x3, 0x2, 0x0) 06:14:40 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="b90600b6c6dcc1e4bc6408c15e2b2a281f96aff8b81ef15229c3c44ae37e5b5f25e37a50890a000000"], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x9, 0x8) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) socket$l2tp(0x18, 0x1, 0x1) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000280)) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x600001, 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='omfs\x00', 0x0, &(0x7f0000000240)='/selinux/enforce\x00') r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r4) sendfile(r2, r2, 0x0, 0x8080fffffffe) 06:14:40 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) name_to_handle_at(r1, &(0x7f0000000040)='./bus/../file0\x00', &(0x7f0000000080)={0x46, 0xc32, "cb1cc37f4ddbdea2dcb15e4857067099c7b21bfc83ce6113eedab96742d7b3b16662aabd71e46dddbd003509eaac056365a04e0c1a964c212e4942b686f9"}, &(0x7f0000000100), 0x800) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) r3 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000000080)={'syz'}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23", 0xc0, r3) r4 = add_key(&(0x7f0000000140)='.dead\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000200)="9870d729af289eb8bd6b7a89c4edc57324b08021e07e1adc9c43e5ae34d0ef1da0cae0a4e78d531028c34c5a7199121c8454c19d663bc4b1c6bb2b666cf0b5240e2d33e7d64058617ac6067d73fa18f4e3d19d7462e7f83fbae97aa03c9399c470426f909d1c75dd6e345eb7e4fed641656eed5cdd03f4b935ae734837710b955cfd5e027d4b78cfa6b0c0bd6266960c7aa45b4502da66eb1ae7b11bf7d18be29c075e869c62cba55fadfed1d9062ec24a780711aa033b64678d9ef8cd2245f8421bf5c0ffe35f9f13aeea2d6fd3d2db07ebc9253a320c5f07591ed9333c2291e7510280d37441bb73b7060f6c9b", 0xee, r3) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000340)={r4, 0xcb, 0xcf}, &(0x7f0000000380)={'enc=', 'oaep', ' hash=', {'sha256-ssse3\x00'}}, &(0x7f0000000400)="04d7e9878fd0d23db9530b1f4772c75d91482b06254dc683f6b951f17f5a83d9babbc329c974a2c80a40e0c3b8e77bb595e2a45268a2d25af53fd787a39ddb35aa29c1686419c8224db7960538b5a92e771d45c85374a1c92ebe2f7ff6532fe0b141fe0a4476427ce1c64fa22ab13df7977a6216227d1194b10ab0c65a87a2b68bd1c1a1e8100947d5a11b5f182d23dd68738cdbde1316a92c82248b1cdf8b8f7b19cb5a7fb16a6ff944fc7d2ae47194e59fc07f968ec794cfde43365fc9142a0f35b9b0ff6dd039b29f20", &(0x7f0000000500)=""/207) 06:14:40 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = getpgrp(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x9}, 0x0, 0x401, 0x1000000, 0x0, 0xfffffffffffffffe}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef6"], 0xb) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r4, r4, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r2, 0x80044946, 0x0) 06:14:40 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x0, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="40543e75e5bb03000000148c0f34"], 0xe}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40020000000c) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {}, @cond=[{}, {0x0, 0x0, 0x0, 0x40}]}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 06:14:40 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in, 0x0, 0x20000000005, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 1091.227639] ptrace attach of "/root/syz-executor.3"[4109] was attempted by "/root/syz-executor.3"[4110] 06:14:41 executing program 1: r0 = syz_open_dev$radio(0x0, 0x2, 0x2) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="b750079682e081eb2d29e9dd7f3aa4fb7606dd6c4be0ca9e7f87053339d5ef42d7f481d33229ee13093d6bed0c466d6cbd7f98bb357e8d78feb25eb96b8a97ccb3ff19118344df6c35f58dbc0c3cf0247e9c9440cf3f99f5e95b16a30670a2611b139006620300dfe21155e5a4a6bb730282f2eaab889abbef855ea91354d652a0c43d4b48"], 0x1) creat(&(0x7f0000000140)='./file0\x00', 0x40) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0f6935f9eaae716a0469015f8c6445ba41a1880eebabea30298e85168fc9d587930349571c2fed66e12fbdb384cb9804f"], 0x11) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYBLOB="23ad05bca4fdabfd1e34d3"], @ANYRESDEC=r2, @ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYRES64=0x0, @ANYBLOB="72fc7eda0f35ffa526f238ccb8fcff7cd1623ca60039aab859844d7ab193338919a410301186d3b79520fe7ab4691f8044957f54ee80ad2bc4c9018af71dd6c3e2422e92a0f15b1f43c8202eb6500c7fbf5d04d8127c9f56c24590eb4b5070e516d29bcd706fdc7758f38c46e22f49fc92927bedcdb9bcfce23ebf3e6d858c34a0afbe9413631990d8dfd39fb4d199daad08dee58d0074a3a927e16d515e839a57fc6c4e209a55269ca58e359b1c648402ba0bab3d7464e420b1ce633ef28d4d86dc1f88", @ANYRES16=0x0, @ANYPTR=&(0x7f0000000180)=ANY=[@ANYRESHEX=r3, @ANYRES32, @ANYPTR64, @ANYPTR64, @ANYRESDEC=r4], @ANYRESDEC, @ANYRESDEC=r3], 0x122) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r5, r5, 0x0, 0x8080fffffffe) 06:14:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef6"], 0xb) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) r3 = getuid() lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000240)={0xa0, 0xfffffffffffffffe, 0x4, {{0x2, 0x1, 0x9, 0x101, 0x4, 0x10000, {0x0, 0x3, 0x3, 0x0, 0x10000, 0x4, 0x8001, 0x4, 0x6, 0x8, 0x6, r3, r4, 0x3f, 0x3f}}, {0x0, 0x4}}}, 0xa0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r5, r5, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) 06:14:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="aa269fd62c2302a6d49eeb89d566f45ea5671daf64"], 0x2) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bde4346ff14b7b0"], 0x11) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f0000000140)={0x8, 0x6, 0x7f, 0xffff7dc0, 0x0, 0x9}) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x6, 0x40) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 1091.568510] audit: type=1804 audit(1571033681.242:374): pid=4132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir825720350/syzkaller.BCUY4k/1063/file0" dev="sda1" ino=16722 res=1 06:14:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0xfe937ff6ba131163, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext, 0x600, 0xbde3, 0x0, 0x0, 0xdbd1, 0xffffffff, 0xc5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x149042, 0x264f07cc874fb0d3) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x2) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(r1, &(0x7f0000000040)={0xe, 0x17, 0x2, {0x5, './bus'}}, 0xe) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3, 0x2, 0x3, 0x2, 0x4, 0x5b}, &(0x7f0000000100)=0x20) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000080)={0x8, 0x1, 0x8001}) sendfile(r0, r0, 0x0, 0x8080fffffffe) 06:14:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB=':!'], 0x2) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) 06:14:41 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) open(0x0, 0x141042, 0x34f) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x4000, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x1) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x40, 0x9, 0x0, 0x2, 0x4, 0x4, "3564da3a62ea926d79b7812e034ee54a8c79f50d52915245f58a83556f510055d894f0a1af94901a158f77ba69ca1c8e917a404eff9a7806598ff304de15fb4b", "bba164ce7bd3002c6dd096088397d4881163b414e8ab496b53a843d805b825290dc480637dba1a67b763b1f64b5557d47f131c3e6fb21c708d95cab5669fda43", "3416d1ba45af88fb8ffa8a2898c3d9419fbbd0f680a06ea059cfc61b150e0424", [0xcfb, 0x2]}) setxattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@random={'osx.', 'md5sumnodev:-useruser+]&keyringvmnet1ppp1vmnet1mime_typeposix_acl_access[\x00'}, &(0x7f0000000100)='\x00', 0x1, 0x6) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) getsockopt$sock_buf(r5, 0x1, 0x37, &(0x7f0000000180), &(0x7f0000000340)) sendfile(r0, r4, &(0x7f0000000140), 0x8080fffffffe) 06:14:41 executing program 5: r0 = syz_open_dev$radio(0x0, 0x1, 0x2) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000b00)=ANY=[@ANYBLOB="b7"], 0x1) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0xe0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x400000, 0x0) getsockopt$sock_buf(r2, 0x1, 0x37, &(0x7f00000000c0)=""/238, &(0x7f0000000200)=0xee) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r3, r3, 0x0, 0x8080fffffffe) 06:14:41 executing program 3: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="b90600b6c6dcc1e4bc6408c15e2b2a281f96aff8b81ef15229c3c44ae37e5b5f25e37a50890a000000"], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x9, 0x8) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) socket$l2tp(0x18, 0x1, 0x1) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000280)) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x600001, 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='omfs\x00', 0x0, &(0x7f0000000240)='/selinux/enforce\x00') r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r4) sendfile(r2, r2, 0x0, 0x8080fffffffe) 06:14:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB=':!'], 0x2) r2 = epoll_create1(0x100000) sendfile(r2, r1, &(0x7f0000000000), 0x8080fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) 06:14:41 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="06131d49212e83e9c28c60b11176a08936cf20043a4d3b67aa2f9e87dda90f595b37204a86f78276"], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) 06:14:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000080)={0x1, 0x9, "0c6e8b04f95b076d8cd0c218b966594482449664841f5904333f7ecf3dedb893", 0x3ff, 0xfff, 0x1f, 0x10000, 0x8}) r1 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$KDDISABIO(r0, 0x4b37) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="f6"], 0xb) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r3, r3, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r1, 0x80044946, 0x0) 06:14:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="3a218211f663b5724bdef66cc02b48c800720c23b993f73fcce3a539facd24f7ff44ab994e8ea9612be8cb53cf921f559520f3c9b3f69cd06c00def1576a8712ca2f04a0ac592ad807cc9aafcf88ad2fa1b6798ce659f3b4188d2ef226c5d35f3bb3252b1b2219682fb92385fe2f5f4e172e5fb7ddd0be6c9f44383e55e7857f48b8dd574c292ba2ec7d5e9aadab5f0a94b14f0180f533bd893676d63a62"], 0xb) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) 06:14:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f6c35109be6395c1ee56edec600ad8f7aae2288879930f44ae"], 0xb) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x7fff) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) 06:14:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000000080)={'syz'}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23", 0xc0, r0) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)="4324ddb550c605fcdc036b76894123d22cb5720d124e9c0f3ee0f41d85bec6a3bed01b34f34cfb3a2d0d19c472e68dff8fedd8c2d6250c08da833c885be0193fcb56141f0fe4aa23f722d653ade5f8f5075046670b2431305b8abc04039433016df35d976a4f61bb97b4cc955b55583efa934746f73c67e2e29b8f1f1517", 0x7e, r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000300)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000340)={r4, 0x0, 0xdd6}) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="3a23a98dff29ff3d38ce1497693b07fb5ec4d3caf7ce71edf25efe70dd32ee4623f8a38fd7c650dbb5d4ee440498d05821f91a53b7669985dfc082d79a211558994723542e95fc2a2b3387344b742e08fcdbac71b80cf44d94568d78af97caa506887e821d11fa43121bcbff267b86299539529fe64159d215c93d7b4163ade8d541f03bd5d55ac1847527c1156f0bcee009e3215ac50c987a717c01d9e9d148308f6542dbead939353f6d30328c9794ac014380e2afc11c18c1cebc66ddc1e840d2dd117e0a3c3900ab6d8ab37b"], 0x2) sendfile(r5, r5, &(0x7f0000000000), 0x8080fffffffe) r6 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x8, 0x800) ioctl$UFFDIO_UNREGISTER(r6, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000000000/0x4000)=nil, 0x4000}) sendfile(r1, r1, 0x0, 0x8080fffffffe) 06:14:42 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000000040)={0x7d}) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB=':!'], 0x2) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) sendfile(r1, r1, 0x0, 0x8080fffffffe) 06:14:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f3f8b35a1f0d11e5be7dadcd90d1a0b226d6f5b36adffded0f8d49482c37"], 0x2) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) 06:14:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bcef6"], 0xb) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) [ 1092.869152] ion_buffer_destroy: buffer still mapped in the kernel 06:14:42 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) r1 = open(0x0, 0x141042, 0x0) time(&(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(0xffffffffffffffff, r1) statx(r2, &(0x7f0000000080)='./bus\x00', 0x1000, 0xfbf, &(0x7f00000000c0)) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) write$UHID_INPUT2(r4, &(0x7f0000000200)={0xc, 0x69, "a008282e05249afd5c12dec4e71b47d44b414b02eb107d992e1e894d913e8d9dd222f28cd9c2bae1e5949b7b0b15c5ff073aa06d831ad8c5c6d855e7f117a38cb61841f871d7abeb7c60266d1b31c968e992993eb8d9b9fe78ec6d4d610011416f6181c48ea02c5095"}, 0x6f) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) 06:14:42 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) write$P9_RREADLINK(r3, &(0x7f0000000040)=ANY=[@ANYPTR64=&(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYRESOCT=r4, @ANYRES16=r5, @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYRESHEX=0x0], @ANYBLOB="f9abb0d916eecf01fb40d3e7a82ba9158b2c51ede17a0b3f36ce876d33b2139442bdd43724956dc365f4de9c3b56a86e6a780dc92176ba437a47fdab0619a313be54e1653a92a42c45ddd287484fe2dab3f81b1ddc04343a14e2a9c50d04c4aae0efe2f3d9ebbacacc5cd07f08ae1762230d9e82dd0cf7371f156a35d962670b4d94f7213d8ec26881e17d38ec04be01143ddbc0555263969de2c0075b8b87ef8735ad286156aefb528c9b38ff2a3f970f51dc80f88135085c7f2dc8eee4913aeaf07d0af9aa32d7811e13c7ee85e77f7f207cbfe6c9cc8b1ca98c", @ANYRES64=r0, @ANYRESHEX, @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRESDEC]]], 0x8) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) sendfile(r1, r1, 0x0, 0x8080fffffffe) 06:14:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB=':!'], 0x2) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) 06:14:42 executing program 2: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) r1 = fcntl$getown(r0, 0x9) r2 = perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x21aa62b964aca5e4}, 0x0, 0x0, 0x0, 0x6, 0x8000}, r1, 0x3, 0xffffffffffffffff, 0x0) r3 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef6"], 0xb) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r6, r6, &(0x7f0000000000), 0x8080fffffffe) sendfile(r5, r2, 0x0, 0x7) ioctl$IMCLEAR_L2(r3, 0x80044946, 0x0) 06:14:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB=':!'], 0x2) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000000c0)) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, {0x306}, 0x2, {0x2, 0x4e21, @multicast1}, 'bcsh0\x00'}) 06:14:42 executing program 1: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) open(0x0, 0x141042, 0x34f) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x4000, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x1) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x40, 0x9, 0x0, 0x2, 0x4, 0x4, "3564da3a62ea926d79b7812e034ee54a8c79f50d52915245f58a83556f510055d894f0a1af94901a158f77ba69ca1c8e917a404eff9a7806598ff304de15fb4b", "bba164ce7bd3002c6dd096088397d4881163b414e8ab496b53a843d805b825290dc480637dba1a67b763b1f64b5557d47f131c3e6fb21c708d95cab5669fda43", "3416d1ba45af88fb8ffa8a2898c3d9419fbbd0f680a06ea059cfc61b150e0424", [0xcfb, 0x2]}) setxattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@random={'osx.', 'md5sumnodev:-useruser+]&keyringvmnet1ppp1vmnet1mime_typeposix_acl_access[\x00'}, &(0x7f0000000100)='\x00', 0x1, 0x6) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) getsockopt$sock_buf(r5, 0x1, 0x37, &(0x7f0000000180), &(0x7f0000000340)) sendfile(r0, r4, &(0x7f0000000140), 0x8080fffffffe) 06:14:42 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="b7"], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000140), 0x7}, 0x8000, 0xfffffffffffffffd, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$TUNSETLINK(r3, 0x400454cd, 0x20) r4 = getpgid(r2) ptrace$getregs(0xc, r4, 0x90, &(0x7f0000000040)=""/226) sendfile(r1, r1, 0x0, 0x8080fffffffe) 06:14:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB=':!'], 0x2) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) 06:14:43 executing program 3: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) open(0x0, 0x141042, 0x34f) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x4000, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x1) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x40, 0x9, 0x0, 0x2, 0x4, 0x4, "3564da3a62ea926d79b7812e034ee54a8c79f50d52915245f58a83556f510055d894f0a1af94901a158f77ba69ca1c8e917a404eff9a7806598ff304de15fb4b", "bba164ce7bd3002c6dd096088397d4881163b414e8ab496b53a843d805b825290dc480637dba1a67b763b1f64b5557d47f131c3e6fb21c708d95cab5669fda43", "3416d1ba45af88fb8ffa8a2898c3d9419fbbd0f680a06ea059cfc61b150e0424", [0xcfb, 0x2]}) setxattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@random={'osx.', 'md5sumnodev:-useruser+]&keyringvmnet1ppp1vmnet1mime_typeposix_acl_access[\x00'}, &(0x7f0000000100)='\x00', 0x1, 0x6) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) getsockopt$sock_buf(r5, 0x1, 0x37, &(0x7f0000000180), &(0x7f0000000340)) sendfile(r0, r4, &(0x7f0000000140), 0x8080fffffffe) 06:14:43 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) lstat(&(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000340)='./bus\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000000c0)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x2) keyctl$chown(0x4, 0x0, r0, r1) r3 = open(&(0x7f0000000080)='./bus\x00', 0x800, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000400)={0xb2d88e, 0x0, {0x1, 0x1, 0x5, 0x1, 0x9}}) write$P9_RREADLINK(r3, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], 0x1) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000200)='./file0\x00', 0x2, 0xa, &(0x7f0000001980)=[{&(0x7f0000000240)="3fee41f18863a2aae1c9df4f0ca10a7cb1a958276a4b0e7d9e2f880105aff71e996cb36951e97aeac098f7d6e7488637ccd7", 0x32, 0xfffffffffffffffd}, {&(0x7f0000000480)="9b9faf1c90e41c7c0f338ad0f78bfa3419af58c1011c42ca08fa778a93e202ad46cbb2f4c94e299d", 0x28, 0x80000000}, {&(0x7f00000004c0)="a4092f9337b2826472bb6e01dc26887171737a6f008f39d32bcc3faba2d28f5eff1aa45acda1bc6651f037d14eb5df0d949202616c", 0x35, 0x7}, {&(0x7f0000000500)="f245ff678e36d6d9ab24cc460d9fd2ead0dceceb48a6368552abbf494f461d234e8647be2c8f818aa5757e2dff2bfbd3436a501ee8a09087ed14b92a84f37ff507e73c", 0x43, 0x8}, {&(0x7f0000000580)="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", 0x1000, 0x768}, {&(0x7f0000001580)="4552517fa4360d0c7ed70ae7500e7ee6cbddc2bca7a3cc3354b338770fb56e38a903721fcd97e68318a2dd927c5ab132de45e89e0325d1459823d5e1fdb2026b1d760f702c71c0c776d2f501cef112be06cb55993b6f", 0x56, 0x12}, {&(0x7f0000001600)="0b0b2c29cf8c508a4a2b5af1593c9b22e3d644650f77231aea8e812c48ae60c76f17313f97f2378a0254974965c770e7e88891f738cf631eed596ea628504363a5d742460a212a0436ecd0d37bcddd3e4c2125884b042d37c8cb4c8c933883c5777dac379421ff84e8e215465f020d899b18a8274cd1caf35c30196f8745d37f61b3cdce68fb568f45d319190d6e4cbb0ec60a0cf5b92e68da7ee77fbc4f43c12cc6caa1c950fee671a36f93ea56", 0xae, 0x75d}, {&(0x7f00000016c0)="21a077b2ed505236eafbb323836e2b9e862809490195cd35bd8c3d3da1dd9eeda23c71087ea08512bed5af38884d0f3ffbcb85789e4201f9d406250d7205c9d08d1b59d6d1a9b161e9c26802b558a33379e10382599aa331bcd25d4bf2d6ad2e38e33f746a24f0006b7e44d23ef3ed51b4d875d37496f3a404528f93ff5e9c377605a8a7ebbd860ff67f5e735d6c2868b7447afe3d0c8123cd4fa2f9dd86d67c0c7a9027d052fe30e80f0a6264b207cebb7a08c0cb5da8d3e633543d645a42d78b558671ae7a725e95b1bd18821ae77a94618b4a9d2117f5c0b43b3e5cda3d21b27ca1fd86f8bdd32b43106f5a07c620c2d67a56e4", 0xf5, 0xffffffffffffff01}, {&(0x7f00000017c0)="b6be8ef00bbfc69896692d4b4c0e7a3fa0cdd39cf56bb151727d4cd11f11acda0f19b6fa6609ceb6c77e2f24569399173d623870f6dcb7fdaabcf59ca2d0c39d91e7b01abe33678e583e2757a5b2a912d64e64264027e028982cc78525aa5824d7882d1a7b910f08dcdbbf447c1989bc3047dbc0d2f1c4d522dfb066e3d564c433e9d7", 0x83, 0x2}, {&(0x7f0000001880)="7b62ffc0711f63ad49fba975ddd04415c1d5f7aecc5ab04a11cef2b1e0ba8d2ffa7971862d1120a7676be9646b74e2062c741ada87ccf25c3da6506e2b2517ea1873ec309ce4442b239feb391e625be627a8f5e7e639d5d40208b49ae185bccc03fb455f87df740e824f1ccb64370af450cc5b73883e8eeb0e620d8e68636a836e72b6bc28e06b98d4d4500dcd4f34af1155971dd86d9cd0e742233b3e31b3254b1b391b683b1fe233d008d45689c48e883b190fc201f1bb4ab82d462079297187", 0xc1, 0x1}], 0x80, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r5, r5, &(0x7f0000000000), 0x8080fffffffe) ioctl$PPPIOCGIDLE(r5, 0x8010743f, &(0x7f0000000100)) sendfile(r4, r4, 0x0, 0x8080fffffffe) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0xd5c0173d4e759f68) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/audio\x00', 0x200000, 0x0) r7 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r7) ioctl$DRM_IOCTL_AGP_ALLOC(r7, 0xc0206434, &(0x7f0000001ac0)={0x1, 0x0, 0x3}) ioctl$DRM_IOCTL_AGP_BIND(r6, 0x40106436, &(0x7f0000001b00)={r8, 0x5}) 06:14:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141242, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./bus\x00', 0x6, 0x3) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB=':!'], 0x2) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) [ 1093.559512] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop5. 06:14:43 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="b7"], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000100)=0x44) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) [ 1093.728694] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop5. 06:14:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a01"], 0x2) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000040)={0x8, 0xf8}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) 06:14:43 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) r3 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r3, 0x7, &(0x7f0000027000)={0x1}) io_setup(0xc0, &(0x7f0000000040)=0x0) io_submit(r4, 0x1, &(0x7f00000005c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0, 0x0, 0x3}]) r5 = creat(&(0x7f0000000000)='./file0/bus\x00', 0x0) dup2(r5, r3) r6 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x0, @loopback}], 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000240)={r7, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000040)={r7, 0x3}, 0x8) 06:14:43 executing program 1: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) r1 = open(0x0, 0x141042, 0x0) time(&(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(0xffffffffffffffff, r1) statx(r2, &(0x7f0000000080)='./bus\x00', 0x1000, 0xfbf, &(0x7f00000000c0)) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) write$UHID_INPUT2(r4, &(0x7f0000000200)={0xc, 0x69, "a008282e05249afd5c12dec4e71b47d44b414b02eb107d992e1e894d913e8d9dd222f28cd9c2bae1e5949b7b0b15c5ff073aa06d831ad8c5c6d855e7f117a38cb61841f871d7abeb7c60266d1b31c968e992993eb8d9b9fe78ec6d4d610011416f6181c48ea02c5095"}, 0x6f) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) 06:14:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) readahead(r1, 0x12, 0x7f) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef6"], 0xb) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r3, r3, 0x0, 0x8080fffffffe) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) 06:14:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) stat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r2, r3, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef6"], 0xb) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r4, r4, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) 06:14:44 executing program 3: syz_open_dev$radio(0x0, 0x1, 0x2) lstat(&(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000340)='./bus\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000000c0)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x2) keyctl$chown(0x4, 0x0, r0, r1) r3 = open(&(0x7f0000000080)='./bus\x00', 0x800, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000400)={0xb2d88e, 0x0, {0x1, 0x1, 0x5, 0x1, 0x9}}) write$P9_RREADLINK(r3, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], 0x1) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000200)='./file0\x00', 0x2, 0xa, &(0x7f0000001980)=[{&(0x7f0000000240)="3fee41f18863a2aae1c9df4f0ca10a7cb1a958276a4b0e7d9e2f880105aff71e996cb36951e97aeac098f7d6e7488637ccd7", 0x32, 0xfffffffffffffffd}, {&(0x7f0000000480)="9b9faf1c90e41c7c0f338ad0f78bfa3419af58c1011c42ca08fa778a93e202ad46cbb2f4c94e299d", 0x28, 0x80000000}, {&(0x7f00000004c0)="a4092f9337b2826472bb6e01dc26887171737a6f008f39d32bcc3faba2d28f5eff1aa45acda1bc6651f037d14eb5df0d949202616c", 0x35, 0x7}, {&(0x7f0000000500)="f245ff678e36d6d9ab24cc460d9fd2ead0dceceb48a6368552abbf494f461d234e8647be2c8f818aa5757e2dff2bfbd3436a501ee8a09087ed14b92a84f37ff507e73c", 0x43, 0x8}, {&(0x7f0000000580)="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", 0x1000, 0x768}, {&(0x7f0000001580)="4552517fa4360d0c7ed70ae7500e7ee6cbddc2bca7a3cc3354b338770fb56e38a903721fcd97e68318a2dd927c5ab132de45e89e0325d1459823d5e1fdb2026b1d760f702c71c0c776d2f501cef112be06cb55993b6f", 0x56, 0x12}, {&(0x7f0000001600)="0b0b2c29cf8c508a4a2b5af1593c9b22e3d644650f77231aea8e812c48ae60c76f17313f97f2378a0254974965c770e7e88891f738cf631eed596ea628504363a5d742460a212a0436ecd0d37bcddd3e4c2125884b042d37c8cb4c8c933883c5777dac379421ff84e8e215465f020d899b18a8274cd1caf35c30196f8745d37f61b3cdce68fb568f45d319190d6e4cbb0ec60a0cf5b92e68da7ee77fbc4f43c12cc6caa1c950fee671a36f93ea56", 0xae, 0x75d}, {&(0x7f00000016c0)="21a077b2ed505236eafbb323836e2b9e862809490195cd35bd8c3d3da1dd9eeda23c71087ea08512bed5af38884d0f3ffbcb85789e4201f9d406250d7205c9d08d1b59d6d1a9b161e9c26802b558a33379e10382599aa331bcd25d4bf2d6ad2e38e33f746a24f0006b7e44d23ef3ed51b4d875d37496f3a404528f93ff5e9c377605a8a7ebbd860ff67f5e735d6c2868b7447afe3d0c8123cd4fa2f9dd86d67c0c7a9027d052fe30e80f0a6264b207cebb7a08c0cb5da8d3e633543d645a42d78b558671ae7a725e95b1bd18821ae77a94618b4a9d2117f5c0b43b3e5cda3d21b27ca1fd86f8bdd32b43106f5a07c620c2d67a56e4", 0xf5, 0xffffffffffffff01}, {&(0x7f00000017c0)="b6be8ef00bbfc69896692d4b4c0e7a3fa0cdd39cf56bb151727d4cd11f11acda0f19b6fa6609ceb6c77e2f24569399173d623870f6dcb7fdaabcf59ca2d0c39d91e7b01abe33678e583e2757a5b2a912d64e64264027e028982cc78525aa5824d7882d1a7b910f08dcdbbf447c1989bc3047dbc0d2f1c4d522dfb066e3d564c433e9d7", 0x83, 0x2}, {&(0x7f0000001880)="7b62ffc0711f63ad49fba975ddd04415c1d5f7aecc5ab04a11cef2b1e0ba8d2ffa7971862d1120a7676be9646b74e2062c741ada87ccf25c3da6506e2b2517ea1873ec309ce4442b239feb391e625be627a8f5e7e639d5d40208b49ae185bccc03fb455f87df740e824f1ccb64370af450cc5b73883e8eeb0e620d8e68636a836e72b6bc28e06b98d4d4500dcd4f34af1155971dd86d9cd0e742233b3e31b3254b1b391b683b1fe233d008d45689c48e883b190fc201f1bb4ab82d462079297187", 0xc1, 0x1}], 0x80, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r5, r5, &(0x7f0000000000), 0x8080fffffffe) ioctl$PPPIOCGIDLE(r5, 0x8010743f, &(0x7f0000000100)) sendfile(r4, r4, 0x0, 0x8080fffffffe) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0xd5c0173d4e759f68) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/audio\x00', 0x200000, 0x0) r7 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r7) ioctl$DRM_IOCTL_AGP_ALLOC(r7, 0xc0206434, &(0x7f0000001ac0)={0x1, 0x0, 0x3}) ioctl$DRM_IOCTL_AGP_BIND(r6, 0x40106436, &(0x7f0000001b00)={r8, 0x5}) 06:14:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bcef6"], 0xb) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) 06:14:44 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="b7"], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x420600, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000080)=r2) 06:14:44 executing program 3 (fault-call:2 fault-nth:0): rt_sigaction(0x0, &(0x7f0000000180)={0x0, {0x2}, 0x0, 0x0}, 0x0, 0x236, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0xe42, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x2}], 0x2000000000000009) [ 1094.704514] FAULT_INJECTION: forcing a failure. [ 1094.704514] name failslab, interval 1, probability 0, space 0, times 0 [ 1094.717646] CPU: 0 PID: 4328 Comm: syz-executor.3 Not tainted 4.14.149 #0 [ 1094.724597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1094.733956] Call Trace: [ 1094.736532] dump_stack+0x138/0x197 [ 1094.740163] should_fail.cold+0x10f/0x159 [ 1094.744322] should_failslab+0xdb/0x130 [ 1094.748364] __kmalloc+0x2f0/0x7a0 [ 1094.751899] ? __lock_acquire+0x5f7/0x4620 [ 1094.756115] ? rw_copy_check_uvector+0x1d8/0x290 [ 1094.760864] rw_copy_check_uvector+0x1d8/0x290 [ 1094.765460] import_iovec+0xa2/0x370 [ 1094.769235] ? dup_iter+0x260/0x260 [ 1094.772852] vfs_readv+0xb3/0x130 [ 1094.776314] ? compat_rw_copy_check_uvector+0x310/0x310 [ 1094.781679] ? lock_downgrade+0x740/0x740 [ 1094.785813] ? __fget+0x237/0x370 [ 1094.789251] ? __fget_light+0x172/0x1f0 [ 1094.793210] do_readv+0x10a/0x2d0 [ 1094.796650] ? vfs_readv+0x130/0x130 [ 1094.800348] ? do_preadv+0x200/0x200 [ 1094.804046] SyS_readv+0x28/0x30 [ 1094.807395] do_syscall_64+0x1e8/0x640 [ 1094.811264] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1094.816093] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1094.821262] RIP: 0033:0x459a59 [ 1094.824433] RSP: 002b:00007fdb5fb2dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1094.832122] RAX: ffffffffffffffda RBX: 00007fdb5fb2dc90 RCX: 0000000000459a59 [ 1094.839388] RDX: 2000000000000009 RSI: 0000000020000100 RDI: 0000000000000003 [ 1094.846639] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 06:14:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB=':!'], 0x2) geteuid() sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) [ 1094.853889] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdb5fb2e6d4 [ 1094.861151] R13: 00000000004c6fc3 R14: 00000000004dca50 R15: 0000000000000004 06:14:44 executing program 3 (fault-call:2 fault-nth:1): rt_sigaction(0x0, &(0x7f0000000180)={0x0, {0x2}, 0x0, 0x0}, 0x0, 0x236, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0xe42, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x2}], 0x2000000000000009) 06:14:44 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="b7"], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000080)={0x81, 0x2, 0x2, 0x0, 0x0, [{r2, 0x0, 0x2}, {r3, 0x0, 0x4bbc}]}) sendfile(r1, r1, 0x0, 0x8080fffffffe) 06:14:44 executing program 3: rt_sigaction(0x0, &(0x7f0000000180)={0x0, {0x2}, 0x0, 0x0}, 0x0, 0x236, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0xe42, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x20000, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000a80)={{{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000b80)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000f40)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000001040)=0xe8) accept$packet(0xffffffffffffffff, &(0x7f0000001080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000010c0)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000013c0)={{{@in=@multicast1, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f00000014c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001500)={{{@in6=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000001600)=0xe8) r8 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r8, r8, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000001640)={{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000001740)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001780)={{{@in6=@ipv4={[], [], @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000001880)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20020241}, 0xc, &(0x7f0000001c80)={&(0x7f0000000340)=ANY=[@ANYBLOB="8c030000", @ANYRES16=0x0, @ANYBLOB="10002abd7000ffdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="8000020038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000300000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b000000140004000200010600000000060009030800000008000100", @ANYRES32=r3, @ANYBLOB="6800020064000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b00000034000400010040f262a8000008000204f7ffffff010001ffff000000000040030000000001018108140000000008ff200300000008000100", @ANYRES32=r4, @ANYBLOB="f400020040000100240001007072696f726974790000000000005d03efd05020f1697d000000000000000000000000000000000000080003000e000000080004005d00000008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004001cef000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400fcffffff400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000300000008000600", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="f400020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040001feffff080007000000000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000104000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000600000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b00000008000400ff03000008000600", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="8000020040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=0x0], 0x38c}}, 0x800) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x2}], 0x2000000000000009) 06:14:44 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14"], 0xf) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x145842, 0x4) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) 06:14:44 executing program 1 (fault-call:3 fault-nth:0): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) [ 1095.136639] FAULT_INJECTION: forcing a failure. [ 1095.136639] name failslab, interval 1, probability 0, space 0, times 0 [ 1095.168687] CPU: 1 PID: 4359 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1095.175661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 06:14:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) write$binfmt_elf32(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0xbb, 0x3f, 0x7, 0x0, 0x0, 0x3, 0x3e, 0x80000000, 0x26e, 0x38, 0x263, 0xff, 0x0, 0x20, 0x1, 0x2, 0x5, 0x8}, [{0x7, 0x3, 0x0, 0x7, 0x4, 0xffffffff, 0x4, 0x7}], "b355fe32f586fa7932c8efe079165d448e5c181ffaeda1f63f7798ddf1b22c23e7af29d1a2a5cd2e0f8e83a0189a7266b00029417ee95e6895d9fdaff21f1836b588d60cae27c033387cce5e8665a2e65e5d0f1b8428f3be1a6c210022ab615ca39f03850e06a1d62ea01ea8d05d93dc3641e7c69b23ecf3c5cde6467c855c610ad35c3eefd0f47a88", [[], [], [], []]}, 0x4e1) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'vcan0\x00', {0x2, 0x4e22, @rand_addr=0x80000000}}) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB=':!'], 0x2) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 1095.185022] Call Trace: [ 1095.187624] dump_stack+0x138/0x197 [ 1095.191272] should_fail.cold+0x10f/0x159 [ 1095.195426] should_failslab+0xdb/0x130 [ 1095.199401] __kmalloc+0x2f0/0x7a0 [ 1095.202948] ? __sb_end_write+0xc1/0x100 [ 1095.207012] ? strnlen_user+0x12f/0x1a0 [ 1095.210989] ? SyS_memfd_create+0xba/0x3a0 [ 1095.215231] SyS_memfd_create+0xba/0x3a0 [ 1095.219297] ? shmem_fcntl+0x130/0x130 [ 1095.223188] ? do_syscall_64+0x53/0x640 [ 1095.227167] ? shmem_fcntl+0x130/0x130 [ 1095.231063] do_syscall_64+0x1e8/0x640 [ 1095.235390] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1095.240221] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1095.246607] RIP: 0033:0x459a59 [ 1095.249804] RSP: 002b:00007fd726182a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1095.257768] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000459a59 [ 1095.265030] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004be9b7 [ 1095.272321] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 1095.279592] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7261836d4 06:14:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x42e229e5997c389a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef6"], 0xb) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) 06:14:45 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="f7"], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 1095.287198] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 06:14:45 executing program 1 (fault-call:3 fault-nth:1): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) [ 1095.383650] FAULT_INJECTION: forcing a failure. [ 1095.383650] name failslab, interval 1, probability 0, space 0, times 0 [ 1095.396547] CPU: 1 PID: 4379 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1095.403568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1095.412914] Call Trace: [ 1095.415502] dump_stack+0x138/0x197 [ 1095.419201] should_fail.cold+0x10f/0x159 [ 1095.423351] should_failslab+0xdb/0x130 [ 1095.427317] kmem_cache_alloc+0x2d7/0x780 [ 1095.431458] ? __alloc_fd+0x1d4/0x4a0 [ 1095.435257] __d_alloc+0x2d/0x9f0 [ 1095.438711] ? lock_downgrade+0x740/0x740 [ 1095.442868] d_alloc_pseudo+0x1e/0x30 [ 1095.446666] __shmem_file_setup.part.0+0xd8/0x400 [ 1095.451493] ? __alloc_fd+0x1d4/0x4a0 [ 1095.455280] ? shmem_fill_super+0x8c0/0x8c0 [ 1095.459614] SyS_memfd_create+0x1f9/0x3a0 [ 1095.463847] ? shmem_fcntl+0x130/0x130 [ 1095.467728] ? do_syscall_64+0x53/0x640 [ 1095.471702] ? shmem_fcntl+0x130/0x130 [ 1095.475686] do_syscall_64+0x1e8/0x640 [ 1095.479784] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1095.484642] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1095.489834] RIP: 0033:0x459a59 [ 1095.493023] RSP: 002b:00007fd726182a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1095.500730] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000459a59 [ 1095.508001] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004be9b7 [ 1095.515265] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 1095.522520] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7261836d4 06:14:45 executing program 5: r0 = syz_open_dev$radio(0x0, 0x1, 0x2) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000b00)=ANY=[@ANYBLOB="b7"], 0x1) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4={[], [], @multicast2}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x180}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0x1da) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r5, r5, 0x0, 0x8080fffffffe) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000040)={0x6a, 0xff, 0x8, 0xa, 0xfff}) [ 1095.529785] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 06:14:45 executing program 1 (fault-call:3 fault-nth:2): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) 06:14:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000040)={0x1, 0x2, 0x1000, 0x0, r2}) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef6"], 0xb) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r5, 0x7, &(0x7f0000027000)={0x1}) io_setup(0xc0, &(0x7f0000000040)=0x0) io_submit(r6, 0x1, &(0x7f00000005c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r5, 0x0, 0x0, 0x3}]) r7 = creat(&(0x7f0000000000)='./file0/bus\x00', 0x0) dup2(r7, r5) r8 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x0, @loopback}], 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f0000000240)={r9, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x8205, 0x1, 0x2, r9}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={r10, 0x800}, 0x8) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r11 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r11, r11, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) [ 1095.633437] FAULT_INJECTION: forcing a failure. [ 1095.633437] name failslab, interval 1, probability 0, space 0, times 0 [ 1095.670275] CPU: 1 PID: 4392 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1095.677252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1095.686612] Call Trace: [ 1095.689193] dump_stack+0x138/0x197 [ 1095.692816] should_fail.cold+0x10f/0x159 [ 1095.696965] should_failslab+0xdb/0x130 [ 1095.701053] kmem_cache_alloc+0x2d7/0x780 [ 1095.705201] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1095.710656] ? rcu_read_lock_sched_held+0x110/0x130 [ 1095.715690] ? shmem_destroy_callback+0xa0/0xa0 [ 1095.720379] shmem_alloc_inode+0x1c/0x50 [ 1095.724445] alloc_inode+0x64/0x180 [ 1095.728101] new_inode_pseudo+0x19/0xf0 [ 1095.732068] new_inode+0x1f/0x40 [ 1095.735423] shmem_get_inode+0x75/0x750 [ 1095.739399] __shmem_file_setup.part.0+0x111/0x400 [ 1095.744386] ? __alloc_fd+0x1d4/0x4a0 [ 1095.748175] ? shmem_fill_super+0x8c0/0x8c0 [ 1095.752502] SyS_memfd_create+0x1f9/0x3a0 [ 1095.756660] ? shmem_fcntl+0x130/0x130 [ 1095.760558] ? do_syscall_64+0x53/0x640 [ 1095.764530] ? shmem_fcntl+0x130/0x130 [ 1095.768411] do_syscall_64+0x1e8/0x640 [ 1095.772288] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1095.777132] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1095.782330] RIP: 0033:0x459a59 [ 1095.785515] RSP: 002b:00007fd726182a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1095.793304] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000459a59 [ 1095.800573] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004be9b7 [ 1095.807854] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 1095.815124] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7261836d4 [ 1095.822394] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 06:14:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="3a1e0000f663a7724bdec42d7de7bb23b78e168e"], 0xb) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) 06:14:45 executing program 1 (fault-call:3 fault-nth:3): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) [ 1095.975884] FAULT_INJECTION: forcing a failure. [ 1095.975884] name failslab, interval 1, probability 0, space 0, times 0 [ 1095.992793] CPU: 0 PID: 4407 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1095.999753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1096.009108] Call Trace: [ 1096.011695] dump_stack+0x138/0x197 [ 1096.015318] should_fail.cold+0x10f/0x159 [ 1096.019474] should_failslab+0xdb/0x130 [ 1096.023439] kmem_cache_alloc+0x2d7/0x780 [ 1096.027570] ? shmem_alloc_inode+0x1c/0x50 [ 1096.031795] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1096.037236] selinux_inode_alloc_security+0xb6/0x2a0 [ 1096.042376] security_inode_alloc+0x94/0xd0 [ 1096.046691] inode_init_always+0x552/0xaf0 [ 1096.050918] alloc_inode+0x81/0x180 [ 1096.054538] new_inode_pseudo+0x19/0xf0 [ 1096.058492] new_inode+0x1f/0x40 [ 1096.061901] shmem_get_inode+0x75/0x750 [ 1096.065871] __shmem_file_setup.part.0+0x111/0x400 [ 1096.070789] ? __alloc_fd+0x1d4/0x4a0 [ 1096.074581] ? shmem_fill_super+0x8c0/0x8c0 [ 1096.078888] SyS_memfd_create+0x1f9/0x3a0 [ 1096.083032] ? shmem_fcntl+0x130/0x130 [ 1096.086912] ? do_syscall_64+0x53/0x640 [ 1096.090882] ? shmem_fcntl+0x130/0x130 [ 1096.094776] do_syscall_64+0x1e8/0x640 [ 1096.098661] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1096.103597] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1096.108776] RIP: 0033:0x459a59 [ 1096.111954] RSP: 002b:00007fd726182a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f 06:14:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x200000, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x112) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x2) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) [ 1096.119654] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000459a59 [ 1096.126905] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004be9b7 [ 1096.134156] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 1096.141407] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7261836d4 [ 1096.148831] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 06:14:45 executing program 1 (fault-call:3 fault-nth:4): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) 06:14:45 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="b7"], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) write$P9_RSYMLINK(r2, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x8, 0x4, 0x3}}, 0x14) 06:14:45 executing program 3: rt_sigaction(0x0, &(0x7f0000000180)={0x0, {0x2}, 0x0, 0x0}, 0x0, 0x236, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='/dev/rfkill\x00') r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0xe42, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0xffffffab}], 0x2000000000000009) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = dup(0xffffffffffffffff) r4 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r5, r5, &(0x7f0000000000)=0x4, 0x8080fffffffe) mq_getsetattr(r5, &(0x7f0000000280)={0x7, 0xad88, 0x1ff, 0x7fff, 0x1, 0x6, 0x7, 0x200005}, &(0x7f00000002c0)) fcntl$lock(r4, 0x7, &(0x7f0000027000)={0x1}) io_setup(0xc0, &(0x7f0000000040)=0x0) io_submit(r6, 0x1, &(0x7f00000005c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r4, 0x0, 0x0, 0x3}]) r7 = creat(&(0x7f0000000000)='./file0/bus\x00', 0x0) dup2(r7, r4) r8 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x0, @loopback}], 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f0000000240)={r9, 0x9}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000000c0)={r9, 0xcc}, &(0x7f0000000140)=0xc) ptrace$peek(0xffffffffffffffff, r2, &(0x7f0000000080)) 06:14:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef6"], 0xb) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) 06:14:46 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000300), &(0x7f0000000340)=0xc) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x100) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14872b5721f15d45910603aa25a1f8eb20557cad75441148a48f131bc353920bcca319bfa46e6c9f1d4142aca7dae83c7c569f6be4e5809ce39eb0f66bae86b581f5d62414c1eb15f83e93c89769535196ab51784a389745c8b86f26d8e48230b5fe4d422afd8d28af62205e15fdd20f80e40fff4063f883b2b827f95a3c25e54d8fbe2df32eab42204bc6b7328e0f5fc51c5dc1398d40d8b863619846245ae5fa3b66c86f"], 0xf) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$VIDIOC_LOG_STATUS(r4, 0x5646, 0x0) fchdir(r3) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) setsockopt$inet6_buf(r5, 0x29, 0x30, &(0x7f0000000100)="546b94ee5de12768a6fa21c83c8ffb7ae60124b38d1adff79abd9daf15768b49dc84f5c8764361da804daa2f76e660d5eea066ebedcc69697844f9def013ad2a5cb6d96fb264864112a72c01e768fed7827c5030a0bbd5fc50941028f427fba02384afe44fec54e7afa799de41d209a287974268177b5d24a40a28f617a18f53630e01cfff07e07515ee48529bad6df23abcb4bf7eba0711f2a9", 0x9a) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1ff, 0x6, 0x0, 0x2, 0xdb21, 0x18, "7e4b90241c2dad2bc968a12549b810c02d6b955d08283586637c1973fc54ea14e55d7244a5db5d56ca54fce9ff5faed2cac51fcc271a066281bfa37a8dd64e6e", "8ec3a51b541fb9489ad7e367f850760146dd6d8eebdb5fc25f0c702585174012ecb1bdcfdce277b2bcadba44a15be33413080712c37a3a3ea411c85fd38d9c81", "ee9c10d2940f4fa1b8294a555afda9497de78842a5ee4e4449394e644ffa5c94", [0x2, 0x17e]}) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) [ 1096.317334] audit: type=1804 audit(1571033685.992:375): pid=4419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir903629541/syzkaller.VJmRQl/1104/bus" dev="sda1" ino=16693 res=1 [ 1096.353626] FAULT_INJECTION: forcing a failure. [ 1096.353626] name failslab, interval 1, probability 0, space 0, times 0 [ 1096.373137] CPU: 1 PID: 4428 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1096.380114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1096.389476] Call Trace: [ 1096.392054] dump_stack+0x138/0x197 [ 1096.395677] should_fail.cold+0x10f/0x159 [ 1096.399818] should_failslab+0xdb/0x130 [ 1096.403787] kmem_cache_alloc+0x2d7/0x780 [ 1096.407925] ? lock_downgrade+0x740/0x740 [ 1096.412162] get_empty_filp+0x8c/0x3f0 [ 1096.416059] alloc_file+0x23/0x440 [ 1096.419609] __shmem_file_setup.part.0+0x1b1/0x400 [ 1096.424549] ? __alloc_fd+0x1d4/0x4a0 [ 1096.428357] ? shmem_fill_super+0x8c0/0x8c0 [ 1096.432689] SyS_memfd_create+0x1f9/0x3a0 [ 1096.436832] ? shmem_fcntl+0x130/0x130 [ 1096.440783] ? do_syscall_64+0x53/0x640 [ 1096.444744] ? shmem_fcntl+0x130/0x130 [ 1096.448632] do_syscall_64+0x1e8/0x640 [ 1096.452542] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1096.457392] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1096.462582] RIP: 0033:0x459a59 [ 1096.465774] RSP: 002b:00007fd726182a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f 06:14:46 executing program 3: rt_sigaction(0x0, &(0x7f0000000180)={0x0, {0x2}, 0x0, 0x0}, 0x0, 0x236, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x600, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x2}], 0x2000000000000009) [ 1096.473481] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000459a59 [ 1096.480741] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004be9b7 [ 1096.480748] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 1096.480753] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7261836d4 [ 1096.480759] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 06:14:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = geteuid() syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./bus/file0\x00', 0x1, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="3996bbfb124751ea9778580f41e6b4e234d96ac3bc23ab28862eaaead833ea84af29ea6be6ce7db70478cee1a0edf9045d2262dbb508f2ae4bf43b24f5f067c613d4604a2dadc6c8c421496f19a5e4eb0def892cd2962116c29141ad5b2858f2a03bca7db2451044402591936e666ad8da2b8b0979d3224f943b9bfb1e6d0c740e80eb78cc01dce5188a4ff5aadc5b44b45d5f1a54589345f59ef25e0bce12901acaae138db30a9ce71607b835273a3bbd566e5bb24b43e0c4495551741eb21c21c6cacfdd6af80351b33f857e16546aefbd", 0xd2, 0x7fff}], 0x1010000, &(0x7f0000000240)={[{@attr2='attr2'}], [{@fowner_lt={'fowner<', r2}}, {@obj_type={'obj_type', 0x3d, 'vboxnet1!'}}, {@obj_user={'obj_user', 0x3d, 'vboxnet0cgroup,-]'}}]}) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB=':!'], 0x2) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) 06:14:46 executing program 1 (fault-call:3 fault-nth:5): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) [ 1096.529475] audit: type=1804 audit(1571033686.202:376): pid=4419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir903629541/syzkaller.VJmRQl/1104/bus" dev="sda1" ino=16693 res=1 06:14:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f6cb191e30dd31"], 0xb) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) [ 1096.623420] FAULT_INJECTION: forcing a failure. [ 1096.623420] name failslab, interval 1, probability 0, space 0, times 0 [ 1096.635435] CPU: 1 PID: 4451 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1096.642392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1096.642398] Call Trace: [ 1096.642415] dump_stack+0x138/0x197 [ 1096.642434] should_fail.cold+0x10f/0x159 [ 1096.642453] should_failslab+0xdb/0x130 [ 1096.642465] kmem_cache_alloc+0x2d7/0x780 [ 1096.642476] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1096.662377] ? check_preemption_disabled+0x3c/0x250 [ 1096.662396] selinux_file_alloc_security+0xb4/0x190 [ 1096.662410] security_file_alloc+0x6d/0xa0 [ 1096.662425] get_empty_filp+0x162/0x3f0 [ 1096.662435] alloc_file+0x23/0x440 [ 1096.662449] __shmem_file_setup.part.0+0x1b1/0x400 [ 1096.662460] ? __alloc_fd+0x1d4/0x4a0 [ 1096.662470] ? shmem_fill_super+0x8c0/0x8c0 [ 1096.662488] SyS_memfd_create+0x1f9/0x3a0 [ 1096.662498] ? shmem_fcntl+0x130/0x130 [ 1096.662509] ? do_syscall_64+0x53/0x640 [ 1096.662519] ? shmem_fcntl+0x130/0x130 [ 1096.662531] do_syscall_64+0x1e8/0x640 [ 1096.662540] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1096.662562] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1096.676094] RIP: 0033:0x459a59 [ 1096.743768] RSP: 002b:00007fd726182a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1096.751486] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000459a59 [ 1096.758755] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004be9b7 [ 1096.766023] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 06:14:46 executing program 1 (fault-call:3 fault-nth:6): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) [ 1096.773298] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7261836d4 [ 1096.780575] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 [ 1096.827683] FAULT_INJECTION: forcing a failure. [ 1096.827683] name failslab, interval 1, probability 0, space 0, times 0 [ 1096.847253] CPU: 0 PID: 4461 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1096.854209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1096.863570] Call Trace: [ 1096.866160] dump_stack+0x138/0x197 [ 1096.869785] should_fail.cold+0x10f/0x159 [ 1096.873923] should_failslab+0xdb/0x130 [ 1096.877895] kmem_cache_alloc+0x2d7/0x780 [ 1096.882041] ? do_sys_ftruncate.constprop.0+0x35c/0x490 [ 1096.887407] getname_flags+0xcb/0x580 [ 1096.891208] getname+0x1a/0x20 [ 1096.894410] do_sys_open+0x1e7/0x430 [ 1096.898112] ? filp_open+0x70/0x70 [ 1096.901641] ? do_sys_ftruncate.constprop.0+0x370/0x490 [ 1096.906999] SyS_open+0x2d/0x40 [ 1096.910262] ? do_sys_open+0x430/0x430 [ 1096.914146] do_syscall_64+0x1e8/0x640 [ 1096.918036] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1096.922867] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1096.928057] RIP: 0033:0x413941 [ 1096.931237] RSP: 002b:00007fd726182a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1096.938946] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000413941 [ 1096.946211] RDX: 00007fd726182b0a RSI: 0000000000000002 RDI: 00007fd726182b00 [ 1096.953471] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1096.960751] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000006 [ 1096.968013] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 06:14:46 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x10000, 0x480) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000002640)={&(0x7f00000000c0), 0xc, &(0x7f0000002600)={&(0x7f0000002400)={0x1f0, r2, 0x300, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0xa0, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x0, 0x0, 0xff, 0x6}, {0xffff, 0x0, 0x1, 0x5}, {0x2, 0x69, 0x8, 0xfffffff7}, {0x29, 0x5, 0x6, 0x916}, {0x4f96, 0x25, 0x1, 0x400}]}}}]}}, {{0x8, 0x1, r5}, {0x12c, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xc2f}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}]}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x7fd0d26ac7371d37}, 0x24010001) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=@deltfilter={0x2e54, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, r4, {0x4, 0xf}, {0x4, 0x10}, {0x226569b37bded17c, 0x10}}, [@filter_kind_options=@f_matchall={{0x10, 0x1, 'matchall\x00'}, {0x160, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x7}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xb0d9befb7a37897d, 0xfff2}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0xe}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xf, 0x9}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0xe}}, @TCA_MATCHALL_ACT={0x114, 0x2, @m_connmark={0x110, 0x9, {{0x10, 0x1, 'connmark\x00'}, {0x20, 0x2, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x0, 0x6, 0x23, 0x1}, 0x10}}}, {0xd8, 0x6, "52798690f8917cb1f972d65251e8dee024ad2b6973c2548f4ba61010210bf3ce9fe73081ec2a0150df4c3a49d20f86d8310d081c4c938b27e5f97a3302485a6ec14aa5b5ab0db38af1d96f2f68fefb6104da272d014663e1ecaf49e66b11ca76438a86f6f2a1d07d1f07cf19cf048433420b2f8e77c11761073e2290d2c6f833f79551d9e072bc522ae5efcb9286861df50ca085055fd8f6833375b9a2360cb6e09c5a9df5c4d69fecc7b7eae761641e03a4f71287abf7762f92cc0eafbbcf29bcc13648796f1af33a0716bd08d3a6a6a074db"}}}}]}}, @filter_kind_options=@f_flow={{0xc, 0x1, 'flow\x00'}, {0x2c7c, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x4}, @TCA_FLOW_KEYS={0x8, 0x1, 0xbd7f}, @TCA_FLOW_MASK={0x8, 0x6, 0xfffffffa}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x10da}, @TCA_FLOW_ACT={0x2c48, 0x9, @m_pedit={0x2c44, 0x1c, {{0xc, 0x1, 'pedit\x00'}, {0x2bcc, 0x2, [@TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0x5, 0x1000, 0x4, 0xfffffffa, 0x7fff}, 0x2, 0x4, [{0x7fff, 0x3, 0x9, 0x6, 0x2, 0x80}, {0x7fff, 0x40, 0x1, 0x7fffffff, 0x0, 0xb08}, {0x9, 0x2, 0x8000, 0x2f803df1, 0x7, 0x3ff}, {0x3, 0x40000000, 0x80, 0x2, 0x6, 0x7fff}]}, [{0xfffffff8, 0x5, 0x100, 0x7, 0x315, 0x3}, {0x3, 0x2, 0x6, 0x98b, 0xdf, 0x7}, {0x4, 0xf9a7, 0x9, 0x528, 0x10000, 0x4}, {0x9, 0x1, 0x8, 0x7, 0x5, 0xffffffff}, {0x8000, 0xa0000, 0x1, 0x101, 0xf7, 0x400}, {0x3, 0x5, 0x3, 0x9, 0x0, 0xf953}, {0x8, 0x4000800, 0x6, 0xfffffffe, 0x1, 0x600000}, {0x5, 0x7, 0x3f, 0x0, 0x8, 0xbf}, {0x6, 0x1, 0x6df937af, 0x10001, 0x10000, 0x81}, {0x777e, 0x30000, 0x8, 0xc8, 0x8, 0x2}, {0x9, 0xff, 0x9, 0x8, 0x5d3, 0x1}, {0x3, 0x8, 0xfffffff8, 0x1, 0x6, 0xe0000000}, {0x300, 0x2, 0x0, 0x6, 0x4, 0x7}, {0xbd, 0x5, 0xef34, 0x40, 0x9, 0x7f}, {0x7, 0x6, 0x7, 0x49c, 0x80, 0xaa16}, {0x800, 0x0, 0x6, 0x4, 0x1, 0x9}, {0xda8, 0xffffffff, 0x2, 0x56f9, 0xff, 0x28f}, {0xfffffffe, 0xd099, 0x3, 0x8, 0xff, 0x20}, {0x5, 0x9, 0x0, 0x10001, 0x5cc, 0x9}, {0x392d, 0x0, 0xfff, 0x4, 0xff, 0x3}, {0xef, 0xfff, 0xb4b, 0x800, 0x26200000, 0x2}, {0x3, 0x4, 0x5, 0x7, 0xd83d, 0x8}, {0x4, 0xfffff6c4, 0x6, 0x7, 0x305}, {0x5, 0xe103, 0xffffffff, 0x20, 0xffff, 0x80000001}, {0x5, 0xa44, 0x455, 0xffffff00, 0x0, 0x401}, {0xff, 0xf24, 0x440e, 0x4, 0x20, 0x5}, {0x10000, 0x74f, 0xd0c, 0xbd78, 0x10000, 0x2}, {0x40, 0x2, 0x7fff, 0x9, 0x0, 0x4}, {0xa3c0, 0x800, 0x1, 0x4, 0x4, 0x1}, {0x3, 0x101, 0x9, 0x3, 0x10000, 0x6}, {0x8, 0xfffffffb, 0x80, 0x8, 0xffffffff, 0x9}, {0x7f, 0x8, 0x6, 0x4, 0x1aa3, 0xb362}, {0x2, 0x4, 0x4, 0x1ff, 0x0, 0x7}, {0x6, 0x91, 0x63, 0x9, 0x1, 0x8}, {0x3f, 0x9, 0x2, 0x8001, 0x8, 0x7}, {0x8001, 0x5, 0x3f, 0x4, 0x7, 0xfffffc01}, {0x5, 0x6, 0x1, 0x8, 0x3f, 0x1}, {0x6, 0xffffffff, 0x4, 0x0, 0x40, 0x1}, {0x1, 0x6, 0x3ddb, 0xff, 0x1, 0x3}, {0xff, 0x34, 0x7, 0x3, 0x0, 0x8}, {0x6, 0x800, 0xfffffffc, 0x7fffffff, 0x2, 0x9}, {0x4, 0x0, 0x3ff, 0x8, 0x4, 0x6}, {0x9, 0x7ff, 0x5, 0x9, 0x1f, 0x1}, {0x81, 0x3, 0x1000, 0x4, 0x7, 0x9}, {0x0, 0x7fff, 0x1, 0x1ff, 0x3b, 0x1000000}, {0xd0, 0x38ac395d, 0x800, 0x3e8, 0xfffffff8, 0x6}, {0x9, 0x5, 0x20, 0x9, 0x81}, {0x7fffffff, 0x7, 0x7, 0x80000000, 0x3ff, 0x800}, {0x7ff, 0xfffffff9, 0x10000, 0x3, 0x1, 0x1ff}, {0x7, 0x5, 0x4a8bb52b, 0x24000, 0x2, 0x1}, {0x3, 0x2, 0x81, 0x0, 0xffffffff, 0x3}, {0xb0, 0x2, 0xfffffffe, 0x5, 0x1, 0x2}, {0x6, 0x3, 0x1ff, 0x301a, 0x0, 0x100}, {0x7, 0x7ff, 0x10000, 0x4f5, 0xfff, 0x3}, {0x1, 0x4, 0x401, 0x0, 0x1, 0x7}, {0x0, 0x8, 0x1f, 0x0, 0x401, 0x28000000}, {0x81, 0x800, 0x8, 0x4, 0x9, 0x10001}, {0x7, 0xe3c, 0x2, 0x2, 0x7, 0x6}, {0x8, 0x50c, 0xff, 0x200, 0x3, 0x6}, {0x0, 0x6, 0x91c, 0x7, 0x9899, 0xd06b}, {0x0, 0xffff, 0x2, 0x8, 0x10000, 0x8}, {0x6, 0x7, 0x81, 0x5, 0x2, 0x80000000}, {0x3, 0xfaad, 0x8, 0xd40, 0x4, 0x3f}, {0x10001, 0x0, 0x2, 0x2, 0x80000000, 0x8}, {0xba9, 0x80000000, 0x1ff, 0x4fa, 0xfffff800, 0x6}, {0x798c6ee, 0x0, 0x6, 0x4, 0x80000001, 0xff}, {0x8000, 0x100, 0x7, 0xffffffff, 0xc11, 0xb9c4}, {0xfffffff7, 0x200, 0x86ce, 0xfa, 0x2, 0x9}, {0xc242, 0x2, 0x8, 0x7, 0x0, 0x9}, {0x172c0, 0xff, 0xdf, 0x312f7677, 0x3, 0x7fffffff}, {0x2d04, 0x1, 0x5, 0x90, 0x1, 0x8}, {0x400, 0x2, 0xfffffff7, 0x1, 0x2, 0x8}, {0x0, 0x1, 0x9, 0x7, 0x3, 0x4}, {0x0, 0x10001, 0x7f, 0x7ff, 0xffffffff, 0x596c}, {0x1, 0xb4, 0x0, 0x4, 0xffff, 0xa032}, {0xfb3, 0xffffffff, 0x1000, 0xffffffff, 0x0, 0x6da0008b}, {0x0, 0x0, 0x101, 0x20, 0xfffffc00, 0x9}, {0xffffff80, 0x4, 0x68, 0xfffffff7, 0x8, 0x8001}, {0x7, 0x5, 0x5, 0x7, 0x3, 0x1130}, {0x5, 0x1000, 0x4, 0x3a43, 0x1, 0x8}, {0x40, 0x32f8, 0xffffffff, 0x8, 0x8, 0xafb7}, {0x7f, 0x0, 0xfffffff9, 0x1000, 0x1}, {0xfaf, 0xd802, 0xfff, 0xff, 0x9, 0x88}, {0x0, 0x8, 0x1, 0x6, 0xfffffffb, 0x7}, {0x7fff, 0x0, 0x5, 0x7, 0x351e, 0x4}, {0x0, 0x80000001, 0xfffffff7, 0x7, 0x6d2, 0x8}, {0x4, 0x3dd9, 0x0, 0x200, 0x5, 0xffffffff}, {0x8, 0x3, 0x6, 0xffff, 0x101}, {0x5, 0xff, 0x469, 0x1, 0xea, 0x1}, {0x7f, 0x7, 0x7, 0x2, 0x8de8}, {0x1, 0x7fff, 0xba, 0x1, 0x8161, 0x1000}, {0x5, 0x7a34, 0xda, 0xb6, 0x10000, 0xc1}, {0xffff, 0x7, 0x1, 0x3f, 0xc51b, 0x7}, {0x1, 0x59, 0x1ff, 0x6, 0x3, 0x2}, {0x20, 0x2, 0x3, 0xd9}, {0x1, 0x9, 0x3, 0xf79d, 0x6, 0x2}, {0x631, 0x2, 0x1, 0x1, 0x4, 0x4}, {0x7, 0x4, 0x23395cd4, 0x9, 0x8, 0x2}, {0xc23, 0x401, 0x0, 0x8bb, 0x7c37, 0x200}, {0xd0ce, 0x1, 0xb3c, 0x460d, 0x81, 0x7}, {0x1, 0x8, 0x3, 0x3, 0xfffffeff, 0x7ff}, {0x0, 0xffffd2da, 0x7, 0x4, 0x4f9, 0xc6a5}, {0x8, 0x3f, 0x1, 0xfffffbff, 0x32e6cbc0}, {0xff, 0x5, 0xea, 0xea1, 0xa9, 0x3d}, {0x1, 0x4, 0x7, 0x0, 0xd61, 0x3}, {0x7fff, 0x3, 0x0, 0x7fffffff, 0x80, 0xff}, {0x20, 0x3, 0x9, 0x2, 0x7, 0x56}, {0x10000, 0x8001, 0x101, 0x6, 0x6, 0x7f}, {0x4, 0x1, 0x5, 0x4, 0x6, 0x3}, {0x1f, 0x7, 0x2, 0xffffffff, 0x0, 0x7cd6}, {0xb71, 0x8, 0x1, 0x45, 0x330a, 0x200}, {0x9, 0x9, 0xcde, 0x1, 0xfff, 0x3}, {0x0, 0xe00000, 0x400, 0x5, 0xffffff05, 0x7}, {0x7fffffff, 0x34f9d448, 0x7d, 0x9, 0x6, 0x4}, {0xfffffffe, 0x4dec, 0x8, 0x8, 0x400, 0x1000}, {0x5, 0x9, 0x10001, 0x7, 0xd48, 0xffff0001}, {0x5a1, 0x196, 0x6, 0x1f, 0x82b, 0x6}, {0xfffffffb, 0x8, 0xacd, 0x6, 0x0, 0xdcbb}, {0x400, 0x51e9, 0x6, 0x1, 0x2, 0x4}, {0x4, 0x8, 0x69d, 0x7, 0xcb, 0x159}, {0x1ff, 0x5, 0x0, 0xffffffff, 0x4b8cbe49, 0x100}, {0xff, 0x5, 0x3000, 0x3, 0xfd, 0x7}, {0x6, 0x9, 0x4, 0x8, 0x8, 0x2}, {0x9, 0x408, 0x3c6, 0x81, 0x1, 0x9}, {0x6, 0x8, 0x5, 0x0, 0x0, 0x3}, {0x1, 0x100, 0x7fffffff, 0x800, 0xffffff81, 0xec0}, {0x1, 0x0, 0x6dc, 0x1, 0x8001, 0xffff7fff}, {0x1a, 0x9, 0x66bbf4c6, 0x7, 0xa1, 0x7fff}], [{0x2, 0x1}, {}, {0x5, 0x1}, {0x101bdfd3437bad33, 0x3}, {}, {0x2}, {0x6671a744f931685d}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0x3}, {0x16d72c2857c1d9ab, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0xce95e94678f03d80, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x7}, {0x3, 0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x3}, {0x3}, {0x2}, {0x5}, {0x3}, {0x4, 0xb6afcb26428f7368}, {}, {}, {0x5, 0x3}, {0x5, 0x2}, {0x5, 0x86fa2617e7e7c82}, {0x2}, {0x2d6344992956faa4, 0x1}, {0x5}, {0x2}, {}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x2087b9010e3d2336}, {0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0xda2e2878dc9e8a7f, 0x1}, {}, {}, {0x4}, {0x4}, {0x1}, {0x0, 0x1}, {0x2}, {0x2, 0x3}, {0x4}, {0x2}, {0x3, 0x1}, {0x1}, {0x1, 0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0xa3d537c791149f6}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x3}, {0x1}, {0x2, 0x1}, {}, {0x4}, {}, {0x5, 0x1}, {0x4, 0x3}, {0x2, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x8, 0x3df2dcf6d3dd160}, {0x5}, {0x2, 0x6786a721730577e7}, {0x2}, {0x2}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x3}, {0x5, 0x1}, {0x5, 0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x5, 0x3}, {0x1}, {0x2}, {0x4, 0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xec8, 0x2, {{{0x7, 0x10001, 0x0, 0x0, 0xfffffffb}, 0x5, 0x7, [{0xc, 0x7, 0xfffffff7, 0x1000000, 0x1f, 0x7}, {0x1, 0xfffffff8, 0x401, 0x3, 0x75000000, 0x100}, {0x8, 0x0, 0x7, 0x3b3, 0xfffffffe, 0x7}, {0xcc5, 0x10000, 0xf6c7, 0x1d, 0x1, 0x6}, {0x7, 0x4, 0x8, 0x401, 0x7, 0xffffffff}, {0x1, 0x9, 0xfffffff9, 0x4, 0x8000, 0xffe00000}, {0x80000000, 0x0, 0x5d0, 0x5, 0x1a32, 0x400}]}, [{0x0, 0x7, 0x6, 0x101, 0x4}, {0x0, 0x401, 0x3, 0x2, 0x7fffffff, 0x7}, {0x5, 0x7, 0x80000000, 0x2, 0x4, 0xfffffffa}, {0x8001, 0x88d, 0x80000001, 0x40, 0x10000, 0x5d9}, {0x9, 0x1, 0x80, 0x1, 0x0, 0xf3}, {0x8, 0x8000, 0xffff24ad, 0x1, 0x2, 0x5}, {0x2, 0x2, 0x0, 0x3, 0x6d, 0x7}, {0x3c9, 0x1938, 0x7ff, 0xffffffff, 0x1, 0x1000}, {0xf3a, 0x1, 0x8000, 0xffffff61, 0x7, 0x40}, {0xc5e, 0x9, 0x800, 0x0, 0x8, 0x2f7e}, {0x7fff, 0x6, 0x400, 0x9, 0x1ff}, {0x4, 0xfffffbff, 0xffffffff, 0x2, 0x3, 0x5}, {0x401, 0x6, 0x400, 0x4, 0x4e, 0x8}, {0x8, 0x5, 0x2, 0x80000000, 0x5}, {0x0, 0x557, 0x7ff, 0xbd8e, 0x4, 0x400}, {0x80000001, 0x3ff, 0x1ff, 0xff, 0x3d6c, 0x82c}, {0x3f, 0xa9, 0x7, 0x5, 0x2f, 0x5}, {0x200, 0x9, 0x40, 0x200, 0x0, 0x10001}, {0xff, 0xfffffff8, 0xffffffff, 0x0, 0x5, 0x9}, {0x3, 0x2, 0x1, 0x3, 0x200, 0x8}, {0x7fff, 0x9106, 0x6, 0xfffffff7, 0x4, 0x6}, {0x0, 0x400, 0x3, 0x5, 0x0, 0x180000}, {0x8, 0x1c9, 0x5, 0x101, 0x2, 0xfffffffb}, {0x100, 0x7fff, 0x8, 0x2, 0x7, 0x8}, {0x0, 0x3, 0xfffffff8, 0x7, 0x7, 0x2}, {0x8000, 0x3, 0x1e, 0x8, 0xffff23e5, 0x1c}, {0xfffffff9, 0x1, 0x7, 0x4, 0xffffffff, 0x1ff}, {0x5, 0xa4, 0x813f, 0xedb143f8, 0x9}, {0x7d67df3a, 0xffffffff, 0x10001, 0x4, 0x12d, 0x401}, {0x1000, 0x8, 0xfffffff8, 0x8001, 0x4}, {0x7, 0x10000, 0x80000001, 0x10000, 0x1f, 0x1}, {0x80, 0xffffff7f, 0x4, 0x6ad1, 0x8, 0x3}, {0x28000000, 0x6, 0x100, 0xfffffffe, 0xffffffff, 0x7}, {0x80, 0x1, 0x80000001, 0x7fffffff, 0x1000000, 0x7f}, {0x5, 0x7fffffff, 0x3, 0x6, 0x86e0, 0x8}, {0x5, 0x83f3, 0x6, 0x9, 0xf42, 0x39bac713}, {0x2, 0x0, 0xffff1d68, 0x69, 0x81}, {0xfff, 0x965, 0x0, 0x80, 0x1, 0xd8}, {0x7bd9, 0x7ff, 0xd6c, 0x3, 0x1, 0x8}, {0xfffffe2d, 0x0, 0x9, 0x9, 0x2, 0x3ab}, {0x7fff, 0x6, 0x100, 0x2, 0x8, 0x4e}, {0x7, 0x6, 0xffff, 0x4, 0x4, 0xffff}, {0x2e, 0x1, 0x3ff, 0x3, 0x40, 0x80000000}, {0x6, 0x8, 0x81, 0x8, 0x4}, {0x80000000, 0x4, 0x4, 0x1, 0xb6a, 0x9}, {0x40, 0xf0, 0x0, 0xdb000000, 0x3f}, {0x5b0, 0x40, 0x8, 0x0, 0xea, 0x5}, {0x5, 0x6, 0x5, 0x7, 0xfffff000, 0xfffff397}, {0x5450, 0x40, 0x2, 0x81, 0xffffffff}, {0x0, 0x1, 0x0, 0x8001, 0xf97, 0x9}, {0x1, 0x9, 0x1, 0x401, 0x800, 0x4}, {0x80, 0x8000, 0x6, 0xd08, 0x8, 0x8}, {0x7, 0x842, 0x4243, 0x7, 0x5292, 0x4}, {0x6, 0x2, 0x5, 0xfffffff8, 0x1, 0x6}, {0x70e, 0x1, 0x0, 0x2, 0xeb24, 0x79}, {0x80, 0x3, 0x436cbaec, 0x403, 0xb6, 0x3}, {0x0, 0x0, 0xbaa, 0x3, 0x1, 0x5}, {0xfff, 0x5, 0x8, 0x4, 0x200, 0xffff}, {0x1, 0x3, 0x2, 0x0, 0xff, 0x9}, {0x9, 0x3f, 0x1, 0x78ac, 0x2, 0x4}, {0x2, 0x0, 0x7, 0x0, 0x6, 0x7}, {0x7ff, 0x3ff, 0xee1, 0x6, 0xff, 0x485}, {0x4, 0x2, 0x5, 0xab15, 0x7ff, 0x62a}, {0x80000000, 0xffff, 0xffff, 0x9, 0x80, 0x200}, {0xe47, 0xc0000000, 0x8, 0xfffffffb, 0x8, 0x2fca}, {0xfffffffd, 0x81, 0x1ff, 0x1, 0x9, 0x7fff}, {0x8, 0x1, 0x8, 0x4, 0x9, 0x8}, {0x9, 0xabb8, 0xfffff4f9, 0x80000000, 0x1ff, 0xfffffffb}, {0x1, 0x2, 0x800, 0x401, 0x0, 0x8000}, {0x0, 0x5, 0x8660, 0x5, 0xf53, 0x3}, {0x5, 0x8000, 0xfffff000, 0x0, 0x9d05, 0x401}, {0x6, 0x4, 0xb2a7, 0x5, 0x5b}, {0xfffffffd, 0x8001, 0x8, 0x7, 0x8, 0x7f}, {0x4, 0x1, 0x400, 0x80a1, 0x4, 0x12b}, {0x8, 0x81, 0x44, 0x549, 0x0, 0x3}, {0x1, 0x10001, 0x5, 0xfffffff9, 0x2, 0x7}, {0x9, 0x9, 0xfffffffc, 0x400, 0xfffffffb, 0x3ff}, {0xffffffff, 0xfffff1d7, 0x8, 0xc4, 0x4, 0x4}, {0x1, 0x7, 0x401, 0x7, 0x1, 0x6}, {0x9, 0x0, 0x0, 0x2, 0x4, 0x5}, {0xfffffff8, 0x185, 0x9, 0x5, 0x5637, 0x1}, {0xd785, 0xbc, 0x6a4, 0xffe, 0x9, 0xec}, {0x70000000, 0x562a, 0x1, 0x0, 0xa4, 0xffffff81}, {0x8, 0x1f, 0x9, 0xffffffff, 0x8, 0x6}, {0xffff, 0x10000, 0x7, 0x5, 0x100, 0x9}, {0x7, 0x2, 0x27, 0x1, 0x6, 0x5}, {0x1, 0x80000001, 0xfff, 0x8, 0x7, 0x9}, {0x8, 0x80c, 0x7f, 0x8001, 0x0, 0x65}, {0x1f, 0x401, 0x5, 0x80000001, 0x3ff, 0xde61}, {0x37, 0x0, 0x3, 0x7fff, 0x1f, 0x2}, {0x311d0418, 0x7, 0x200, 0x4, 0xffffffff, 0x266}, {0x800, 0x8, 0x4a0, 0x80, 0x2, 0x2}, {0x5, 0x8, 0x6cf, 0x3, 0x80, 0xd3c2}, {0x4, 0x7fff, 0x6, 0xfffff800, 0x81, 0x5}, {0x2cf6b808, 0x6, 0x1f, 0x3ff, 0x80, 0xfffffffb}, {0x73c, 0x8001, 0x5, 0xffffff52, 0x1, 0x8000}, {0x1, 0xffff0001, 0xc7d, 0x1, 0x8, 0x7fff}, {0x1ccb8000, 0x7ff, 0xfffffffb, 0x1f, 0xffff8001, 0x80000000}, {0xffff, 0x4, 0x8, 0x7, 0x9, 0x6}, {0x7, 0x3ff, 0x9, 0x9, 0x9227, 0xfffffff7}, {0x1ff, 0x5, 0x2, 0x7ff, 0x8, 0x8001}, {0x2, 0x1ff, 0x4, 0x1, 0x1, 0x6}, {0x1, 0x506f, 0xc84ab3c6, 0x9, 0x3f, 0xff}, {0xfff, 0x6, 0x6, 0xff, 0x4, 0x5}, {0xeac, 0x7, 0x2, 0xd14, 0x800, 0x6}, {0x4, 0x1, 0x4, 0x7fffffff, 0x7, 0x8}, {0x3, 0x101, 0x40, 0x9, 0x0, 0x5}, {0x100, 0x2, 0x9, 0xc112, 0x2, 0x3}, {0x2, 0x1, 0x5, 0x4, 0x800, 0x5}, {0xaf, 0x0, 0x5, 0x10001, 0x8}, {0xffff8000, 0x1, 0x4, 0xff, 0x86, 0x1}, {0x8, 0x1, 0x8, 0x200, 0x7fff, 0x800}, {0x3, 0x1, 0x7fffffff, 0x7fff, 0x68, 0xffffffff}, {0x6, 0x4, 0x8001, 0x7ff, 0x4b0, 0xb7}, {0x1ff, 0x5, 0xfffffffc, 0x0, 0x9, 0x7f}, {0xffff, 0x3, 0xed, 0xa39e, 0x7fffffff, 0x1ff}, {0x800, 0x6, 0x1, 0x8000, 0x1, 0x7fffffff}, {0xff, 0x6, 0x6, 0xff, 0xff, 0x8}, {0x80, 0x7, 0x5a440000, 0x81, 0x4, 0x40b9}, {0x3, 0x6, 0x800, 0x0, 0x7263, 0x10000}, {0x7, 0x7, 0x1, 0x91, 0x1f, 0x3}, {0x8, 0x5, 0x53, 0x5, 0x6, 0x3}, {0x1, 0x2, 0x7, 0x2, 0x1, 0x4}, {0x2, 0x5, 0x40, 0x3, 0xd56}, {0x5, 0x902, 0xe8, 0xf3b, 0x81, 0x401}, {0x80000001, 0x7, 0x741, 0x3, 0x8, 0x1fc00000}, {0x7f, 0xffffffff, 0x2, 0x3, 0x4, 0x3}, {0x1, 0x6a, 0xfffffffd, 0x8, 0xe13, 0x9}], [{0x5, 0x1}, {0x1}, {0x2}, {0x164387513660539c, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x2}, {}, {0x4, 0x1}, {0xb, 0x1}, {0x3}, {}, {0x3, 0x34027a520c8c120d}, {0x5}, {0x3}, {0x5}, {}, {0x0, 0x2}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x3}, {0xc}, {0x0, 0x1}, {0x2}, {0x1}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x2}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x2}, {0x2, 0x1}, {0x2, 0xfdf8a87deb93a00d}, {}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x5}, {}, {0x7, 0x2}, {0x1}, {0x5}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x0, 0x2}, {0x2}, {0x1}, {}, {0x2}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x2}, {0x2}, {0x5}, {0x1}, {0x5, 0x2}, {0x4}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x2}, {0x4, 0x1}, {0x2}, {0x3, 0x2}, {0x4}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x3}, {0x4, 0x49feedf8b1fe32b8}, {0x1, 0x3}, {0x2}, {0xb9c042820dff7f19}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x2}, {0x7, 0x1}, {0x4, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x4}, {0x8, 0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x2}, {0xce7526f2b05959b5}, {0x3, 0x1}, {0x1}, {}, {0x4, 0x8ad38435c649efd1}, {0x1}, {}, {0x5}, {0xbc3fb28781c22235, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x4}]}}, @TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0x2, 0x1f, 0x2, 0x0, 0x1ff}, 0x1, 0x3, [{0x0, 0x5, 0x0, 0x4, 0xcead, 0x6a}, {0x2, 0x0, 0x0, 0x9, 0xffffffff, 0x6}, {0x3f, 0xffff, 0xa8fe, 0x9, 0x10001, 0x2}, {0x100, 0x100, 0x8, 0xe092, 0x80, 0x40}]}, [{0x7, 0x3, 0x5, 0x7fffffff, 0x9, 0xffff}, {0x40, 0x2, 0x8, 0x3f, 0x7f, 0x10000}, {0x800, 0x3f, 0x0, 0x4, 0x9, 0xb3d}, {0x400, 0x1000, 0x2, 0x1, 0x0, 0x4}, {0x9, 0xfff, 0x7, 0x100, 0x8, 0x92}, {0x100, 0x6, 0x4781, 0x7, 0x5, 0x8}, {0x0, 0x1, 0x1, 0x7, 0x5, 0x88000000}, {0xffff, 0x9, 0x7, 0x78c, 0x3, 0xffffffff}, {0x6, 0x7, 0x4, 0x7ff, 0x3, 0xffffffff}, {0xa75c, 0xffffffff, 0x8, 0x0, 0x7, 0x2}, {0x101, 0x5, 0x3, 0xffff2eb4, 0x1, 0x3f}, {0x40, 0x5, 0x10000, 0x7f, 0x5}, {0x6, 0x7, 0x9, 0x6, 0x7fff, 0x1}, {0x7fff, 0x8, 0x9, 0x0, 0x2, 0xfffffff8}, {0x1ff, 0x6, 0x7ff, 0x2, 0x934, 0x1}, {0x5, 0x4, 0x4, 0x3, 0x9, 0x6}, {0xca3, 0x8, 0xffff, 0x6, 0x7, 0x3}, {0x80000000, 0x9, 0x1f, 0x7fffffff, 0x5, 0xecd}, {0x9, 0x1, 0xffff, 0x10000, 0x6, 0xffff}, {0x5, 0x9, 0x3, 0xfffffffc, 0xffffe255, 0x6}, {0x0, 0x8, 0x4, 0x9, 0x8, 0x4}, {0x8, 0x6, 0x3f, 0x4, 0x5, 0x9}, {0x1, 0x7c4, 0x100, 0xfffffffd, 0x6, 0x8}, {0x921, 0x1e, 0x9, 0x6, 0x7fffffff, 0xbe3}, {0x3ab9, 0x7, 0xde, 0x8, 0x2, 0x5}, {0x9, 0x7, 0xffffff81, 0x5, 0x7d7b, 0x7f}, {0x7f, 0x9, 0x1, 0x7, 0xa4, 0x5}, {0x1, 0x3e, 0x198, 0x3, 0x4, 0xca}, {0x8000, 0xe1e8, 0x1, 0x1d, 0x6}, {0xfffffff9, 0x0, 0x0, 0x2, 0x9, 0x8}, {0x9, 0xa3, 0x0, 0x8, 0x4, 0x80000001}, {0x6315, 0x1f, 0x7, 0xb7d, 0x4, 0x1}, {0x3ff, 0x5, 0xfffffff8, 0x7, 0x9, 0x81}, {0xbef0, 0x0, 0x255fa7, 0xff, 0x7, 0x9}, {0x7f, 0x400, 0x81, 0x5, 0x0, 0x101}, {0xbb, 0x80, 0x3, 0x8001, 0x5, 0x5}, {0xffffff7f, 0x94ed, 0x42f9, 0x3, 0x8, 0x101}, {0x3f, 0x401, 0x8, 0x5, 0x1800, 0x20}, {0xbb, 0x2f02, 0x3, 0x7fffffff, 0x7fff, 0x9}, {0x6, 0x3, 0x5, 0x8, 0xe2, 0x9}, {0x1f, 0xf3, 0x3ff, 0x5, 0x0, 0x1}, {0x3, 0x4, 0x9, 0x1, 0x10000, 0x4}, {0x8, 0xff, 0x800, 0x101, 0x3, 0xf67e}, {0x7c, 0x6, 0x593, 0xfffffffe}, {0x4c, 0x0, 0x2, 0x40, 0x2, 0x1f}, {0x9, 0x80000000, 0x6, 0x400, 0x7ff, 0x9}, {0x8, 0x4, 0x1, 0x4, 0x7, 0x1}, {0x1, 0x4, 0x7e05, 0x29, 0x2, 0x5}, {0x2d60, 0x9, 0x8, 0x4, 0x8000}, {0x4, 0x3, 0xfffffff9, 0x3, 0x6, 0x2}, {0x8, 0x6, 0x40, 0x253, 0xffffffff, 0x2}, {0x1f, 0x7, 0x3, 0x1, 0x106, 0x80000001}, {0x80000001, 0x1, 0x8, 0x7fff, 0x9, 0x9}, {0x10000, 0x3f, 0x5, 0x70097550, 0x1f, 0x9}, {0x100, 0x7fff, 0x101, 0xfffffff7, 0x7f}, {0x20, 0x5, 0x7, 0x71d, 0x6, 0x5}, {0x3, 0x7, 0xfffff7d5, 0x4de, 0x101, 0x3}, {0xffffffff, 0x8000, 0x8, 0x8, 0x9, 0xf54c}, {0x0, 0x2, 0x2, 0x7, 0x6, 0x7}, {0x8, 0x9, 0x4, 0x206, 0xffffffff, 0x7}, {0x1fe, 0x0, 0x6, 0x5, 0xec1, 0x1f}, {0x7ff, 0x7, 0x5, 0x8, 0x5, 0x80000000}, {0x2, 0x8, 0x1000, 0x7, 0x1f, 0x10000}, {0x3, 0xffffffff, 0x6, 0x3, 0x4, 0x20}, {0x6, 0x5, 0x3e, 0x9, 0x3, 0xfff}, {0x1, 0x80, 0x7, 0x1, 0x80000001, 0x4}, {0x5, 0xc8d, 0x3d03, 0x7, 0x2, 0x20}, {0x100, 0x800, 0x8000, 0xfffffff8, 0x9, 0x8}, {0x3, 0xfff, 0x401, 0x6, 0x8, 0x2}, {0x4, 0xd2, 0x20, 0x8, 0x5, 0x80}, {0x8000, 0xffffffff, 0xfe, 0x800, 0x2, 0x9}, {0x7, 0x0, 0x9, 0x9, 0x6, 0x5}, {0x3, 0x8, 0x1, 0x71a85b6c, 0x4, 0x7}, {0x101, 0x80, 0x5, 0x7fffffff, 0xfffffffd, 0xff}, {0x6, 0x2, 0x5cb, 0x5, 0x8, 0x1}, {0x9, 0x7, 0x4, 0x5, 0x0, 0x1}, {0x1, 0x2, 0x1, 0x100000, 0x667, 0xfffffffc}, {0x6d7ddd63, 0x2, 0x4, 0x0, 0x7, 0x9}, {0x3, 0x401, 0x6, 0x3ff, 0xffffffff, 0x8}, {0x4, 0x800, 0x3f, 0x7fff, 0x400000, 0x2}, {0x1000, 0x1, 0x20, 0x7f, 0x1, 0x81}, {0x5, 0x1000, 0x6, 0x4, 0x1000, 0x9bc}, {0x5e, 0x8, 0x40, 0x5, 0x7, 0x6}, {0x1, 0x1, 0x100, 0x80000001, 0x3, 0xccc}, {0xfffffffb, 0x51e, 0xfffffffa, 0x6, 0x81, 0x3f}, {0x6, 0x4, 0x5, 0x3, 0xd027, 0x5}, {0x6, 0x10000, 0x81, 0x5, 0xa7, 0x1000}, {0x1ff, 0x6, 0x1f, 0x9, 0xfffffffd, 0x5}, {0x3, 0x8000, 0x10000, 0x4, 0x20, 0x7ff}, {0x800000, 0xfffffffa, 0x93ad, 0x8001, 0x1, 0x6}, {0x9, 0x6, 0x800, 0xffffff7f, 0x2, 0x1}, {0x40000, 0x813, 0xfff, 0x3, 0x80000001, 0x4}, {0x0, 0x8001, 0x40, 0xa33, 0x5, 0x946f}, {0xfffffffc, 0x80000000, 0x3, 0x800, 0x20, 0x80000000}, {0x5, 0x76, 0x4, 0x8, 0x1, 0x7}, {0x6, 0x8a, 0x4, 0x8000, 0x4}, {0x8000, 0x4, 0x748ec556, 0x2, 0x9, 0x1}, {0x7ff, 0x100000, 0x8, 0x3, 0xfffffffd}, {0xb01a, 0x4, 0x4, 0x0, 0x7, 0x6}, {0x4, 0x8, 0x8000, 0x9, 0xf70, 0x7}, {0x7ff, 0x8, 0xedc4, 0x3, 0x8, 0x9900}, {0x800, 0xff, 0x8, 0x0, 0x400, 0x7}, {0x81, 0x6, 0x0, 0x3919, 0x9, 0x10}, {0x6, 0x0, 0x1000, 0x6af, 0xffffffff, 0x35c5}, {0x7ff, 0x3, 0x7ff, 0xfffffffe, 0x4, 0x1}, {0x8, 0x5, 0x2, 0x3a4, 0x0, 0x1}, {0x7fffffff, 0x4, 0x9, 0xfffffffe, 0x7fffffff, 0x101}, {0x8001, 0x401, 0x0, 0x7f, 0xfff, 0x3f}, {0x81, 0x80, 0x9, 0x1, 0x5, 0x40}, {0x80000001, 0x1, 0x3, 0x0, 0x6, 0xcf}, {0x6, 0x6e9, 0x101, 0x80000000, 0x7, 0x3}, {0x1f, 0x8, 0xcc7b, 0x9, 0x0, 0x2}, {0x3, 0x10000, 0x2, 0xffff8000, 0x1ff, 0xffffffff}, {0x2, 0x5, 0xfd2, 0x7, 0x5}, {0x7, 0x81, 0xffffffff, 0x9, 0xfc3a, 0x200}, {0x48, 0x1, 0x80, 0x7, 0x2, 0xfffff030}, {0x10000, 0x3ff, 0x3, 0x1, 0x80, 0x8}, {0x4, 0x80, 0x7, 0xb8, 0x1, 0x100}, {0x0, 0x7, 0x3, 0x3ff, 0x4}, {0x101, 0x1, 0x0, 0x2, 0x101, 0x7}, {0x63c, 0xffff, 0x8, 0x1ff, 0x80, 0x4}, {0x80000, 0x70b5, 0x9, 0x5, 0x79d, 0xffffff2d}, {0x7, 0xc00, 0x3ff, 0x9, 0x378, 0x8}, {0x4, 0x1ba, 0x5, 0x6, 0x4, 0x80}, {0x5, 0x90, 0x9a8, 0x9, 0x1, 0x80000000}, {0xfd16, 0x1, 0x4, 0x9, 0x9, 0x101}, {0x0, 0x5, 0xff, 0x3, 0xe93}, {0x7da1, 0x3, 0xfffffffd, 0x7e2f, 0x8, 0xfffff731}], [{0x2b25028191eaf791, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0xafeebd5658b3b018, 0x1}, {0xbe0e5888fd7823f3, 0x1}, {0x5}, {0x2acce287e2ccc218}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x4}, {0x4}, {0x2}, {0x0, 0x1}, {0x3}, {0x3}, {0x5, 0x1}, {0x6, 0x1}, {0x2}, {0x0, 0xe42c9924760eab90}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x5, 0xb6c1c05c689f5c99}, {0x1}, {0x1, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x5}, {0x8, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x5}, {0x3, 0x3}, {0x2}, {}, {}, {}, {0x3}, {0x2, 0x1}, {0x3}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0xb217890f10edca44, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x0, 0x2}, {}, {0x5f597759052ff6f6}, {0x2}, {0x1}, {0x3}, {0x5}, {0x2}, {0x3, 0x2}, {0x5}, {0x2}, {0x4, 0x89a568871e73a1fc}, {0x5f988b45b1b5b250, 0x2}, {0x13df02eed51fa42c, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x2, 0x1}, {0xf304eba0bb7a0126}, {}, {0x3}, {0x4, 0x1}, {0x5}, {0x2}, {0x2}, {0x0, 0x2}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x0, 0xfb782cbebdcd45ba}, {0x7cb20721aaa5f8cd}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x2}]}}]}, {0x64, 0x6, "96b2d16854b9a98d6c94c380c74e968d8e3685117c0f7811b1807cfbfa22453cee1c5fb7bf59bcf38091bf5b189b4cd97cf3196b7348050fa8aa9eecf3e6eb453cfabc85a3e5035ada0f2b4c641bdb52b7b27f0bd596d9420f4cdf645fcfc5"}}}}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x200}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x1}]}}, @TCA_RATE={0x8, 0x5, {0xbc, 0x2}}, @TCA_RATE={0x8, 0x5, {0x9, 0x3f}}, @TCA_RATE={0x8, 0x5, {0x4f, 0x4c}}, @TCA_RATE={0x8, 0x5, {0x40, 0x3f}}, @TCA_CHAIN={0x8, 0xb, 0xf8}, @TCA_RATE={0x8, 0x5, {0xa2}}, @TCA_RATE={0x8, 0x5, {0x6b, 0x1}}]}, 0x2e54}, 0x1, 0x0, 0x0, 0x4000}, 0x7e6c0e8d09ab656f) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef6"], 0xb) sendfile(r7, r7, &(0x7f0000000000), 0x8080fffffffe) r8 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r8, r8, &(0x7f0000000000), 0x8080fffffffe) ioctl$int_in(r8, 0x73, &(0x7f0000000180)=0x7) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r9 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r9, r9, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r6, 0x80044946, 0x0) 06:14:46 executing program 1 (fault-call:3 fault-nth:7): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) [ 1097.077503] FAULT_INJECTION: forcing a failure. [ 1097.077503] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1097.089557] CPU: 1 PID: 4467 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1097.096472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1097.105816] Call Trace: [ 1097.108395] dump_stack+0x138/0x197 [ 1097.112026] should_fail.cold+0x10f/0x159 [ 1097.116182] __alloc_pages_nodemask+0x1d6/0x7a0 [ 1097.120837] ? fs_reclaim_acquire+0x20/0x20 [ 1097.125145] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1097.130157] cache_grow_begin+0x80/0x400 [ 1097.134249] kmem_cache_alloc+0x6a6/0x780 [ 1097.138399] getname_flags+0xcb/0x580 [ 1097.142203] getname+0x1a/0x20 [ 1097.145383] do_sys_open+0x1e7/0x430 [ 1097.149090] ? filp_open+0x70/0x70 [ 1097.152626] ? do_sys_ftruncate.constprop.0+0x370/0x490 [ 1097.157993] SyS_open+0x2d/0x40 [ 1097.161268] ? do_sys_open+0x430/0x430 [ 1097.165150] do_syscall_64+0x1e8/0x640 [ 1097.169032] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1097.173882] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1097.179058] RIP: 0033:0x413941 [ 1097.182257] RSP: 002b:00007fd726182a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1097.189950] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000413941 [ 1097.197212] RDX: 00007fd726182b0a RSI: 0000000000000002 RDI: 00007fd726182b00 [ 1097.204466] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1097.211741] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000006 [ 1097.219005] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 [ 1097.254844] REISERFS warning (device loop1): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. 06:14:47 executing program 1 (fault-call:3 fault-nth:8): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) 06:14:47 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bde404346ff14"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) r1 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r4) mount$9p_fd(0x0, &(0x7f0000000080)='./bus/file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@fscache='fscache'}, {@cache_none='cache=none'}, {@aname={'aname', 0x3d, 'mime_typelo{)'}}, {@cache_fscache='cache=fscache'}, {@nodevmap='nodevmap'}], [{@uid_lt={'uid<', r4}}, {@smackfsroot={'smackfsroot', 0x3d, ']proceth1'}}, {@subj_role={'subj_role', 0x3d, '*%nodevppp1em0'}}]}}) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000040)=0x1, 0x4) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r6, r6, &(0x7f0000000000), 0x8080fffffffe) 06:14:47 executing program 3: rt_sigaction(0x0, &(0x7f0000000180)={0x0, {0x2}, 0x0, 0x0}, 0x0, 0x236, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0xe42, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x2}], 0x2000000000000009) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000040)={0x29, 0x6, 0x0, {0x3, 0x5}}, 0x29) [ 1097.399629] FAULT_INJECTION: forcing a failure. [ 1097.399629] name failslab, interval 1, probability 0, space 0, times 0 [ 1097.446888] CPU: 1 PID: 4487 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1097.453861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1097.463224] Call Trace: [ 1097.465826] dump_stack+0x138/0x197 [ 1097.470003] should_fail.cold+0x10f/0x159 [ 1097.474170] should_failslab+0xdb/0x130 [ 1097.478167] kmem_cache_alloc+0x2d7/0x780 [ 1097.482337] ? save_stack+0xa9/0xd0 [ 1097.486007] get_empty_filp+0x8c/0x3f0 [ 1097.489900] path_openat+0x8f/0x3f70 [ 1097.493624] ? trace_hardirqs_on+0x10/0x10 [ 1097.497880] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 1097.502561] ? save_trace+0x290/0x290 [ 1097.506379] ? __alloc_fd+0x1d4/0x4a0 [ 1097.510209] do_filp_open+0x18e/0x250 [ 1097.514020] ? may_open_dev+0xe0/0xe0 [ 1097.517840] ? lock_downgrade+0x740/0x740 [ 1097.522004] ? _raw_spin_unlock+0x2d/0x50 [ 1097.526158] ? __alloc_fd+0x1d4/0x4a0 [ 1097.529980] do_sys_open+0x2c5/0x430 [ 1097.533703] ? filp_open+0x70/0x70 [ 1097.537278] ? do_sys_ftruncate.constprop.0+0x370/0x490 [ 1097.542649] SyS_open+0x2d/0x40 [ 1097.545935] ? do_sys_open+0x430/0x430 [ 1097.549835] do_syscall_64+0x1e8/0x640 [ 1097.553732] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1097.558591] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1097.563787] RIP: 0033:0x413941 [ 1097.566978] RSP: 002b:00007fd726182a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1097.574692] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000413941 [ 1097.581976] RDX: 00007fd726182b0a RSI: 0000000000000002 RDI: 00007fd726182b00 [ 1097.589248] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a 06:14:47 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x20) write$P9_RREADLINK(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="97aaaec532a1d122368b30146b38845ddfc3d6b9e5ac236efabe5314c0c1c927765de94b5a24f1436c31f342d7bdd2c8b43b1f4fd1aabfd43d238a193f37db5e878f403875073d812acf899d77663734b6f114a9f5195e3a126d2b3f33a83216a3e8159485bf308fb13d6f7c3949d7af19fa16e8d5bebd02ef8930e35bce640fdf501ffe3a5753e0059c2eeead756f789312f90e929ba2706a5f00db77982848beafb5d3581f5278ad3941855853d6293a7694244c62732bd6f0710000"], 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x400100, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f00000002c0)=0xb, 0x4) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) symlinkat(&(0x7f0000000240)='./bus\x00', r2, &(0x7f0000000280)='./bus\x00') flistxattr(r1, &(0x7f0000000080)=""/207, 0xcf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) getpeername$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) sendmmsg(r4, &(0x7f0000005b40)=[{{&(0x7f0000000400)=@llc={0x1a, 0x103, 0x5, 0x20, 0xff, 0x1, @random="79d55390e825"}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000480)="e76623706b8c18c0822b8a6875d5d669e32a21ece74e825da81a9d7b2d3ad743a3f135562c919849aa79269f727e982a1ed64bf49ed41ee27f837d249e90b58511c33d76630bee1d352b27c21d38", 0x4e}, {&(0x7f0000000500)="85e91453287b0694a29914ea776cede4709553be51355372815a06e8b25409d92ea26d6cf29e53f48306ca714e7d0488017ac6978132203d48753bc7a46be22d7ee4b64f5665d7fdfaa271fb5f6046191c887e6ee495f5ef528b5c5f10b8a285675d9bdf96639b4c", 0x68}, {&(0x7f0000000580)="f7deb7fd2834f5209f177532437d422b0eefa94f7d5c0b0accdbed5f7f6f95e93fab02eb8b8a2102f85f6c4b1fa428bf1690a98a1db9ee7b44e20f4adb7675fe8dd44f55f7a5fadc2a59e5172428a3a408db6dd3a4aa793b5a8f1b006f8ba365bab6b5df7279c4edb3c3e42dd76ea9bf52b5108d439c2228679d51a4cdb4c4daeac4b5a050c2f1e4bdc45383ee186ae5eafe731cd85141e1447ff257ea0ac327d829aafaad9c66c0eaa3d83d", 0xac}], 0x3, &(0x7f0000000680)=[{0xf8, 0x111, 0x8000000, "3519d6309ec00b1f25062018e020fa7388ee369803f65b9cdaa388bf14f36c3bab06ee5874d7ff3d23886660379e8d3cacd3e2899714e973e880a17c8b1db74038bff384497705627f4676464e557c3468c9c04fb135ef0c2169d83d25f877ee482429c44e58b6355c9bcd40b4b62d9a17ec7667292164e48a5e58e052144475ce54295a2a72104f8f4d474f25c8d2177d12cfd1330bc4bc29176c3e47bbcb76db5e4e58c9684bb4a54a9ab94205687bd86d731680182fb846ed066f5fd77d847b9e37cf1e06e05d9217e36c13f435d9074c5b82fbc1ac6e5c407583757338fdaf"}, {0x90, 0x116, 0x3, "583d230b96405971c2d0fd744e956c045bd8c1a94ad06551183dc9198ceb642e1bc2b6c90097bb2b9a6d1524170e423c4b40a33d334ce657bb82174a8417e0382a5828dee3a898ea5fedc895507377fbe7ba3d863f90b6ad102b0580db123c742483568e06bd3c47f5fe0f0e8795a083bebb8a1c219f4bf73f3467844571f967"}, {0x60, 0x103, 0x8, "cdc69bcb518a1fcc10163e53ba72ddc4c401fb4726ab15d3ff0c222dcb7c5d4f4b1227c5c191c49251d7c2c0cd902cdd3dd8a0a98996dcd330fb7779c6e9d97acc60ab20f16a3ee2021bf92463"}, {0x70, 0x100, 0x41, "6451d3d196dccafa313943aa3c0c10b8fd1147daf105fc361b3b895cb00027da2defb28e0507e8bd3c11f39ad8ef01fc75c0a6ce9c0ee5f96511a03939b820b3ac6eff70b613092186dde06f524785a8a1c874b3937cdb4f59a309652d"}, {0x100, 0x0, 0xd64, "5c5580e008b491f3b1793392a7aac5b8aa552a1d1e8674c172d2a8818ce3d2028aa9810750f338c420946de6b50a2f348db5b864deb6fda50fd5e3fa3690035fe9f9b87bc64cd19fdd3de7b31c4c0aea2331b1c1bd5a4dc31135430af2ad38ea7be9a337328b3f44e22050c5d455ae916d3b08e01a0e853f8b811d4162cd4af90a81c7bcd44b1e439ba28a38313001bc46ee321ff50f9d33e69bcab34e6ae0e67120711b9229d332a6fc2bc04eda4ac0878af962d5e2cf7a2317ab2511c0f34553f59af7bcf250084e01e7ce6f3471e25c8d541bf46a784e2d1ae51d2615b1abffa6a9998f9e37280c3640d41a"}, {0x98, 0xff, 0x6, "a815d0368f3d87bdb6e47fe9a2ba46642bf86c6a637d71526eeeddaebe03134ad24d233b038f1cf85b24aeb102dfc8d04427c4eae54ba570bd66b9c444be19f4d07f4b2edbfcda223e76c900f8071ce9498b6791661180141b40222411a4a4307a37c89cd57bb19d7e611e196bff4499dd79be466f0f73894a27f00e268dc191fd81"}], 0x3f0}}, {{&(0x7f0000000a80)=@rc={0x1f, {0x81, 0x6, 0x6, 0x5, 0xc7, 0x3}, 0x9}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000000b00)="ff2f0b4ef0ed58798f77506528", 0xd}, {&(0x7f0000000b40)="441a9e4c01fe225a7b0c60010f82194f8cb3aca59048b4448962ea619cceead16d27b769cace38db619ad0df92d4c6cc361d0f649db1", 0x36}, {&(0x7f0000000b80)="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", 0x1000}, {&(0x7f0000001b80)="fbeaf962f5c3d6acfb56ee22f107caaf03c41e80f137b26932d2a6667c90831cfdb8386c01499d077a36c9ae8d9ea44bc12875d8a0ead2d68b16ddebd8a28598fb7ecdbc9c0c56e834aa7028b0375522bb4cba4bc116a76c9d89755c096761", 0x5f}, {&(0x7f0000001c00)="3d832fd2b5f283ecffbf4203d2eb34898522566b41d9d93a5f470788106dc9ad6f2f4eada969d52181a2a92f9675b0bd94f0e9dae20c8b2625bd09816297089d26b05703999f47374a89a088524ae1a2fabeb1a0683931a12940d1166394122bd515627dfc541cc8656a0fcb7d72490cde327cb9d6d72090c1b7e70e7342e77fa2b635adcc08695d135f78f8b017ceb0c92af7cc39deade70c271c89bedbc7bf85830c9a5997ab3346beed408a02f2406e17b2b771bc884345b03e7960bf4568795abcac07e8c8792f12adf488e0b0e471a3cae86a3088e572a03c8f8886214e47cd5c95f7267ae49f068ddd0b8b87a9e6509b3046e69c4cdd668b05eb4e776fd52ce4490adc333c73c683780972a5582f334f51776678bf57b89f28e955b2fdffa95a9f0c6bfdef9c7ed7510bf69c56ec796e3c607b5e56d361ae930d3a681743809b6c666bae2d786fab3762f02f745f0e14460cec93384b9a0d870d5181c1fc6f43dfb8eedea9c1ce5c8e60df2bda57c9881ed55a45b58f15d87fa57a9bfdfd5db5d405010f47048d534658298aec0aea542f4e583113f1dedaf49d9fd81592e2635969c11e3bc666cf8a399bc614520c8ed5948dbb2e9f86b4ac1403c46ac438de8923c1cbd8165c644f6d955d8baea0941bb31b744b34762427fdee5332fb09e945da6d25ff233d6c24b72db0300b3144d41b389e1d20fb47073d0675800cdb1371dc413d8b6ece6e55b4ee1396f0c76497b23caed9a3ef570694062addc5317cec58f19c426ee4574474aa7d27d6a0932c759882dbda75205de906746a128985c5259426ce7e839903b6c8862362059643d904f5238a82d70ce4d8766cf78ee0c9398fd993f78e9de07342db07e452db85b892293df1c8566cfb298d9a09a6763287aa7bc75839446ef5553830ede73797e0902735040d0fb5dd60c7b09d62edeece95907c9d91662d3f7e41d2d34382cb929b62477c987c321e4bc79c29b48a8b29b1552098ae52321e5d0fa39c40f2b46043518c8ffd6bd8925415ff42e44d60241c7888abad6fd43fcc9f1d5cf2d62323885431273fc72a007fec35b317cb9d6cc66ce5dc0e3cd10a2f47e397bf93852d6485823bad47cf15fa578df1ac736c7f7ab6deec51e4e0e745eb9b808f19e61ce1d70fe3aa74dfcb95f9c4f532368b53ef7d22e168532ce870b05abaadb9ccabc1e003340a8885522d385c4f474ea0200c4168ea0efae07e8930a69f46e0582fb24e304c97b686352540dbb03ef1e7f0b681c6bbc81a616398807a1478e3d6aee5014f2907cc52a85e6d7bb089549e028ebea0a4b04571a50dd427bfb1a9f9da62cedb16ab18737fc0403e4216223bb971442315d926dd124a261e65b2d35fe56f67e436702ef7adba5b0c005114f7b5708b561ae244c4021c4120e996139cb95530696686a20c7417e131ffc04b40e441c31a97f6ca01c6c6933e4241ed602a28f40c6b90ba50d5cf9a0b1c7648b647f93d9bdfa0fcb5657285052d85c82687f4c6eb541079e1ce3b77e6a569d4f45441e1fa4d50ce2c0d7bc504f6390651c4f10c9e1d296f91325df1bc36ce1f960ee84c4fd2a35f3d7466c42824b4de01ddcee6e55842148fe7a966f6d71c323949ccf4bc15a3db2a31b24d167b446b678073915c3cdc250468d70293039a3d086bd4b380d3c20a821b2f81d08146cc2da3f7b249227bbc29491c7acbb6a07be288b4f5c569b48b8bb65ac824901d9bdacde2ae35ec6c4622069fe52fc4dce45b0a6137bf1d7bdf234de5ea48f438e9f587dca5906429982224c9cdde82d784e2314ad1cdfbcdb3e18bb6eab474828bdedb468940b21428e84d8d63bcf3cdcc17127f488dbabec3d9aee472364c0e2aa9fa9986cc994b788f0a7a72c8ea7be6ec43ff7c7298c3e5b9ae6d58d4d97b8cf77ca873083a147bcfabfab1791cc1d6731730d7e8ac5afb7ac07a41897bca534dfb936b88fc1a727438cbf3b5d597205e7c93add2373c22fcd4d245e785f1034f1a20dbd7678a83a6c02b774248b1cfbe56fe9573c48f080d741832bd41bc66e9c94bd7e88a5b485db0538cd117cfe7ec3ae4609d571d5c3bb27ac21a1297f8ab94d7e4425d203bc0b1f635796382058c904ea96afe07cea9ba8719f9a7a7b392400cb060c7eacd8881ba619ad148d6ec83467c4a40a99b3d2ff9f18d902bd05f45ff25e878134132a2ccf42dcb97bd45501f6a9e19d9f13a3373abc96fc72db28679647ffde8b5709309f173886006df1a85efa0afde0f7bac4b9a5c5efd17a0417369e3f83bd059d08f9f589425bb713940c30bfe041641963f39f4bb0922019b0c3c427967abd0495b855dffc4819a47382f4b28f9cfd7e7bed1213b9dbea752427e01e3b11ef1374cb9ea5059e65791fb1b282735b69022862f6d7b4f0293b0639db39c34203b6b66d5688b605375d2169aaa8cea99bcc3747cb086f6d1c4bb21cab9e06cad44e419709a3644d042778994fae5384b6c73fe0cb1bdcee9860021abe547230b3680bd1a1c93e5b01e67f48c8323d26de8b8038ae2e19e767ae4368f9fc6fdd3e45aa9c5a72e0c0e59133bc58f9c039ff78d6af1844b67728b28fe55570b5ffbf8d918a370a653223713bd3982fadd0c02557d52e5ab71558ebcc01553ca470034457a2a1d33e2e049ea134064b0ac1c5b0fbb4413da200497b7c280761f27ed63cef9fc2dc188203481e499f7003c405ab4bc91d16c296e7b34cd04c897a188d9525986bb9c228902a7cfb517c5c86acc5e90209266dd5162ff0404563da205628bd4004c2f52c31ac4874c490d98aee1b5acef5133dfad4e083e9f97c4ff5ed188b72a5148a6544d5868f301f5026881162900f58c3994eb625360fb8569df0c98ea4055638d8d408495946f744f31804fb27a5bd9face7a6a3fdd17df6b2f1d3c44d5a2b2c88ab15f44d4e7bd2238855f1dc3d83f26b7a330f87d22b0d7c450edc3e3540750f402dad169535ed908b57ff3124a185ae66344c31d006dc7658ebdb618242e825dd9d4390a56fd6585302e3607bb490342254810fbb978f1dfbe2803e810ab986554b722619a4f116121d77ac36bf4ee3aa7aee66397dfb6add364a62f1a3273098800236eb4a6a61c3425ecb6e4b9b4c2cb7510b2ad5295223a5cfde8b4b7224e8aa3c210025b54e49ba2c4c8bb5551535e2601cac5b1b969f73c3b0aef16b47af4863889c79093d7468f59d865ee074ea790d76ad6b314f3a0cdd013514f729125e77e7c88313bfa0193c757bca465213ea4214931a3958b9de6241b06bb2c6fa09105e96a017928f392b9f55b98838d46d229fdb4536a661c9fcfb7fa1c0f682f2cc5f3635bfc44374efa75a023f1d7f42485b6b0776a108973990fa62fc8784d57d04741d2dab01d914799f9c2a4fc411064d9d153d04ae0d9f4de36c7575d55610d9f98bd17e96d29198833771d238e530c7a6cfa4a093b3a7aea69bf16264d65e8685d74ebb90251b68bdb8c8801c548167638fca7da62ae4f09e9c799fdaddeb674635a6ff131f6a111c3d5bcb9064d2439302949b7b2949ef18a437686d543c0f8cb02f1131eb4ce0d7718842faec28b002069186d29a0151575887809f57745ee2f9f1de15231ee627a2fa0d4902aebd5ba2b369e85d59313870e6780e5c6f06b57ca5177414ad6764ee5697a78de309cad69604ab0aabc0a3e02edd1e6aec62bf3b6bcec7d45a0c54334b1facb828dc078cc3a08dc218f4fd82eb1325b8ab9f42b00a9ea5f3bedf4e8a0fe43e38c35e726ac02f7ed6267e94bc24d565b86e44b96f48b56a9fd9dcc1d5c7ffa8d4ede30506f8168d6310c6d8f846c20fd5fbc60d8450200892e4cc403c3a5796a1083e8d525da7a76b969dab95eea62d5ff536c749e81d70998b60b52ed09bf46bdda70ed55392d1935dfb1bd5b3a107028aebe88418b6a8e2c570ae5797d1e35bba757d881afc577c4e3e93fea220c30d13040a7c7864d921556face294a437f062af341c5c1583e501aa31a9c7d2b78533aee300e0fd140499e4e69d862c6a7e790b51c103349b47c54c58c025f5e01b168f82c4040a6da0a8222f945509461bd199dde08aa5dba4d59f214b5c5d6e24aff16f2b4c63c9ca4794bf43e4fefd67dd3ea98c18b46d08457f4b014109ed4e8759fe99fd4f589a658c381ce5093288584989f015aa8f579b497e92dc5ae265341418b4cb4b8b7d1a6ad91815b614482156cd742568c73223ef2f4cb3cf2d13b57c4bbafd6f80cbe53639d5e5a2b7239d824bf44e861b1fd77ecd3a94a5f20535d722d043ea75733bd1229da7fc8637da31bb8d34bc7a40817c1c9fc9fca831d2304ccc43bb2172e4fbf75c7ebe8554648683c4ea2e8fce21f3fc16827f722367b8d4db0b7f34edf62dd78d75684799c8c6b177ac5c266df3b2991e05f370967df5cb80e2451fd8289cbde10320e208cb1886245ae6946f01ff8aa714f460ca6ac483cfbe9fd8ea8b0d421b58a5501cd1fb94128524c112fb8005a5bbe35b5c6e82bb4e938cc90a7faa5d9198f897d0485220849ea85a046b096c56ea03642eeb1774f5bedd8ee963ef8cb9a289131b414b90dc55591d946217edb42b3b7ebfd77416d812db5c861172693f30f207f06237e70bea7c35b73a89e26eab4b6b257856f184b9a915f4fc9944952a4d8adfe84ade2ae6d14d863a04d9795fb7c2820dd7b61bbd4d5f5f1cd1a846e750adb0606f92aa63eb26c8109091d5f2ac1e7a8b3bc06bd26ab81b2ed712ccb276db5fca668e287ded1282d901f39b3e7c7ad285a15ada3e454efbee921a20ffe95f2b0beb8de67d39b15e16bc9b6001d62df50cc5950e892407f9cebee22f4b5cf4c3699ed0efe53284ea84bcb709fe102a93bbb50c751fa9395b07e22d9bc22651c467c053be833ec49e56c87a83978903ae5fdb26349f0c58f2368aadc160301f35b8c8f80fab9a826478853ad91710adb30ca066dd401f136539215bd2b318934bfe80f02f9c7fe3a1f56c73ba492e308f4a60c1e45b33169b3372a6d767ddd3c36f0247073f3900b13e7b3c10f01cb2bef400ffa966624e67e1131cef2f63fff3e8db4beb74748f734e4c2e6c161464533cbc1a9009f4a70bfe4a668788b9cfac0cd7301ef1fd7a9f89fc01b762a47c1126ed36d212e3504e540b9fab87c4b44504313e8f96a895d067fb21d42d982b216b58b7c191aeaca64a1e191a1e973a928b909a8f2d18e229edcad5649ecd705c7c4e79ec5f1a207b086c3a2c7235a9e36a7d3ca8d146073d1da0f0239f42ccdfca234135f39316fd3b14a97da47991dec6e5ff711b336b6af1b121c2c5c0fa8a0a4c88b6af84750d71caa0838e772d7fbea0c2fc0201321ee53ec717b60e74f1dea9df93ac658a535c52fe1ca2e0fe88e17af5509ca54771a4afc990dacc0ccedae3f805e4be126490cb34de9a0327f3fa94ed45027406b07fded7481aae23d767ffa36ec6d0faa0f5b78b5f5e1e04d68b13c7f51c4fabe185e0a911d2f3ef3802fe5bf9b807e27738de912c04ed84645c05082da360699a532d74ff535a46b21cca5cebdce607a2b210421924db589b810e031bbcb866cd36ebe41bb63d11b5ce5c0c6ce9d5241101008787db7a2d3ac30a66e7c9719cf97d0bf778a8ed183f94c5476aee2031e5cf27c1f01cee7dd8bb5809ce7fb4e13db9c674bb53d27e9e946be47895132d3a19d3d07d1fba946428db2c6df9246f09ca28c49ea3b90ae934bb25e2954b6c49f112ca893e17d2dcc2326852c270f3e12bc6d69", 0x1000}, {&(0x7f0000002c00)="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", 0x1000}, {&(0x7f0000003c00)}], 0x7}}, {{&(0x7f0000003cc0)=@nl=@unspec, 0x80, &(0x7f0000004e40)=[{&(0x7f0000003d40)="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", 0x1000}, {&(0x7f0000004d40)="aaf10d7720e3eca96dba3b5346259e211c79f904af7fb73db6953d919d6c23660e1490f7614ac9484c6af6dfdf5777f11ceb2907da2c5abfc93792b0c4f004f12ab199f5e9d8430566efddf731452f13a77274176b21a5771828768d95bf9aab0b28fa747522b0be71ca02b07e389603264d74645a483ad75906532b6202981e5e8040664aea900df444d4144240d2e3f33fc6450c540ace38cab6a57ed063cb98e7e67a352adaa0093fe207fee8d1666b3ddc0e74512e6b2429b0b6bbb5abba09946248e35217e1c97f1a43e9adaca3714ee3e1959df5eaf553c33e1c8f0304", 0xe0}], 0x2}}, {{&(0x7f0000004e80)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80, &(0x7f00000052c0)=[{&(0x7f0000004f00)="67bf090d91e275fdd4d15ccd0842cdc82d54875c58360ef0e481e828e910e3f25b9119e7adefedff2611cbf958be3126ee518ed0f4b195b3f61b524e5bb3b2d31198af3380f0a9f80833084314b8128e9f64b295646341f16d0942118c6979364777c61929dc9a1dd92054208260469448eb3877b954ef71ffb03a1460c5bf33", 0x80}, {&(0x7f0000004f80)="e4498b0587307ff146eaf43d83f2b30a1886cd88d230bf8ea7b9d416650a88828b3cc910fee0bc66beaccc0cf6aeb4822a2df7b16991b5820ddb683ef943ae8b72636467a4b522d6dfaecd1ca7c6a819322d6eefaf255a7d733c7cda7046f9749c0b73d3d3b1c428837c6fd6184e1d4a8c93a69074ace5aef4e42cccab9e93f655fe71aa84fb4a9b764fcd14d8cddaa1fb1bc3aaf6253a274821ac7729481e51763c5853bf3d0dec224bc2f8392bded8551fc38c84e73c81f986426a33d40876a43ce456da", 0xc5}, {&(0x7f0000005080)="703a0fb94460bad7dbe9489879433f969881ffddbc931246dfcd3cf03811cda51516b4292817f169d39149c087c747da8f73c986e5b56565317b69d3a7aeb64577a6fd31e399e3ee56dcaad6cfd07ceae726ca4cb4750e9e341f61fae391f9f620577dc51a5734391b", 0x69}, {&(0x7f0000005100)="540446ab44b6dd113c095626f641991857e1aadef89a7127d8a54ed786e7d986176327edd88f2d06b2abecf58d9787b62a877f61d09e9f7f738ea579b403555e63e1a508fc98bfb0a8fc415d10d29ffb9a42e4af649a62fc2f77367bdccf339b8524048a7d7e4db6e53f39187d0a8f14d8614a63d8fedc6223e452b3b3be1fab6aa0078c0766356fa5dc9c2dbb36b560826edd8f4537a2d26e383a2d287e89be20ea", 0xa2}, {&(0x7f00000051c0)="f1eb8f21046ac869be5f456c4a9f0c9eda4fc80b101b6e9e15db2cd5b9faf68e25faa784ba30d916c37e49e6989240324da4ef743643355ae3111ccac20104a02b58d1427b49176e4686a3de02d8c0fe9f3858eb1927a30298615267edd40b8389d0b40c921e4e62f81c43", 0x6b}, {&(0x7f0000005240)="662ea4fc725a2842cde04b310a17071bbf3ebd5aa4fcb26a322012ed61b797546ed7cdccb0f865b6057c5b2059e6e916261ba5b50589fb1031b67d13543e1f4764b5c9a5b55f5c7f6b8b0784098d4fc4f28accd85c3fde03", 0x58}], 0x6, &(0x7f0000005340)=[{0x48, 0x112, 0x80000000, "dfbda055d94ca81c59efbe2791f35d2ec98b09773d4ebdc32628c062c7290c671cd27371034e70022e8f2c9a290db96b853e5d"}], 0x48}}, {{&(0x7f00000053c0)=@x25={0x9, @remote={[], 0x1}}, 0x80, &(0x7f00000054c0)=[{&(0x7f0000005440)="6ba772e82d4b5279112a6191aaf7689b6ae2a61c42511e33d2639385f8d94f0331231a8cc675b8d8c47dace7723e39ebf6422b713fafe49d31fd532500b7dfffe61e997042fd7df5ebfd5f06713f8899643592e921", 0x55}], 0x1, &(0x7f0000005500)=[{0xd8, 0x119, 0x4, "4ee7daf72ae128bf8d7349491fd8b9ce4c93653bee3d3edfa0c10fcbe8bc3134813b94a11981250704ea24de5503ebe0e0367d986ad05cbd352cb2dc20675885cb8c1a93dae1bfb58376ad241fdbea382dbc8cfbf4b1018eb58a91b8c74e3b7995d37365524da06983e602cda224c7b994b05c3fd44ddb4e950df21385f4d40237c623c827e64afe2037fa5f5e616bf116816cd66e33c6a77e0b5e5f36af32bef503bdaaeeeb0396142370734142b7b50b4be70aad755e63dd154fcaa3d33c716fae83"}, {0xe8, 0x103, 0x9, "710eb25fc469472710ffabd566fbfd5ad6bd5197632a3f06a19cc6bce360fc4c4a862a384b91c68905076bfd1c4d6b5d535e2c210f1cde37b3fbd712b55ef69f3c9d0381357ee79e186bf5e7565a66ea9abbd3ecbfbd0c31b987f60f08956ec7bf0af480dbcdfa049a4dab07828630bdf0c0eb63c04e4d76637b0c9825cf1f9bdcb0ebfa3017053509018363c1df2f37e206f76b79e7a0f0646cc1d69c7e1a7fe68fe76da040164ab3576eff422227880edde0af5512455d49ec7f4b8b0668c3141c67ed8fc87e8642ca6aac3e7e69ebb1"}, {0x60, 0x10c, 0x200, "953788572da22d4f58a06b795b015a0f6ab37b759773aba0c1575591b7529c3ce1bd000206fd7825c0c57e86379650b183d746388ee025d1c7b8b72a3f8ed7709009b6c55bfcaecf68ee9c01"}, {0x98, 0x112, 0x10001, "9d0bd7b3679816f584e8d640f97b6e722d4fb19a4680d0eb056127c25629caf6ee57ac1cc553682690465c2dc62c129ca45b3e2f0cadf7c6e79454e5587b377e58c2e602fa541c460b1f95f282a90d9a734718755f6deb45de732a5e2a98c5f25bf82df59675ccade1b8e9052f9a5ca76825ded0052dd0a2853a4bb368cb7c0fbac13c"}, {0x100, 0x101, 0x9, "145e48c0e2a21b7e193228ab6dc148e0a8818069aa3e3cc64018d05e5a5423deec709c42f7343dc753e21613e47201ed011693a1a541d4fc420428b18e7b350a48d0eb740e33a326c545b0c2d691023acc20414da6107ca76e91b00fe443384f104dfc40fb7e5fa84aed36a63f3b75ba5fba59be54f133166a731d2a8e6d1efe0756623012693a917ce8e098582548afa8fee533f1601f2a963d7e25d6d33675b6ed343e1568abc79aba6323ea1c1a7e5d8f3cdbaafddaf5c99057c334deda1090c6c844e2c8ed6ef77069b26972f31ea4b82979abfb134c71234a3b7eafc762acce44dafa1199eb7ecc2713cb52"}, {0x48, 0x102, 0x3e, "65104cf956a8e8a64909bf5c89fdbfc4190e5515d35551d5ac9536451d27173e0148474a7234dad899869fb33fbf2a02f700963d5a1b"}, {0x40, 0x557266338dfc52c8, 0x0, "93cb02e85aa156a9eb599842fc8426503a9c5916ba9ee230d2571f2372514b1885eaad69275be9bfd4e9dae753ad1019"}, {0xc0, 0x29, 0x800, "0596836e2e976917e8ae12f92acd4c357079ddd1a6040492aaa717ba86a3218d2db9ca9e985a2b4527cebfabb17797b67b47c0556c0f62179b87b5ecf63fa73a9e0a4a6ddab078162d2df82b78ac44dc9fb1dd0d2c289b49681364d31b952f8685ecf55289a96c6f8c17e6792a4642941c5d28ab634006f12ca3bc9c8616d6ed53a45c6d6ff819d1ebb8fd75f2c9eb12bedb1efa653252d1df67ff0cefc156dd1a06cf38a448987d63ec49f3aeaba58b"}, {0xa8, 0x1, 0x1f, "b3944ab58cd7e3afe99c6cf577f2ce7d1b0360cece40769a7c4633cd656a5c17e63d11d9d5da1c4c63a38b6d74025ec5d3eed639559bfdb9d9cecb56eba7c493fd10b01a00240c6a6e1e74608c8ca189632bd59b921caa67e130846a2d7c4fb83bfeca8f39982b6c4cdb0e4c62951c26ed2acae6d3dd7ba02f9a94f766681b65bb2e1f05472c57a598a45e726497c7b16b55"}, {0x98, 0x0, 0x400, "eb4d1cacc2af50bddc6c7a4a26a29fcb44763d5627ac6e65844d78d159156e724bd7d94971d8d19a82ff7e9ab6bcdf61e2d20432dd70a7b7c847898a7777612894a772ccbeb5a3159f52d94042e298a8abe1d4dc304e4d83b839ab98663d368d66f4efc1f816ae5d989a243a0921d83fa72ea34d80c881b4ebaf028d75884e91a6685c81ca75"}], 0x640}}], 0x5, 0x198) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r5, r5, 0x0, 0x8080fffffffe) 06:14:47 executing program 3: rt_sigaction(0x800, &(0x7f0000000180)={0x0, {0xfffffffffffffffe}, 0x0, 0x0}, 0x0, 0x3cf, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x800, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000080)) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0xe42, 0x0) r2 = shmget(0x3, 0x2000, 0x78000000, &(0x7f0000ffe000/0x2000)=nil) shmat(r2, &(0x7f0000ffd000/0x3000)=nil, 0x2000) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x2}], 0x2000000000000009) 06:14:47 executing program 3: rt_sigaction(0x0, &(0x7f0000000180)={0x0, {0x2}, 0x0, 0x0}, 0x0, 0x236, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0xe42, 0x0) readv(r0, &(0x7f0000000100), 0x27a) [ 1097.596521] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000006 [ 1097.603793] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 06:14:47 executing program 3: rt_sigaction(0x0, &(0x7f0000000180)={0x0, {0x101}, 0x0, 0x0}, 0x0, 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0xe42, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x2}], 0x2000000000000009) r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x8000) setsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f0000000200)={@multicast2, @broadcast, @rand_addr=0xffffffff}, 0xc) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x400001, 0x0) write$binfmt_script(r2, &(0x7f0000000240)={'#! ', './file0', [{0x20, '!'}], 0xa, "71aa5d4714d7bcd2f406301c44e672b9629be072f8ce32ae06c07f3826e15fbaeaf2446307384a6bf2f2a69e90ca59efea0e4986c7515823336cde8e27b9a7768539f07a5b84e78e88ee245e9f58de6ad25334b61a9a5eeeed5dbdbcd2c8d135cf3efaf17cbc5b0d376d72578e9b5e83f7d424b8c688b6a4c3dde87aa26295930334afb7392b32f7bb1d158477465f2528b4f7e9d9b836d28614c12b20cb4f86bb617e32dd3fa63cdd6f66c9b885845e28a3a319e042c600c7826e3c38ed0a40a819a5eb440bc643"}, 0xd5) 06:14:47 executing program 1 (fault-call:3 fault-nth:9): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) 06:14:47 executing program 4: r0 = open(&(0x7f0000000200)='./file0\x00', 0x2800, 0x0) fchdir(r0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0xfffffffffffffe78, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000300)=ANY=[@ANYBLOB=':!'], 0x2) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) mknod(&(0x7f0000000080)='./bus\x00', 0x8000, 0x9e6d) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x80000000) sendfile(r2, r2, 0x0, 0x8080fffffffe) [ 1097.713425] FAULT_INJECTION: forcing a failure. [ 1097.713425] name failslab, interval 1, probability 0, space 0, times 0 [ 1097.725587] CPU: 1 PID: 4514 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1097.732539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1097.741920] Call Trace: [ 1097.744500] dump_stack+0x138/0x197 [ 1097.748183] should_fail.cold+0x10f/0x159 [ 1097.752337] should_failslab+0xdb/0x130 [ 1097.756315] kmem_cache_alloc+0x2d7/0x780 [ 1097.760472] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1097.765933] ? check_preemption_disabled+0x3c/0x250 [ 1097.770966] selinux_file_alloc_security+0xb4/0x190 [ 1097.775992] security_file_alloc+0x6d/0xa0 [ 1097.780294] get_empty_filp+0x162/0x3f0 [ 1097.784260] path_openat+0x8f/0x3f70 [ 1097.787974] ? trace_hardirqs_on+0x10/0x10 [ 1097.792211] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 1097.796877] ? save_trace+0x290/0x290 [ 1097.800669] ? __alloc_fd+0x1d4/0x4a0 [ 1097.804458] do_filp_open+0x18e/0x250 [ 1097.808259] ? may_open_dev+0xe0/0xe0 [ 1097.812060] ? lock_downgrade+0x740/0x740 [ 1097.816201] ? _raw_spin_unlock+0x2d/0x50 [ 1097.820337] ? __alloc_fd+0x1d4/0x4a0 [ 1097.824137] do_sys_open+0x2c5/0x430 [ 1097.827838] ? filp_open+0x70/0x70 [ 1097.831377] ? do_sys_ftruncate.constprop.0+0x370/0x490 [ 1097.836740] SyS_open+0x2d/0x40 06:14:47 executing program 4: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x1, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, r0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB=':!'], 0x2) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 1097.839707] audit: type=1804 audit(1571033687.412:377): pid=4517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir903629541/syzkaller.VJmRQl/1106/file0" dev="sda1" ino=17383 res=1 [ 1097.840015] ? do_sys_open+0x430/0x430 [ 1097.840029] do_syscall_64+0x1e8/0x640 [ 1097.840039] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1097.879357] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1097.884548] RIP: 0033:0x413941 [ 1097.887739] RSP: 002b:00007fd726182a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1097.895460] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000413941 [ 1097.902725] RDX: 00007fd726182b0a RSI: 0000000000000002 RDI: 00007fd726182b00 06:14:47 executing program 1 (fault-call:3 fault-nth:10): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) [ 1097.902732] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1097.902738] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000006 [ 1097.902743] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 [ 1097.998141] FAULT_INJECTION: forcing a failure. [ 1097.998141] name failslab, interval 1, probability 0, space 0, times 0 [ 1098.019796] CPU: 0 PID: 4527 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1098.026761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1098.036120] Call Trace: [ 1098.038735] dump_stack+0x138/0x197 [ 1098.042379] should_fail.cold+0x10f/0x159 06:14:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x5}, 0x0, 0x2000, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r5, r5, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(r4, &(0x7f0000001580)=ANY=[@ANYRESOCT=r5], 0x3c0) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r6, r6, &(0x7f0000000000), 0x8080fffffffe) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x7, 0x10d2, [0x20000340, 0x0, 0x0, 0x20000466, 0x20000e4a], 0x0, &(0x7f0000000040), &(0x7f0000000340)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x0, 0x20, 0xf7, 'nr0\x00', 'bridge0\x00', 'bridge0\x00', 'tunl0\x00', @broadcast, [0xff, 0xff], @broadcast, [0x0, 0x0, 0x0, 0x0, 0xf4343ffc4bfce2fe], 0xbe, 0xbe, 0xf6, [@nfacct={'nfacct\x00', 0x28, {{'syz1\x00', 0x5}}}], [], @arpreply={'arpreply\x00', 0x10, {{@local, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x2, [{0x11, 0x10, 0x9a5356eb41c4681f, 'bridge_slave_1\x00', 'bridge0\x00', 'erspan0\x00', 'veth0_to_bond\x00', @remote, [0x0, 0x5349ae8d405d9e9, 0x0, 0x3d356e952c789439, 0xff], @empty, [0x0, 0x7f, 0x80, 0x0, 0xff, 0x101], 0x6e, 0x6e, 0xa6, [], [], @snat={'snat\x00', 0x10, {{@empty, 0xfffffffffffffffc}}}}, {0x9, 0x8, 0x890d, '\x00', 'syzkaller1\x00', 'lapb0\x00', 'caif0\x00', @remote, [0x0, 0xff, 0x0, 0x0, 0x0, 0xa312708c14ee3b63], @random="dc17545ae69b", [0x1635ebed27f12159, 0xff, 0x0, 0xff, 0x0, 0xff], 0x88e, 0x8d6, 0x90e, [@cluster={'cluster\x00', 0x10, {{0xfffffff7, 0x6, 0x100}}}, @u32={'u32\x00', 0x7c0, {{[{[{0x80000001, 0x2}, {0x3, 0xf18538a9e4dd7a53}, {0xa3, 0x3}, {0x6}, {0x8}, {0x5, 0x3}, {0xe2d, 0x1}, {}, {0x4, 0x1}, {0x59f, 0xbfcdfb02d146c98f}, {0x7, 0x3}], [{0x6dea8a3d, 0x7}, {0xe3b7, 0x2}, {0x1, 0x800}, {0x1f, 0x28}, {0x5, 0x3}, {0x2, 0xffffffff}, {0x40, 0x3}, {0x800, 0x6}, {0x3, 0x522c}, {0x10001, 0x20}, {0x7fffffff, 0x7fffffff}], 0x3, 0xb}, {[{0x10000, 0x1}, {0x1}, {0x9, 0x1}, {0x80, 0xd5458305f5b24bc2}, {0x7fff, 0x3}, {0x2, 0x2}, {0x6, 0x5}, {0x4085, 0x2}, {0x3, 0x6}, {0x405, 0x1}, {0x6a64, 0x2}], [{0xffffffff, 0x9}, {0x10000, 0xfff}, {0xfffffff9, 0xffff}, {0x1, 0x10000}, {0x5, 0x8}, {0x4, 0x33e4000}, {0x4, 0x6}, {0x40effdad, 0xe2c}, {0x4, 0xfffffff9}, {0x8, 0x63e2}, {0xfffffffd, 0x4}], 0x5, 0x8}, {[{}, {0x80000001, 0x1}, {0x80, 0x1}, {0x0, 0x6}, {0x2}, {0x3, 0x3}, {0x101, 0x2}, {0x3, 0x2}, {0x80}, {0xfff}, {0x2, 0x3}], [{0x1, 0x5}, {0x7ac, 0x8}, {0x4, 0x6}, {0x8be8, 0xeb}, {0x5, 0x1}, {0x9, 0x7}, {0x80000000, 0x80000001}, {0x3ff, 0x1}, {0x3, 0x1}, {0xc5c2, 0x80000000}, {0xff, 0xff}], 0x5, 0x1}, {[{0x8}, {0x7, 0x3}, {0x80000000, 0x2}, {0x3, 0x2}, {0x80000001, 0x3}, {0x5, 0x3}, {0x4, 0x3}, {0x1, 0x3}, {0x6, 0x3}, {0x400}, {0x4, 0x2}], [{0x4, 0x3ff}, {0x7fff, 0x7}, {0x874c}, {0x1, 0xff}, {0x7, 0xfffffff7}, {0x6, 0x3}, {0x0, 0x40}, {0x1000, 0x8000}, {0x80, 0x7}, {0x9, 0x3}, {0x100, 0x5}], 0x6, 0x6}, {[{0xffff, 0x1}, {0x800, 0x3}, {0x1, 0x2}, {0xffe, 0x1}, {0x2, 0x1}, {0xffff0000, 0x3}, {0x7, 0x3}, {0xac, 0x3}, {0x5, 0x2}, {0x3d72, 0x1}, {0x9, 0xff1b2e8f87878c81}], [{0x0, 0x4}, {0x5}, {0x80000000}, {0x1, 0x9}, {0xc00, 0xffffffff}, {0x81, 0x9}, {0xfffffffe, 0xfffffffe}, {0x7, 0x7}, {0x5, 0xc7}, {0x34d4, 0x5}, {0x8, 0x4}], 0x5, 0x5}, {[{0x40, 0x3}, {0x9}, {0x4b7}, {0x9, 0x8e77c5e0a9f127c3}, {0x2, 0x1}, {0x80000001, 0x3}, {0x100}, {0x8001, 0x2}, {0x1}, {0xffff, 0x2}, {0x8, 0x4}], [{0xb5, 0x101}, {0x10001, 0x3c35}, {0x2, 0x7}, {0x1, 0xb17}, {0x6, 0x4}, {0xa316, 0x5}, {0x7, 0x81}, {0x5, 0x80000000}, {0x2}, {0xffffffff, 0x8}, {0x10000, 0x3}], 0x5, 0x5}, {[{0x9, 0x2}, {0x9, 0x1}, {0x8}, {0x1000}, {0x0, 0x3}, {0x1}, {0x10001}, {0x7, 0x3}, {0xfe2, 0x2}, {0x3}, {0x10001, 0x2}], [{0x400, 0x7f}, {0x2, 0x7}, {0x5, 0x3}, {0x4, 0x10000}, {0x9, 0x1}, {0xb6, 0x4}, {0x8, 0x8001}, {0x3ff, 0x101}, {0x7, 0x14000000}, {0x3ff, 0x1000}, {0x5, 0x200}], 0x2, 0xb}, {[{0xffffff4a}, {0x8, 0x3}, {0x454}, {0x1}, {0x1000, 0x2}, {0x1, 0x2}, {0x6}, {0x8, 0x6}, {0x800, 0x2}, {0x7}, {0x0, 0x3}], [{0x0, 0x20}, {0xfff, 0xe}, {0x1}, {0x7, 0x101}, {0x3, 0x6}, {0x80, 0x9}, {0x1, 0x401}, {0x0, 0x2}, {0x1, 0x40}, {0xfffffffa, 0x400}, {0x0, 0xffff}], 0x3, 0x8}, {[{0xffff7f50}, {0xa5, 0x2}, {0xb513}, {0x80, 0x3}, {0x800, 0x2}, {0x1f}, {0x8001, 0x3}, {0x8, 0x1}, {0x296a, 0x1}, {0x3, 0x1}, {0x1}], [{0x81, 0x6}, {0x2, 0x67a}, {0x20, 0x6}, {0x7, 0x7ff}, {0x0, 0x7fffffff}, {0x54, 0x2}, {0x7, 0x9}, {0x7fffffff, 0xfffffffa}, {0x3, 0x7}, {0x5, 0x7}, {0x6, 0x10001}], 0x4, 0xa}, {[{0x1, 0x2}, {0x1f, 0x3}, {0xffc, 0x3}, {0x7, 0x1}, {0x1f}, {0xd88, 0x3}, {0x5, 0x2}, {0x1, 0x2}, {}, {0x20, 0x1}, {0x0, 0x3}], [{0x4, 0x9}, {0x20, 0x2f5b}, {0x2fe, 0x2c9}, {}, {0xfff, 0x5}, {0x3ff, 0x1ff}, {0x5b5f7ae9, 0xffff7176}, {0x100, 0x4}, {0xffff, 0x9a}, {0x4, 0xfff}, {0x401, 0x4}], 0x3, 0x1}, {[{0xffffffe1, 0x1}, {0x7, 0x2}, {0x7}, {0x8754170}, {0x3, 0x4}, {0xffffffc0, 0x2}, {0x7f, 0x1}, {0x9}, {0xf}, {0x3, 0x1}, {0x40}], [{0xb7, 0x5}, {0x7f, 0xfffffffc}, {0x3, 0x7ff}, {0x401, 0x8000}, {0x0, 0xc0f}, {0x1, 0x7}, {0x3, 0xfffffff8}, {0x9, 0x9}, {0x8, 0x7}, {0x848, 0x200}, {0x4, 0x80}], 0xa, 0x9}], 0xa}}}], [@common=@ERROR={'ERROR\x00', 0x20, {"bfc90284ee93d39c52568ab10e04937ed55b2bca1d590758417be9a47796"}}], @arpreply={'arpreply\x00', 0x10, {{@local, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x2, [{0x5, 0x14, 0x6002, 'veth1\x00', 'irlan0\x00', 'veth1\x00', 'veth1_to_bond\x00', @broadcast, [0x1fe, 0x0, 0xff, 0x0, 0x80, 0xff], @dev={[], 0x28}, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], 0xde, 0x14e, 0x196, [@time={'time\x00', 0x18, {{0x1d, 0x9, 0xee7e, 0x1221c, 0x0, 0x0, 0x2}}}, @cpu={'cpu\x00', 0x8, {{0x6, 0x1}}}], [@snat={'snat\x00', 0x10, {{@remote, 0x10}}}, @snat={'snat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffdf}}}], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x33, 0x40, 0xffffffff00000000}}}}, {0x3, 0x1, 0x88e5, 'bcsf0\x00', 'bridge_slave_1\x00', 'veth1\x00', 'tunl0\x00', @broadcast, [0xff, 0xff, 0xff, 0x0, 0xff], @local, [0x17e], 0x9e, 0x10e, 0x146, [@pkttype={'pkttype\x00', 0x8, {{0x1}}}], [@arpreply={'arpreply\x00', 0x10, {{@broadcast, 0xffffffffffffffff}}}, @arpreply={'arpreply\x00', 0x10, {{@dev={[], 0x24}, 0x3}}}], @snat={'snat\x00', 0x10, {{@dev={[], 0x1a}, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x5, 0xfffffffffffffffe, 0x2, [{0x11, 0x4, 0x88ca, 'veth0\x00', 'vcan0\x00', 'team_slave_1\x00', 'bpq0\x00', @dev={[], 0x10}, [0x0, 0xff, 0xff, 0xff, 0xff], @dev={[], 0x27}, [0xff, 0x0, 0xff, 0x0, 0x80], 0xde, 0x14e, 0x17e, [@rateest={'rateest\x00', 0x48, {{'nr0\x00', 'bond0\x00', 0x4, 0x0, 0x971951c, 0x10001, 0xd7e2, 0x7, 0x6, 0x4}}}], [@arpreply={'arpreply\x00', 0x10, {{@empty, 0x8000000000000002}}}, @arpreply={'arpreply\x00', 0x10, {{@remote, 0xfffffffffffffffd}}}], @common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}}, {0x5, 0x1, 0x14e98, 'bond0\x00', 'ip6tnl0\x00', 'vlan0\x00', 'ip6gretap0\x00', @empty, [0x426aca0be51c6ab1, 0x0, 0xff, 0x80, 0xff, 0x7f], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0x80, 0x0, 0x0, 0xff], 0xde, 0xde, 0x10e, [@stp={'stp\x00', 0x48, {{0x7, {0x67, 0x3, 0x1, @dev={[], 0x18}, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0x7, 0x80, 0x200, 0x40, @broadcast, [0x80, 0x0, 0x181, 0x80, 0x6efa3c52d252398b, 0xff], 0x4e20, 0x4e23, 0x1f, 0x2, 0x400, 0x20, 0x85c, 0xfffc, 0x98, 0x4}, 0x852, 0x803}}}], [], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}]}, 0x114a) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000001440)) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000000140)={0xce, 0x8}, 0x2) r8 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r8) ioctl$RTC_VL_READ(r8, 0x80047013, &(0x7f00000002c0)) r9 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001480)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r9, 0xc0205648, &(0x7f0000001500)={0x9e0000, 0x928, 0x5, [], &(0x7f00000014c0)={0x0, 0x5, [], @value64=0x400}}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r10 = open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x10) sendfile(r10, r10, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) [ 1098.046609] should_failslab+0xdb/0x130 [ 1098.050590] kmem_cache_alloc_trace+0x2e9/0x790 [ 1098.055271] ? __lockdep_init_map+0x10c/0x570 [ 1098.059778] ? loop_get_status64+0x120/0x120 [ 1098.064191] __kthread_create_on_node+0xe3/0x3e0 [ 1098.069031] ? kthread_park+0x140/0x140 [ 1098.073007] ? __fget+0x210/0x370 [ 1098.076479] ? loop_get_status64+0x120/0x120 [ 1098.080893] kthread_create_on_node+0xa8/0xd0 [ 1098.085389] ? __kthread_create_on_node+0x3e0/0x3e0 [ 1098.090409] ? __lockdep_init_map+0x10c/0x570 [ 1098.094894] lo_ioctl+0xcf7/0x1ce0 [ 1098.098416] ? debug_check_no_obj_freed+0x2aa/0x7b7 [ 1098.103431] ? loop_probe+0x160/0x160 [ 1098.107320] blkdev_ioctl+0x96b/0x1860 [ 1098.111200] ? blkpg_ioctl+0x980/0x980 [ 1098.115089] ? __might_sleep+0x93/0xb0 [ 1098.118963] ? __fget+0x210/0x370 [ 1098.122416] block_ioctl+0xde/0x120 [ 1098.126044] ? blkdev_fallocate+0x3b0/0x3b0 [ 1098.130367] do_vfs_ioctl+0x7ae/0x1060 [ 1098.134274] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1098.139035] ? lock_downgrade+0x740/0x740 [ 1098.143189] ? ioctl_preallocate+0x1c0/0x1c0 [ 1098.147594] ? __fget+0x237/0x370 [ 1098.151037] ? security_file_ioctl+0x89/0xb0 [ 1098.155430] SyS_ioctl+0x8f/0xc0 [ 1098.158781] ? do_vfs_ioctl+0x1060/0x1060 [ 1098.162928] do_syscall_64+0x1e8/0x640 [ 1098.166818] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1098.171743] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1098.176930] RIP: 0033:0x4598c7 [ 1098.180119] RSP: 002b:00007fd726182a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1098.187826] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004598c7 [ 1098.195082] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 1098.202352] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1098.209702] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1098.216954] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 06:14:47 executing program 1 (fault-call:3 fault-nth:11): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) 06:14:48 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) open(0x0, 0x141042, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x2, 0x400) write$P9_RREADLINK(r1, &(0x7f0000000080)={0xe, 0x17, 0x1, {0x5, './bus'}}, 0xe) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) 06:14:48 executing program 3: rt_sigaction(0x0, &(0x7f0000000180)={0x0, {0x2}, 0x0, 0x0}, 0x0, 0x236, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0xe42, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x10440) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000080)=0x2) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x2}], 0x2000000000000009) [ 1098.374096] FAULT_INJECTION: forcing a failure. [ 1098.374096] name failslab, interval 1, probability 0, space 0, times 0 [ 1098.386169] CPU: 1 PID: 4544 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1098.393111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1098.402668] Call Trace: [ 1098.405263] dump_stack+0x138/0x197 [ 1098.408965] should_fail.cold+0x10f/0x159 [ 1098.413115] should_failslab+0xdb/0x130 [ 1098.417097] kmem_cache_alloc+0x2d7/0x780 [ 1098.421361] ? trace_hardirqs_on+0x10/0x10 [ 1098.425595] ? save_trace+0x290/0x290 [ 1098.429406] __kernfs_new_node+0x70/0x420 [ 1098.433559] kernfs_new_node+0x80/0xf0 [ 1098.437468] kernfs_create_dir_ns+0x41/0x140 [ 1098.441875] internal_create_group+0xea/0x7b0 [ 1098.446380] sysfs_create_group+0x20/0x30 [ 1098.450526] lo_ioctl+0x1176/0x1ce0 [ 1098.454148] ? loop_probe+0x160/0x160 [ 1098.458064] blkdev_ioctl+0x96b/0x1860 [ 1098.461954] ? blkpg_ioctl+0x980/0x980 [ 1098.465851] ? __might_sleep+0x93/0xb0 [ 1098.469728] ? __fget+0x210/0x370 [ 1098.473185] block_ioctl+0xde/0x120 [ 1098.476802] ? blkdev_fallocate+0x3b0/0x3b0 [ 1098.481115] do_vfs_ioctl+0x7ae/0x1060 [ 1098.484990] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1098.489730] ? lock_downgrade+0x740/0x740 [ 1098.493866] ? ioctl_preallocate+0x1c0/0x1c0 [ 1098.498266] ? __fget+0x237/0x370 [ 1098.501729] ? security_file_ioctl+0x89/0xb0 [ 1098.506129] SyS_ioctl+0x8f/0xc0 [ 1098.509481] ? do_vfs_ioctl+0x1060/0x1060 [ 1098.513632] do_syscall_64+0x1e8/0x640 [ 1098.517505] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1098.522345] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1098.527520] RIP: 0033:0x4598c7 [ 1098.530695] RSP: 002b:00007fd726182a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1098.538386] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004598c7 [ 1098.545649] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 1098.552901] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1098.560155] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1098.567411] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 06:14:48 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="b7"], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f0000000080)) getsockopt$inet6_dccp_buf(r0, 0x21, 0xf, &(0x7f00000000c0)=""/58, &(0x7f0000000100)=0x3a) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) 06:14:48 executing program 3: rt_sigaction(0x0, &(0x7f0000000180)={0x0, {0x2}, 0x0, 0x0}, 0x0, 0x236, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup2(0xffffffffffffffff, r0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0xe42, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x2}], 0x1527fcd76ca044e4) 06:14:48 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) r1 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x200000000d8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREMOVE(r1, &(0x7f0000000040)={0x7, 0x7b, 0x2}, 0x7) [ 1098.678094] REISERFS warning (device loop1): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. 06:14:48 executing program 1 (fault-call:3 fault-nth:12): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) [ 1098.820389] FAULT_INJECTION: forcing a failure. [ 1098.820389] name failslab, interval 1, probability 0, space 0, times 0 [ 1098.832269] CPU: 1 PID: 4573 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1098.839209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1098.848565] Call Trace: [ 1098.851193] dump_stack+0x138/0x197 [ 1098.854840] should_fail.cold+0x10f/0x159 [ 1098.859020] should_failslab+0xdb/0x130 [ 1098.863004] kmem_cache_alloc+0x47/0x780 [ 1098.867070] ? save_stack_trace+0x16/0x20 [ 1098.871237] ? save_stack+0x45/0xd0 [ 1098.874867] ? kasan_kmalloc+0xce/0xf0 [ 1098.878758] ? kasan_slab_alloc+0xf/0x20 [ 1098.882838] ? kmem_cache_alloc+0x12e/0x780 [ 1098.887166] ? __kernfs_new_node+0x70/0x420 [ 1098.891498] ? kernfs_new_node+0x80/0xf0 [ 1098.895562] ? kernfs_create_dir_ns+0x41/0x140 [ 1098.900164] radix_tree_node_alloc.constprop.0+0x1c7/0x310 [ 1098.905800] idr_get_free_cmn+0x563/0x8d0 [ 1098.909971] idr_alloc_cmn+0x10e/0x210 [ 1098.913871] ? __fprop_inc_percpu_max+0x1e0/0x1e0 [ 1098.918722] ? perf_trace_lock+0x500/0x500 [ 1098.922963] idr_alloc_cyclic+0xd0/0x1e2 [ 1098.927032] ? ida_simple_remove+0x60/0x60 [ 1098.931279] __kernfs_new_node+0xe4/0x420 [ 1098.935436] kernfs_new_node+0x80/0xf0 [ 1098.939330] kernfs_create_dir_ns+0x41/0x140 [ 1098.943742] internal_create_group+0xea/0x7b0 [ 1098.948252] sysfs_create_group+0x20/0x30 [ 1098.952406] lo_ioctl+0x1176/0x1ce0 [ 1098.956046] ? loop_probe+0x160/0x160 [ 1098.959859] blkdev_ioctl+0x96b/0x1860 [ 1098.963754] ? blkpg_ioctl+0x980/0x980 [ 1098.967652] ? __might_sleep+0x93/0xb0 [ 1098.971540] ? __fget+0x210/0x370 [ 1098.975001] block_ioctl+0xde/0x120 [ 1098.978631] ? blkdev_fallocate+0x3b0/0x3b0 [ 1098.982955] do_vfs_ioctl+0x7ae/0x1060 [ 1098.986849] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1098.991628] ? lock_downgrade+0x740/0x740 [ 1098.995782] ? ioctl_preallocate+0x1c0/0x1c0 [ 1099.000199] ? __fget+0x237/0x370 [ 1099.003667] ? security_file_ioctl+0x89/0xb0 [ 1099.008172] SyS_ioctl+0x8f/0xc0 [ 1099.011545] ? do_vfs_ioctl+0x1060/0x1060 [ 1099.015706] do_syscall_64+0x1e8/0x640 [ 1099.019618] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1099.024474] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1099.029661] RIP: 0033:0x4598c7 [ 1099.032851] RSP: 002b:00007fd726182a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1099.040579] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004598c7 [ 1099.047846] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 1099.055118] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1099.062435] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 06:14:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x2) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="0a218211f663a7724bdef6"], 0xb) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r3, r3, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) 06:14:48 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 1099.069711] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 [ 1099.086675] REISERFS warning (device loop1): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. 06:14:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x40e000, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000080)) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB=':!'], 0x2) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) 06:14:48 executing program 1 (fault-call:3 fault-nth:13): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) [ 1099.229203] FAULT_INJECTION: forcing a failure. [ 1099.229203] name failslab, interval 1, probability 0, space 0, times 0 [ 1099.253087] CPU: 0 PID: 4594 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1099.260053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1099.269411] Call Trace: [ 1099.272010] dump_stack+0x138/0x197 [ 1099.275658] should_fail.cold+0x10f/0x159 [ 1099.279825] should_failslab+0xdb/0x130 [ 1099.283808] kmem_cache_alloc+0x2d7/0x780 [ 1099.288018] ? wait_for_completion+0x420/0x420 [ 1099.292616] __kernfs_new_node+0x70/0x420 [ 1099.296772] kernfs_new_node+0x80/0xf0 [ 1099.300669] __kernfs_create_file+0x46/0x323 [ 1099.305087] sysfs_add_file_mode_ns+0x1e4/0x450 [ 1099.309765] internal_create_group+0x232/0x7b0 [ 1099.314364] sysfs_create_group+0x20/0x30 [ 1099.318520] lo_ioctl+0x1176/0x1ce0 [ 1099.322157] ? loop_probe+0x160/0x160 [ 1099.325961] blkdev_ioctl+0x96b/0x1860 [ 1099.329861] ? blkpg_ioctl+0x980/0x980 [ 1099.333848] ? __might_sleep+0x93/0xb0 [ 1099.337733] ? __fget+0x210/0x370 [ 1099.341189] block_ioctl+0xde/0x120 [ 1099.344820] ? blkdev_fallocate+0x3b0/0x3b0 [ 1099.349151] do_vfs_ioctl+0x7ae/0x1060 [ 1099.353054] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1099.357815] ? lock_downgrade+0x740/0x740 [ 1099.361967] ? ioctl_preallocate+0x1c0/0x1c0 [ 1099.366393] ? __fget+0x237/0x370 [ 1099.369860] ? security_file_ioctl+0x89/0xb0 [ 1099.374275] SyS_ioctl+0x8f/0xc0 [ 1099.377642] ? do_vfs_ioctl+0x1060/0x1060 [ 1099.381922] do_syscall_64+0x1e8/0x640 [ 1099.385818] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1099.390670] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1099.395859] RIP: 0033:0x4598c7 [ 1099.399050] RSP: 002b:00007fd726182a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1099.406762] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004598c7 [ 1099.414036] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 1099.421306] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1099.428578] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1099.435848] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 06:14:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="e521"], 0x2) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) [ 1099.558198] REISERFS warning (device loop1): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. 06:14:49 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="b732e319df0c84263b11d341c6135fe86509a5f2c8eb44c6ee7d0d4d3d381e414c07983247948951232eb7f5e6a4cff6008bdd04bc524f28f04f951673b25745523a0cc04ed0f7c6b6beb305ee88ab43e02112665486e380151a69e132292d8e92707fddd04ab785ca1a5e01000000031da8a41680e32d1dfc4f7100ec2092f0ef0ee0b15143954dd812ac6c7c7bf224a2f702a0a4a45a530d53b7a95e668123cb7a7489abf6fc7cc7770462b53b43d642e21707f3541c06903b31561473d609fcdb2a2c35c595db2e45793ad36dde215b"], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) 06:14:49 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x9) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 06:14:49 executing program 1 (fault-call:3 fault-nth:14): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) [ 1099.733956] FAULT_INJECTION: forcing a failure. [ 1099.733956] name failslab, interval 1, probability 0, space 0, times 0 [ 1099.759716] CPU: 0 PID: 4618 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1099.766682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1099.776046] Call Trace: [ 1099.778650] dump_stack+0x138/0x197 [ 1099.782294] should_fail.cold+0x10f/0x159 [ 1099.786453] should_failslab+0xdb/0x130 [ 1099.790455] kmem_cache_alloc+0x2d7/0x780 [ 1099.794603] ? wait_for_completion+0x420/0x420 [ 1099.799200] __kernfs_new_node+0x70/0x420 [ 1099.803349] kernfs_new_node+0x80/0xf0 [ 1099.807244] __kernfs_create_file+0x46/0x323 [ 1099.811673] sysfs_add_file_mode_ns+0x1e4/0x450 [ 1099.816351] internal_create_group+0x232/0x7b0 [ 1099.820946] sysfs_create_group+0x20/0x30 [ 1099.825102] lo_ioctl+0x1176/0x1ce0 [ 1099.828736] ? loop_probe+0x160/0x160 [ 1099.832549] blkdev_ioctl+0x96b/0x1860 [ 1099.836440] ? blkpg_ioctl+0x980/0x980 [ 1099.840337] ? __might_sleep+0x93/0xb0 [ 1099.844247] ? __fget+0x210/0x370 [ 1099.847707] block_ioctl+0xde/0x120 [ 1099.851336] ? blkdev_fallocate+0x3b0/0x3b0 [ 1099.855663] do_vfs_ioctl+0x7ae/0x1060 [ 1099.859554] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1099.865270] ? lock_downgrade+0x740/0x740 [ 1099.869420] ? ioctl_preallocate+0x1c0/0x1c0 [ 1099.873832] ? __fget+0x237/0x370 [ 1099.877292] ? security_file_ioctl+0x89/0xb0 [ 1099.881706] SyS_ioctl+0x8f/0xc0 [ 1099.885078] ? do_vfs_ioctl+0x1060/0x1060 [ 1099.889232] do_syscall_64+0x1e8/0x640 [ 1099.893128] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1099.897981] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1099.903168] RIP: 0033:0x4598c7 [ 1099.906353] RSP: 002b:00007fd726182a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1099.914063] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004598c7 [ 1099.921336] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 1099.928605] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1099.935872] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1099.943141] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 06:14:49 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 06:14:49 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="b7"], 0x1) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x0, [], [{0x200, 0x2, 0x3, 0x7ff, 0x5, 0x8}, {0x3, 0x80, 0x2a, 0xd5e, 0x9, 0x6}], [[], [], [], []]}) sendfile(r0, r1, &(0x7f0000000080)=0xffffffffffffeff9, 0x9) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/relabel\x00', 0x2, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r3, r3, 0x0, 0x8080fffffffe) [ 1100.127751] REISERFS warning (device loop1): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. 06:14:49 executing program 1 (fault-call:3 fault-nth:15): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) 06:14:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000040)='./file0\x00', 0x80) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="f6b4115a9a3a491c597cff83884e04f304b01a40219b58fa07c32b0a1c322409f8376ff5f6d11e70b2e01da324bccf647ea49aa26a85950b09f1c9c3e750ae458b8aa7e118f62daa25a668ed1cb29dc3d45bc23cc00d1a8abbd66f1b8b6af3003208d8fabde1d44dfba83036b0c1b11d004443f07918e3b80ee56ada4abdb1bad5efc45ddba2ead307ddd10e0595b361a78f622e15c5e34b5b8187318b12db240608a8ca3f4a943ced0c26f746e69b794857d8ed456c4731b62145dbd1ee9fdb81b9232b9d93166adfb314c76047afd11de978346673d9d602a101000000f661404746574f9b4ca214e6293c3e80807b6118fe23db475966e9ce3d393e29c16f994308a8328f63a8f59bf4928875aa1234c22a027b255b1e7be0799ee2fd009915f4d4ef7bc42dfcc7188e92d1ce0c8b5346c7bcab4f200b92615031707e040611a85d939139a5fe1e97e7dd6e946ec2d9b1af25a0f8b0934fba974982a4e0b87e855d96dc0713112d4f52cc6f5b"], 0xb) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000180)={@mcast2, r4}, 0x14) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r5, 0xc05c5340, &(0x7f0000000080)={0xffff00e1, 0x8, 0x4e5c, {0x77359400}, 0x9, 0x3}) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r6, r6, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) [ 1100.285397] FAULT_INJECTION: forcing a failure. [ 1100.285397] name failslab, interval 1, probability 0, space 0, times 0 [ 1100.321356] CPU: 0 PID: 4639 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1100.328322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1100.337681] Call Trace: [ 1100.340279] dump_stack+0x138/0x197 [ 1100.343920] should_fail.cold+0x10f/0x159 [ 1100.348342] should_failslab+0xdb/0x130 [ 1100.352327] kmem_cache_alloc+0x2d7/0x780 [ 1100.356478] ? wait_for_completion+0x420/0x420 [ 1100.361098] __kernfs_new_node+0x70/0x420 [ 1100.365258] kernfs_new_node+0x80/0xf0 [ 1100.369154] __kernfs_create_file+0x46/0x323 [ 1100.373575] sysfs_add_file_mode_ns+0x1e4/0x450 [ 1100.378254] internal_create_group+0x232/0x7b0 [ 1100.382849] sysfs_create_group+0x20/0x30 [ 1100.387000] lo_ioctl+0x1176/0x1ce0 [ 1100.390638] ? loop_probe+0x160/0x160 [ 1100.395493] blkdev_ioctl+0x96b/0x1860 [ 1100.399398] ? blkpg_ioctl+0x980/0x980 [ 1100.403299] ? __might_sleep+0x93/0xb0 [ 1100.407193] ? __fget+0x210/0x370 [ 1100.410658] block_ioctl+0xde/0x120 [ 1100.414286] ? blkdev_fallocate+0x3b0/0x3b0 [ 1100.418613] do_vfs_ioctl+0x7ae/0x1060 [ 1100.422505] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1100.427265] ? lock_downgrade+0x740/0x740 [ 1100.431420] ? ioctl_preallocate+0x1c0/0x1c0 [ 1100.435836] ? __fget+0x237/0x370 [ 1100.439302] ? security_file_ioctl+0x89/0xb0 [ 1100.443744] SyS_ioctl+0x8f/0xc0 [ 1100.447111] ? do_vfs_ioctl+0x1060/0x1060 [ 1100.451275] do_syscall_64+0x1e8/0x640 [ 1100.455161] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1100.460012] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1100.465228] RIP: 0033:0x4598c7 [ 1100.468418] RSP: 002b:00007fd726182a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1100.476131] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004598c7 [ 1100.483404] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 1100.490677] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1100.498298] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1100.505596] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 [ 1100.563539] audit: type=1804 audit(1571033690.242:378): pid=4640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir083209472/syzkaller.wmdOAo/1098/file0" dev="sda1" ino=16724 res=1 06:14:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) io_setup(0x3b24, &(0x7f0000000740)=0x0) io_submit(r3, 0x6c2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000780), 0x4000}]) io_destroy(r3) io_cancel(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x3ff, r1, &(0x7f00000000c0)="451dbde8cd37b69dcb857660e0874262a19acb694a8d5e2cab53a8a53cde", 0x1e, 0x49b, 0x0, 0x1}, &(0x7f0000000140)) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="3a21ed2d25eb21e7632c03d97f51e2d735fd23520a49186c0b086c3424873f5aa49464aa08b25472a4a6cc07000000d819cb885981128dbbaae7b71f4aba1a99b39dbf818a5e027950aa4449d479ec69d1d6476be6fb6d29367300000000"], 0x2) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000200)=""/33) sendfile(r0, r0, 0x0, 0x8080fffffffe) 06:14:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef6"], 0xb) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$BLKFRASET(r4, 0x1264, &(0x7f0000000080)=0x946c) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x684000) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) r6 = socket$nl_crypto(0x10, 0x3, 0x15) kcmp(r3, 0xffffffffffffffff, 0x0, r5, r6) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) [ 1100.739017] audit: type=1804 audit(1571033690.292:379): pid=4643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir083209472/syzkaller.wmdOAo/1098/file0" dev="sda1" ino=16724 res=1 06:14:50 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x4000, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000015c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f00000016c0)=0xe8) r5 = getegid() r6 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, 0x0, 0x0) sendmsg(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="240000005a0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) r7 = dup(r6) r8 = geteuid() write$P9_RGETATTR(r7, &(0x7f0000000480)={0xa0, 0x19, 0x2, {0x1b04, {0x20, 0x3, 0x8}, 0x0, r8, r5, 0x9309, 0x6, 0x9, 0x24, 0x5, 0x6f, 0x3ff, 0xf97d, 0x5, 0x1, 0xc474, 0xfffffffffffffffc, 0x2, 0x8, 0x7}}, 0xa0) getgroups(0x2, &(0x7f0000000700)=[r5, 0xee01]) r9 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r9, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r9, r9, &(0x7f0000000000), 0x8080fffffffe) r10 = getpid() sched_setattr(r10, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r12) r13 = getegid() r14 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r14, 0x1, 0x1a, 0x0, 0x0) sendmsg(r14, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="240000005a0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) r15 = dup(r14) r16 = geteuid() write$P9_RGETATTR(r15, &(0x7f0000000480)={0xa0, 0x19, 0x2, {0x1b04, {0x20, 0x3, 0x8}, 0x0, r16, r13, 0x9309, 0x6, 0x9, 0x24, 0x5, 0x6f, 0x3ff, 0xf97d, 0x5, 0x1, 0xc474, 0xfffffffffffffffc, 0x2, 0x8, 0x7}}, 0xa0) getgroups(0x2, &(0x7f0000000700)=[r13, 0xee01]) r17 = getpid() sched_setattr(r17, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000001700)='./bus\x00', &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0}) r19 = getpid() sched_setattr(r19, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r21) lstat(&(0x7f00000017c0)='./file0\x00', &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000001940)=[{&(0x7f0000000080)=@file={0x1, './bus/file0\x00'}, 0x6e, &(0x7f0000001540)=[{&(0x7f0000000200)="862b5d565de696fed2138499737700a0fdf45728eef14611b3243e51a3c799c1705f67038376492feb75a5472ffea4ea7dade00586e7e3f38020e524451f14333aacf1023b6e84c18dc4e3ceee35d7d271443d28ad1f4fdff3ba9d567942a850db0188416294e13c7a80326cf8f283d466eb8313a63d311fa3c94b8fe57c53b2c7472d09321edf5e7623be11ceab92c16af9af48199c5fccd3b1e67dafe917bca7704c9bfdec6b92371b6b4903633dcd685b5790fe4cf36abaf04307eaa4542ab0b7dac530c6f36a397c97e1", 0xcc}, {&(0x7f0000000100)="25f953d85aaffb15ce57394ad6ea75c422a749e3683d7cb4617304", 0x1b}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000000140)="386e6aaa68be553e6200b73db8046a50fbce9ecefdd9fe92a908b64a56f65f3a1921082512776605c14b5affc2952f326cb44e19e22f8fc3bb71e0989a9fd24e9ec979e7501ee48f9cdc8127a9fafd4fbcfa4497248f302dd9da178675a787e38dcd6dad9fb91323a7", 0x69}, {&(0x7f0000001340)="09fee983af8a086c7b94090a461069ae4395de246343bf73d3b06de02da99e2c764c3bf6aca42494ba005e2edddc61b6b7cd7321d07a6bbc7dc9517ae70e5a8c72fa64f7fdfb570eafc9e596b3367479524122c6f2ded2e5147b2d4eb18e5f5569240e42af56ba44dd7274dec8", 0x6d}, {&(0x7f00000013c0)="afd8418bf999472444790e43075af63e4b52fecaf271bb83d653e6ce0ef8c14365009ba8901e9df0c39dccd3e1629f034156997a822d3f124a6644469e31889a6d0be6a6a5f2e3d98a51d3339b52132d639be924544dca38af2a97f6d19656", 0x5f}, {&(0x7f0000001440)="70e3183c9bace9bfd93e5f4a799bcc64881aca9c08e1eb5205891f0eb6e69e84faced62a2acff92c251cc5e362a2848a6f5bc45cd8d8a937017ffd6484ef184f53c64304e2069510f35811ab16e394059a07437c571098f48bc54bc5c1eac6d1c7e3ff8b66768f7bdb28d25f3966e8d36b1c300dd94852e6ddb255dc5848053f19abbbe215af8f4c077c29c77ede37283de1f3a14ca214aabc6e71c3777787874bca7719336f2203de08ec88fee316283bec8b7be67244f78873abc3ee5cfe4aeb39b989605978f6a41d8fe43536a949824ca3bd2f4e987bfcb8f950509dd7ee89f141b1eeea57bf2714e8f6d6db1bc0364d", 0xf2}], 0x7, &(0x7f0000001880)=[@cred={{0x1c, 0x1, 0x2, {r2, r4, r5}}}, @rights={{0x1c, 0x1, 0x1, [r0, r9, r0]}}, @cred={{0x1c, 0x1, 0x2, {r10, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {r17, r18, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r19, r21, r22}}}], 0xa0, 0x4000000}], 0x1, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r23 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r23, r23, &(0x7f0000000000), 0x8080fffffffe) [ 1100.786464] audit: type=1804 audit(1571033690.302:380): pid=4645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir083209472/syzkaller.wmdOAo/1098/file0" dev="sda1" ino=16724 res=1 [ 1100.856586] REISERFS warning (device loop1): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. 06:14:50 executing program 1 (fault-call:3 fault-nth:16): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) [ 1100.958810] FAULT_INJECTION: forcing a failure. [ 1100.958810] name failslab, interval 1, probability 0, space 0, times 0 [ 1100.975953] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=537 sclass=netlink_route_socket pig=4662 comm=syz-executor.0 [ 1100.976383] CPU: 1 PID: 4665 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1100.995074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1101.004436] Call Trace: [ 1101.007032] dump_stack+0x138/0x197 [ 1101.010676] should_fail.cold+0x10f/0x159 [ 1101.014835] should_failslab+0xdb/0x130 [ 1101.018817] kmem_cache_alloc+0x2d7/0x780 [ 1101.022993] ? wait_for_completion+0x420/0x420 [ 1101.027597] __kernfs_new_node+0x70/0x420 [ 1101.031753] kernfs_new_node+0x80/0xf0 [ 1101.035655] __kernfs_create_file+0x46/0x323 [ 1101.040079] sysfs_add_file_mode_ns+0x1e4/0x450 [ 1101.044757] internal_create_group+0x232/0x7b0 [ 1101.049350] sysfs_create_group+0x20/0x30 [ 1101.053502] lo_ioctl+0x1176/0x1ce0 [ 1101.057141] ? loop_probe+0x160/0x160 [ 1101.060946] blkdev_ioctl+0x96b/0x1860 [ 1101.064836] ? blkpg_ioctl+0x980/0x980 [ 1101.068736] ? __might_sleep+0x93/0xb0 [ 1101.072686] ? __fget+0x210/0x370 [ 1101.076151] block_ioctl+0xde/0x120 [ 1101.079781] ? blkdev_fallocate+0x3b0/0x3b0 [ 1101.084107] do_vfs_ioctl+0x7ae/0x1060 [ 1101.088002] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1101.092758] ? lock_downgrade+0x740/0x740 [ 1101.096921] ? ioctl_preallocate+0x1c0/0x1c0 [ 1101.101334] ? __fget+0x237/0x370 [ 1101.104802] ? security_file_ioctl+0x89/0xb0 [ 1101.109218] SyS_ioctl+0x8f/0xc0 [ 1101.112590] ? do_vfs_ioctl+0x1060/0x1060 [ 1101.116743] do_syscall_64+0x1e8/0x640 [ 1101.120899] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1101.125755] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1101.130972] RIP: 0033:0x4598c7 [ 1101.134159] RSP: 002b:00007fd726182a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1101.141882] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004598c7 06:14:50 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="b7"], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x8) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000180)=@urb_type_control={0x2, {0xc}, 0x7c0c9862, 0x2, &(0x7f0000000080)={0x3, 0x17, 0x8001, 0x0, 0x3}, 0x8, 0x2, 0xffffffff, 0x0, 0xff, 0xffffffff, &(0x7f00000000c0)="51404b4da56728e292f1fad6c0fad6be54e445b4c0137322e24896bbf38aa2f24a88429ad51e2a8712b6c9ca6f8f83b8e09ea79f1efab06163684efee87a4bdd62dce6c3a2da7d285332a930c70ea911f783ff1cb177a0cd1e834439b50713963c1e00392b32f1fdc88c4a81260e437c10f86aeb23bc963eb2d51ef4e0418a1ed70b9b24d14ac41b8c47b5759853f1cca4db693bee9d6088f09730b127f196cb30cf93e7f10490319e7a0ad058475682834a0c524ab6e15b72fc2bef8c"}) [ 1101.144526] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=537 sclass=netlink_route_socket pig=4669 comm=syz-executor.0 [ 1101.149147] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 1101.149154] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1101.149160] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1101.149166] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 [ 1101.237439] REISERFS warning (device loop1): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. 06:14:51 executing program 1 (fault-call:3 fault-nth:17): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) 06:14:51 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) utime(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)={0x7fff, 0x4}) write$P9_RREADLINK(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="b7"], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) write$FUSE_OPEN(r1, &(0x7f00000000c0)={0x20, 0x0, 0x3}, 0x20) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x6, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000100), 0x8}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000140)=0x14) sendfile(r2, r2, 0x0, 0x8080fffffffe) [ 1101.443847] FAULT_INJECTION: forcing a failure. [ 1101.443847] name failslab, interval 1, probability 0, space 0, times 0 [ 1101.470263] CPU: 0 PID: 4683 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1101.477221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1101.486571] Call Trace: [ 1101.489180] dump_stack+0x138/0x197 [ 1101.492831] should_fail.cold+0x10f/0x159 [ 1101.496999] should_failslab+0xdb/0x130 [ 1101.500986] kmem_cache_alloc+0x2d7/0x780 [ 1101.505142] ? wait_for_completion+0x420/0x420 [ 1101.509737] __kernfs_new_node+0x70/0x420 [ 1101.513899] kernfs_new_node+0x80/0xf0 [ 1101.517799] __kernfs_create_file+0x46/0x323 [ 1101.522214] sysfs_add_file_mode_ns+0x1e4/0x450 [ 1101.526888] internal_create_group+0x232/0x7b0 [ 1101.531480] sysfs_create_group+0x20/0x30 [ 1101.535613] lo_ioctl+0x1176/0x1ce0 [ 1101.539228] ? loop_probe+0x160/0x160 [ 1101.543016] blkdev_ioctl+0x96b/0x1860 [ 1101.546887] ? blkpg_ioctl+0x980/0x980 [ 1101.550764] ? __might_sleep+0x93/0xb0 [ 1101.554633] ? __fget+0x210/0x370 [ 1101.558070] block_ioctl+0xde/0x120 [ 1101.561698] ? blkdev_fallocate+0x3b0/0x3b0 [ 1101.566002] do_vfs_ioctl+0x7ae/0x1060 [ 1101.569878] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1101.574617] ? lock_downgrade+0x740/0x740 [ 1101.578787] ? ioctl_preallocate+0x1c0/0x1c0 [ 1101.583204] ? __fget+0x237/0x370 [ 1101.586650] ? security_file_ioctl+0x89/0xb0 [ 1101.591047] SyS_ioctl+0x8f/0xc0 [ 1101.594404] ? do_vfs_ioctl+0x1060/0x1060 [ 1101.598542] do_syscall_64+0x1e8/0x640 [ 1101.602414] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1101.607259] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1101.612433] RIP: 0033:0x4598c7 [ 1101.615609] RSP: 002b:00007fd726182a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1101.623300] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004598c7 [ 1101.630571] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 1101.637826] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1101.645106] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1101.652358] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 [ 1101.665227] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=537 sclass=netlink_route_socket pig=4668 comm=syz-executor.0 [ 1101.730388] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=537 sclass=netlink_route_socket pig=4689 comm=syz-executor.0 06:14:51 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 1101.774116] REISERFS warning (device loop1): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. 06:14:51 executing program 1 (fault-call:3 fault-nth:18): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) [ 1101.926650] FAULT_INJECTION: forcing a failure. [ 1101.926650] name failslab, interval 1, probability 0, space 0, times 0 06:14:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000240)="811382f202fb603f52228a9e6241f340c1e98dc59e52bea77fabd53daea65e8fe965eb25d6c3c6cdac91ecd3ea778f99c68d1a575d483075f843c292bcaf69a212fedc47d3126bb02ba806290da580191054c2cbe8b56c94743b9bd36ed8fe418e8fcb7f6fd99d9f5da4d817cc2a12a59f3b5ece32f02d4de3fd09bd644e9d98b90a03469e51942d58fad86aae5e6379cfec554ee727d714feac40ae9b2e7dded339ead37fcc27b546e49bb809be", 0xae, 0xfffffffffffffff8) keyctl$get_security(0x11, r1, &(0x7f0000000340)=""/254, 0xfe) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000001000000dbdef6"], 0xb) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$VIDIOC_ENUMAUDOUT(r3, 0xc0345642, &(0x7f00000000c0)={0xfffffffb, "152ecb3a3d3bf1b2407bb363deb91e5bd10574ed4a1349949839ea0cc6a35230", 0x2, 0x1}) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r4, r4, 0x0, 0x8080fffffffe) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r5, r5, &(0x7f0000000000), 0x8080fffffffe) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r6, r6, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000440)={{0x2, 0x4e23, @empty}, {0x6, @local}, 0x0, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x26}}, 'bridge_slave_1\x00'}) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000140)={0xffffffff, 0x40}) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) [ 1101.972599] CPU: 1 PID: 4701 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1101.979572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1101.988932] Call Trace: [ 1101.991533] dump_stack+0x138/0x197 [ 1101.995185] should_fail.cold+0x10f/0x159 [ 1101.999357] should_failslab+0xdb/0x130 [ 1102.003343] kmem_cache_alloc+0x2d7/0x780 [ 1102.007498] ? wait_for_completion+0x420/0x420 [ 1102.012096] __kernfs_new_node+0x70/0x420 [ 1102.016258] kernfs_new_node+0x80/0xf0 [ 1102.020150] __kernfs_create_file+0x46/0x323 [ 1102.024567] sysfs_add_file_mode_ns+0x1e4/0x450 [ 1102.029265] internal_create_group+0x232/0x7b0 [ 1102.033856] sysfs_create_group+0x20/0x30 [ 1102.038008] lo_ioctl+0x1176/0x1ce0 [ 1102.041646] ? loop_probe+0x160/0x160 [ 1102.045453] blkdev_ioctl+0x96b/0x1860 [ 1102.049348] ? blkpg_ioctl+0x980/0x980 [ 1102.053252] ? __might_sleep+0x93/0xb0 [ 1102.057139] ? __fget+0x210/0x370 [ 1102.060600] block_ioctl+0xde/0x120 [ 1102.064235] ? blkdev_fallocate+0x3b0/0x3b0 [ 1102.068565] do_vfs_ioctl+0x7ae/0x1060 [ 1102.072466] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1102.077231] ? lock_downgrade+0x740/0x740 [ 1102.081382] ? ioctl_preallocate+0x1c0/0x1c0 [ 1102.085797] ? __fget+0x237/0x370 [ 1102.089263] ? security_file_ioctl+0x89/0xb0 [ 1102.093674] SyS_ioctl+0x8f/0xc0 [ 1102.097048] ? do_vfs_ioctl+0x1060/0x1060 [ 1102.101241] do_syscall_64+0x1e8/0x640 [ 1102.105134] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1102.110078] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1102.115271] RIP: 0033:0x4598c7 [ 1102.118457] RSP: 002b:00007fd726182a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1102.126171] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004598c7 [ 1102.133616] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 1102.140885] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1102.148154] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1102.155448] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 06:14:51 executing program 4: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000040)={0x4, 0xd000, 0x18000000, 0x4, 0xffffff14}) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB=':!'], 0x2) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) read$alg(r3, &(0x7f0000000080)=""/186, 0xba) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) [ 1102.342140] REISERFS warning (device loop1): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. 06:14:52 executing program 1 (fault-call:3 fault-nth:19): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) 06:14:52 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="f6e3b605252ab15bdc921ea75797ecd4ca86adaada6fdae71935f693a00909ff3c7f49ac2bc6358f27ee3bae4023b7e34c5c89b79f0ecac018b0dea3e39c4c773c9cf4efd99830844a12613e38724dd7321255185bf7cad146027edad65165dc0e2b237ffcf9468d5157463ea4457315587cbb4cd95d23d294219f197418e9d191053e553f276f006bbe4bc70118e9c2f587aa3413b5a2a235fbc5f03dc3ac3b8d1e38ebb03d4bf01ef9005b130fa87cb60bcc6bc9fe2a8577a10112b43486b138d9a5831b06ed80a91cac69935b900a590ae6"], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x543d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 1102.495380] FAULT_INJECTION: forcing a failure. [ 1102.495380] name failslab, interval 1, probability 0, space 0, times 0 [ 1102.522200] CPU: 0 PID: 4727 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1102.529211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1102.538568] Call Trace: [ 1102.541165] dump_stack+0x138/0x197 [ 1102.544804] should_fail.cold+0x10f/0x159 [ 1102.548963] should_failslab+0xdb/0x130 [ 1102.552946] kmem_cache_alloc_trace+0x2e9/0x790 [ 1102.557621] ? kernfs_put+0x35e/0x490 [ 1102.561426] ? sysfs_add_file_mode_ns+0x1e4/0x450 [ 1102.566296] ? devm_device_remove_groups+0x50/0x50 [ 1102.571235] kobject_uevent_env+0x378/0xc23 [ 1102.575667] ? internal_create_group+0x49a/0x7b0 [ 1102.580464] kobject_uevent+0x20/0x26 [ 1102.584277] lo_ioctl+0x11e7/0x1ce0 [ 1102.587914] ? loop_probe+0x160/0x160 [ 1102.591719] blkdev_ioctl+0x96b/0x1860 [ 1102.595698] ? blkpg_ioctl+0x980/0x980 [ 1102.599589] ? __might_sleep+0x93/0xb0 [ 1102.603481] ? __fget+0x210/0x370 [ 1102.606944] block_ioctl+0xde/0x120 [ 1102.610574] ? blkdev_fallocate+0x3b0/0x3b0 [ 1102.614896] do_vfs_ioctl+0x7ae/0x1060 [ 1102.618789] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1102.623547] ? lock_downgrade+0x740/0x740 [ 1102.627702] ? ioctl_preallocate+0x1c0/0x1c0 [ 1102.632119] ? __fget+0x237/0x370 [ 1102.635584] ? security_file_ioctl+0x89/0xb0 [ 1102.639999] SyS_ioctl+0x8f/0xc0 [ 1102.643364] ? do_vfs_ioctl+0x1060/0x1060 [ 1102.647525] do_syscall_64+0x1e8/0x640 [ 1102.651417] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1102.656274] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1102.661466] RIP: 0033:0x4598c7 [ 1102.664655] RSP: 002b:00007fd726182a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1102.672387] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004598c7 [ 1102.679748] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 1102.687022] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1102.694293] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1102.702453] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 06:14:52 executing program 5: r0 = syz_open_dev$radio(0x0, 0x1, 0x2) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ftruncate(r2, 0x5) write$P9_RREADLINK(r1, &(0x7f0000000b00)=ANY=[@ANYBLOB="b7"], 0x1) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x3) setsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000000040)="5e0a96cc5cf6bf862646a6c4d1c9f5717c7c44b8c6b762a95f3aeaa09f75710ab67911a1e51ce21273d38cd1e9c63b62e3715faf7b266b23e0be5627e7fcd87b8df0197e282c7deacc1ea0c2af8a945f56f80a71267d34ed9105f006d3706410b170bb098487344794f997017b0779bca7f7cc47c0896d92644caded862a32f86b8bca8c9ea78f8ba60a60c53c8802116eb147c338333b95be13eadc9d17f9ea9b8cb033369519d81550b8e72da2", 0xae) sendfile(r3, r3, 0x0, 0x8080fffffffe) 06:14:52 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/create\x00', 0x2, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 1102.897060] REISERFS warning (device loop1): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. 06:14:52 executing program 1 (fault-call:3 fault-nth:20): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) 06:14:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8}, 0x0, 0xaa72}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef6"], 0xb) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000080)={0x4, [0x101, 0x6, 0x400, 0x0]}, 0xc) write$P9_RSYMLINK(r1, &(0x7f0000000040)={0x14, 0x11, 0x1, {0x10, 0x3, 0x2}}, 0x14) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r3, r3, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) [ 1103.133850] FAULT_INJECTION: forcing a failure. [ 1103.133850] name failslab, interval 1, probability 0, space 0, times 0 [ 1103.156218] CPU: 1 PID: 4753 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1103.163180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1103.172539] Call Trace: [ 1103.175135] dump_stack+0x138/0x197 [ 1103.178832] should_fail.cold+0x10f/0x159 [ 1103.182998] should_failslab+0xdb/0x130 [ 1103.186990] kmem_cache_alloc_trace+0x2e9/0x790 [ 1103.191672] ? kernfs_put+0x35e/0x490 [ 1103.195476] ? sysfs_add_file_mode_ns+0x1e4/0x450 [ 1103.200344] ? devm_device_remove_groups+0x50/0x50 [ 1103.205303] kobject_uevent_env+0x378/0xc23 [ 1103.209631] ? internal_create_group+0x49a/0x7b0 [ 1103.214396] kobject_uevent+0x20/0x26 [ 1103.218203] lo_ioctl+0x11e7/0x1ce0 [ 1103.221840] ? loop_probe+0x160/0x160 [ 1103.225647] blkdev_ioctl+0x96b/0x1860 [ 1103.229550] ? blkpg_ioctl+0x980/0x980 [ 1103.233445] ? __might_sleep+0x93/0xb0 [ 1103.237332] ? __fget+0x210/0x370 [ 1103.240783] block_ioctl+0xde/0x120 [ 1103.244411] ? blkdev_fallocate+0x3b0/0x3b0 [ 1103.248736] do_vfs_ioctl+0x7ae/0x1060 [ 1103.252638] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1103.257397] ? lock_downgrade+0x740/0x740 [ 1103.261550] ? ioctl_preallocate+0x1c0/0x1c0 [ 1103.265970] ? __fget+0x237/0x370 [ 1103.269437] ? security_file_ioctl+0x89/0xb0 [ 1103.273851] SyS_ioctl+0x8f/0xc0 [ 1103.277238] ? do_vfs_ioctl+0x1060/0x1060 [ 1103.281479] do_syscall_64+0x1e8/0x640 [ 1103.285368] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1103.290321] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1103.295512] RIP: 0033:0x4598c7 [ 1103.298702] RSP: 002b:00007fd726182a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1103.306408] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004598c7 [ 1103.313681] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 1103.321012] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1103.328292] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1103.336082] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 06:14:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="e847"], 0x2) semget(0x3, 0x3, 0xa44105a32113847a) syz_open_dev$media(&(0x7f0000000640)='/dev/media#\x00', 0x6, 0x8c040) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000600)) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) pwritev(r2, &(0x7f0000000580)=[{&(0x7f0000000080)="b9eecc6e3f4a589ceb09f33d3e1dd630ed5c048aec86b38b8d52309d074c4a9f8bd543ba5f04216693ca4dd3ed15078b73d6283b6f9906c9d02c94134d32e15c74260f03541ae7c3e45dbf6cb79b0938192b3eb1b7ce97437cfd5cbb015185", 0x5f}, {&(0x7f0000000200)="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", 0xfa}, {&(0x7f0000000100)="3a580dcb7c92af2d55507b9ca2b1dd5932faa458fadf973568c49dd6ac5653a8bd770387f90dc4cee6313a8b0360549076da31947b0bc2d37ac6c67750528f0dd7f0f8f62c6dfb7cad9089ffb45641985ec870e04856a039ac1cc3", 0x5b}, {&(0x7f0000000180)="d828e231e0", 0x5}, {&(0x7f0000000340)="1f688e23e08d664419c4848c110a49cda1fdc06e079964219eadb2f0953a00b8807ebec9228f132922646985e96027de38a138357b70b4235567fb93a99798be707f0e23c4621e91c2e2d211e87ecc93cfc6de14634f45f30da4c52725a60dada2a2ad3e5c027bbb563b8c31b8ed1057c1898b53433aa5e022202bb1e7e262e8c6c6c67b46a35fe637808c13c78307f36824ac9b4252a384b7978c56706886012b1e1a85c14bce0f163848965d98b703463bbba78018a3effb7ce4083d5fb7ff01fec9321270c4c1", 0xc8}, {&(0x7f0000000440)="94a03ff793138d9f12c54dd93541b1059dea35e895f285b8d885332e", 0x1c}, {&(0x7f0000000480)="26022eaaadfb043ef9aaed440005dbe6be5939e0e60eca06a10f335f2195365d7497c66a0c19619df7ec64a9f2e16ae9fe415d74ff5d1f7f131745c8c2915fae12de552e1f887808d194b209bdfc67a6178906360409b34dbb6c58a8a0fac0f0f927c32ce7cfcc12331721fa012f200fd91b182a915744e5a9f9c6ef37ea3940c3ac734bba1fd2180c4f6af576190e5c3c72ce49cb1f7eb1461fa62c44ef1ae54e5364def81a7cf3fcebb7e0885912af380f0ea900665319da59b142a1a89289c42adac10ef61dd7", 0xc8}], 0x7, 0x0) sendfile(r0, r0, 0x0, 0x8080fffffffe) [ 1103.388024] REISERFS warning (device loop1): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. 06:14:53 executing program 1 (fault-call:3 fault-nth:21): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) [ 1103.527113] FAULT_INJECTION: forcing a failure. [ 1103.527113] name failslab, interval 1, probability 0, space 0, times 0 [ 1103.550117] CPU: 0 PID: 4770 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1103.557092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1103.566459] Call Trace: [ 1103.569064] dump_stack+0x138/0x197 [ 1103.572711] should_fail.cold+0x10f/0x159 [ 1103.576877] should_failslab+0xdb/0x130 [ 1103.580865] kmem_cache_alloc_node+0x287/0x780 [ 1103.585891] __alloc_skb+0x9c/0x500 [ 1103.589524] ? skb_scrub_packet+0x4b0/0x4b0 [ 1103.593854] ? netlink_has_listeners+0x20a/0x330 [ 1103.598651] kobject_uevent_env+0x781/0xc23 [ 1103.602975] ? internal_create_group+0x49a/0x7b0 [ 1103.607754] kobject_uevent+0x20/0x26 [ 1103.611581] lo_ioctl+0x11e7/0x1ce0 [ 1103.615307] ? loop_probe+0x160/0x160 [ 1103.619115] blkdev_ioctl+0x96b/0x1860 [ 1103.623092] ? blkpg_ioctl+0x980/0x980 [ 1103.626991] ? __might_sleep+0x93/0xb0 [ 1103.630881] ? __fget+0x210/0x370 [ 1103.634863] block_ioctl+0xde/0x120 [ 1103.638496] ? blkdev_fallocate+0x3b0/0x3b0 [ 1103.642820] do_vfs_ioctl+0x7ae/0x1060 [ 1103.646711] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1103.651469] ? lock_downgrade+0x740/0x740 [ 1103.655622] ? ioctl_preallocate+0x1c0/0x1c0 [ 1103.660036] ? __fget+0x237/0x370 [ 1103.663496] ? security_file_ioctl+0x89/0xb0 [ 1103.667909] SyS_ioctl+0x8f/0xc0 [ 1103.671280] ? do_vfs_ioctl+0x1060/0x1060 [ 1103.675437] do_syscall_64+0x1e8/0x640 [ 1103.679326] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1103.684182] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1103.689374] RIP: 0033:0x4598c7 [ 1103.692576] RSP: 002b:00007fd726182a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1103.701333] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004598c7 [ 1103.708607] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 1103.715884] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1103.723156] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1103.731384] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 [ 1103.844715] REISERFS warning (device loop1): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. 06:14:53 executing program 1 (fault-call:3 fault-nth:22): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) 06:14:53 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="95ab36f5e99806000000000000e436cf3cfe52c230b70000cd00"], 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x4) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) 06:14:53 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x8) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0xdd3b4929d1f470c4, 0x0) r3 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r3, 0x7, &(0x7f0000027000)={0x1}) io_setup(0xc0, &(0x7f0000000040)=0x0) io_submit(r4, 0x1, &(0x7f00000005c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0, 0x0, 0x3}]) r5 = creat(&(0x7f0000000000)='./file0/bus\x00', 0x0) dup2(r5, r3) r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r6) name_to_handle_at(r6, &(0x7f0000000140)='./bus\x00', &(0x7f0000000600)={0x1008, 0x6, "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"}, &(0x7f0000000180), 0x3c00) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r7, r7, &(0x7f0000000000), 0x8080fffffffe) ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000280)=0x0) r9 = getpid() r10 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r10, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r10, r10, &(0x7f0000000000), 0x8080fffffffe) kcmp$KCMP_EPOLL_TFD(r8, r9, 0x7, r6, &(0x7f00000002c0)={r0, r10, 0x40}) r11 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, r11, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x0, @loopback}], 0x10) sendto$inet(r11, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000240)={r12, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000000c0)={r12, 0x1}, &(0x7f0000000100)=0x8) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 1104.039751] FAULT_INJECTION: forcing a failure. [ 1104.039751] name failslab, interval 1, probability 0, space 0, times 0 [ 1104.074380] CPU: 1 PID: 4788 Comm: syz-executor.1 Not tainted 4.14.149 #0 06:14:53 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00b5fac3a2b13d776785279da6607216fd2605e9dd170406999fb8505d8af344bfec8594e03e00e1ec00c45724b7024b85f18147eec638c263d0992ea9945d0ec3f39a403b05266d830e27e101a0c1dee1296a"], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 1104.081352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1104.090748] Call Trace: [ 1104.093346] dump_stack+0x138/0x197 [ 1104.096995] should_fail.cold+0x10f/0x159 [ 1104.101165] should_failslab+0xdb/0x130 [ 1104.105151] kmem_cache_alloc_node_trace+0x280/0x770 [ 1104.110273] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1104.115734] __kmalloc_node_track_caller+0x3d/0x80 [ 1104.120764] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1104.125434] __alloc_skb+0xcf/0x500 [ 1104.129052] ? skb_scrub_packet+0x4b0/0x4b0 [ 1104.133369] ? netlink_has_listeners+0x20a/0x330 06:14:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="3a218211f663a7724bdef6031276fe3c89d86c8c8065abd3f9fe44c11c5ae00db75befd4e01e6979b301dfbf9f6a92657d592850d2bd6ddb07baf83b"], 0xb) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) [ 1104.138124] kobject_uevent_env+0x781/0xc23 [ 1104.142432] ? internal_create_group+0x49a/0x7b0 [ 1104.147199] kobject_uevent+0x20/0x26 [ 1104.151006] lo_ioctl+0x11e7/0x1ce0 [ 1104.154733] ? loop_probe+0x160/0x160 [ 1104.159320] blkdev_ioctl+0x96b/0x1860 [ 1104.163299] ? blkpg_ioctl+0x980/0x980 [ 1104.167197] ? __might_sleep+0x93/0xb0 [ 1104.171102] ? __fget+0x210/0x370 [ 1104.174562] block_ioctl+0xde/0x120 [ 1104.178195] ? blkdev_fallocate+0x3b0/0x3b0 [ 1104.182519] do_vfs_ioctl+0x7ae/0x1060 [ 1104.186419] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1104.191172] ? lock_downgrade+0x740/0x740 [ 1104.195316] ? ioctl_preallocate+0x1c0/0x1c0 [ 1104.199732] ? __fget+0x237/0x370 [ 1104.203300] ? security_file_ioctl+0x89/0xb0 [ 1104.207720] SyS_ioctl+0x8f/0xc0 [ 1104.211090] ? do_vfs_ioctl+0x1060/0x1060 [ 1104.215235] do_syscall_64+0x1e8/0x640 [ 1104.219902] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1104.224753] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1104.229938] RIP: 0033:0x4598c7 06:14:53 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="b7"], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 1104.233118] RSP: 002b:00007fd726182a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1104.240999] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004598c7 [ 1104.248351] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 1104.255617] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1104.262907] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1104.270181] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 06:14:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB=':!'], 0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x4221c1, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) [ 1104.323526] REISERFS warning (device loop1): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. 06:14:54 executing program 1 (fault-call:3 fault-nth:23): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) [ 1104.487667] FAULT_INJECTION: forcing a failure. [ 1104.487667] name failslab, interval 1, probability 0, space 0, times 0 [ 1104.510905] CPU: 0 PID: 4821 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1104.517882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1104.527251] Call Trace: [ 1104.529862] dump_stack+0x138/0x197 [ 1104.533515] should_fail.cold+0x10f/0x159 [ 1104.537682] should_failslab+0xdb/0x130 [ 1104.541672] kmem_cache_alloc_node_trace+0x280/0x770 [ 1104.546786] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1104.552255] __kmalloc_node_track_caller+0x3d/0x80 [ 1104.557197] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1104.561882] __alloc_skb+0xcf/0x500 [ 1104.565524] ? skb_scrub_packet+0x4b0/0x4b0 [ 1104.569857] ? netlink_has_listeners+0x20a/0x330 [ 1104.574627] kobject_uevent_env+0x781/0xc23 [ 1104.578972] kobject_uevent+0x20/0x26 [ 1104.582782] lo_ioctl+0x11e7/0x1ce0 [ 1104.586428] ? loop_probe+0x160/0x160 [ 1104.590236] blkdev_ioctl+0x96b/0x1860 [ 1104.594129] ? blkpg_ioctl+0x980/0x980 [ 1104.598026] ? __might_sleep+0x93/0xb0 [ 1104.601914] ? __fget+0x210/0x370 [ 1104.605376] block_ioctl+0xde/0x120 [ 1104.609005] ? blkdev_fallocate+0x3b0/0x3b0 [ 1104.613331] do_vfs_ioctl+0x7ae/0x1060 [ 1104.618180] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1104.622943] ? lock_downgrade+0x740/0x740 [ 1104.627094] ? ioctl_preallocate+0x1c0/0x1c0 [ 1104.631510] ? __fget+0x237/0x370 [ 1104.634979] ? security_file_ioctl+0x89/0xb0 [ 1104.639393] SyS_ioctl+0x8f/0xc0 [ 1104.642761] ? do_vfs_ioctl+0x1060/0x1060 [ 1104.646910] do_syscall_64+0x1e8/0x640 [ 1104.650798] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1104.655672] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1104.660860] RIP: 0033:0x4598c7 [ 1104.664046] RSP: 002b:00007fd726182a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1104.671755] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004598c7 [ 1104.679030] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 1104.686569] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1104.693852] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1104.701125] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 06:14:54 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="3a218211f663a7010400004346ff1436450cc13087567aac0c6dc8f4aaac58f1962b15f63bc887b816ba150192e720cd1acb504c4ce8b063314f42378da79a66e68c54aefdf58adaba61681f266f5a75457235e9f211a817c4f52c042b1f574a526b101256a9e6894e619f0205d5c0bcd23d470f13d7786af69950d63700499aaaacd7475596070dbe5b2b8ce08e067b3d89ffcc55dd78027000157afa47fd052f36ce280b2ce2248d5a556bf3a3ce38a6dd4fdec1ef3ecd6206983b98342d31663ab671be510819f884f266f85dad58c875b61a55847168d9f9df74cfaeb495746be73cfc6a51f4f88195"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000180), &(0x7f0000000200)=0x4) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 1104.962667] REISERFS warning (device loop1): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. 06:14:54 executing program 1 (fault-call:3 fault-nth:24): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) [ 1105.111313] FAULT_INJECTION: forcing a failure. [ 1105.111313] name failslab, interval 1, probability 0, space 0, times 0 [ 1105.138382] CPU: 1 PID: 4835 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1105.145353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1105.154714] Call Trace: [ 1105.157320] dump_stack+0x138/0x197 06:14:54 executing program 2: r0 = open(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000080)=0x2) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="3a218211f6e1000001def6a3c7c063eb1439e205f09361642a2baaab12988c7c4e32710c05a42f3d6adc040079c4000000000000"], 0xb) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x200000, 0x0) ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f0000000180)) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendfile(r5, r5, 0x0, 0x8080fffffffe) ioctl$INOTIFY_IOC_SETNEXTWD(r4, 0x40044900, 0xffffffff) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r7, r7, &(0x7f0000000000), 0x8080fffffffe) ioctl$VT_DISALLOCATE(r7, 0x5608) write$P9_RREADLINK(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r6, r6, &(0x7f0000000000), 0x8080fffffffe) ioctl$EVIOCSKEYCODE(r6, 0x40084504, &(0x7f00000000c0)=[0x1, 0x2]) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) [ 1105.160962] should_fail.cold+0x10f/0x159 [ 1105.165126] should_failslab+0xdb/0x130 [ 1105.169116] kmem_cache_alloc_node_trace+0x280/0x770 [ 1105.174229] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1105.179692] __kmalloc_node_track_caller+0x3d/0x80 [ 1105.186103] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1105.191745] __alloc_skb+0xcf/0x500 [ 1105.195376] ? skb_scrub_packet+0x4b0/0x4b0 [ 1105.199698] ? netlink_has_listeners+0x20a/0x330 [ 1105.204466] kobject_uevent_env+0x781/0xc23 [ 1105.208804] kobject_uevent+0x20/0x26 [ 1105.212615] lo_ioctl+0x11e7/0x1ce0 [ 1105.216366] ? loop_probe+0x160/0x160 [ 1105.220173] blkdev_ioctl+0x96b/0x1860 [ 1105.224068] ? blkpg_ioctl+0x980/0x980 [ 1105.227968] ? __might_sleep+0x93/0xb0 [ 1105.231857] ? __fget+0x210/0x370 [ 1105.235318] block_ioctl+0xde/0x120 [ 1105.238944] ? blkdev_fallocate+0x3b0/0x3b0 [ 1105.243270] do_vfs_ioctl+0x7ae/0x1060 [ 1105.247167] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1105.251929] ? lock_downgrade+0x740/0x740 [ 1105.256090] ? ioctl_preallocate+0x1c0/0x1c0 [ 1105.260533] ? __fget+0x237/0x370 [ 1105.263993] ? security_file_ioctl+0x89/0xb0 [ 1105.268513] SyS_ioctl+0x8f/0xc0 [ 1105.271884] ? do_vfs_ioctl+0x1060/0x1060 [ 1105.276037] do_syscall_64+0x1e8/0x640 [ 1105.279948] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1105.284800] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1105.289990] RIP: 0033:0x4598c7 [ 1105.293177] RSP: 002b:00007fd726182a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1105.300895] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004598c7 [ 1105.308165] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 1105.315446] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1105.322721] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1105.330002] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 06:14:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB=':!'], 0x2) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) openat(r0, &(0x7f0000000040)='./bus\x00', 0x40, 0x47) 06:14:55 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="b7"], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) 06:14:55 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r4) r5 = getegid() r6 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, 0x0, 0x0) sendmsg(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="240000005a0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) r7 = dup(r6) r8 = geteuid() write$P9_RGETATTR(r7, &(0x7f0000000480)={0xa0, 0x19, 0x2, {0x1b04, {0x20, 0x3, 0x8}, 0x0, r8, r5, 0x9309, 0x6, 0x9, 0x24, 0x5, 0x6f, 0x3ff, 0xf97d, 0x5, 0x1, 0xc474, 0xfffffffffffffffc, 0x2, 0x8, 0x7}}, 0xa0) getgroups(0x2, &(0x7f0000000700)=[r5, 0xee01]) mount$fuse(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='fuse\x00', 0x100010, &(0x7f00000000c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@default_permissions='default_permissions'}], [{@fsmagic={'fsmagic', 0x3d, 0xfffffffffffffff7}}]}}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 1105.639448] REISERFS warning (device loop1): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. 06:14:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0600"], 0x2) sendfile(r1, r1, &(0x7f0000000000), 0x8) sendfile(r0, r0, 0x0, 0x8080fffffffe) [ 1105.682799] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=537 sclass=netlink_route_socket pig=4856 comm=syz-executor.0 06:14:55 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="b7"], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={r2, 0x6, 0x20}, 0xc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) 06:14:55 executing program 1 (fault-call:3 fault-nth:25): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) [ 1105.793475] FAULT_INJECTION: forcing a failure. [ 1105.793475] name failslab, interval 1, probability 0, space 0, times 0 [ 1105.817756] CPU: 1 PID: 4873 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1105.824726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1105.834090] Call Trace: [ 1105.836717] dump_stack+0x138/0x197 [ 1105.840360] should_fail.cold+0x10f/0x159 [ 1105.844529] should_failslab+0xdb/0x130 [ 1105.848514] kmem_cache_alloc_node_trace+0x280/0x770 [ 1105.853623] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1105.859085] __kmalloc_node_track_caller+0x3d/0x80 [ 1105.864026] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1105.868707] __alloc_skb+0xcf/0x500 [ 1105.872434] ? skb_scrub_packet+0x4b0/0x4b0 [ 1105.876763] ? netlink_has_listeners+0x20a/0x330 [ 1105.881549] kobject_uevent_env+0x781/0xc23 [ 1105.885886] kobject_uevent+0x20/0x26 [ 1105.889690] lo_ioctl+0x11e7/0x1ce0 [ 1105.893328] ? loop_probe+0x160/0x160 [ 1105.897137] blkdev_ioctl+0x96b/0x1860 [ 1105.901032] ? blkpg_ioctl+0x980/0x980 [ 1105.905022] ? __might_sleep+0x93/0xb0 [ 1105.908915] ? __fget+0x210/0x370 [ 1105.912375] block_ioctl+0xde/0x120 [ 1105.916014] ? blkdev_fallocate+0x3b0/0x3b0 [ 1105.920344] do_vfs_ioctl+0x7ae/0x1060 [ 1105.924233] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1105.928995] ? lock_downgrade+0x740/0x740 [ 1105.933148] ? ioctl_preallocate+0x1c0/0x1c0 [ 1105.937562] ? __fget+0x237/0x370 [ 1105.941027] ? security_file_ioctl+0x89/0xb0 [ 1105.945450] SyS_ioctl+0x8f/0xc0 [ 1105.948818] ? do_vfs_ioctl+0x1060/0x1060 [ 1105.952972] do_syscall_64+0x1e8/0x640 [ 1105.957298] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1105.962158] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1105.967351] RIP: 0033:0x4598c7 [ 1105.970543] RSP: 002b:00007fd726182a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1105.978257] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004598c7 [ 1105.985533] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 1105.992805] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1106.000161] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1106.007432] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 06:14:55 executing program 4: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, r0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x2) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) r3 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r3, 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) ioctl$USBDEVFS_BULK(r4, 0xc0185502, &(0x7f00000003c0)={{0xf}, 0xff, 0x7ff, 0x4b, 0x3, &(0x7f0000000340)="1f743e6368f4c2a367eb7e682cafaa311f4df7d4f27d37acabfca5bdb56726b44701f4cb94b3b0130d3759ce23dcf3b8f2d4cf16c8a5265174e04c5fe99f585d8c0ce8f34ecf0b9d0a943e"}) r5 = syz_open_dev$cec(&(0x7f0000000200)='/dev/cec#\x00', 0x2, 0x2) ioctl$VIDIOC_DQEVENT(r5, 0x80885659, &(0x7f0000000240)={0x0, @data}) [ 1106.059186] REISERFS warning (device loop1): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. 06:14:55 executing program 1 (fault-call:3 fault-nth:26): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) [ 1106.199276] FAULT_INJECTION: forcing a failure. [ 1106.199276] name failslab, interval 1, probability 0, space 0, times 0 [ 1106.216238] CPU: 0 PID: 4887 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1106.223194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1106.232553] Call Trace: [ 1106.235149] dump_stack+0x138/0x197 [ 1106.238796] should_fail.cold+0x10f/0x159 [ 1106.242960] should_failslab+0xdb/0x130 [ 1106.246943] kmem_cache_alloc_node_trace+0x280/0x770 [ 1106.252576] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1106.258120] __kmalloc_node_track_caller+0x3d/0x80 [ 1106.263061] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1106.267740] __alloc_skb+0xcf/0x500 [ 1106.271374] ? skb_scrub_packet+0x4b0/0x4b0 [ 1106.275889] ? netlink_has_listeners+0x20a/0x330 [ 1106.280658] kobject_uevent_env+0x781/0xc23 [ 1106.284996] kobject_uevent+0x20/0x26 [ 1106.288804] lo_ioctl+0x11e7/0x1ce0 [ 1106.292441] ? loop_probe+0x160/0x160 [ 1106.296329] blkdev_ioctl+0x96b/0x1860 [ 1106.300223] ? blkpg_ioctl+0x980/0x980 [ 1106.304124] ? __might_sleep+0x93/0xb0 [ 1106.308039] ? __fget+0x210/0x370 [ 1106.311551] block_ioctl+0xde/0x120 [ 1106.315182] ? blkdev_fallocate+0x3b0/0x3b0 [ 1106.319504] do_vfs_ioctl+0x7ae/0x1060 [ 1106.323396] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1106.328153] ? lock_downgrade+0x740/0x740 [ 1106.332304] ? ioctl_preallocate+0x1c0/0x1c0 [ 1106.336718] ? __fget+0x237/0x370 [ 1106.340184] ? security_file_ioctl+0x89/0xb0 [ 1106.344601] SyS_ioctl+0x8f/0xc0 [ 1106.347974] ? do_vfs_ioctl+0x1060/0x1060 [ 1106.352140] do_syscall_64+0x1e8/0x640 [ 1106.356034] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1106.360888] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1106.366078] RIP: 0033:0x4598c7 [ 1106.369296] RSP: 002b:00007fd726182a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1106.377005] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004598c7 [ 1106.384274] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 1106.391545] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1106.398817] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1106.406227] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 [ 1106.408539] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=537 sclass=netlink_route_socket pig=4856 comm=syz-executor.0 06:14:56 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a77265def64346ff14"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 06:14:56 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) write$FUSE_STATFS(r3, &(0x7f0000000140)={0x60, 0x0, 0x2, {{0x10001, 0x4, 0xbd6, 0x1, 0x1, 0x9531, 0x7, 0x80000000}}}, 0x60) getsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef6"], 0xb) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r5, r5, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r1, 0x80044946, 0x0) [ 1106.595966] REISERFS warning (device loop1): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. 06:14:56 executing program 1 (fault-call:3 fault-nth:27): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) [ 1106.766303] FAULT_INJECTION: forcing a failure. [ 1106.766303] name failslab, interval 1, probability 0, space 0, times 0 [ 1106.785438] CPU: 0 PID: 4913 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1106.792396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1106.801751] Call Trace: [ 1106.804342] dump_stack+0x138/0x197 [ 1106.807982] should_fail.cold+0x10f/0x159 [ 1106.812139] should_failslab+0xdb/0x130 [ 1106.816123] kmem_cache_alloc_node+0x287/0x780 [ 1106.820717] __alloc_skb+0x9c/0x500 [ 1106.824355] ? skb_scrub_packet+0x4b0/0x4b0 [ 1106.828680] ? netlink_has_listeners+0x20a/0x330 [ 1106.833443] kobject_uevent_env+0x781/0xc23 [ 1106.837785] kobject_uevent+0x20/0x26 [ 1106.841593] lo_ioctl+0x11e7/0x1ce0 [ 1106.845221] ? loop_probe+0x160/0x160 [ 1106.849031] blkdev_ioctl+0x96b/0x1860 [ 1106.852918] ? blkpg_ioctl+0x980/0x980 [ 1106.856821] ? __might_sleep+0x93/0xb0 [ 1106.860709] ? __fget+0x210/0x370 [ 1106.864169] block_ioctl+0xde/0x120 [ 1106.867795] ? blkdev_fallocate+0x3b0/0x3b0 [ 1106.872114] do_vfs_ioctl+0x7ae/0x1060 [ 1106.876003] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1106.880759] ? lock_downgrade+0x740/0x740 [ 1106.884907] ? ioctl_preallocate+0x1c0/0x1c0 [ 1106.889318] ? __fget+0x237/0x370 [ 1106.892791] ? security_file_ioctl+0x89/0xb0 [ 1106.897206] SyS_ioctl+0x8f/0xc0 [ 1106.900579] ? do_vfs_ioctl+0x1060/0x1060 [ 1106.904729] do_syscall_64+0x1e8/0x640 [ 1106.908615] ? trace_hardirqs_off_thunk+0x1a/0x1c 06:14:56 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="b7"], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)={0xe, 0x17, 0x2, {0x5, './bus'}}, 0xe) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) sendfile(r1, r2, 0x0, 0x8080ffffff7e) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) ioctl$void(r4, 0xc0045878) write$P9_RREADLINK(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) [ 1106.913469] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1106.918653] RIP: 0033:0x4598c7 [ 1106.921842] RSP: 002b:00007fd726182a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1106.929550] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004598c7 [ 1106.936814] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 1106.944080] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1106.951350] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1106.958618] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 06:14:56 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef6"], 0xb) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) sendfile(r2, r0, &(0x7f0000000080), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r4, r4, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r1, 0x80044946, 0x0) [ 1107.056830] REISERFS warning (device loop1): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. 06:14:56 executing program 1 (fault-call:3 fault-nth:28): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) 06:14:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a3724bdef6"], 0xb) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) 06:14:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140)) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000100)) membarrier(0x1, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="3a17"], 0x2) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) sendfile(r2, r2, 0x0, 0x8080fffffffe) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, [], @bt={0x1f, 0x9, 0x9, 0x3, 0x8, 0x8, 0x18, 0xd}}) [ 1107.248252] FAULT_INJECTION: forcing a failure. [ 1107.248252] name failslab, interval 1, probability 0, space 0, times 0 [ 1107.278459] CPU: 0 PID: 4932 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1107.285427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1107.294786] Call Trace: [ 1107.297389] dump_stack+0x138/0x197 [ 1107.301032] should_fail.cold+0x10f/0x159 [ 1107.305196] should_failslab+0xdb/0x130 [ 1107.309207] kmem_cache_alloc_node_trace+0x280/0x770 [ 1107.314315] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1107.319778] __kmalloc_node_track_caller+0x3d/0x80 [ 1107.324718] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1107.329392] __alloc_skb+0xcf/0x500 [ 1107.333023] ? skb_scrub_packet+0x4b0/0x4b0 [ 1107.337370] ? netlink_has_listeners+0x20a/0x330 [ 1107.342161] kobject_uevent_env+0x781/0xc23 [ 1107.346495] kobject_uevent+0x20/0x26 [ 1107.350303] lo_ioctl+0x11e7/0x1ce0 [ 1107.353941] ? loop_probe+0x160/0x160 [ 1107.357751] blkdev_ioctl+0x96b/0x1860 [ 1107.361640] ? blkpg_ioctl+0x980/0x980 [ 1107.365534] ? __might_sleep+0x93/0xb0 [ 1107.369418] ? __fget+0x210/0x370 [ 1107.372878] block_ioctl+0xde/0x120 [ 1107.376509] ? blkdev_fallocate+0x3b0/0x3b0 [ 1107.380835] do_vfs_ioctl+0x7ae/0x1060 [ 1107.384724] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1107.389483] ? lock_downgrade+0x740/0x740 [ 1107.393637] ? ioctl_preallocate+0x1c0/0x1c0 [ 1107.398049] ? __fget+0x237/0x370 [ 1107.401512] ? security_file_ioctl+0x89/0xb0 [ 1107.405924] SyS_ioctl+0x8f/0xc0 [ 1107.409936] ? do_vfs_ioctl+0x1060/0x1060 [ 1107.414102] do_syscall_64+0x1e8/0x640 [ 1107.417993] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1107.422846] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1107.428061] RIP: 0033:0x4598c7 [ 1107.431254] RSP: 002b:00007fd726182a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1107.438962] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004598c7 [ 1107.446225] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 1107.453489] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1107.460753] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1107.468021] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 06:14:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x6400, 0x0) pipe2$9p(&(0x7f0000000100), 0x80000) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB=':!'], 0x2) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x2, 0x5) sendfile(r0, r0, 0x0, 0x8080fffffffe) 06:14:57 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="3a218211f663a7724bdef6434eff144d8b2178a1"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) pwritev(r0, &(0x7f0000000700)=[{&(0x7f0000000140)="acad8ffc8a452bb70ecb398259b035e4e66a7ca4a0e1887e6a1f17a7b18cbe6c4502098700403a3e355478f4d136bdfc980497a55ef960926b7a30fe4a4c1d7e64584862c800de42e69317bf93ebecd20d1d7b82370922610acef18faa141843fb1c242fe707a9379fda0a764a01c95d6e", 0x71}, {&(0x7f0000000200)="18611c7722fd6e9107af276dc5de4e", 0xf}, {&(0x7f0000000240)="c59a3966c05571a5c389146cb5431f8fc8619052d0fb793623c5a143bf90d3a7b2a1602b994635252db14d9be5594a3a2ec08d51d931509b952261937f7409469167cdf2eb74234054f653f13cdd0e09df0107557c805d123e5e0d7ef1d425ccb22247b640586961cc", 0x69}, {&(0x7f00000002c0)="c4af2002867b6386beaae118ed7a636975841fe9ac2b480990eb8679c4c931", 0x1f}, {&(0x7f0000000340)="cfe8d7df5dbf7afc1092e3d372366520271197e77361e5d6520c1e44ce25a3e08df6d2ab7e74adf1b59194ecc3ac063a26a91cc867b0818b75c27bfbe1483fb238b14fdfa92116258a730c86f5bcf7d34fd52df5b8", 0x55}, {&(0x7f00000003c0)="4442888ca32cc3badbf59757eba2ba3f8d9bcaad9e99b1b969a0eab91e7da226e8980ecdfc3b14d10dea41af0331fc88f8d0830d1cd1e0b4de3305a2c69332592f1ce3326f7ac53b2bcdc79e9d6b13b618120506344159a881067e27783265ac188930fca4802ed302215f7f4f64a71ccdfbef3f1e21beac01cefaafaf79091bec35a023032fd223962e3022800996721260d680cda988b6faa3f35dd3237c7236627cb6ce62d6532d566375ece9580b3973fdd0c151ef005ca2a37432ed23e468f92e05f840bad25576317469dde2321619937d58f801a6245b212d80f09082a1a0413f640e6ad0f9142e5f002810abe3163328a97044", 0xf7}, {&(0x7f00000004c0)="695eabe2a46fd6c058f3f0726197b5d7539714d0924a8302afcd8eacb4c3fb1533ccac64978b764a9862b2353e10b3ca3355334f7ced7305167225459dddd2ec2c28421bf19074e4a2902b975318bd00940f71b723dc6e475fdf4f93aaad43d4056679a7", 0x64}, {&(0x7f0000000540)="e17073823251720a9e7ea025e6c46c5b3ff7f5dbf332363dc8bc99e610b919c1908404abd365dd3cc9308b01807583520ffb4166c2c0a5cb49cf904e1950cc984012231cb203d3f0286380afad55cd0dcb84dd4a4dd7df99bebe3168d75d7b4b8d6a50c2fe2ffd093ca3abc9af6d81f7a7573c83e914e09f0899792ba9354b94e2f0579c1da721a9abd685b43e9a729b8e1aa4a8da9289b9a63f776990149724a7df6595d8c614b2cf44c61e26dfb402ba93ca29569288", 0xb7}, {&(0x7f0000000600)="c6f9faa7e556a2467df3328c42bacdc1b14159564c1c0a375c0fb97065b9d0929a06b5dbf2afee01f8ba64f8d68e22ccd54959407b04816b984d226aa3edebf64dfb0aaf671ff6d4020b124e85a2da2cf10933e76ffa828f0e0d34ecba13f5589d1dc80dac05690cf430f0c53f207e77c0cbe299b2e9459ea0d58c874411416cf71e33d9a49f35426abc2bfeeb7392e76cfc62cf68df9e464765755b85d96f50dbb315596d563ec8295e7821da01f93e0e950ff32a773bcc887180aa30cc04", 0xbf}, {&(0x7f00000006c0)="d3ca5ab697ca5b6c550dab0ecf2a1982c21c48ac6a63bd0125d3a1c49c09aaa930b0d1d4", 0x24}], 0xa, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xf, &(0x7f0000000040)=""/176, &(0x7f0000000100)=0xb0) 06:14:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="061c"], 0x2) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x8080fffffffe) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) [ 1107.848188] REISERFS warning (device loop1): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. 06:14:57 executing program 1 (fault-call:3 fault-nth:29): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) 06:14:57 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="b7"], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) fanotify_mark(r1, 0x10, 0x40001010, r2, &(0x7f0000000040)='./bus\x00') r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r3, r3, 0x0, 0x8080fffffffe) [ 1108.014355] FAULT_INJECTION: forcing a failure. [ 1108.014355] name failslab, interval 1, probability 0, space 0, times 0 [ 1108.060100] CPU: 0 PID: 4968 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1108.067070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1108.076431] Call Trace: [ 1108.079032] dump_stack+0x138/0x197 [ 1108.082680] should_fail.cold+0x10f/0x159 [ 1108.086841] should_failslab+0xdb/0x130 [ 1108.090820] kmem_cache_alloc_node+0x287/0x780 [ 1108.095411] __alloc_skb+0x9c/0x500 [ 1108.099040] ? skb_scrub_packet+0x4b0/0x4b0 [ 1108.103367] ? netlink_has_listeners+0x20a/0x330 [ 1108.108136] kobject_uevent_env+0x781/0xc23 [ 1108.112469] kobject_uevent+0x20/0x26 [ 1108.116271] lo_ioctl+0x11e7/0x1ce0 [ 1108.119907] ? loop_probe+0x160/0x160 [ 1108.123712] blkdev_ioctl+0x96b/0x1860 [ 1108.127602] ? blkpg_ioctl+0x980/0x980 [ 1108.131588] ? __might_sleep+0x93/0xb0 [ 1108.135476] ? __fget+0x210/0x370 [ 1108.138937] block_ioctl+0xde/0x120 [ 1108.142564] ? blkdev_fallocate+0x3b0/0x3b0 [ 1108.146889] do_vfs_ioctl+0x7ae/0x1060 [ 1108.150781] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1108.155537] ? lock_downgrade+0x740/0x740 [ 1108.159689] ? ioctl_preallocate+0x1c0/0x1c0 [ 1108.164104] ? __fget+0x237/0x370 [ 1108.167567] ? security_file_ioctl+0x89/0xb0 [ 1108.171983] SyS_ioctl+0x8f/0xc0 [ 1108.175352] ? do_vfs_ioctl+0x1060/0x1060 [ 1108.179505] do_syscall_64+0x1e8/0x640 [ 1108.183394] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1108.188333] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1108.193536] RIP: 0033:0x4598c7 [ 1108.196721] RSP: 002b:00007fd726182a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1108.204430] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004598c7 [ 1108.211783] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 1108.219057] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1108.226334] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1108.233605] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 06:14:58 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000b00)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000340)={0x9, 0x108, 0xfa00, {r4, 0x69, "72e3a1", "e02ff99d371a5ffb0a3c0b240cd2afebe4e3c81705afd93efbf03af81f6ecfaf1ff9fbcbb019ff3be08ff76fef3dda8ae418bbccb3fe24e849fdd848f718c8708d3bc333a3c23f3d0f8f202309cc2571a8912c0665909155df66c60db09b0619cbc04a04a5d64029d2965832c0c146f80dc866dc61e51f75d7f8f2068711b682eaea0e5caf5dc11096dbbaff4476337d6e65a62a2f260a1914fd676aef19df6b38dc26841f07e30358eaf45ef63aeb5128f3a785f25863f1f65ae0f4dc3bd628d39fc4b5d71de0f0b5e0dc5f64a05050b1150c99b551327ba1d545047dd5e566b89a1d6f6b380eba4ce2cca611074508ad5c55a331d1bd63d2cc028090c64b2c"}}, 0x110) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) syz_open_dev$video4linux(&(0x7f0000000200)='/dev/v4l-subdev#\x00', 0x20, 0x20000) sendfile(r5, r5, 0x0, 0x8080fffffffe) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r6, r6, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x6}, &(0x7f0000000080)=0x8) 06:14:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="cf786ce42d60d001af910acf9c7f890b9bc65a8946d5e71fd5745d7a0064d791637957ec5e045be15080c41d6c00c3fe0e575d2199472c7560aa48052d0bf1e5a0713ef488b802979ded7990e522706ccc0ce3fa3ea49e95fd2eababa6b4207ecccc97e7f5ef00000000000081256f9fbd73da142d03e9179a3736b6dd4aaf2285d3cf9015a2718fdbd791d547b72fa342dec7d6a4a8970a634fcfc0e01ca27e2e96a72c7bb66f74e7cf3c762cf69cef49d6095217e959690db9b0af5ad043790fa777c6571003d6f35b849fe2156f113c8e269012a4a9239b5e695cdde1ee2fb8ce4573d6621440f92cceeb370e44e868c676d51ab59632dea481e71cf89f610b589a60f99e56748790ed27ceef3407a08044ee6060f3754657"], 0xb) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) [ 1108.358185] REISERFS warning (device loop1): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. 06:14:58 executing program 1 (fault-call:3 fault-nth:30): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) [ 1108.518796] FAULT_INJECTION: forcing a failure. [ 1108.518796] name failslab, interval 1, probability 0, space 0, times 0 [ 1108.537042] CPU: 0 PID: 4990 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1108.544003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1108.553361] Call Trace: [ 1108.555956] dump_stack+0x138/0x197 [ 1108.559744] should_fail.cold+0x10f/0x159 [ 1108.563901] should_failslab+0xdb/0x130 [ 1108.567890] kmem_cache_alloc_node_trace+0x280/0x770 [ 1108.573009] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1108.578476] __kmalloc_node_track_caller+0x3d/0x80 [ 1108.583416] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1108.588091] __alloc_skb+0xcf/0x500 [ 1108.591721] ? skb_scrub_packet+0x4b0/0x4b0 [ 1108.596048] ? netlink_has_listeners+0x20a/0x330 [ 1108.600821] kobject_uevent_env+0x781/0xc23 [ 1108.605154] kobject_uevent+0x20/0x26 [ 1108.608958] lo_ioctl+0x11e7/0x1ce0 [ 1108.612593] ? loop_probe+0x160/0x160 [ 1108.616396] blkdev_ioctl+0x96b/0x1860 [ 1108.620293] ? blkpg_ioctl+0x980/0x980 [ 1108.624192] ? __might_sleep+0x93/0xb0 [ 1108.628087] ? __fget+0x210/0x370 [ 1108.631548] block_ioctl+0xde/0x120 [ 1108.635182] ? blkdev_fallocate+0x3b0/0x3b0 [ 1108.639504] do_vfs_ioctl+0x7ae/0x1060 [ 1108.643416] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1108.648179] ? lock_downgrade+0x740/0x740 [ 1108.652333] ? ioctl_preallocate+0x1c0/0x1c0 [ 1108.656746] ? __fget+0x237/0x370 [ 1108.660212] ? security_file_ioctl+0x89/0xb0 [ 1108.664620] SyS_ioctl+0x8f/0xc0 [ 1108.667990] ? do_vfs_ioctl+0x1060/0x1060 [ 1108.672149] do_syscall_64+0x1e8/0x640 [ 1108.676039] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1108.680890] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1108.686079] RIP: 0033:0x4598c7 [ 1108.689273] RSP: 002b:00007fd726182a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1108.696988] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004598c7 [ 1108.704261] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 1108.711536] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a 06:14:58 executing program 0: write$P9_RREADLINK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xf) migrate_pages(0xffffffffffffffff, 0x8, &(0x7f0000000400)=0x6f1, &(0x7f0000000440)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x8080fffffffe) open(0x0, 0x141042, 0x0) inotify_init1(0x80000) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000480)) r1 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x200) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000140)={0x3ff, 0x0, 0x2, 0x8000}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000180)={r3}) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) r4 = open(&(0x7f0000000280)='./file0\x00', 0x141042, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f00000000c0)) openat(r4, &(0x7f0000000340)='./file1\x00', 0x4000, 0x20) r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r6) getsockopt$inet_mreqn(r6, 0x0, 0x24, &(0x7f0000000380)={@local, @dev}, &(0x7f00000003c0)=0xa) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r7, r7, &(0x7f0000000000), 0x8080fffffffe) r8 = ioctl$TUNGETDEVNETNS(r7, 0x54e3, 0x0) r9 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r9, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r9, r9, &(0x7f0000000000), 0x8080fffffffe) sendfile(r8, r9, &(0x7f0000000300)=0xffffffffffffffff, 0x8080fffffffe) [ 1108.718807] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1108.726074] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 06:14:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x2000c0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) [ 1108.848811] REISERFS warning (device loop1): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. [ 1108.872900] audit: type=1804 audit(1571033698.552:381): pid=5000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir017720076/syzkaller.4NQquk/1019/file0" dev="sda1" ino=16590 res=1 06:14:58 executing program 1 (fault-call:3 fault-nth:31): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) [ 1108.922749] audit: type=1804 audit(1571033698.552:382): pid=5000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir017720076/syzkaller.4NQquk/1019/file0" dev="sda1" ino=16590 res=1 [ 1109.025934] FAULT_INJECTION: forcing a failure. [ 1109.025934] name failslab, interval 1, probability 0, space 0, times 0 [ 1109.073945] CPU: 1 PID: 5012 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1109.080919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1109.090281] Call Trace: [ 1109.092905] dump_stack+0x138/0x197 [ 1109.096544] should_fail.cold+0x10f/0x159 [ 1109.100722] should_failslab+0xdb/0x130 [ 1109.104704] kmem_cache_alloc_node+0x287/0x780 [ 1109.109300] __alloc_skb+0x9c/0x500 [ 1109.112928] ? skb_scrub_packet+0x4b0/0x4b0 [ 1109.117254] ? netlink_has_listeners+0x20a/0x330 [ 1109.122019] kobject_uevent_env+0x781/0xc23 [ 1109.126356] kobject_uevent+0x20/0x26 [ 1109.130166] lo_ioctl+0x11e7/0x1ce0 [ 1109.133800] ? loop_probe+0x160/0x160 [ 1109.137604] blkdev_ioctl+0x96b/0x1860 [ 1109.141496] ? blkpg_ioctl+0x980/0x980 [ 1109.145389] ? __might_sleep+0x93/0xb0 [ 1109.149275] ? __fget+0x210/0x370 [ 1109.152736] block_ioctl+0xde/0x120 [ 1109.156365] ? blkdev_fallocate+0x3b0/0x3b0 [ 1109.160688] do_vfs_ioctl+0x7ae/0x1060 [ 1109.164578] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1109.169338] ? lock_downgrade+0x740/0x740 [ 1109.173484] ? ioctl_preallocate+0x1c0/0x1c0 [ 1109.177893] ? __fget+0x237/0x370 [ 1109.181355] ? security_file_ioctl+0x89/0xb0 [ 1109.185768] SyS_ioctl+0x8f/0xc0 [ 1109.189139] ? do_vfs_ioctl+0x1060/0x1060 [ 1109.193291] do_syscall_64+0x1e8/0x640 [ 1109.197180] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1109.202048] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1109.207232] RIP: 0033:0x4598c7 [ 1109.210424] RSP: 002b:00007fd726182a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 06:14:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x6, [0x9, 0x2, 0x3, 0x8, 0xfe, 0x9]}, 0x10) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef6"], 0xb) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) 06:14:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="f500"], 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x1, 0x0) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000003c0), 0x4) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000340)=[@in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e24, 0xfd51, @rand_addr="6ce93fde289bbfd42c2f1e9b533db8c1", 0x6}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e21, @loopback}], 0x4c) vmsplice(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)="26096b82807f70ce7a37ad575187a8b8e882258d228f8c91d2fa945caa44b62781115f122abea37ec2c5037eeba0cc016ca80c711d0f7426559778c492ae4d8c4390f2ca16c74567452e256dc7c395ca656c85fa9f818453f622b0ffde4672a995f1bd74d3898c8205afada79a6aacf47a4ba22f86a5c9cfa68bd2d417c1798be2864bd0266b043221dc206a7cea1175fbb62bff2d7fd9d3f7483404884fc147331037194756faf862e4afeb2bae1b92fc35", 0xb2}, {&(0x7f0000000140)="334b55e49ea3e90b94", 0x9}, {&(0x7f0000000200)="ac2eb9c0e80683f19b30fb275f6a2c2e66a727a555c3475dcd90b0b7033ef3e4bad9bab99aeec5abb9b535c8f91e4e629013d4533e3fdc8e16f68ceec7fa4f92a4fef89c339f1d82a1c99399088819e248b8f3fd6c55c519ab7fdbb41477a742433c574ae98ccdfb386913589cd5ceb0610b0102d91be0550d38e4f7f3fdc284ec7040556165119d03be806a", 0x8c}, {&(0x7f0000000180)="0f34e52639339bd2516b3adbae4f3176eaf914", 0x13}], 0x4, 0x8) [ 1109.218132] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004598c7 [ 1109.225402] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 1109.232676] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1109.239947] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1109.247225] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 06:14:59 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="b7"], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8fd, 0x802) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x55, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0xaccf56489a67c7a5) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) [ 1109.504516] REISERFS warning (device loop1): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. 06:14:59 executing program 1 (fault-call:3 fault-nth:32): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) [ 1109.638350] FAULT_INJECTION: forcing a failure. [ 1109.638350] name failslab, interval 1, probability 0, space 0, times 0 [ 1109.666409] CPU: 1 PID: 5035 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1109.673382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1109.682745] Call Trace: [ 1109.685345] dump_stack+0x138/0x197 [ 1109.688991] should_fail.cold+0x10f/0x159 [ 1109.693154] should_failslab+0xdb/0x130 [ 1109.697144] kmem_cache_alloc_node_trace+0x280/0x770 [ 1109.702261] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1109.707729] __kmalloc_node_track_caller+0x3d/0x80 [ 1109.712668] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1109.717354] __alloc_skb+0xcf/0x500 [ 1109.720991] ? skb_scrub_packet+0x4b0/0x4b0 [ 1109.725324] ? netlink_has_listeners+0x20a/0x330 [ 1109.730089] kobject_uevent_env+0x781/0xc23 [ 1109.734428] kobject_uevent+0x20/0x26 [ 1109.738239] lo_ioctl+0x11e7/0x1ce0 [ 1109.741877] ? loop_probe+0x160/0x160 [ 1109.745683] blkdev_ioctl+0x96b/0x1860 [ 1109.749573] ? blkpg_ioctl+0x980/0x980 [ 1109.753474] ? __might_sleep+0x93/0xb0 [ 1109.757363] ? __fget+0x210/0x370 [ 1109.760830] block_ioctl+0xde/0x120 [ 1109.764462] ? blkdev_fallocate+0x3b0/0x3b0 [ 1109.768787] do_vfs_ioctl+0x7ae/0x1060 [ 1109.772684] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1109.777443] ? lock_downgrade+0x740/0x740 [ 1109.781600] ? ioctl_preallocate+0x1c0/0x1c0 [ 1109.786013] ? __fget+0x237/0x370 [ 1109.789475] ? security_file_ioctl+0x89/0xb0 [ 1109.793890] SyS_ioctl+0x8f/0xc0 [ 1109.797267] ? do_vfs_ioctl+0x1060/0x1060 [ 1109.801421] do_syscall_64+0x1e8/0x640 [ 1109.805309] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1109.810157] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1109.815344] RIP: 0033:0x4598c7 [ 1109.818530] RSP: 002b:00007fd726182a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1109.826236] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004598c7 [ 1109.833617] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 1109.840885] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1109.848161] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1109.855433] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 06:14:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef6"], 0xb) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) syz_open_pts(r3, 0x101045) [ 1109.937721] audit: type=1804 audit(1571033699.612:383): pid=5038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir017720076/syzkaller.4NQquk/1019/file0" dev="sda1" ino=16590 res=1 [ 1110.016115] audit: type=1804 audit(1571033699.652:384): pid=5014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir017720076/syzkaller.4NQquk/1019/file0" dev="sda1" ino=16590 res=1 06:14:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="c041bc620051df3d490ae03a218251f663a7724bdef6"], 0xb) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) lgetxattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@random={'user.', '/dev/cachefiles\x00'}, &(0x7f0000000240)=""/142, 0x8e) syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000180)='./file0\x00', 0xffffffffffff7fff, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2b7320660225c04f934fff7b1d9f241ad4c3b7c7739fd0348cfc963f7cc04a4afd3e41e5f217b37c1151ec25e2bc118c1a4c061acc380a17db14bad2259bd0294e89e8e1077d75bb45ca8dbe6002ca6a81865cc03a8c97a68bc7a4862102025fbc1d71419706896901032eb1", 0x6c, 0x7}], 0x1000000, &(0x7f00000003c0)={[{@tails_small='tails=small'}, {@jdev={'jdev', 0x3d, './file0'}}], [{@subj_role={'subj_role', 0x3d, '/dev/cachefiles\x00'}}]}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) [ 1110.079796] audit: type=1804 audit(1571033699.652:385): pid=5014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir017720076/syzkaller.4NQquk/1019/file0" dev="sda1" ino=16590 res=1 [ 1110.210221] REISERFS warning (device loop1): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. 06:14:59 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) r1 = open(0x0, 0x141042, 0x0) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x1) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) 06:14:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="3a21895719f56a39620d02d3e53d415fa63c28a1c10c69dd196e40e38a2738fc79542af49b2cfa44a548a19c83e5a78aeb819ca0c602b43937add26a062ecf8b0706e27156c604a2dd6d639f72ce5797d3b54d790a3639ad0972de2400"], 0x2) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) 06:15:00 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="b7"], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x111000, 0x0) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) 06:15:00 executing program 1 (fault-call:3 fault-nth:33): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) [ 1110.337421] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "subj_role=/dev/cachefiles" [ 1110.464428] FAULT_INJECTION: forcing a failure. [ 1110.464428] name failslab, interval 1, probability 0, space 0, times 0 [ 1110.485018] CPU: 0 PID: 5073 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1110.491985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1110.501357] Call Trace: [ 1110.503955] dump_stack+0x138/0x197 [ 1110.507600] should_fail.cold+0x10f/0x159 [ 1110.512197] should_failslab+0xdb/0x130 [ 1110.516180] kmem_cache_alloc_node+0x287/0x780 [ 1110.521007] __alloc_skb+0x9c/0x500 [ 1110.524687] ? skb_scrub_packet+0x4b0/0x4b0 [ 1110.528996] ? netlink_has_listeners+0x20a/0x330 [ 1110.533753] kobject_uevent_env+0x781/0xc23 [ 1110.538096] kobject_uevent+0x20/0x26 [ 1110.541905] lo_ioctl+0x11e7/0x1ce0 [ 1110.545544] ? loop_probe+0x160/0x160 [ 1110.549354] blkdev_ioctl+0x96b/0x1860 [ 1110.553248] ? blkpg_ioctl+0x980/0x980 [ 1110.557148] ? __might_sleep+0x93/0xb0 [ 1110.561038] ? __fget+0x210/0x370 [ 1110.564513] block_ioctl+0xde/0x120 [ 1110.568143] ? blkdev_fallocate+0x3b0/0x3b0 [ 1110.572468] do_vfs_ioctl+0x7ae/0x1060 [ 1110.576371] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1110.581129] ? lock_downgrade+0x740/0x740 [ 1110.585284] ? ioctl_preallocate+0x1c0/0x1c0 [ 1110.589697] ? __fget+0x237/0x370 [ 1110.593161] ? security_file_ioctl+0x89/0xb0 [ 1110.597576] SyS_ioctl+0x8f/0xc0 [ 1110.600944] ? do_vfs_ioctl+0x1060/0x1060 [ 1110.605098] do_syscall_64+0x1e8/0x640 [ 1110.608988] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1110.613837] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1110.619027] RIP: 0033:0x4598c7 [ 1110.622210] RSP: 002b:00007fd726182a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1110.629922] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004598c7 [ 1110.637192] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 1110.644462] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1110.651738] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1110.659012] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 06:15:00 executing program 5: r0 = syz_open_dev$radio(0x0, 0x1, 0x2) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000b00)=ANY=[@ANYBLOB="b7"], 0x1) sendfile(r1, r0, &(0x7f00000000c0), 0x8080fffffffe) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0xffffff7b, @loopback, 0x7}, 0x1c) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x20000, 0xffffffffffffffff, 0x8) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r3, r3, 0x0, 0x8080fffffffe) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) [ 1110.755420] REISERFS warning (device loop1): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. 06:15:00 executing program 1 (fault-call:3 fault-nth:34): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) [ 1110.894010] FAULT_INJECTION: forcing a failure. [ 1110.894010] name failslab, interval 1, probability 0, space 0, times 0 [ 1110.905937] CPU: 1 PID: 5088 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1110.912879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1110.922235] Call Trace: [ 1110.924833] dump_stack+0x138/0x197 [ 1110.928475] should_fail.cold+0x10f/0x159 [ 1110.932635] should_failslab+0xdb/0x130 [ 1110.936620] kmem_cache_alloc_node_trace+0x280/0x770 [ 1110.941731] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1110.947192] __kmalloc_node_track_caller+0x3d/0x80 [ 1110.952129] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1110.956901] __alloc_skb+0xcf/0x500 [ 1110.961141] ? skb_scrub_packet+0x4b0/0x4b0 [ 1110.965470] ? netlink_has_listeners+0x20a/0x330 [ 1110.970234] kobject_uevent_env+0x781/0xc23 [ 1110.974573] kobject_uevent+0x20/0x26 [ 1110.978382] lo_ioctl+0x11e7/0x1ce0 [ 1110.982025] ? loop_probe+0x160/0x160 [ 1110.985835] blkdev_ioctl+0x96b/0x1860 [ 1110.989726] ? blkpg_ioctl+0x980/0x980 [ 1110.993622] ? __might_sleep+0x93/0xb0 [ 1110.997509] ? __fget+0x210/0x370 [ 1111.000973] block_ioctl+0xde/0x120 [ 1111.004636] ? blkdev_fallocate+0x3b0/0x3b0 [ 1111.008963] do_vfs_ioctl+0x7ae/0x1060 [ 1111.013026] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1111.017784] ? lock_downgrade+0x740/0x740 [ 1111.021941] ? ioctl_preallocate+0x1c0/0x1c0 [ 1111.026356] ? __fget+0x237/0x370 [ 1111.029824] ? security_file_ioctl+0x89/0xb0 [ 1111.034236] SyS_ioctl+0x8f/0xc0 [ 1111.037609] ? do_vfs_ioctl+0x1060/0x1060 [ 1111.041763] do_syscall_64+0x1e8/0x640 [ 1111.045660] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1111.050514] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1111.055704] RIP: 0033:0x4598c7 [ 1111.058890] RSP: 002b:00007fd726182a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1111.066603] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004598c7 [ 1111.073874] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 1111.081142] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1111.088410] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1111.095683] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 [ 1111.155142] REISERFS warning (device loop1): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. 06:15:00 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) r1 = open(0x0, 0x141042, 0x0) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000040)={0x1, "2701a7dcdc3da68e191f771055b954ad18b4b05bfea1c00c55f36e9aeccefec0", 0x600, 0x3, 0x8, 0x1, 0x2}) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000000080)={'syz'}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23", 0xc0, r2) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0)={r2, 0x90, 0x96}, &(0x7f0000000100)={'enc=', 'pkcs1', ' hash=', {'sha256-arm64\x00'}}, &(0x7f0000000200)="f21fb83ea1df5896290234daaac670486738c8bdc31fe0eaf9e2f18d42dee32628bdbaa7fd0b38e535a9f4dee7650cb5cb3d5f440bacbf0c25d8ed203acc0d31a0769535e28ce9614962dd433845bf1021ab1bda01ad38fcdf6e5f2f545e069651d47b6c797d1eb67bf0ca325d8d43ddbce970ae74971dd2a8ed1d41eae859d48ba0e950135e682db9b17402156175d4", &(0x7f00000002c0)="757155056702bfd00ffe180fa5899ad90529dabb3e1a6350879f3b15e4cfd37ebd9a5ab8437cfd1308a41b150d190d352455983e0ec3709628340b47d3c9d4f8a8502946b62a04ad4acdeba48a27a6de955db2b0ee5a4a81cf185c622d34edee986f55ff7fffdaed78f4afe8ef556256a3ce8b3a194f0b5fc0b3f8098d33b5e646b2451e3ade21c42eddef760bc088567a00b43d1b29") r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) 06:15:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, @perf_config_ext}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="3a1af80f8737d50d0f"], 0x2) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) [ 1111.198357] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "subj_role=/dev/cachefiles" 06:15:00 executing program 1 (fault-call:3 fault-nth:35): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) 06:15:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef6"], 0xb) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000240)={'filter\x00', 0x7e, "730214ab239e5f2b0c5b39ae461897519058c6e4cd78b9077ed82008425ad441238af10e699c81f93c5bf8faa316f5e02434ee7d7bc3922ba60801ef0205949f52e12dd0a0f1a36bb996b93299d36842fff7e60ab6114724a6ac3f46695948ed9066c88044f673a7c5ea277ff6542f96890620f08f65c2c10551ae4c5f8f"}, &(0x7f0000000080)=0xa2) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r3, r3, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) [ 1111.338166] FAULT_INJECTION: forcing a failure. [ 1111.338166] name failslab, interval 1, probability 0, space 0, times 0 [ 1111.376425] CPU: 0 PID: 5112 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1111.384085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1111.393444] Call Trace: [ 1111.396047] dump_stack+0x138/0x197 [ 1111.399682] should_fail.cold+0x10f/0x159 [ 1111.403831] should_failslab+0xdb/0x130 [ 1111.407811] kmem_cache_alloc+0x2d7/0x780 [ 1111.411953] ? __d_lookup+0x3a2/0x670 [ 1111.415742] ? mark_held_locks+0xb1/0x100 [ 1111.419876] ? d_lookup+0xe5/0x240 [ 1111.423411] __d_alloc+0x2d/0x9f0 [ 1111.426861] d_alloc+0x4d/0x270 [ 1111.430134] __lookup_hash+0x58/0x180 [ 1111.433937] filename_create+0x16c/0x430 [ 1111.437992] ? kern_path_mountpoint+0x40/0x40 [ 1111.442479] SyS_mkdir+0x92/0x200 [ 1111.445919] ? SyS_mkdirat+0x210/0x210 [ 1111.449790] ? do_syscall_64+0x53/0x640 [ 1111.453748] ? SyS_mkdirat+0x210/0x210 [ 1111.457620] do_syscall_64+0x1e8/0x640 [ 1111.461492] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1111.466326] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1111.471500] RIP: 0033:0x458e77 [ 1111.474673] RSP: 002b:00007fd726182a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1111.482365] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458e77 [ 1111.489616] RDX: 0000000000000006 RSI: 00000000000001ff RDI: 0000000020000080 [ 1111.496875] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1111.504127] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1111.511392] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 06:15:01 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) fcntl$notify(r2, 0x402, 0x5) accept4$tipc(r1, &(0x7f0000000140)=@id, &(0x7f0000000180)=0x10, 0x180000) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000100)={0x23, 0x6f, 0x2, {0x2, [{0x1b, 0x4, 0x4}, {0x4, 0x4, 0x4}]}}, 0x23) write$P9_RREADLINK(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="b7"], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x2000, 0x0) epoll_wait(r3, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x4) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r5, r5, &(0x7f0000000000), 0x8080fffffffe) fsetxattr$trusted_overlay_upper(r5, &(0x7f0000000240)='trusted.overlay.upper\x00', &(0x7f0000000b40)={0x0, 0xfb, 0x1015, 0x5, 0x1f, "1511b03d651ad82341139329a8d17fd7", "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"}, 0x1015, 0x2) sendfile(r4, r4, 0x0, 0x8080fffffffe) 06:15:01 executing program 1 (fault-call:3 fault-nth:36): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) [ 1111.929061] FAULT_INJECTION: forcing a failure. [ 1111.929061] name failslab, interval 1, probability 0, space 0, times 0 [ 1111.956553] CPU: 0 PID: 5133 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1111.963545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1111.972909] Call Trace: [ 1111.975518] dump_stack+0x138/0x197 [ 1111.979173] should_fail.cold+0x10f/0x159 [ 1111.983344] should_failslab+0xdb/0x130 [ 1111.987339] kmem_cache_alloc+0x2d7/0x780 [ 1111.991498] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1111.996262] ? lock_downgrade+0x740/0x740 [ 1112.000428] ? ioctl_preallocate+0x1c0/0x1c0 [ 1112.004850] getname_flags+0xcb/0x580 [ 1112.008661] SyS_mkdir+0x7e/0x200 [ 1112.012124] ? SyS_mkdirat+0x210/0x210 [ 1112.016015] ? do_syscall_64+0x53/0x640 [ 1112.019998] ? SyS_mkdirat+0x210/0x210 [ 1112.023889] do_syscall_64+0x1e8/0x640 [ 1112.027819] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1112.032681] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1112.037873] RIP: 0033:0x458e77 [ 1112.041070] RSP: 002b:00007fd726182a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1112.048870] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458e77 [ 1112.056144] RDX: 0000000000000006 RSI: 00000000000001ff RDI: 0000000020000080 [ 1112.063433] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1112.070708] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1112.077985] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 06:15:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000040)={0x7, 0x1b, 0x1}, 0x7) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB=':!'], 0x2) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) 06:15:01 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) socket$alg(0x26, 0x5, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 06:15:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000040)={0x21, 0x3, 0x0, {0x1}}, 0x21) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef6"], 0xb) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/6259], 0x1878) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) 06:15:02 executing program 1 (fault-call:3 fault-nth:37): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) 06:15:02 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) ioctl$VFIO_SET_IOMMU(r2, 0x3b66, 0x1) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 1112.494327] FAULT_INJECTION: forcing a failure. [ 1112.494327] name failslab, interval 1, probability 0, space 0, times 0 [ 1112.544785] CPU: 0 PID: 5157 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1112.551763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1112.561131] Call Trace: [ 1112.563737] dump_stack+0x138/0x197 [ 1112.567404] should_fail.cold+0x10f/0x159 [ 1112.571581] should_failslab+0xdb/0x130 [ 1112.575583] kmem_cache_alloc+0x2d7/0x780 [ 1112.579785] ? __d_lookup+0x3a2/0x670 [ 1112.583597] ? mark_held_locks+0xb1/0x100 [ 1112.587812] ? d_lookup+0xe5/0x240 [ 1112.591367] __d_alloc+0x2d/0x9f0 [ 1112.594820] d_alloc+0x4d/0x270 [ 1112.598098] __lookup_hash+0x58/0x180 [ 1112.601894] filename_create+0x16c/0x430 [ 1112.605978] ? kern_path_mountpoint+0x40/0x40 [ 1112.610475] SyS_mkdir+0x92/0x200 [ 1112.613991] ? SyS_mkdirat+0x210/0x210 [ 1112.617868] ? do_syscall_64+0x53/0x640 [ 1112.621832] ? SyS_mkdirat+0x210/0x210 [ 1112.625722] do_syscall_64+0x1e8/0x640 [ 1112.629599] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1112.634437] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1112.639616] RIP: 0033:0x458e77 [ 1112.642798] RSP: 002b:00007fd726182a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1112.650533] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458e77 [ 1112.657833] RDX: 0000000000000006 RSI: 00000000000001ff RDI: 0000000020000080 [ 1112.665145] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1112.672409] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1112.679666] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 06:15:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0xffffff19, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0xa40b8b27a0217dc8, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000000c0)) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef6"], 0xb) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) getsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4) 06:15:02 executing program 1 (fault-call:3 fault-nth:38): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) [ 1112.927294] FAULT_INJECTION: forcing a failure. [ 1112.927294] name failslab, interval 1, probability 0, space 0, times 0 [ 1112.939413] CPU: 0 PID: 5173 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1112.946482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1112.955987] Call Trace: [ 1112.958595] dump_stack+0x138/0x197 [ 1112.962251] should_fail.cold+0x10f/0x159 [ 1112.966422] should_failslab+0xdb/0x130 [ 1112.970434] __kmalloc+0x71/0x7a0 [ 1112.974126] ? mls_compute_context_len+0x3f6/0x5e0 [ 1112.979078] ? context_struct_to_string+0x33a/0x630 [ 1112.984318] context_struct_to_string+0x33a/0x630 [ 1112.989361] ? security_load_policycaps+0x320/0x320 [ 1112.994403] security_sid_to_context_core+0x18a/0x200 [ 1112.999609] security_sid_to_context_force+0x2b/0x40 [ 1113.004726] selinux_inode_init_security+0x493/0x700 [ 1113.012631] ? selinux_inode_create+0x30/0x30 [ 1113.017140] ? kfree+0x20a/0x270 [ 1113.020521] security_inode_init_security+0x18d/0x360 [ 1113.025726] ? ext4_init_acl+0x1f0/0x1f0 [ 1113.029804] ? security_kernel_post_read_file+0xd0/0xd0 [ 1113.035177] ? posix_acl_create+0xf5/0x3a0 [ 1113.039432] ? ext4_set_acl+0x400/0x400 [ 1113.043421] ? lock_downgrade+0x740/0x740 [ 1113.047590] ext4_init_security+0x34/0x40 [ 1113.051752] __ext4_new_inode+0x3385/0x4860 [ 1113.056096] ? ext4_free_inode+0x1210/0x1210 [ 1113.060614] ? dquot_get_next_dqblk+0x160/0x160 [ 1113.065308] ext4_mkdir+0x331/0xc20 [ 1113.069056] ? ext4_init_dot_dotdot+0x4c0/0x4c0 [ 1113.073880] ? security_inode_mkdir+0xd0/0x110 [ 1113.078477] vfs_mkdir+0x3ca/0x610 [ 1113.082037] SyS_mkdir+0x1b7/0x200 [ 1113.085594] ? SyS_mkdirat+0x210/0x210 [ 1113.089492] ? do_syscall_64+0x53/0x640 [ 1113.093591] ? SyS_mkdirat+0x210/0x210 [ 1113.097496] do_syscall_64+0x1e8/0x640 [ 1113.101536] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1113.106402] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1113.111604] RIP: 0033:0x458e77 [ 1113.114794] RSP: 002b:00007fd726182a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1113.122646] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458e77 [ 1113.129926] RDX: 0000000000000006 RSI: 00000000000001ff RDI: 0000000020000080 [ 1113.137292] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1113.144580] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1113.151864] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 06:15:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB=':)'], 0x2) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) 06:15:03 executing program 1 (fault-call:3 fault-nth:39): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) 06:15:03 executing program 5: r0 = syz_open_dev$radio(0x0, 0x1, 0x2) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="b821498b2c038ce967c0b7de39355ee2103401c72bbbcbb387d5a274715ae0d8d5a162901ec307261411a83b5220005e1ada94f4d52f471ebc779fb9075e4f43409605152d9f82c5a4445cb5db0e131d40d138a3bca6f2a9ed597e6e1016676f8ddc45a74040a667a29fe746aa3575bae4fb"], 0x1) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r4, 0x7, &(0x7f0000027000)={0x1}) io_setup(0xc0, &(0x7f0000000040)=0x0) io_submit(r5, 0x1, &(0x7f00000005c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r4, 0x0, 0x0, 0x3}]) r6 = creat(&(0x7f0000000000)='./file0/bus\x00', 0x0) r7 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r7) write$FUSE_INIT(r7, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x6, 0x8800, 0x5, 0x8, 0xfff, 0x297}}, 0x50) dup2(r6, r4) r8 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x0, @loopback}], 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000000240)={r9, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000080)={r9, @in6={{0xa, 0x4e21, 0x7fffffff, @empty, 0x9f}}, 0xb3e3, 0xff, 0x4, 0x5bc4}, 0x98) [ 1113.381293] FAULT_INJECTION: forcing a failure. [ 1113.381293] name failslab, interval 1, probability 0, space 0, times 0 [ 1113.419615] CPU: 0 PID: 5189 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1113.426602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1113.435974] Call Trace: [ 1113.438585] dump_stack+0x138/0x197 [ 1113.442235] should_fail.cold+0x10f/0x159 [ 1113.446413] should_failslab+0xdb/0x130 [ 1113.450407] kmem_cache_alloc+0x2d7/0x780 [ 1113.454585] ? __debug_object_init+0x171/0x8e0 [ 1113.459185] ? ext4_alloc_inode+0x1d/0x610 [ 1113.463441] selinux_inode_alloc_security+0xb6/0x2a0 [ 1113.468561] security_inode_alloc+0x94/0xd0 [ 1113.472902] inode_init_always+0x552/0xaf0 [ 1113.477154] alloc_inode+0x81/0x180 [ 1113.480799] new_inode_pseudo+0x19/0xf0 [ 1113.484984] new_inode+0x1f/0x40 [ 1113.488355] __ext4_new_inode+0x32c/0x4860 [ 1113.492610] ? avc_has_perm+0x2df/0x4b0 [ 1113.496598] ? ext4_free_inode+0x1210/0x1210 [ 1113.501148] ? dquot_get_next_dqblk+0x160/0x160 [ 1113.506018] ext4_mkdir+0x331/0xc20 [ 1113.509847] ? ext4_init_dot_dotdot+0x4c0/0x4c0 [ 1113.514536] ? security_inode_mkdir+0xd0/0x110 [ 1113.519316] vfs_mkdir+0x3ca/0x610 [ 1113.522876] SyS_mkdir+0x1b7/0x200 [ 1113.526436] ? SyS_mkdirat+0x210/0x210 [ 1113.530500] ? do_syscall_64+0x53/0x640 [ 1113.534491] ? SyS_mkdirat+0x210/0x210 [ 1113.538393] do_syscall_64+0x1e8/0x640 [ 1113.542322] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1113.547186] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1113.552387] RIP: 0033:0x458e77 [ 1113.555588] RSP: 002b:00007fd726182a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1113.563472] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458e77 [ 1113.570756] RDX: 0000000000000006 RSI: 00000000000001ff RDI: 0000000020000080 [ 1113.578212] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1113.585499] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1113.592785] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 06:15:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB=':!'], 0x2) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) r3 = accept4$tipc(r2, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x80000) sendfile(r1, r3, &(0x7f0000000000)=0x4000, 0x8080fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) 06:15:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x77359400}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="def64346ff14b7b0000000000000000000"], 0x11) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000340)={0x0, 0x0, @ioapic={0xf000, 0x5, 0x6, 0x5, 0x0, [{0x3, 0x0, 0xb5, [], 0x5}, {0x40, 0xdb, 0x10, [], 0x1}, {0x3, 0x81, 0x7e, [], 0x24}, {0x40, 0x2, 0x1, [], 0x9}, {0x1, 0xd1, 0x53, [], 0x3f}, {0x6, 0x4, 0x4, [], 0x7}, {0xe6, 0x6, 0x0, [], 0x40}, {0x3, 0x7, 0x4, [], 0x70}, {0x7f, 0xfe, 0xc5, [], 0x2}, {0x0, 0xf8, 0x3, [], 0x4}, {0x1, 0x1, 0x2, [], 0x8}, {0xde, 0x1, 0x3, [], 0x3f}, {0x4, 0xff, 0x20, [], 0x6}, {0x81, 0x3, 0x9, [], 0xc9}, {0x8, 0x38, 0x2}, {0x7, 0x4, 0x20, [], 0x5e}, {0x66, 0x7, 0x1f, [], 0x3f}, {0x4, 0x7, 0x80, [], 0x2}, {0x80, 0x2e, 0x6, [], 0x6}, {0x0, 0xfa, 0x9, [], 0x3}, {0x20, 0x0, 0x5, [], 0x7}, {0x2, 0xeb, 0x5}, {0x3f, 0x9, 0x0, [], 0x2}, {0x16, 0x40, 0xfb, [], 0x6}]}}) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r5, r5, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x5d}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f00000002c0)={r6, 0x7fffffff}, &(0x7f0000000480)=0x8) syz_open_dev$swradio(0x0, 0x0, 0x2) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="3a210002f693724bdef6432dff142c226eb32a61aedcc92821e3c235f49d102f085e4d2bbb36b2ca0ab8e6533527b495ec2e008cde2ef149f6250c5cc33ead99e8614dc95c058373cfad35f02a8763d40ecd7424d558ee3d3d6fa2151fd3b16e65b2bb94d1ef4e362d6b4dffd391403c93a858c69954d035"], 0xf) sendfile(r7, r7, &(0x7f0000000000), 0x8080fffffffe) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) sched_getparam(0x0, &(0x7f0000000040)) r8 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r8, r8, &(0x7f0000000000), 0x8080fffffffe) 06:15:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x400, 0x0) connect$can_bcm(r1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="464945218c6ea6bfad93277eda8be43784b764ffc15e5790767429f9816395d0562de3eeef49527de6b7fb245d1b3515556a1613b938efb45e9d106ab3bb5a110000314c35ed7e398b5d4c42551d5e34d9bb2211b41ca09164fc7d2927667615e90e6655578684dbe383e07e6368a33fead79f9835a21aa4a5c5e5998a45d78f38f327c59c7c259bed2eef3c981fdbbd45417c526bdca1e91a1dae0378c5edb530733f2d666ddaa04e6a59b02da35ba1b3c752d4314bdd4528d6de06bdd29d6a7d3657a5facc"], 0xb) sendfile(r2, r2, &(0x7f0000000000)=0x200, 0x8080fffffffe) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="aa0182008d4e4634956b261c99b0babc000000000000000000"], 0x11) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x0, 0x5}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000000c0)={r5, 0xfffa, 0x10, 0x1, 0x5}, &(0x7f0000000140)=0x18) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r7 = getpid() sched_setattr(r7, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) setpgid(r6, r7) creat(&(0x7f0000000180)='./bus\x00', 0x40) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) socket$inet6(0xa, 0x1, 0x81) prlimit64(r7, 0x0, &(0x7f0000000280)={0x3, 0x1}, &(0x7f00000002c0)) r8 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r8, r8, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) 06:15:03 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xc) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) write$P9_RREADLINK(r1, &(0x7f0000000b00)=ANY=[], 0x0) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self\x00', 0x2681, 0x0) 06:15:03 executing program 1 (fault-call:3 fault-nth:40): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) [ 1113.929133] FAULT_INJECTION: forcing a failure. [ 1113.929133] name failslab, interval 1, probability 0, space 0, times 0 [ 1113.964018] CPU: 0 PID: 5220 Comm: syz-executor.1 Not tainted 4.14.149 #0 06:15:03 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x7f, 0x20000) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000100)=0x1f) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="b717a398b8c951d483fd09006aa897ca327988e1bc4c189159050ea82f59d2b5c472eca55f6a31eaf53fccaf956fc60d1bc175bfde601fc087e1e343ad853b7dcce433c25e0a85221caa5b24b5837773a8f06708d35dbd05cc9c554100"/105], 0x1) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x1c1042, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x80000000, 0x400201) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0}, &(0x7f0000000880)=0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r6) r7 = getegid() r8 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, 0x0, 0x0) sendmsg(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="240000005a0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) r9 = dup(r8) r10 = geteuid() write$P9_RGETATTR(r9, &(0x7f0000000480)={0xa0, 0x19, 0x2, {0x1b04, {0x20, 0x3, 0x8}, 0x0, r10, r7, 0x9309, 0x6, 0x9, 0x24, 0x5, 0x1, 0x3ff, 0xf97d, 0x5, 0x1, 0xc474, 0xfffffffffffffffc, 0x2, 0x8, 0x7}}, 0xa0) getgroups(0x2, &(0x7f0000000700)=[r7, 0xee01]) r11 = getpid() getresuid(&(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)=0x0) r13 = getegid() r14 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r14, 0x1, 0x1a, 0x0, 0x0) sendmsg(r14, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="240000005a0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) r15 = dup(r14) r16 = geteuid() write$P9_RGETATTR(r15, &(0x7f0000000480)={0xa0, 0x19, 0x2, {0x1b04, {0x20, 0x3, 0x8}, 0x0, r16, r13, 0x9309, 0x6, 0x9, 0x24, 0x5, 0x6f, 0x3ff, 0xf97d, 0x5, 0x1, 0xc474, 0xfffffffffffffffc, 0x2, 0x8, 0x7}}, 0xa0) getgroups(0x2, &(0x7f0000000700)=[r13, 0xee01]) sendmsg$unix(r3, &(0x7f00000009c0)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000280)="dab5c821401ad3693e3b67abc5e727a17f2676d121336414acafb8269a163d9b3f01e11ec06ed28ce575604baa729c5af19d7c3dc40d1e8192f09c4fa1f3931f6f7b60fe3a4cf7ab0c824b59baec41e166b60cff69e4c499b0a8a70cefc297421e1a2ddfc26c6b5e5cbd53", 0x6b}, {&(0x7f0000000300)="de936df4650a21db1a6175de9aba0d1a2487dffc558a60a72ab86e319dbaeb6fdb007a1ada9a2c88c39cafa66bdec5ce7ec457a03e0eb96a9b67d2c9e2ffd0843b2b09a53a4871de639a1764ae54028b2ea28aecaa03a4b70b1161ea0662f95610c59464e0cb5626b0081346c6ba8c5fa93fd876d291986cf7230d0bcaf6f6edff7778ca5de8abbc11783801f3bfa7e31d6ba74246ba47ccb4bc606468ebdf1d", 0xa0}, {&(0x7f00000003c0)="501f539380e8a5a9676100c1566307828453a477783cd8f665b42de35be0f64f891b6216035c4f7cb05c9e37474073abaf9efa0be74eedba9f4a02478b4bcb88a71d0967241c07f978591d73993d5ca86c5350c780885c5179fa7c90ed701facc7b2f8113bf44c1ba8d6e5b4adaf86c3c6c61bcf7bf79a1ae99557c26a4d796daf6e412fbf115ca26470696980dfa20e96dc4f6c9808ed394725e721", 0x9c}, {&(0x7f0000000180)}, {&(0x7f0000000480)="71d11774208aee743d248507b39eb296a151453c7cea9d9f704d9fd5e730bded87c1aa83a766a38bdbb5911727b8de8724b8122636c918f33780ab71e6218f474a35c8b95a11b3a65b1fc52bd194151bf0cd2942c1c51c9d46ca54a7bbe3f7aab25069d87b6b6cc9cb41721a9353f3d07cbd98ef6537c9b5097f8d9919b93479939fb0da98", 0x85}, {&(0x7f0000000540)="49a0f6ff00c9", 0x6}, {&(0x7f0000000580)="93d704c1e65ff6356c4ab3f5351a591ef7e3867340c7d039cb2df7258151c95e243a8d5b4360241f049b3bbc831f3d75832b95340b0a9f9593cd88b0218ee57266e4c8d9c17cf480575008a1233f038b29eefd898ab739364a5589bdf5cdaea98e276a1edeedbd2a55aa6145591a9545343031b896e05414a9b9", 0x7a}, {&(0x7f0000000600)="6f0347de3c76d0dede491cde021974a704bdb77d6ca7b15b8557ac8b7226b4e485474e2eec62f2d9035d764a919191429278b3ac7baed5dd35f6b805ff70c986609e00b4d1308b24f3b376df5bf13577ce5e8ccf31c35a257471a0d1f9f732a88efb4f6a5b7a3a6571cfc3225238aff734bf26a26da103acfd84416828cd71908bc6110097d3e7a3a552fd36a06e77cb270e6e37a4503cc3da1f9d1889b55a377cd4a1ebac9fe6d7a8b2af56030f9376a1a55cdf0ce036c2a461e57568a3be41d6c4b5edc0048c99bf3882f173c4d83a3cf0fb76", 0xd4}, {&(0x7f0000000700)="891e1a2bc898c4b451c23a0e7377dbb829d5b980c29621126412d715cdaa2f6496380b31c493070ab2ac6b5dc6bc8c8331905de4021ad8623886681482d2889179b4c3fd", 0x44}], 0x9, &(0x7f0000000980)=[@cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}], 0x40, 0x4050}, 0x10) sendfile(r2, r2, 0x0, 0x8080fffffffe) [ 1113.970999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1113.980380] Call Trace: [ 1113.980444] dump_stack+0x138/0x197 [ 1113.980463] should_fail.cold+0x10f/0x159 [ 1113.980479] should_failslab+0xdb/0x130 [ 1113.980493] kmem_cache_alloc+0x2d7/0x780 [ 1113.991063] ? __debug_object_init+0x171/0x8e0 [ 1113.991078] ? ext4_alloc_inode+0x1d/0x610 [ 1113.991095] selinux_inode_alloc_security+0xb6/0x2a0 [ 1113.991109] security_inode_alloc+0x94/0xd0 [ 1113.991122] inode_init_always+0x552/0xaf0 [ 1113.991135] alloc_inode+0x81/0x180 [ 1113.991145] new_inode_pseudo+0x19/0xf0 [ 1113.991155] new_inode+0x1f/0x40 [ 1113.991164] __ext4_new_inode+0x32c/0x4860 [ 1113.991183] ? avc_has_perm+0x2df/0x4b0 [ 1113.991194] ? ext4_free_inode+0x1210/0x1210 [ 1113.991213] ? dquot_get_next_dqblk+0x160/0x160 [ 1113.991231] ext4_mkdir+0x331/0xc20 [ 1113.991251] ? ext4_init_dot_dotdot+0x4c0/0x4c0 [ 1113.991264] ? security_inode_mkdir+0xd0/0x110 [ 1113.991279] vfs_mkdir+0x3ca/0x610 [ 1113.991292] SyS_mkdir+0x1b7/0x200 [ 1113.991304] ? SyS_mkdirat+0x210/0x210 [ 1114.074593] ? do_syscall_64+0x53/0x640 [ 1114.078586] ? SyS_mkdirat+0x210/0x210 [ 1114.082492] do_syscall_64+0x1e8/0x640 [ 1114.086403] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1114.091379] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1114.096580] RIP: 0033:0x458e77 [ 1114.099774] RSP: 002b:00007fd726182a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1114.107496] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458e77 [ 1114.114783] RDX: 0000000000000006 RSI: 00000000000001ff RDI: 0000000020000080 [ 1114.122063] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1114.129348] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1114.136636] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 [ 1114.154940] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=537 sclass=netlink_route_socket pig=5233 comm=syz-executor.5 06:15:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x18, 0x400) getsockname$ax25(r1, &(0x7f0000000080)={{}, [@netrom, @remote, @remote, @default, @remote, @netrom, @rose, @netrom]}, &(0x7f0000000140)=0x48) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663b7724bdef6"], 0xb) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r3, r3, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) [ 1114.202109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=537 sclass=netlink_route_socket pig=5237 comm=syz-executor.5 06:15:03 executing program 1 (fault-call:3 fault-nth:41): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) [ 1114.293800] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=537 sclass=netlink_route_socket pig=5237 comm=syz-executor.5 [ 1114.320736] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=537 sclass=netlink_route_socket pig=5237 comm=syz-executor.5 06:15:04 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="b3"], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000040)=0x6, 0x4) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) [ 1114.340052] FAULT_INJECTION: forcing a failure. [ 1114.340052] name failslab, interval 1, probability 0, space 0, times 0 [ 1114.378821] CPU: 0 PID: 5246 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1114.386019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1114.395394] Call Trace: [ 1114.398011] dump_stack+0x138/0x197 [ 1114.401787] should_fail.cold+0x10f/0x159 [ 1114.405962] should_failslab+0xdb/0x130 [ 1114.409959] __kmalloc+0x2f0/0x7a0 [ 1114.416149] ? ext4_find_extent+0x709/0x960 [ 1114.420598] ext4_find_extent+0x709/0x960 [ 1114.424878] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1114.430350] ext4_ext_map_blocks+0x1a3/0x4fa0 [ 1114.434871] ? ext4_find_delalloc_cluster+0xb0/0xb0 [ 1114.439916] ? perf_trace_lock+0x500/0x500 [ 1114.444282] ? lock_acquire+0x16f/0x430 [ 1114.448270] ? ext4_map_blocks+0x402/0x17c0 [ 1114.452613] ext4_map_blocks+0xd3c/0x17c0 [ 1114.456778] ? __lock_is_held+0xb6/0x140 [ 1114.460869] ? check_preemption_disabled+0x3c/0x250 [ 1114.465902] ? ext4_issue_zeroout+0x160/0x160 [ 1114.470546] ? __brelse+0x50/0x60 [ 1114.474130] ext4_getblk+0xac/0x450 [ 1114.477772] ? ext4_iomap_begin+0x8a0/0x8a0 [ 1114.482109] ? ext4_free_inode+0x1210/0x1210 [ 1114.486536] ext4_bread+0x6e/0x1a0 [ 1114.490096] ? ext4_getblk+0x450/0x450 [ 1114.494001] ext4_append+0x14b/0x360 [ 1114.497733] ext4_mkdir+0x531/0xc20 [ 1114.501532] ? ext4_init_dot_dotdot+0x4c0/0x4c0 [ 1114.506220] ? security_inode_mkdir+0xd0/0x110 [ 1114.510909] vfs_mkdir+0x3ca/0x610 [ 1114.514470] SyS_mkdir+0x1b7/0x200 [ 1114.518071] ? SyS_mkdirat+0x210/0x210 [ 1114.522101] ? do_syscall_64+0x53/0x640 [ 1114.526092] ? SyS_mkdirat+0x210/0x210 [ 1114.530094] do_syscall_64+0x1e8/0x640 [ 1114.534001] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1114.538876] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1114.544080] RIP: 0033:0x458e77 [ 1114.547419] RSP: 002b:00007fd726182a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1114.555371] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458e77 [ 1114.563354] RDX: 0000000000000006 RSI: 00000000000001ff RDI: 0000000020000080 [ 1114.570643] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1114.577935] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1114.585443] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 06:15:04 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="b7"], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) accept4$tipc(r1, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x10, 0x0) 06:15:04 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="3a216a7a08f94b43372efc8201f663a7724bdea40246ff14"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 1114.689230] REISERFS warning (device loop1): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. 06:15:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB=':!'], 0x2) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8003}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0xa84, 0x70bd2d, 0x25dfdbfe, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x17, 0x7, @udp='udp:syz2\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x238f67fca10cb8ae}, 0x0) sendfile(r0, r0, 0x0, 0x8080fffffffe) 06:15:04 executing program 1 (fault-call:3 fault-nth:42): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) [ 1114.885830] FAULT_INJECTION: forcing a failure. [ 1114.885830] name failslab, interval 1, probability 0, space 0, times 0 [ 1114.907717] CPU: 1 PID: 5276 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1114.914694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1114.924068] Call Trace: [ 1114.926673] dump_stack+0x138/0x197 [ 1114.930327] should_fail.cold+0x10f/0x159 [ 1114.934797] should_failslab+0xdb/0x130 [ 1114.938977] kmem_cache_alloc+0x2d7/0x780 [ 1114.943297] ? rcu_read_lock_sched_held+0x110/0x130 [ 1114.948369] ? __mark_inode_dirty+0x2b7/0x1040 [ 1114.952974] ext4_mb_new_blocks+0x509/0x3990 [ 1114.957509] ? ext4_find_extent+0x709/0x960 [ 1114.961983] ext4_ext_map_blocks+0x26cd/0x4fa0 [ 1114.966595] ? ext4_find_delalloc_cluster+0xb0/0xb0 [ 1114.971626] ? perf_trace_lock+0x500/0x500 [ 1114.976003] ? lock_acquire+0x16f/0x430 [ 1114.980090] ext4_map_blocks+0x881/0x17c0 [ 1114.984740] ? ext4_issue_zeroout+0x160/0x160 [ 1114.989299] ? __brelse+0x50/0x60 [ 1114.992779] ext4_getblk+0xac/0x450 [ 1114.996425] ? ext4_iomap_begin+0x8a0/0x8a0 [ 1115.000811] ? ext4_free_inode+0x1210/0x1210 [ 1115.005237] ext4_bread+0x6e/0x1a0 [ 1115.008792] ? ext4_getblk+0x450/0x450 [ 1115.012704] ext4_append+0x14b/0x360 [ 1115.016454] ext4_mkdir+0x531/0xc20 [ 1115.020125] ? ext4_init_dot_dotdot+0x4c0/0x4c0 [ 1115.024932] ? security_inode_mkdir+0xd0/0x110 [ 1115.029538] vfs_mkdir+0x3ca/0x610 [ 1115.033187] SyS_mkdir+0x1b7/0x200 [ 1115.036908] ? SyS_mkdirat+0x210/0x210 [ 1115.040810] ? do_syscall_64+0x53/0x640 [ 1115.044914] ? SyS_mkdirat+0x210/0x210 [ 1115.048834] do_syscall_64+0x1e8/0x640 [ 1115.052732] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1115.057597] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1115.062920] RIP: 0033:0x458e77 [ 1115.066277] RSP: 002b:00007fd726182a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1115.074130] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458e77 [ 1115.081417] RDX: 0000000000000006 RSI: 00000000000001ff RDI: 0000000020000080 [ 1115.088852] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1115.096138] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1115.103572] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 06:15:04 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) lsetxattr$security_smack_transmute(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x1) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') r1 = open(&(0x7f00000000c0)='./bus\x00', 0x4400, 0xc2ba9b7697a85126) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 06:15:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef6"], 0xb) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x100) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) [ 1115.234045] audit: type=1804 audit(1571033704.912:386): pid=5287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir017720076/syzkaller.4NQquk/1026/bus" dev="sda1" ino=16753 res=1 06:15:05 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000100)={0x0, 0x1, 0x20, [], &(0x7f00000000c0)}) write$P9_RREADLINK(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="3a218211f663a798aedef64346ff14b7b09c0e01dfc33202fb81659b1861c4b609a732caa8202da36f30cbcef8a17c302467a7a9d63baf0f9c7a2b04dd90f991105d8a00"/86], 0x11) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) write$P9_RMKNOD(r1, &(0x7f0000000140)={0x14, 0x13, 0x5, {0x4, 0x2, 0x6}}, 0x14) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000040)={0xf, 0x9, 0x4}) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) r2 = semget(0x3, 0x4, 0x0) semctl$SEM_STAT(r2, 0x758d788dc069ea1d, 0x12, &(0x7f0000000200)=""/44) semop(r2, &(0x7f0000000080)=[{0x0, 0x6d6, 0x1800}, {0x4, 0xfffa, 0x800}, {0x8, 0xffff}, {0x3, 0x1, 0xa3900c105c4c4cb}, {0x1, 0x1f, 0x800}], 0x5) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) ioctl$TIOCLINUX7(r3, 0x541c, &(0x7f0000000440)={0x7, 0xc0}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x74, r4, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4b}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr="3f7ce8adec47ebaf3bd84a4b42ffb3af"}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x42}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x21e8c1e3c6fb66d4}, 0x10) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r5, r5, &(0x7f0000000000), 0x8080fffffffe) [ 1115.324172] audit: type=1804 audit(1571033704.952:387): pid=5288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir017720076/syzkaller.4NQquk/1026/bus" dev="sda1" ino=16753 res=1 06:15:05 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="b3fb0dafbab37e27a2ad93ccecd4b85f903ba5962c72d41a8349ec792ccc4f0c5a835249dfc6d30bb666417371d960cc0bf2c11e1fccdbc8e58d0b807798d0cf1ca3d3cce939f367aea44524208e2271cc468fb600"/99], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) 06:15:05 executing program 1 (fault-call:3 fault-nth:43): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) [ 1115.646602] FAULT_INJECTION: forcing a failure. [ 1115.646602] name failslab, interval 1, probability 0, space 0, times 0 [ 1115.658953] CPU: 1 PID: 5305 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1115.666006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1115.675531] Call Trace: [ 1115.678145] dump_stack+0x138/0x197 [ 1115.681902] should_fail.cold+0x10f/0x159 [ 1115.686075] ? __es_tree_search.isra.0+0x15f/0x1c0 [ 1115.691287] should_failslab+0xdb/0x130 [ 1115.695366] kmem_cache_alloc+0x47/0x780 [ 1115.699451] ? ext4_es_can_be_merged+0x16e/0x230 [ 1115.704343] __es_insert_extent+0x26c/0xe60 [ 1115.708922] ext4_es_insert_extent+0x1f0/0x590 [ 1115.713619] ? ext4_es_find_delayed_extent_range+0x960/0x960 [ 1115.719448] ext4_map_blocks+0xab1/0x17c0 [ 1115.723772] ? ext4_issue_zeroout+0x160/0x160 [ 1115.728289] ? __brelse+0x50/0x60 [ 1115.731766] ext4_getblk+0xac/0x450 [ 1115.735423] ? ext4_iomap_begin+0x8a0/0x8a0 [ 1115.739762] ? ext4_free_inode+0x1210/0x1210 [ 1115.744275] ext4_bread+0x6e/0x1a0 [ 1115.747834] ? ext4_getblk+0x450/0x450 [ 1115.751745] ext4_append+0x14b/0x360 [ 1115.755480] ext4_mkdir+0x531/0xc20 [ 1115.759131] ? ext4_init_dot_dotdot+0x4c0/0x4c0 [ 1115.763819] ? security_inode_mkdir+0xd0/0x110 [ 1115.768423] vfs_mkdir+0x3ca/0x610 [ 1115.771991] SyS_mkdir+0x1b7/0x200 [ 1115.775550] ? SyS_mkdirat+0x210/0x210 [ 1115.779450] ? do_syscall_64+0x53/0x640 [ 1115.783645] ? SyS_mkdirat+0x210/0x210 [ 1115.787709] do_syscall_64+0x1e8/0x640 [ 1115.791611] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1115.796478] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1115.801680] RIP: 0033:0x458e77 [ 1115.804884] RSP: 002b:00007fd726182a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1115.812866] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458e77 [ 1115.820267] RDX: 0000000000000006 RSI: 00000000000001ff RDI: 0000000020000080 [ 1115.827550] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1115.835121] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1115.842405] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 06:15:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB=':!'], 0x2) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) recvmmsg(r1, &(0x7f0000005140)=[{{&(0x7f0000000040)=@can={0x1d, 0x0}, 0x80, &(0x7f00000014c0)=[{&(0x7f00000000c0)=""/192, 0xc0}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000200)=""/68, 0x44}, {&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000000280)=""/26, 0x1a}, {&(0x7f0000001340)=""/109, 0x6d}, {&(0x7f00000013c0)=""/253, 0xfd}], 0x7, &(0x7f0000001540)=""/232, 0xe8}, 0x2}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001640)=""/251, 0xfb}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f0000001740)=""/71, 0x47}], 0x3, &(0x7f0000001800)=""/47, 0x2f}, 0x1475}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001840)=""/249, 0xf9}, {&(0x7f0000001940)=""/77, 0x4d}, {&(0x7f00000019c0)=""/167, 0xa7}, {&(0x7f0000001a80)=""/11, 0xb}, {&(0x7f0000001ac0)=""/26, 0x1a}, {&(0x7f0000001b00)=""/48, 0x30}], 0x6, &(0x7f0000001bc0)=""/4096, 0x1000}}, {{&(0x7f0000002bc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000005080)=[{&(0x7f0000002c40)=""/97, 0x61}, {&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f0000003cc0)=""/167, 0xa7}, {&(0x7f0000003d80)=""/152, 0x98}, {&(0x7f0000003e40)=""/219, 0xdb}, {&(0x7f0000003f40)=""/4096, 0x1000}, {&(0x7f0000004f40)=""/48, 0x30}, {&(0x7f0000004f80)=""/201, 0xc9}], 0x8, &(0x7f0000005100)=""/15, 0xf}, 0x96}], 0x4, 0x40004000, &(0x7f0000005240)={0x0, 0x1c9c380}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000005280)={'ipddp0\x00', r3}) sendfile(r0, r0, 0x0, 0x8080fffffffe) [ 1115.905472] REISERFS warning (device loop1): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. 06:15:05 executing program 1 (fault-call:3 fault-nth:44): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) [ 1116.042940] FAULT_INJECTION: forcing a failure. [ 1116.042940] name failslab, interval 1, probability 0, space 0, times 0 [ 1116.079095] CPU: 0 PID: 5317 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1116.086167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1116.095625] Call Trace: [ 1116.098325] dump_stack+0x138/0x197 [ 1116.101983] should_fail.cold+0x10f/0x159 [ 1116.106160] should_failslab+0xdb/0x130 [ 1116.110157] __kmalloc_track_caller+0x2ec/0x790 [ 1116.114926] ? dput.part.0+0x170/0x750 [ 1116.118947] ? mntput+0x66/0x90 [ 1116.122223] ? strndup_user+0x62/0xf0 [ 1116.126019] memdup_user+0x26/0xa0 [ 1116.129714] strndup_user+0x62/0xf0 [ 1116.133337] SyS_mount+0x3c/0x120 [ 1116.136872] ? copy_mnt_ns+0x8c0/0x8c0 [ 1116.140780] do_syscall_64+0x1e8/0x640 [ 1116.144750] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1116.149587] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1116.154767] RIP: 0033:0x45c4aa [ 1116.157950] RSP: 002b:00007fd726182a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1116.165904] RAX: ffffffffffffffda RBX: 00007fd726182b40 RCX: 000000000045c4aa [ 1116.173256] RDX: 00007fd726182ae0 RSI: 0000000020000080 RDI: 00007fd726182b00 [ 1116.180791] RBP: 0000000000000000 R08: 00007fd726182b40 R09: 00007fd726182ae0 [ 1116.188077] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 [ 1116.195337] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 06:15:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x80000, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) write(r2, &(0x7f0000000240)="2b908a0c5b929480645b2c53249463f60e5d6f84dd65fd6221ff2ef30630c823d6afa59f3a52dfa3644e93e233c95676c6c968872144d4cade8b0d64d128e94299a82cf2bb1160c7816b6c6d9ab8ba8379be917638a1be0ce2e972d377c7f89313478946aa5a914eff98713125953610a0708033c0e31397623e55a4b93f300673a20794e486e2594bb0d84078eddfb99f120c20fd96ab73e9f59e67abdf086ae1ed649c5f4a97614b18", 0xaa) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB=':!'], 0x2) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) pipe(&(0x7f0000000080)) r3 = open(&(0x7f0000000200)='./file0\x00', 0x300000, 0x0) fchdir(r3) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000040)='veth1_to_bond\x00') 06:15:06 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5e00d1a54e87bf1b04e11bebcee23a218211f663a7724bdef64346ff14577981117f417e8a87763c49c5d69f0ab56888e19569cc1c1bb7e6419de781de91f8f8c6206525ad172e0f6acb7cdbfe289240cc9cdfb5e6cc13ee67d3c8a9da0339a4488f2aa77c50172d50856befb37fc38f26621b2099fa58b4f161509e0e9868b27498c4dff7cfa22c10df2b7dda68218b6e5c9f293680ab4bcf20932d7382518fc22cd505f2f5a334622d34500eed96a2f97b6382dfc4ee085594a72c5d2be3cc9488c27c0fb9366c1ca052622cd57cbcf71d000100008c137563"], 0xf) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000140)={0x2, 0x2, 0x7f}) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 06:15:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = inotify_init() setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000080)=0x3, 0x4) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000040)) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB=':!'], 0x2) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) 06:15:06 executing program 5: r0 = syz_open_dev$radio(0x0, 0x1, 0x2) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000b00)=ANY=[@ANYBLOB="b7"], 0x1) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0xff, "1b367d3a037a1e910678c694a8b993da705ac287dd35aaf1a576291e41235246", 0x67c, 0x2b1f8845, 0x2, 0x10, 0x3}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) 06:15:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef6"], 0xb) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getuid() syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./bus\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000140)="cf6abdc90889d84cb947c1575eb5ab910fe383217751878ca8135751d0481794459a98de922b9d744bf21f98969956fb66f02475593b6e9176f58b41fc40448371aa960f0cd3c50b78d5c8a0", 0x4c, 0xfff}, {&(0x7f0000000240)="fe81842140c7956301830e278d2b9acb8952bf34e8e0103c06a5f73b1fa8f75e944527b21493d56c744cbee16eac9fa4b87298875277010fc78764a5a8a3e40a91863774f91874afc4ed4312b0fd7435d31d814a330acb87f38a7acd483541ff73d15f71d67d3504691534b58c59373c7a9d711af8e13600e158e9940866c1174a88669a9aabc076cd0905e914ec3f7a46825547c88a9e544fe01241a668087c85fd3d2c38c983c8f4f3e2", 0xab, 0x100000000}, {&(0x7f0000000340)="d0fea16b7920d3a101b7f2b786c364a906891774bce9844c31f5373e17e3ec88263d7eb8475e00a2abf0f065170781f82b7082013ad841d306895a1773e014575b8e1686d3d07d77986f338c316fb339681160c082f74cac8d8bcbe94de89ba2cf28405a50b7b38267bb9207a529a12a8e990db398a759bf8ef4da423cbc1b06b9d16673d6f282158768797601c75b0eb5510894dbdd8bb75931cd83ae6e30d3ea10cd2bda2b368181fe327590616c6138df25ac1f3804f33f19978d7349b697a1844abbd16f008235916d4c45", 0xcd, 0x24}], 0x201000, &(0x7f0000000540)={[{@fmask={'fmask', 0x3d, 0x6}}, {@dmask={'dmask'}}, {@fmask={'fmask', 0x3d, 0x5}}, {@disable_sparse_yes='disable_sparse=yes'}, {@errors_continue='errors=continue'}, {@umask={'umask', 0x3d, 0x7fff}}, {@uid={'uid', 0x3d, r3}}, {@utf8='utf8'}], [{@subj_role={'subj_role', 0x3d, '\'ppp1'}}, {@dont_appraise='dont_appraise'}, {@dont_measure='dont_measure'}, {@uid_gt={'uid>', r4}}]}) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) 06:15:06 executing program 1 (fault-call:3 fault-nth:45): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) 06:15:06 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x80, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="b7"], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc6291167f18bc853, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) 06:15:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB=':#'], 0x2) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) [ 1116.748002] FAULT_INJECTION: forcing a failure. [ 1116.748002] name failslab, interval 1, probability 0, space 0, times 0 [ 1116.772750] audit: type=1804 audit(1571033706.442:388): pid=5359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir054449185/syzkaller.otCMJi/1104/bus" dev="sda1" ino=16723 res=1 [ 1116.780381] CPU: 1 PID: 5355 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1116.806543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1116.815911] Call Trace: [ 1116.818524] dump_stack+0x138/0x197 [ 1116.822263] should_fail.cold+0x10f/0x159 [ 1116.826443] should_failslab+0xdb/0x130 [ 1116.830440] __kmalloc+0x2f0/0x7a0 [ 1116.833997] ? check_preemption_disabled+0x3c/0x250 [ 1116.839030] ? ext4_find_extent+0x709/0x960 [ 1116.843477] ext4_find_extent+0x709/0x960 [ 1116.847640] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1116.853112] ext4_ext_map_blocks+0x1a3/0x4fa0 [ 1116.857633] ? ext4_find_delalloc_cluster+0xb0/0xb0 [ 1116.862901] ? perf_trace_lock+0x500/0x500 [ 1116.867159] ? lock_acquire+0x16f/0x430 [ 1116.871148] ? ext4_map_blocks+0x829/0x17c0 [ 1116.875498] ext4_map_blocks+0x881/0x17c0 [ 1116.880011] ? ext4_issue_zeroout+0x160/0x160 [ 1116.884525] ? __brelse+0x50/0x60 [ 1116.887999] ext4_getblk+0xac/0x450 [ 1116.891741] ? ext4_iomap_begin+0x8a0/0x8a0 [ 1116.896093] ? ext4_free_inode+0x1210/0x1210 [ 1116.900812] ext4_bread+0x6e/0x1a0 [ 1116.904368] ? ext4_getblk+0x450/0x450 [ 1116.908275] ext4_append+0x14b/0x360 [ 1116.912021] ext4_mkdir+0x531/0xc20 [ 1116.915677] ? ext4_init_dot_dotdot+0x4c0/0x4c0 [ 1116.920367] ? security_inode_mkdir+0xd0/0x110 [ 1116.925120] vfs_mkdir+0x3ca/0x610 [ 1116.928692] SyS_mkdir+0x1b7/0x200 [ 1116.932681] ? SyS_mkdirat+0x210/0x210 [ 1116.936587] ? do_syscall_64+0x53/0x640 [ 1116.940678] ? SyS_mkdirat+0x210/0x210 [ 1116.944672] do_syscall_64+0x1e8/0x640 [ 1116.948590] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1116.953461] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1116.958661] RIP: 0033:0x458e77 [ 1116.962065] RSP: 002b:00007fd726182a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1116.969805] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458e77 [ 1116.977435] RDX: 0000000000000006 RSI: 00000000000001ff RDI: 0000000020000080 [ 1116.984860] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a 06:15:06 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="b7"], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) r2 = open(&(0x7f0000000040)='./bus\x00', 0x80800, 0x1) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000080)={0xf, 0x0, {0x53, 0x3, 0x9, {0x6, 0x141}, {0x0, 0xd06}, @const={0x3ff, {0x1, 0x8, 0x1000, 0x4}}}, {0x55, 0x0, 0x0, {0x22a3, 0xfffd}, {0x7, 0x1}, @ramp={0x81, 0x1, {0x2, 0x40, 0x4, 0x31d2}}}}) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000100)={0x1, 0x0, {0x81, 0x9f8, 0x2015, 0x3, 0x17, 0xe, 0x0, 0x9}}) [ 1116.992316] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1116.999621] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 06:15:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB=':!'], 0x2) msync(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) 06:15:07 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14"], 0xf) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="3a218211f663d5f24bdef64346ff14b7b001ebc1d39ba88afb2930711f29e5461c823a4a00b61d4faff06b1c945bdd5ccc7cd134dd8159aff8a1d3b2f266a5a398482c84360540f156de36806142df96a2c7e465ba562315aba901c36fbc0e9df0f8f11a0ad571543be653bf5224c4f8c7eb3c"], 0x11) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) sendfile(r2, r1, &(0x7f0000000000), 0x8080fffffffe) open(0x0, 0x4a8d41, 0x15) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f00000000c0)) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) [ 1117.247324] audit: type=1804 audit(1571033706.922:389): pid=5375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir054449185/syzkaller.otCMJi/1105/bus" dev="sda1" ino=16723 res=1 06:15:07 executing program 1 (fault-call:3 fault-nth:46): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) [ 1117.496766] FAULT_INJECTION: forcing a failure. [ 1117.496766] name failslab, interval 1, probability 0, space 0, times 0 [ 1117.527058] CPU: 1 PID: 5387 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1117.534027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1117.543413] Call Trace: 06:15:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x7650aa741a5aede5, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef6"], 0xb) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) [ 1117.546128] dump_stack+0x138/0x197 [ 1117.549787] should_fail.cold+0x10f/0x159 [ 1117.553955] should_failslab+0xdb/0x130 [ 1117.558119] __kmalloc_track_caller+0x2ec/0x790 [ 1117.562803] ? kasan_check_write+0x14/0x20 [ 1117.567047] ? strndup_user+0x62/0xf0 [ 1117.571131] memdup_user+0x26/0xa0 [ 1117.574700] strndup_user+0x62/0xf0 [ 1117.578349] SyS_mount+0x6b/0x120 [ 1117.582901] ? copy_mnt_ns+0x8c0/0x8c0 [ 1117.586798] do_syscall_64+0x1e8/0x640 [ 1117.590880] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1117.595756] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1117.601062] RIP: 0033:0x45c4aa [ 1117.604263] RSP: 002b:00007fd726182a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1117.611985] RAX: ffffffffffffffda RBX: 00007fd726182b40 RCX: 000000000045c4aa [ 1117.619431] RDX: 00007fd726182ae0 RSI: 0000000020000080 RDI: 00007fd726182b00 [ 1117.626714] RBP: 0000000000000000 R08: 00007fd726182b40 R09: 00007fd726182ae0 [ 1117.634136] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 [ 1117.641615] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 06:15:07 executing program 1 (fault-call:3 fault-nth:47): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) [ 1117.814985] FAULT_INJECTION: forcing a failure. [ 1117.814985] name failslab, interval 1, probability 0, space 0, times 0 [ 1117.830442] CPU: 0 PID: 5399 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1117.837409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1117.846773] Call Trace: [ 1117.849381] dump_stack+0x138/0x197 [ 1117.853038] should_fail.cold+0x10f/0x159 [ 1117.857220] should_failslab+0xdb/0x130 [ 1117.861305] __kmalloc_track_caller+0x2ec/0x790 [ 1117.866014] ? kasan_check_write+0x14/0x20 [ 1117.870269] ? strndup_user+0x62/0xf0 [ 1117.874081] memdup_user+0x26/0xa0 [ 1117.877776] strndup_user+0x62/0xf0 [ 1117.881419] SyS_mount+0x6b/0x120 [ 1117.884883] ? copy_mnt_ns+0x8c0/0x8c0 [ 1117.888806] do_syscall_64+0x1e8/0x640 [ 1117.892707] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1117.897703] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1117.902906] RIP: 0033:0x45c4aa [ 1117.906104] RSP: 002b:00007fd726182a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1117.913827] RAX: ffffffffffffffda RBX: 00007fd726182b40 RCX: 000000000045c4aa [ 1117.921108] RDX: 00007fd726182ae0 RSI: 0000000020000080 RDI: 00007fd726182b00 [ 1117.928522] RBP: 0000000000000000 R08: 00007fd726182b40 R09: 00007fd726182ae0 [ 1117.935806] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 [ 1117.943089] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 06:15:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef6"], 0xb) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r3, r3, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000000040)) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) write$apparmor_exec(r4, &(0x7f0000000080)={'exec ', '/dev/cachefiles\x00'}, 0x15) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0xf3b) [ 1118.053877] audit: type=1804 audit(1571033707.732:390): pid=5407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir054449185/syzkaller.otCMJi/1105/bus" dev="sda1" ino=16723 res=1 06:15:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x1, 0x8000, 0x400, 0x2}, 0x10) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="6fc9"], 0x2) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) write$binfmt_aout(r0, &(0x7f0000000340)={{0x108, 0xf5, 0x8, 0x172, 0x183, 0x7, 0x44, 0xf02}, "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", [[], [], [], [], [], [], [], [], [], []]}, 0x1a20) 06:15:07 executing program 1 (fault-call:3 fault-nth:48): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) 06:15:07 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="b7"], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000040)={{0x3f, 0x5}, 'port0\x00', 0x80, 0x8, 0xfffff019, 0x6, 0x0, 0xe8, 0x2d, 0x0, 0xa, 0x5}) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000100)=0x3, &(0x7f0000000140)=0x4) sendfile(r2, r2, 0x0, 0x8080fffffffe) 06:15:07 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) r1 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) connect(0xffffffffffffffff, &(0x7f0000000340)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r5) r6 = getgid() r7 = getuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)=0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{0x101, r5, r6, r7, r8, 0x1, 0x3}, 0x31, 0x7fff, 0x800, 0x1, 0xffffffffffffffff, r9, 0x1}) readlinkat(r3, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=""/148, 0x94) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) [ 1118.293189] FAULT_INJECTION: forcing a failure. [ 1118.293189] name failslab, interval 1, probability 0, space 0, times 0 [ 1118.310518] CPU: 1 PID: 5424 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1118.317488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1118.326983] Call Trace: [ 1118.329602] dump_stack+0x138/0x197 [ 1118.333256] should_fail.cold+0x10f/0x159 [ 1118.337446] should_failslab+0xdb/0x130 [ 1118.341464] __kmalloc_track_caller+0x2ec/0x790 [ 1118.346155] ? kasan_check_write+0x14/0x20 [ 1118.350553] ? strndup_user+0x62/0xf0 [ 1118.354374] memdup_user+0x26/0xa0 [ 1118.357956] strndup_user+0x62/0xf0 [ 1118.361695] SyS_mount+0x6b/0x120 [ 1118.365160] ? copy_mnt_ns+0x8c0/0x8c0 [ 1118.369070] do_syscall_64+0x1e8/0x640 [ 1118.372974] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1118.377932] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1118.383254] RIP: 0033:0x45c4aa [ 1118.386456] RSP: 002b:00007fd726182a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1118.394348] RAX: ffffffffffffffda RBX: 00007fd726182b40 RCX: 000000000045c4aa [ 1118.401634] RDX: 00007fd726182ae0 RSI: 0000000020000080 RDI: 00007fd726182b00 [ 1118.409189] RBP: 0000000000000000 R08: 00007fd726182b40 R09: 00007fd726182ae0 [ 1118.416616] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 [ 1118.424040] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 06:15:08 executing program 1 (fault-call:3 fault-nth:49): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) [ 1118.512978] FAULT_INJECTION: forcing a failure. [ 1118.512978] name failslab, interval 1, probability 0, space 0, times 0 [ 1118.525428] CPU: 1 PID: 5435 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1118.533580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1118.543044] Call Trace: [ 1118.545655] dump_stack+0x138/0x197 [ 1118.549455] should_fail.cold+0x10f/0x159 [ 1118.553721] should_failslab+0xdb/0x130 [ 1118.558712] kmem_cache_alloc+0x2d7/0x780 [ 1118.562884] ? fs_reclaim_acquire+0x20/0x20 [ 1118.567380] ? find_held_lock+0x35/0x130 [ 1118.571641] getname_flags+0xcb/0x580 [ 1118.575467] user_path_at_empty+0x2f/0x50 [ 1118.579635] do_mount+0x12b/0x27d0 [ 1118.583195] ? copy_mount_options+0x5c/0x2f0 [ 1118.587625] ? rcu_read_lock_sched_held+0x110/0x130 [ 1118.592818] ? copy_mount_string+0x40/0x40 [ 1118.597068] ? _copy_from_user+0x99/0x110 [ 1118.601248] ? copy_mount_options+0x1fe/0x2f0 [ 1118.605766] SyS_mount+0xab/0x120 [ 1118.609238] ? copy_mnt_ns+0x8c0/0x8c0 [ 1118.613144] do_syscall_64+0x1e8/0x640 [ 1118.617051] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1118.622128] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1118.627351] RIP: 0033:0x45c4aa [ 1118.630550] RSP: 002b:00007fd726182a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1118.638276] RAX: ffffffffffffffda RBX: 00007fd726182b40 RCX: 000000000045c4aa [ 1118.645566] RDX: 00007fd726182ae0 RSI: 0000000020000080 RDI: 00007fd726182b00 [ 1118.652853] RBP: 0000000000000000 R08: 00007fd726182b40 R09: 00007fd726182ae0 [ 1118.660473] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 [ 1118.667978] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 06:15:08 executing program 1 (fault-call:3 fault-nth:50): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) [ 1118.837139] FAULT_INJECTION: forcing a failure. [ 1118.837139] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1118.849200] CPU: 1 PID: 5440 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1118.856267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1118.865799] Call Trace: [ 1118.868399] dump_stack+0x138/0x197 [ 1118.872042] should_fail.cold+0x10f/0x159 [ 1118.876213] __alloc_pages_nodemask+0x1d6/0x7a0 [ 1118.880909] ? fs_reclaim_acquire+0x20/0x20 [ 1118.885248] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1118.890425] cache_grow_begin+0x80/0x400 [ 1118.894508] kmem_cache_alloc_trace+0x6b2/0x790 [ 1118.899200] ? kasan_check_write+0x14/0x20 [ 1118.903478] copy_mount_options+0x5c/0x2f0 [ 1118.907727] SyS_mount+0x87/0x120 [ 1118.911198] ? copy_mnt_ns+0x8c0/0x8c0 [ 1118.915359] do_syscall_64+0x1e8/0x640 [ 1118.919277] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1118.924257] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1118.929454] RIP: 0033:0x45c4aa 06:15:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef6"], 0xb) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x400) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_netrom_SIOCDELRT(r3, 0x890c, &(0x7f0000000140)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0='bpq0\x00', 0x2, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f0000000080)=0x3) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r4, r4, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) [ 1118.932648] RSP: 002b:00007fd726182a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1118.940458] RAX: ffffffffffffffda RBX: 00007fd726182b40 RCX: 000000000045c4aa [ 1118.947745] RDX: 00007fd726182ae0 RSI: 0000000020000080 RDI: 00007fd726182b00 [ 1118.955314] RBP: 0000000000000000 R08: 00007fd726182b40 R09: 00007fd726182ae0 [ 1118.962706] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 [ 1118.969995] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 06:15:08 executing program 5: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0xc400000000, 0x5, 0x4, &(0x7f0000ffc000/0x2000)=nil, 0x2}) syz_open_dev$radio(0x0, 0x1, 0x2) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) 06:15:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB=':!'], 0x2) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) r1 = accept(0xffffffffffffffff, &(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, &(0x7f00000000c0)=0x80) sendfile(r1, r0, 0x0, 0x4954) [ 1119.207460] REISERFS warning (device loop1): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. 06:15:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB=':)'], 0x2) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) 06:15:09 executing program 1 (fault-call:3 fault-nth:51): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) 06:15:09 executing program 3: rt_sigaction(0x0, &(0x7f0000000180)={0x0, {0x2}, 0x0, 0x0}, 0x0, 0x236, 0x0) setxattr$security_smack_entry(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='security.SMACK64IPOUT\x00', &(0x7f0000000340)='/dev/rfkill\x00', 0xc, 0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0xe42, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000240), &(0x7f0000000280)=0x4) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000080)=ANY=[@ANYRESDEC=r1], 0x14) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000140)=0x4) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000380)={0x0, 0x80000, r3}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000003c0)={0x0, 0x80000}) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r5, r5, &(0x7f0000000000), 0x8080fffffffe) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000040)={r4, 0x80000, r1}) r7 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r7) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r7, 0x84, 0x20, &(0x7f0000000400), &(0x7f0000000440)=0x4) r8 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r8, r8, &(0x7f0000000000), 0x8080fffffffe) ioctl$IOC_PR_PREEMPT_ABORT(r8, 0x401870cc, &(0x7f0000000480)={0x2800000000000, 0x1, 0xffffffff, 0x1000}) readv(r6, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x1) [ 1119.392878] FAULT_INJECTION: forcing a failure. [ 1119.392878] name failslab, interval 1, probability 0, space 0, times 0 [ 1119.439449] CPU: 0 PID: 5476 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1119.446598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1119.456519] Call Trace: [ 1119.459247] dump_stack+0x138/0x197 [ 1119.462907] should_fail.cold+0x10f/0x159 [ 1119.467108] should_failslab+0xdb/0x130 [ 1119.471111] kmem_cache_alloc+0x2d7/0x780 [ 1119.475391] ? lock_downgrade+0x740/0x740 [ 1119.479664] alloc_vfsmnt+0x28/0x7d0 [ 1119.483507] vfs_kern_mount.part.0+0x2a/0x3d0 [ 1119.488114] do_mount+0x417/0x27d0 [ 1119.491676] ? copy_mount_options+0x5c/0x2f0 [ 1119.496102] ? rcu_read_lock_sched_held+0x110/0x130 [ 1119.501262] ? copy_mount_string+0x40/0x40 [ 1119.505541] ? copy_mount_options+0x1fe/0x2f0 [ 1119.510061] SyS_mount+0xab/0x120 [ 1119.513523] ? copy_mnt_ns+0x8c0/0x8c0 [ 1119.517566] do_syscall_64+0x1e8/0x640 [ 1119.521591] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1119.526466] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1119.531819] RIP: 0033:0x45c4aa 06:15:09 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) timer_create(0x4, &(0x7f0000000000)={0x0, 0x0, 0x5, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) timer_gettime(r2, &(0x7f00000002c0)) timer_delete(r2) [ 1119.535028] RSP: 002b:00007fd726182a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1119.542749] RAX: ffffffffffffffda RBX: 00007fd726182b40 RCX: 000000000045c4aa [ 1119.550240] RDX: 00007fd726182ae0 RSI: 0000000020000080 RDI: 00007fd726182b00 [ 1119.557729] RBP: 0000000000000000 R08: 00007fd726182b40 R09: 00007fd726182ae0 [ 1119.565018] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 [ 1119.572304] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 06:15:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x6400, 0x0) pipe2$9p(&(0x7f0000000100), 0x80000) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB=':!'], 0x2) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x2, 0x5) sendfile(r0, r0, 0x0, 0x8080fffffffe) 06:15:09 executing program 1 (fault-call:3 fault-nth:52): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) [ 1119.792789] FAULT_INJECTION: forcing a failure. [ 1119.792789] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1119.830904] CPU: 1 PID: 5495 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1119.837879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1119.847381] Call Trace: [ 1119.849998] dump_stack+0x138/0x197 [ 1119.853647] should_fail.cold+0x10f/0x159 [ 1119.857809] ? __might_sleep+0x93/0xb0 [ 1119.861919] __alloc_pages_nodemask+0x1d6/0x7a0 [ 1119.861936] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1119.861961] alloc_pages_current+0xec/0x1e0 [ 1119.861975] __get_free_pages+0xf/0x40 [ 1119.861985] get_zeroed_page+0x11/0x20 [ 1119.861994] mount_fs+0x1cc/0x2a1 [ 1119.862009] vfs_kern_mount.part.0+0x5e/0x3d0 06:15:09 executing program 5: syz_open_dev$radio(0x0, 0x1, 0x2) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00b5fac3a2b13d776785279da6607216fd2605e9dd170406999fb8505d8af344bfec8594e03e00e1ec00c45724b7024b85f18147eec638c263d0992ea9945d0ec3f39a403b05266d830e27e101a0c1dee1296a"], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 1119.862023] do_mount+0x417/0x27d0 [ 1119.862032] ? copy_mount_options+0x5c/0x2f0 [ 1119.862044] ? rcu_read_lock_sched_held+0x110/0x130 [ 1119.862058] ? copy_mount_string+0x40/0x40 [ 1119.862074] ? copy_mount_options+0x1fe/0x2f0 [ 1119.862087] SyS_mount+0xab/0x120 [ 1119.862097] ? copy_mnt_ns+0x8c0/0x8c0 [ 1119.883885] do_syscall_64+0x1e8/0x640 [ 1119.883897] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1119.883915] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1119.883923] RIP: 0033:0x45c4aa [ 1119.883928] RSP: 002b:00007fd726182a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1119.883939] RAX: ffffffffffffffda RBX: 00007fd726182b40 RCX: 000000000045c4aa [ 1119.883946] RDX: 00007fd726182ae0 RSI: 0000000020000080 RDI: 00007fd726182b00 [ 1119.883952] RBP: 0000000000000000 R08: 00007fd726182b40 R09: 00007fd726182ae0 [ 1119.883958] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 [ 1119.883964] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 06:15:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000000040)={@null, @default, 0x2, 0x64}) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef6"], 0xb) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r3, r3, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) 06:15:09 executing program 1 (fault-call:3 fault-nth:53): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) 06:15:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB=':!'], 0x2) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x78) sendfile(r0, r0, 0x0, 0x8080fffffffe) [ 1120.195419] FAULT_INJECTION: forcing a failure. [ 1120.195419] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1120.226321] CPU: 1 PID: 5517 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1120.233436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1120.242915] Call Trace: [ 1120.245524] dump_stack+0x138/0x197 [ 1120.249179] should_fail.cold+0x10f/0x159 [ 1120.253342] ? __might_sleep+0x93/0xb0 [ 1120.257247] __alloc_pages_nodemask+0x1d6/0x7a0 [ 1120.262049] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1120.267109] alloc_pages_current+0xec/0x1e0 [ 1120.271460] __get_free_pages+0xf/0x40 [ 1120.275376] get_zeroed_page+0x11/0x20 [ 1120.279270] mount_fs+0x1cc/0x2a1 [ 1120.282741] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1120.287371] do_mount+0x417/0x27d0 [ 1120.290927] ? copy_mount_options+0x5c/0x2f0 [ 1120.295495] ? rcu_read_lock_sched_held+0x110/0x130 [ 1120.300789] ? copy_mount_string+0x40/0x40 [ 1120.305042] ? copy_mount_options+0x1fe/0x2f0 [ 1120.309557] SyS_mount+0xab/0x120 [ 1120.313166] ? copy_mnt_ns+0x8c0/0x8c0 [ 1120.317129] do_syscall_64+0x1e8/0x640 [ 1120.321040] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1120.325901] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1120.331097] RIP: 0033:0x45c4aa [ 1120.334440] RSP: 002b:00007fd726182a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 06:15:10 executing program 3: r0 = syz_open_dev$vcsa(0xfffffffffffffffe, 0x305, 0x4000) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @empty}, &(0x7f0000000080)=0xc) rt_sigaction(0x0, &(0x7f0000000180)={0x0, {0x2}, 0x0, 0x0}, 0x0, 0x236, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0xe42, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x2}], 0x2000000000000009) [ 1120.342176] RAX: ffffffffffffffda RBX: 00007fd726182b40 RCX: 000000000045c4aa [ 1120.349460] RDX: 00007fd726182ae0 RSI: 0000000020000080 RDI: 00007fd726182b00 [ 1120.356832] RBP: 0000000000000000 R08: 00007fd726182b40 R09: 00007fd726182ae0 [ 1120.364268] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 [ 1120.371536] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 06:15:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) setsockopt(r0, 0x3b, 0x7, &(0x7f0000000040)="1c69df8bfb5f86a56bfd7a152ff86afc2e184e60a2afd8b238d0ffac5865068a88c50c8470f5dee2db5136bea0f84397fa46281aa105adefc20dd516d4d712b1633c6f49d016deeace2118a3c3bf4dec2f12af4b9a6b8630b03f7c0a137d3356dbe8523e23a941e7f15b9b8a754bedf1fd35e02aa99225e01c19e767e3889a90b46e3ccc8b9dcec66e876cf45557279a1234fc70d4d2b79a28590ca3cb375bd166d46f9fe30a", 0xa6) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB=':!'], 0x2) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) 06:15:10 executing program 3: rt_sigaction(0x0, &(0x7f0000000180)={0x0, {0x2}, 0x0, 0x0}, 0x0, 0x236, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0xe42, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040)) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x2}], 0x2000000000000009) 06:15:10 executing program 1 (fault-call:3 fault-nth:54): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) 06:15:10 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) write$selinux_attr(r2, &(0x7f0000000080)='system_u:object_r:policy_config_t:s0\x00', 0x25) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 1120.620958] FAULT_INJECTION: forcing a failure. [ 1120.620958] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1120.633055] CPU: 1 PID: 5546 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1120.639999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1120.649475] Call Trace: [ 1120.652236] dump_stack+0x138/0x197 [ 1120.655888] should_fail.cold+0x10f/0x159 [ 1120.660192] __alloc_pages_nodemask+0x1d6/0x7a0 [ 1120.664931] ? fs_reclaim_acquire+0x20/0x20 [ 1120.669266] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1120.674298] cache_grow_begin+0x80/0x400 [ 1120.678472] kmem_cache_alloc+0x6a6/0x780 [ 1120.682674] getname_kernel+0x53/0x350 [ 1120.686568] kern_path+0x20/0x40 [ 1120.689936] lookup_bdev.part.0+0x63/0x160 [ 1120.694164] ? blkdev_open+0x260/0x260 [ 1120.698047] ? __free_pages+0x54/0x90 [ 1120.702026] blkdev_get_by_path+0x76/0xf0 [ 1120.706334] mount_bdev+0x50/0x370 [ 1120.709882] ? finish_unfinished+0x1010/0x1010 [ 1120.714477] get_super_block+0x35/0x40 [ 1120.718514] mount_fs+0x97/0x2a1 [ 1120.721897] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1120.726501] do_mount+0x417/0x27d0 [ 1120.730148] ? copy_mount_options+0x5c/0x2f0 [ 1120.734575] ? rcu_read_lock_sched_held+0x110/0x130 [ 1120.739605] ? copy_mount_string+0x40/0x40 [ 1120.744014] ? copy_mount_options+0x1fe/0x2f0 [ 1120.748801] SyS_mount+0xab/0x120 [ 1120.752260] ? copy_mnt_ns+0x8c0/0x8c0 [ 1120.756159] do_syscall_64+0x1e8/0x640 [ 1120.760293] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1120.765149] entry_SYSCALL_64_after_hwframe+0x42/0xb7 06:15:10 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14"], 0xf) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 06:15:10 executing program 3: rt_sigaction(0x0, &(0x7f0000000180)={0x0, {0x2}, 0x0, 0x0}, 0x0, 0x236, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0xe42, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x2}], 0x2000000000000009) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100150, r1, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x400, 0x0) dup2(r0, r0) [ 1120.770427] RIP: 0033:0x45c4aa [ 1120.773631] RSP: 002b:00007fd726182a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1120.781356] RAX: ffffffffffffffda RBX: 00007fd726182b40 RCX: 000000000045c4aa [ 1120.788637] RDX: 00007fd726182ae0 RSI: 0000000020000080 RDI: 00007fd726182b00 [ 1120.795920] RBP: 0000000000000000 R08: 00007fd726182b40 R09: 00007fd726182ae0 [ 1120.803222] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 [ 1120.810489] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 06:15:10 executing program 4: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000200)={r0, r3, 0x8000, 0xd9, &(0x7f0000000040)="6945f4a79f68bf2b12035756af89a46734b07b7033aa4d2089a7bae9c468759bcbd7707aa6d4e389b21815084a1cc7b5f3ae1ae6612c309d58b7818ca52f5f2a0a7e1b4d055444cdfa51a1d879783960afbb2a4577ea0f8e94f8a18fa1a98ed84db51605a4b1ae161bcfa6b3f5fa1497f6d25e99f0cf96249210ad99521af0a89c83dadfa41e72cb8f6063a5ebddc6afb07b298ef71687f4ca7dd130f8ecb2c2b5fd21efefdfd2abf251bb0d6721dc7a9bb79fc07073c9886361fd4c034b1165e34e9c9a1c5253945aad88ee876dba502841e27a9fa3926ab3", 0x7f, 0xa, 0x7ff, 0x7fff, 0x8, 0x0, 0x9, 'syz0\x00'}) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB=':!'], 0x2) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) writev(r4, &(0x7f0000000500)=[{&(0x7f0000000180)="949f5d22be153e5655f268530d4c5c7790bbc38bc6b34f7e8017db61d56da7fd02fb", 0x22}, {&(0x7f0000000340)="82fddff911dc2c6a418248dd65d5f74b741262ca7c9a1ae079eaef770da2fbb3f754e73e21a04ffef368d8702c8491dc1494fbba5212dc80df64c16b8d94b8fbf3f8a27daf2a651084846c38b4bd3d84e83d1a934c739d7e5e97b573db58b98286a78da5cc10bad45559d47b48d41edc1fb80aef344921ca1306c24ebeae92b9405537ecefd119575ea6e310407f1d10e0ffd0ecc522462ea993e3d41bb7d495e6d59c6cdbe5a74a6ed46f8e1cc247c978fa446c418456e98be275d07c753dfdeb196d134af5a96e77c39ff223284f24de4623b69a270097e42a43f5e0", 0xdd}, {&(0x7f00000002c0)="aa11bbf8df1b97adad483b95a11102114f0c7ddd9eb8", 0x16}, {&(0x7f0000000440)="cc825b43f134da24a0dfecd4907467761786ad81e68e39d1be9f17eccf32d7ffa70fed46e4fd3b2eea22f552ca387566cfa803dc1a8456adbc8068d216114f7e329a21d36e4e6c3d64bd1f2033acd6413fb4ea6a9b3773a6c4c3499efa348a5851b7c7cc11c7b7ae9484daa848cf2168b10663088cf68b960f2346bc3de3e18c8a1f172064df005ff9cc172acdf0853d90ae11dfd7f1bb2272b938b18236b22c3e4096cf", 0xa4}], 0x4) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x4b0202, 0x0) 06:15:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000240)="811382f202fb603f52228a9e6241f340c1e98dc59e52bea77fabd53daea65e8fe965eb25d6c3c6cdac91ecd3ea778f99c68d1a575d483075f843c292bcaf69a212fedc47d3126bb02ba806290da580191054c2cbe8b56c94743b9bd36ed8fe418e8fcb7f6fd99d9f5da4d817cc2a12a59f3b5ece32f02d4de3fd09bd644e9d98b90a03469e51942d58fad86aae5e6379cfec554ee727d714feac40ae9b2e7dded339ead37fcc27b546e49bb809be", 0xae, 0xfffffffffffffff8) keyctl$get_security(0x11, r1, &(0x7f0000000340)=""/254, 0xfe) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000001000000dbdef6"], 0xb) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$VIDIOC_ENUMAUDOUT(r3, 0xc0345642, &(0x7f00000000c0)={0xfffffffb, "152ecb3a3d3bf1b2407bb363deb91e5bd10574ed4a1349949839ea0cc6a35230", 0x2, 0x1}) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r4, r4, 0x0, 0x8080fffffffe) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r5, r5, &(0x7f0000000000), 0x8080fffffffe) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r6, r6, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000440)={{0x2, 0x4e23, @empty}, {0x6, @local}, 0x0, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x26}}, 'bridge_slave_1\x00'}) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000140)={0xffffffff, 0x40}) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) [ 1120.865414] REISERFS warning (device loop1): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. 06:15:10 executing program 3: rt_sigaction(0x0, &(0x7f0000000180)={0x0, {0x2}, 0x0, 0x0}, 0x0, 0x236, 0x0) socket$caif_stream(0x25, 0x1, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0xe42, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x2}], 0x2000000000000009) 06:15:10 executing program 1 (fault-call:3 fault-nth:55): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) 06:15:10 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) open(0x0, 0x141042, 0x0) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000080)={0x1, [0x0]}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 06:15:10 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x18}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xe, r0, 0x0) r1 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="d076a5e40e2ae6bc364b1162eacba0e8090d940ac2800715619f61c0863f9bdc8859a6b62376c5ffe8a14371ee78b2ac571270242ec6583f3377610c514b1d03217aec6376175b5bcda804a7e746698a8141ed650a5204deee426224e9d63c3ecf61efd0695908573c522f3abef3a4ed97b0b873dbb70be95350480caf630d6424a29e2074056bf19a98d49d7bbf0c2e45464961761d4fd0d9d431b196cf8ce0c7cfe44ae67d6112e554c478fa73ac6e1e04c359fb6c524a407aa74b4096b2b78936f055"], 0xb) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r3, r3, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r1, 0x80044946, 0x0) [ 1121.125320] FAULT_INJECTION: forcing a failure. [ 1121.125320] name failslab, interval 1, probability 0, space 0, times 0 [ 1121.144723] CPU: 0 PID: 5584 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1121.152316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1121.161991] Call Trace: [ 1121.164592] dump_stack+0x138/0x197 [ 1121.168237] should_fail.cold+0x10f/0x159 [ 1121.172532] should_failslab+0xdb/0x130 [ 1121.176515] kmem_cache_alloc+0x2d7/0x780 [ 1121.180674] getname_kernel+0x53/0x350 [ 1121.184591] kern_path+0x20/0x40 [ 1121.187958] lookup_bdev.part.0+0x63/0x160 [ 1121.192185] ? blkdev_open+0x260/0x260 [ 1121.196070] ? __free_pages+0x54/0x90 [ 1121.199996] blkdev_get_by_path+0x76/0xf0 [ 1121.204158] mount_bdev+0x50/0x370 [ 1121.207702] ? finish_unfinished+0x1010/0x1010 [ 1121.212431] get_super_block+0x35/0x40 [ 1121.216473] mount_fs+0x97/0x2a1 [ 1121.219850] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1121.224356] do_mount+0x417/0x27d0 [ 1121.228036] ? copy_mount_options+0x5c/0x2f0 [ 1121.232440] ? rcu_read_lock_sched_held+0x110/0x130 [ 1121.237507] ? copy_mount_string+0x40/0x40 [ 1121.241751] ? copy_mount_options+0x1fe/0x2f0 [ 1121.246265] SyS_mount+0xab/0x120 [ 1121.249980] ? copy_mnt_ns+0x8c0/0x8c0 [ 1121.254059] do_syscall_64+0x1e8/0x640 [ 1121.258107] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1121.262963] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1121.268244] RIP: 0033:0x45c4aa [ 1121.271424] RSP: 002b:00007fd726182a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1121.279296] RAX: ffffffffffffffda RBX: 00007fd726182b40 RCX: 000000000045c4aa [ 1121.286656] RDX: 00007fd726182ae0 RSI: 0000000020000080 RDI: 00007fd726182b00 [ 1121.294084] RBP: 0000000000000000 R08: 00007fd726182b40 R09: 00007fd726182ae0 [ 1121.301355] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 [ 1121.308690] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 06:15:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef6"], 0xb) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) 06:15:11 executing program 3: rt_sigaction(0x0, &(0x7f0000000180)={0x0, {0x2}, 0x0, 0x0}, 0x0, 0x236, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0xe42, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x1) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x5, 0x0, 0x7, 0x7f3}]}, 0x10) 06:15:11 executing program 1 (fault-call:3 fault-nth:56): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) [ 1121.483802] FAULT_INJECTION: forcing a failure. [ 1121.483802] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1121.495890] CPU: 0 PID: 5608 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1121.495898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1121.495903] Call Trace: [ 1121.495919] dump_stack+0x138/0x197 [ 1121.495937] should_fail.cold+0x10f/0x159 [ 1121.522832] __alloc_pages_nodemask+0x1d6/0x7a0 [ 1121.527521] ? fs_reclaim_acquire+0x20/0x20 06:15:11 executing program 3: rt_sigaction(0x0, &(0x7f0000000180)={0x0, {0x2}, 0x0, 0x0}, 0x0, 0x236, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='\x00\x00\x00\x00\x00j\x8d\xa1B[\xc4\xaf', 0xff1b3a56f38f64e5, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x2}], 0x2000000000000009) 06:15:11 executing program 3: rt_sigaction(0x0, &(0x7f0000000180)={0x0, {0x2}, 0x0, 0x0}, 0x0, 0x236, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0xe42, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1}], 0x1) [ 1121.531860] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1121.536907] cache_grow_begin+0x80/0x400 [ 1121.536924] kmem_cache_alloc+0x6a6/0x780 [ 1121.536944] getname_kernel+0x53/0x350 [ 1121.536957] kern_path+0x20/0x40 [ 1121.536970] lookup_bdev.part.0+0x63/0x160 [ 1121.536980] ? blkdev_open+0x260/0x260 [ 1121.536992] ? __free_pages+0x54/0x90 [ 1121.537002] blkdev_get_by_path+0x76/0xf0 [ 1121.568515] mount_bdev+0x50/0x370 [ 1121.572069] ? finish_unfinished+0x1010/0x1010 [ 1121.576688] get_super_block+0x35/0x40 [ 1121.580922] mount_fs+0x97/0x2a1 [ 1121.584322] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1121.588830] do_mount+0x417/0x27d0 [ 1121.588843] ? copy_mount_options+0x5c/0x2f0 [ 1121.588856] ? rcu_read_lock_sched_held+0x110/0x130 [ 1121.588871] ? copy_mount_string+0x40/0x40 [ 1121.588888] ? copy_mount_options+0x1fe/0x2f0 [ 1121.588903] SyS_mount+0xab/0x120 [ 1121.588914] ? copy_mnt_ns+0x8c0/0x8c0 [ 1121.597066] do_syscall_64+0x1e8/0x640 [ 1121.597077] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1121.597097] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1121.597107] RIP: 0033:0x45c4aa [ 1121.597113] RSP: 002b:00007fd726182a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1121.597125] RAX: ffffffffffffffda RBX: 00007fd726182b40 RCX: 000000000045c4aa [ 1121.597132] RDX: 00007fd726182ae0 RSI: 0000000020000080 RDI: 00007fd726182b00 [ 1121.597138] RBP: 0000000000000000 R08: 00007fd726182b40 R09: 00007fd726182ae0 [ 1121.597145] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 [ 1121.597151] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 06:15:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="3a218211f663a7724bdef624f2032227ad953821c3e0f5e654d4faa19d"], 0xb) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) [ 1121.741936] REISERFS warning (device loop1): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. 06:15:11 executing program 3: rt_sigaction(0x0, &(0x7f0000000180)={0x0, {0x2}, 0x0, 0x0}, 0x0, 0x236, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000040)) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev+rfkill\x00', 0x624641, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) write$USERIO_CMD_REGISTER(r2, &(0x7f0000000080)={0x0, 0x9}, 0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x2}], 0x2000000000000009) 06:15:11 executing program 1 (fault-call:3 fault-nth:57): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) 06:15:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef6"], 0xb) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$BLKFRASET(r4, 0x1264, &(0x7f0000000080)=0x946c) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x684000) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) r6 = socket$nl_crypto(0x10, 0x3, 0x15) kcmp(r3, 0xffffffffffffffff, 0x0, r5, r6) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) 06:15:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x1ff, 0xda, 0x1, 0x4, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59d61fc6, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0xffffffffffffffff, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB=':!'], 0x2) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) sendfile(r2, r1, &(0x7f00000000c0)=0x400000000, 0x8080fffffffd) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x4e22, 0x65ec600b, @loopback, 0x2}, {0xa, 0x4e23, 0x7, @local, 0x400}, 0x7ff, [0x1, 0xe7, 0xeef, 0x80000000, 0x35, 0x401, 0x9, 0x5]}, 0x5c) sendfile(r0, r0, 0x0, 0x8080fffffffe) [ 1121.998845] FAULT_INJECTION: forcing a failure. [ 1121.998845] name failslab, interval 1, probability 0, space 0, times 0 [ 1122.011657] CPU: 1 PID: 5639 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1122.018608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1122.027977] Call Trace: [ 1122.030587] dump_stack+0x138/0x197 [ 1122.034232] should_fail.cold+0x10f/0x159 [ 1122.038385] should_failslab+0xdb/0x130 [ 1122.042378] kmem_cache_alloc_trace+0x2e9/0x790 06:15:11 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x86008001}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x100, 0x70bd25, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x4000) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) [ 1122.047057] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1122.052652] ? sget_userns+0xfe/0xc30 [ 1122.056467] ? rcu_read_lock_sched_held+0x110/0x130 [ 1122.061507] selinux_sb_alloc_security+0x46/0x220 [ 1122.066461] security_sb_alloc+0x6d/0xa0 [ 1122.070545] ? ns_test_super+0x50/0x50 [ 1122.074449] sget_userns+0x196/0xc30 [ 1122.078183] ? kill_litter_super+0xa0/0xa0 [ 1122.082427] ? kill_litter_super+0xa0/0xa0 [ 1122.082458] ? ns_test_super+0x50/0x50 [ 1122.082467] ? ns_test_super+0x50/0x50 [ 1122.082475] ? kill_litter_super+0xa0/0xa0 [ 1122.082483] sget+0xd6/0x120 [ 1122.082496] mount_bdev+0xd5/0x370 [ 1122.082506] ? finish_unfinished+0x1010/0x1010 [ 1122.082519] get_super_block+0x35/0x40 [ 1122.082529] mount_fs+0x97/0x2a1 [ 1122.082545] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1122.102235] do_mount+0x417/0x27d0 [ 1122.102247] ? copy_mount_options+0x5c/0x2f0 [ 1122.102259] ? rcu_read_lock_sched_held+0x110/0x130 [ 1122.102274] ? copy_mount_string+0x40/0x40 [ 1122.102292] ? copy_mount_options+0x1fe/0x2f0 [ 1122.102306] SyS_mount+0xab/0x120 [ 1122.102314] ? copy_mnt_ns+0x8c0/0x8c0 [ 1122.102327] do_syscall_64+0x1e8/0x640 [ 1122.102337] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1122.102354] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1122.102363] RIP: 0033:0x45c4aa [ 1122.102374] RSP: 002b:00007fd726182a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1122.102385] RAX: ffffffffffffffda RBX: 00007fd726182b40 RCX: 000000000045c4aa [ 1122.102391] RDX: 00007fd726182ae0 RSI: 0000000020000080 RDI: 00007fd726182b00 06:15:11 executing program 1 (fault-call:3 fault-nth:58): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) [ 1122.102398] RBP: 0000000000000000 R08: 00007fd726182b40 R09: 00007fd726182ae0 [ 1122.102403] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 [ 1122.102409] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 06:15:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f6cb191e30dd31"], 0xb) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) [ 1122.324426] FAULT_INJECTION: forcing a failure. [ 1122.324426] name failslab, interval 1, probability 0, space 0, times 0 [ 1122.368810] CPU: 1 PID: 5660 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1122.375956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1122.385722] Call Trace: [ 1122.388339] dump_stack+0x138/0x197 [ 1122.391983] should_fail.cold+0x10f/0x159 [ 1122.396292] should_failslab+0xdb/0x130 [ 1122.400436] kmem_cache_alloc_trace+0x2e9/0x790 [ 1122.405118] ? lock_downgrade+0x740/0x740 [ 1122.409280] ? ns_test_super+0x50/0x50 [ 1122.413292] sget_userns+0xfe/0xc30 [ 1122.416928] ? kill_litter_super+0xa0/0xa0 [ 1122.421193] ? kill_litter_super+0xa0/0xa0 [ 1122.426321] ? ns_test_super+0x50/0x50 [ 1122.430226] ? ns_test_super+0x50/0x50 [ 1122.434118] ? kill_litter_super+0xa0/0xa0 [ 1122.438618] sget+0xd6/0x120 [ 1122.441640] mount_bdev+0xd5/0x370 [ 1122.445186] ? finish_unfinished+0x1010/0x1010 [ 1122.449787] get_super_block+0x35/0x40 [ 1122.453824] mount_fs+0x97/0x2a1 [ 1122.457208] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1122.462215] do_mount+0x417/0x27d0 [ 1122.465855] ? copy_mount_options+0x5c/0x2f0 [ 1122.470363] ? rcu_read_lock_sched_held+0x110/0x130 [ 1122.475392] ? copy_mount_string+0x40/0x40 [ 1122.479842] ? copy_mount_options+0x1fe/0x2f0 [ 1122.484371] SyS_mount+0xab/0x120 [ 1122.487856] ? copy_mnt_ns+0x8c0/0x8c0 [ 1122.491754] do_syscall_64+0x1e8/0x640 [ 1122.495655] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1122.500542] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1122.505747] RIP: 0033:0x45c4aa [ 1122.508946] RSP: 002b:00007fd726182a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1122.516660] RAX: ffffffffffffffda RBX: 00007fd726182b40 RCX: 000000000045c4aa [ 1122.523939] RDX: 00007fd726182ae0 RSI: 0000000020000080 RDI: 00007fd726182b00 [ 1122.531209] RBP: 0000000000000000 R08: 00007fd726182b40 R09: 00007fd726182ae0 [ 1122.538483] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 [ 1122.545766] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 [ 1122.580763] audit: type=1804 audit(1571033712.262:391): pid=5621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir083209472/syzkaller.wmdOAo/1125/file0" dev="sda1" ino=16589 res=1 06:15:12 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14"], 0xf) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x145842, 0x4) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) 06:15:12 executing program 1 (fault-call:3 fault-nth:59): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) [ 1122.611941] audit: type=1804 audit(1571033712.292:392): pid=5668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir083209472/syzkaller.wmdOAo/1125/file0" dev="sda1" ino=16589 res=1 [ 1122.704346] FAULT_INJECTION: forcing a failure. [ 1122.704346] name failslab, interval 1, probability 0, space 0, times 0 [ 1122.726370] CPU: 0 PID: 5676 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1122.733350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1122.743014] Call Trace: [ 1122.745600] dump_stack+0x138/0x197 [ 1122.749246] should_fail.cold+0x10f/0x159 [ 1122.753583] should_failslab+0xdb/0x130 [ 1122.757683] kmem_cache_alloc_trace+0x2e9/0x790 [ 1122.762347] ? lock_downgrade+0x740/0x740 [ 1122.766496] ? ns_test_super+0x50/0x50 [ 1122.770372] sget_userns+0xfe/0xc30 [ 1122.773993] ? kill_litter_super+0xa0/0xa0 [ 1122.778227] ? kill_litter_super+0xa0/0xa0 [ 1122.782592] ? ns_test_super+0x50/0x50 [ 1122.786553] ? ns_test_super+0x50/0x50 [ 1122.790439] ? kill_litter_super+0xa0/0xa0 [ 1122.794680] sget+0xd6/0x120 [ 1122.797699] mount_bdev+0xd5/0x370 [ 1122.801227] ? finish_unfinished+0x1010/0x1010 [ 1122.805827] get_super_block+0x35/0x40 [ 1122.809714] mount_fs+0x97/0x2a1 [ 1122.813084] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1122.817566] do_mount+0x417/0x27d0 [ 1122.821139] ? retint_kernel+0x2d/0x2d [ 1122.825045] ? copy_mount_string+0x40/0x40 [ 1122.829277] ? copy_mount_options+0x195/0x2f0 [ 1122.833762] ? copy_mount_options+0x1fe/0x2f0 [ 1122.838253] SyS_mount+0xab/0x120 [ 1122.841692] ? copy_mnt_ns+0x8c0/0x8c0 [ 1122.845593] do_syscall_64+0x1e8/0x640 [ 1122.849489] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1122.854327] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1122.859505] RIP: 0033:0x45c4aa [ 1122.862679] RSP: 002b:00007fd726182a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1122.870378] RAX: ffffffffffffffda RBX: 00007fd726182b40 RCX: 000000000045c4aa [ 1122.877643] RDX: 00007fd726182ae0 RSI: 0000000020000080 RDI: 00007fd726182b00 [ 1122.884922] RBP: 0000000000000000 R08: 00007fd726182b40 R09: 00007fd726182ae0 [ 1122.892192] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 06:15:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a75c4bdef6"], 0xb) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) [ 1122.899445] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 06:15:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_buf(r1, 0x0, 0x2f, &(0x7f0000000680)=""/164, &(0x7f0000000100)=0xa4) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB=':!'], 0x2) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) readv(r3, &(0x7f0000000600)=[{&(0x7f0000000200)=""/220, 0xdc}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000000340)=""/57, 0x39}, {&(0x7f0000000380)=""/124, 0x7c}, {&(0x7f0000000400)=""/67, 0x43}, {&(0x7f0000000480)=""/133, 0x85}, {&(0x7f0000000540)=""/122, 0x7a}, {&(0x7f00000005c0)=""/47, 0x2f}], 0x8) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) 06:15:12 executing program 3: rt_sigaction(0x26, &(0x7f0000000180)={0x0, {0x2}, 0x0, 0x0}, 0x0, 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0xe42, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x2}], 0x2000000000000009) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) 06:15:12 executing program 1 (fault-call:3 fault-nth:60): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) [ 1123.114552] FAULT_INJECTION: forcing a failure. [ 1123.114552] name failslab, interval 1, probability 0, space 0, times 0 [ 1123.131705] CPU: 0 PID: 5701 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1123.138667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1123.148029] Call Trace: [ 1123.150628] dump_stack+0x138/0x197 [ 1123.154264] should_fail.cold+0x10f/0x159 [ 1123.158425] should_failslab+0xdb/0x130 06:15:12 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x11) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r6, r6, &(0x7f0000000000), 0x8080fffffffe) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r7, r7, &(0x7f0000000000), 0x8080fffffffe) r8 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r8, r8, &(0x7f0000000000), 0x8080fffffffe) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r10, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r10, r10, &(0x7f0000000000), 0x8080fffffffe) r11 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r11) r12 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r12) r13 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r13, &(0x7f0000000300)=ANY=[@ANYBLOB="3a219011f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r13, r13, &(0x7f0000000000), 0x8080fffffffe) r14 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r14) write$P9_RREADLINK(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="7b9a2bfd6760dd1d59d089d5e5a7660809b475ce2bf67ea96c4a67fe7bbbd95e9a2a25a3c65c4b87b9a5ecb30c61e2b4e3cf26750a173d582f79f6d51aaa18057a9731e44f3ff33a1df8fe477ef919d5fba53b2d4fc79119a64089fbe5a4d463e4c6cc865022f4df1022793105bcd20e31a4b8ab441987216919fab719606f5878099ea4662317dc74f1e87582a14a9c16ff83cd8fa1e5cf2c0bdc88e0c4a81434b133150ae3d2208a1871727c", @ANYRES32=0x0, @ANYPTR=&(0x7f0000000340)=ANY=[@ANYRESHEX=r2, @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYPTR64, @ANYRES64=0x0, @ANYRESDEC=r3, @ANYRESDEC, @ANYRES64=r4], @ANYRES16=r5, @ANYBLOB="dbd55e0e616464b9a52ce605155e9f25e0cf6f722544a4db55527a9ad090702ec25784e834404f7c48e38c641cc87bd613b96d49304145e2f96556536c97cc39a1d2336b94471e574f8505d21167e71852884728d9ea7c4ea0ad39c4f63b8ececb143fc16f5585ca968ad0c4df0680aeaf82a40f7e4ce291b5507889a48d88d80f31bf91de83da33851b1e87a2d0fd4d217d8ce925f6917ea73f455d9762908881aff6fc75e195a900171b3d37eaf6bcf9a9c776af2c376cda830fa6", @ANYRES64], @ANYRESHEX, @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRESOCT=r6, @ANYRESOCT, @ANYRES32=r7, @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYRES32=r8, @ANYRES32=0x0], @ANYRES32=r9], @ANYRESHEX=r10, @ANYRESOCT, @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRESHEX=r11, @ANYRES64=0x0, @ANYRES64=r9, @ANYRESDEC=0x0, @ANYRESHEX=r12, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="811f7039996aa09ddf9e7798f1d2f0e0fcb6f76d1322e4298b74dc760a63ec592f3a2722588d3d6660b01fa9541ce4bcf22f295d62aa18b28ef577f5efd6b7a56e4bfdf3306ddbf560f6edcf8370c4d26f7ecd835290273184436a5dafdb3cd5289896ec4f78519491e057ed2cd9c18ed4523fe70c8288e628842d3b501c58411a869d392a00ecfd3588c8172460a62dd6327b5311b08c29d644cbd4477133c03b292b748e7ad2d6328336746eb70fcd6a520a401ae00e65e556951c8c73fae433d71f3c0ebfbff0b308", @ANYRES64=r8, @ANYRES16=r4], @ANYBLOB="2176a4c9ef09312786c7a7a2f37ba85b187d963741a26c95dee1c0b3ab1f", @ANYRESDEC=r13], @ANYRESDEC=r14, @ANYRESDEC=r9], 0x12c) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r15 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r15) setsockopt$inet_sctp6_SCTP_EVENTS(r15, 0x84, 0xb, &(0x7f0000000040)={0xf7, 0x1, 0x8, 0x4, 0x1, 0xff, 0x53, 0x7f, 0x6, 0x1, 0x2}, 0xb) r16 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r16, r16, &(0x7f0000000000), 0x8080fffffffe) [ 1123.162408] __kmalloc+0x2f0/0x7a0 [ 1123.165956] ? __list_lru_init+0x6b/0x660 [ 1123.170120] __list_lru_init+0x6b/0x660 [ 1123.174099] sget_userns+0x500/0xc30 [ 1123.177814] ? kill_litter_super+0xa0/0xa0 [ 1123.182056] ? ns_test_super+0x50/0x50 [ 1123.185940] ? ns_test_super+0x50/0x50 [ 1123.189812] ? kill_litter_super+0xa0/0xa0 [ 1123.194039] sget+0xd6/0x120 [ 1123.197102] mount_bdev+0xd5/0x370 [ 1123.200628] ? finish_unfinished+0x1010/0x1010 [ 1123.205195] get_super_block+0x35/0x40 [ 1123.209069] mount_fs+0x97/0x2a1 [ 1123.212525] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1123.217019] do_mount+0x417/0x27d0 [ 1123.220679] ? copy_mount_string+0x40/0x40 [ 1123.224898] ? copy_mount_options+0x151/0x2f0 [ 1123.229380] ? __sanitizer_cov_trace_pc+0x4e/0x60 [ 1123.234232] ? copy_mount_options+0x1fe/0x2f0 [ 1123.238852] SyS_mount+0xab/0x120 [ 1123.242310] ? copy_mnt_ns+0x8c0/0x8c0 [ 1123.246187] do_syscall_64+0x1e8/0x640 [ 1123.250067] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1123.254977] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1123.260163] RIP: 0033:0x45c4aa 06:15:13 executing program 3: rt_sigaction(0x0, &(0x7f0000000180)={0x0, {0x2}, 0x0, 0x0}, 0x0, 0x236, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0xe42, 0x0) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/134) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x2}], 0x2000000000000009) [ 1123.263337] RSP: 002b:00007fd726182a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1123.271041] RAX: ffffffffffffffda RBX: 00007fd726182b40 RCX: 000000000045c4aa [ 1123.278304] RDX: 00007fd726182ae0 RSI: 0000000020000080 RDI: 00007fd726182b00 [ 1123.285558] RBP: 0000000000000000 R08: 00007fd726182b40 R09: 00007fd726182ae0 [ 1123.292816] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 [ 1123.300099] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 06:15:13 executing program 3: rt_sigaction(0x0, &(0x7f0000000180)={0x0, {0x2}, 0x0, 0x0}, 0x0, 0x236, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0xe42, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x2}], 0x2000000000000009) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000140)={'icmp6\x00'}, &(0x7f0000000200)=0x1e) perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0x80, 0x80, 0x3f, 0x20, 0x0, 0x6bb3, 0x10, 0x9, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x10000, 0x400}, 0x80, 0x3c, 0x3, 0x18, 0xffffffffffffffff, 0x4, 0x1}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x1) r2 = shmget(0x3, 0x3000, 0x7800046d, &(0x7f0000001000/0x3000)=nil) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000040)=""/181) 06:15:13 executing program 1 (fault-call:3 fault-nth:61): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) 06:15:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) accept4(0xffffffffffffffff, &(0x7f0000000040)=@caif=@dgm, &(0x7f00000000c0)=0x80, 0x0) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef6"], 0xb) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) dup2(r2, r3) [ 1123.508830] FAULT_INJECTION: forcing a failure. [ 1123.508830] name failslab, interval 1, probability 0, space 0, times 0 [ 1123.526531] CPU: 1 PID: 5725 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1123.533499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1123.542854] Call Trace: [ 1123.542888] dump_stack+0x138/0x197 [ 1123.542907] should_fail.cold+0x10f/0x159 [ 1123.542923] should_failslab+0xdb/0x130 06:15:13 executing program 5 (fault-call:3 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB=':'], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) [ 1123.542935] kmem_cache_alloc_trace+0x2e9/0x790 [ 1123.542948] ? __lockdep_init_map+0x10c/0x570 [ 1123.542964] ? cancel_delayed_work_sync+0x20/0x20 [ 1123.542974] __kthread_create_on_node+0xe3/0x3e0 [ 1123.542986] ? kthread_park+0x140/0x140 [ 1123.542994] ? save_trace+0x290/0x290 [ 1123.543018] ? cancel_delayed_work_sync+0x20/0x20 [ 1123.543029] kthread_create_on_node+0xa8/0xd0 [ 1123.543039] ? __kthread_create_on_node+0x3e0/0x3e0 [ 1123.543049] ? kmem_cache_alloc_node_trace+0x379/0x770 [ 1123.543059] ? _find_next_bit+0xee/0x120 [ 1123.543079] __alloc_workqueue_key+0xac3/0xec0 [ 1123.543098] ? workqueue_sysfs_register+0x3c0/0x3c0 [ 1123.543114] ? lockdep_init_map+0x9/0x10 [ 1123.543123] ? debug_mutex_init+0x2d/0x5a [ 1123.543140] reiserfs_fill_super+0x3d9/0x2b20 [ 1123.543152] ? vsnprintf+0x290/0x1560 [ 1123.543167] ? finish_unfinished+0x1010/0x1010 [ 1123.543185] ? snprintf+0xa5/0xd0 [ 1123.543201] ? set_blocksize+0x270/0x300 [ 1123.543211] ? ns_test_super+0x50/0x50 [ 1123.543227] mount_bdev+0x2be/0x370 [ 1123.543235] ? finish_unfinished+0x1010/0x1010 [ 1123.543248] get_super_block+0x35/0x40 [ 1123.543258] mount_fs+0x97/0x2a1 [ 1123.543282] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1123.543299] do_mount+0x417/0x27d0 [ 1123.566758] ? copy_mount_options+0x5c/0x2f0 [ 1123.566771] ? rcu_read_lock_sched_held+0x110/0x130 [ 1123.566786] ? copy_mount_string+0x40/0x40 [ 1123.566803] ? copy_mount_options+0x1fe/0x2f0 [ 1123.566816] SyS_mount+0xab/0x120 [ 1123.566825] ? copy_mnt_ns+0x8c0/0x8c0 [ 1123.566839] do_syscall_64+0x1e8/0x640 [ 1123.566849] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1123.566867] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1123.566875] RIP: 0033:0x45c4aa [ 1123.566881] RSP: 002b:00007fd726182a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1123.566892] RAX: ffffffffffffffda RBX: 00007fd726182b40 RCX: 000000000045c4aa [ 1123.566899] RDX: 00007fd726182ae0 RSI: 0000000020000080 RDI: 00007fd726182b00 [ 1123.566905] RBP: 0000000000000000 R08: 00007fd726182b40 R09: 00007fd726182ae0 [ 1123.566911] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 [ 1123.566916] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 [ 1123.575123] REISERFS warning (device loop1): reiserfs_fill_super: Cannot allocate commit workqueue [ 1123.654336] FAULT_INJECTION: forcing a failure. [ 1123.654336] name failslab, interval 1, probability 0, space 0, times 0 [ 1123.786897] CPU: 1 PID: 5732 Comm: syz-executor.5 Not tainted 4.14.149 #0 [ 1123.793874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1123.803209] Call Trace: [ 1123.805782] dump_stack+0x138/0x197 [ 1123.809395] should_fail.cold+0x10f/0x159 [ 1123.813527] should_failslab+0xdb/0x130 [ 1123.817485] kmem_cache_alloc_trace+0x2e9/0x790 [ 1123.822138] alloc_pipe_info+0xb0/0x380 [ 1123.826093] splice_direct_to_actor+0x5d2/0x7b0 [ 1123.830761] ? avc_policy_seqno+0x9/0x20 [ 1123.834818] ? selinux_file_permission+0x85/0x480 [ 1123.839639] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1123.844462] ? security_file_permission+0x89/0x1f0 [ 1123.849367] ? do_splice_to+0x170/0x170 [ 1123.853341] ? rw_verify_area+0xea/0x2b0 [ 1123.857409] do_splice_direct+0x18d/0x230 [ 1123.861549] ? splice_direct_to_actor+0x7b0/0x7b0 [ 1123.866426] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 1123.871167] ? __sb_start_write+0x153/0x2f0 [ 1123.875473] do_sendfile+0x4db/0xbd0 [ 1123.879171] ? do_compat_pwritev64+0x140/0x140 [ 1123.883735] ? kasan_check_write+0x14/0x20 [ 1123.887953] ? _copy_from_user+0x99/0x110 [ 1123.892097] SyS_sendfile64+0x9d/0x110 [ 1123.895965] ? SyS_sendfile+0x130/0x130 [ 1123.899936] ? do_syscall_64+0x53/0x640 [ 1123.903903] ? SyS_sendfile+0x130/0x130 [ 1123.907857] do_syscall_64+0x1e8/0x640 [ 1123.911727] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1123.916565] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1123.921731] RIP: 0033:0x459a59 [ 1123.924901] RSP: 002b:00007f6092ba5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1123.932590] RAX: ffffffffffffffda RBX: 00007f6092ba5c90 RCX: 0000000000459a59 [ 1123.939838] RDX: 0000000020000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1123.947100] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1123.954351] R10: 00008080fffffffe R11: 0000000000000246 R12: 00007f6092ba66d4 [ 1123.961628] R13: 00000000004c748b R14: 00000000004dd038 R15: 0000000000000005 06:15:13 executing program 5 (fault-call:3 fault-nth:1): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB=':'], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) 06:15:13 executing program 1 (fault-call:3 fault-nth:62): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) [ 1124.157274] FAULT_INJECTION: forcing a failure. [ 1124.157274] name failslab, interval 1, probability 0, space 0, times 0 [ 1124.176046] CPU: 0 PID: 5745 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1124.183016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1124.192381] Call Trace: [ 1124.194979] dump_stack+0x138/0x197 [ 1124.198727] should_fail.cold+0x10f/0x159 [ 1124.202880] should_failslab+0xdb/0x130 [ 1124.206902] kmem_cache_alloc_trace+0x2e9/0x790 [ 1124.211568] ? netdev_bits+0xb0/0xb0 [ 1124.215158] FAULT_INJECTION: forcing a failure. [ 1124.215158] name failslab, interval 1, probability 0, space 0, times 0 [ 1124.215305] ? format_decode+0x1d8/0x930 [ 1124.230569] reiserfs_fill_super+0xf9/0x2b20 [ 1124.234988] ? vsnprintf+0x290/0x1560 [ 1124.238799] ? finish_unfinished+0x1010/0x1010 [ 1124.243392] ? snprintf+0xa5/0xd0 [ 1124.246854] ? set_blocksize+0x270/0x300 [ 1124.250933] ? ns_test_super+0x50/0x50 [ 1124.254854] mount_bdev+0x2be/0x370 [ 1124.258476] ? finish_unfinished+0x1010/0x1010 [ 1124.263056] get_super_block+0x35/0x40 [ 1124.266943] mount_fs+0x97/0x2a1 [ 1124.270313] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1124.274894] do_mount+0x417/0x27d0 [ 1124.278433] ? copy_mount_options+0x5c/0x2f0 [ 1124.282843] ? rcu_read_lock_sched_held+0x110/0x130 [ 1124.287865] ? copy_mount_string+0x40/0x40 [ 1124.292109] ? copy_mount_options+0x1fe/0x2f0 [ 1124.296608] SyS_mount+0xab/0x120 [ 1124.300191] ? copy_mnt_ns+0x8c0/0x8c0 [ 1124.304079] do_syscall_64+0x1e8/0x640 [ 1124.307970] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1124.312813] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1124.317987] RIP: 0033:0x45c4aa [ 1124.321159] RSP: 002b:00007fd726182a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1124.328853] RAX: ffffffffffffffda RBX: 00007fd726182b40 RCX: 000000000045c4aa [ 1124.336105] RDX: 00007fd726182ae0 RSI: 0000000020000080 RDI: 00007fd726182b00 [ 1124.343358] RBP: 0000000000000000 R08: 00007fd726182b40 R09: 00007fd726182ae0 [ 1124.350611] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 [ 1124.357864] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 [ 1124.367851] CPU: 1 PID: 5749 Comm: syz-executor.5 Not tainted 4.14.149 #0 [ 1124.375071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1124.384428] Call Trace: [ 1124.387026] dump_stack+0x138/0x197 [ 1124.390672] should_fail.cold+0x10f/0x159 [ 1124.394836] should_failslab+0xdb/0x130 [ 1124.398820] __kmalloc+0x2f0/0x7a0 [ 1124.402369] ? kmem_cache_alloc_trace+0x623/0x790 [ 1124.407230] ? alloc_pipe_info+0x15c/0x380 [ 1124.411480] alloc_pipe_info+0x15c/0x380 [ 1124.415546] splice_direct_to_actor+0x5d2/0x7b0 [ 1124.420218] ? avc_policy_seqno+0x9/0x20 [ 1124.424282] ? selinux_file_permission+0x85/0x480 [ 1124.429127] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1124.433976] ? security_file_permission+0x89/0x1f0 [ 1124.439086] ? do_splice_to+0x170/0x170 [ 1124.443070] ? rw_verify_area+0xea/0x2b0 [ 1124.447138] do_splice_direct+0x18d/0x230 [ 1124.451308] ? splice_direct_to_actor+0x7b0/0x7b0 [ 1124.456200] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 1124.460954] ? __sb_start_write+0x153/0x2f0 [ 1124.465265] do_sendfile+0x4db/0xbd0 [ 1124.468972] ? do_compat_pwritev64+0x140/0x140 [ 1124.473547] ? kasan_check_write+0x14/0x20 [ 1124.477784] ? _copy_from_user+0x99/0x110 [ 1124.481956] SyS_sendfile64+0x9d/0x110 [ 1124.485866] ? SyS_sendfile+0x130/0x130 [ 1124.489855] ? do_syscall_64+0x53/0x640 [ 1124.493825] ? SyS_sendfile+0x130/0x130 [ 1124.497787] do_syscall_64+0x1e8/0x640 [ 1124.501662] ? trace_hardirqs_off_thunk+0x1a/0x1c 06:15:14 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663e7724bdeb7b0"], 0x11) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADLINK(r1, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0xffffffffffffff89) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) link(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./bus\x00') r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x302542, 0x0) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000140)=0x4, &(0x7f0000000180)=0x4) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) 06:15:14 executing program 3: rt_sigaction(0x0, &(0x7f0000000180)={0x0, {0x2}, 0x0, 0x0}, 0x0, 0x236, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0xe42, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x1) [ 1124.506701] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1124.511883] RIP: 0033:0x459a59 [ 1124.515059] RSP: 002b:00007f6092ba5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1124.522754] RAX: ffffffffffffffda RBX: 00007f6092ba5c90 RCX: 0000000000459a59 [ 1124.530023] RDX: 0000000020000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1124.537293] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1124.544557] R10: 00008080fffffffe R11: 0000000000000246 R12: 00007f6092ba66d4 [ 1124.551816] R13: 00000000004c748b R14: 00000000004dd038 R15: 0000000000000005 06:15:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef64346ff14b7b0"], 0x11) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getneightbl={0x14, 0x42, 0x400, 0x70bd25, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x6}, 0x240800ec) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="17f05c93e417de0fe25371fc3600dcc85b0088abd4e0d29ec4812c9ef05cdb6ee3c2d4f2c2a4e5d4f7ba389c356be50aadfedbd7ee4a3e28dd8f007006d671578709f468889b6d7f6ec51daf470679abdcbf3208d3f52a458f6066ccb5e5ae66028c54ef8340"], 0x2) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) sendfile(r1, r1, 0x0, 0x8080fffffffe) 06:15:14 executing program 5 (fault-call:3 fault-nth:2): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB=':'], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) 06:15:14 executing program 1 (fault-call:3 fault-nth:63): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) 06:15:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000040)={0x3, @null, r2}) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="3a218211f663a7724bdef6"], 0xb) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r4, r4, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) [ 1124.715974] FAULT_INJECTION: forcing a failure. [ 1124.715974] name failslab, interval 1, probability 0, space 0, times 0 [ 1124.741099] FAULT_INJECTION: forcing a failure. [ 1124.741099] name failslab, interval 1, probability 0, space 0, times 0 [ 1124.759377] CPU: 1 PID: 5777 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1124.766341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1124.775701] Call Trace: [ 1124.778293] dump_stack+0x138/0x197 [ 1124.781934] should_fail.cold+0x10f/0x159 [ 1124.786091] should_failslab+0xdb/0x130 [ 1124.790073] __kmalloc+0x2f0/0x7a0 [ 1124.793653] ? __list_lru_init+0x6b/0x660 [ 1124.797810] __list_lru_init+0x6b/0x660 [ 1124.801875] sget_userns+0x500/0xc30 [ 1124.805589] ? kill_litter_super+0xa0/0xa0 [ 1124.809828] ? ns_test_super+0x50/0x50 [ 1124.813719] ? ns_test_super+0x50/0x50 [ 1124.817601] ? kill_litter_super+0xa0/0xa0 [ 1124.821829] sget+0xd6/0x120 [ 1124.824847] mount_bdev+0xd5/0x370 [ 1124.828390] ? finish_unfinished+0x1010/0x1010 [ 1124.832993] get_super_block+0x35/0x40 [ 1124.836887] mount_fs+0x97/0x2a1 [ 1124.840260] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1124.844761] do_mount+0x417/0x27d0 [ 1124.848303] ? copy_mount_options+0x5c/0x2f0 [ 1124.852713] ? rcu_read_lock_sched_held+0x110/0x130 [ 1124.857736] ? copy_mount_string+0x40/0x40 [ 1124.862016] ? copy_mount_options+0x1fe/0x2f0 [ 1124.867040] SyS_mount+0xab/0x120 [ 1124.870492] ? copy_mnt_ns+0x8c0/0x8c0 [ 1124.874383] do_syscall_64+0x1e8/0x640 [ 1124.878273] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1124.883126] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1124.888313] RIP: 0033:0x45c4aa [ 1124.891499] RSP: 002b:00007fd726182a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1124.899209] RAX: ffffffffffffffda RBX: 00007fd726182b40 RCX: 000000000045c4aa [ 1124.906478] RDX: 00007fd726182ae0 RSI: 0000000020000080 RDI: 00007fd726182b00 [ 1124.913747] RBP: 0000000000000000 R08: 00007fd726182b40 R09: 00007fd726182ae0 [ 1124.921060] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 [ 1124.928328] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 [ 1124.935619] CPU: 0 PID: 5781 Comm: syz-executor.5 Not tainted 4.14.149 #0 [ 1124.942705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1124.952056] Call Trace: [ 1124.954636] dump_stack+0x138/0x197 [ 1124.958258] should_fail.cold+0x10f/0x159 [ 1124.962484] should_failslab+0xdb/0x130 [ 1124.966445] __kmalloc+0x2f0/0x7a0 [ 1124.969972] ? filemap_range_has_page+0x1e0/0x1e0 [ 1124.974805] ? iter_file_splice_write+0x141/0xad0 [ 1124.979632] iter_file_splice_write+0x141/0xad0 [ 1124.984309] ? generic_file_splice_read+0x3e7/0x600 [ 1124.989317] ? fsnotify+0x11e0/0x11e0 [ 1124.993103] ? default_file_splice_read+0x7b0/0x7b0 [ 1124.998122] ? add_to_pipe+0x340/0x340 [ 1125.002016] ? rw_verify_area+0xea/0x2b0 [ 1125.006070] ? default_file_splice_read+0x7b0/0x7b0 [ 1125.011071] direct_splice_actor+0x123/0x190 [ 1125.015475] splice_direct_to_actor+0x29e/0x7b0 [ 1125.020155] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1125.024984] ? do_splice_to+0x170/0x170 [ 1125.028943] ? rw_verify_area+0xea/0x2b0 [ 1125.033002] do_splice_direct+0x18d/0x230 [ 1125.037147] ? splice_direct_to_actor+0x7b0/0x7b0 [ 1125.042002] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 1125.046745] ? __sb_start_write+0x153/0x2f0 [ 1125.051068] do_sendfile+0x4db/0xbd0 [ 1125.054792] ? do_compat_pwritev64+0x140/0x140 [ 1125.059367] ? kasan_check_write+0x14/0x20 [ 1125.063588] ? _copy_from_user+0x99/0x110 [ 1125.067729] SyS_sendfile64+0x9d/0x110 [ 1125.071706] ? SyS_sendfile+0x130/0x130 [ 1125.075669] ? do_syscall_64+0x53/0x640 [ 1125.079632] ? SyS_sendfile+0x130/0x130 [ 1125.083605] do_syscall_64+0x1e8/0x640 [ 1125.087504] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1125.092336] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1125.097524] RIP: 0033:0x459a59 [ 1125.100696] RSP: 002b:00007f6092ba5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1125.108388] RAX: ffffffffffffffda RBX: 00007f6092ba5c90 RCX: 0000000000459a59 [ 1125.115641] RDX: 0000000020000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1125.122980] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1125.130261] R10: 00008080fffffffe R11: 0000000000000246 R12: 00007f6092ba66d4 [ 1125.137526] R13: 00000000004c748b R14: 00000000004dd038 R15: 0000000000000005 06:15:14 executing program 1 (fault-call:3 fault-nth:64): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6772706a71756f74613d8e2e7cf7400a2726e54b2b15028739f9482734a9da29e3b8403f2955146f0ca84975f626d4f0f974af8f98792d4552a84d6ace7fad5ae9dcac2afa4569a9194246659ca31c276b63de0125cf3bd57e25709b7139750132d18d0b4a1279e2de3d5f672948aca113cc76e56ec8c03f83379dd9c5f9deb05de76faf1aa8ecc57c64cd02ff81cc244bcd1e5fd057fc7eb84374412f"]) 06:15:14 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(0x0, 0x101000, 0x10) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="3a2182112a63a7724bdef6"], 0xb) inotify_add_watch(r2, &(0x7f0000000040)='./bus\x00', 0x20000000) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) bind$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x50840, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r4, r4, 0x0, 0x8080fffffffe) ioctl$IMCLEAR_L2(r1, 0x80044946, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r3, 0x8008ae9d, &(0x7f0000000080)=""/89) 06:15:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\b'], 0x2) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) recvfrom$x25(r0, &(0x7f0000000340)=""/4096, 0x1000, 0x2, &(0x7f0000000040)={0x9, @remote={[], 0x2}}, 0x12) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = dup3(0xffffffffffffffff, r2, 0x180000) ioctl$TCSETX(r3, 0x5433, &(0x7f0000000080)={0x40, 0x47c, [0x9, 0x6, 0xfffa, 0x0, 0xb9], 0x81}) 06:15:15 executing program 5 (fault-call:3 fault-nth:3): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB=':'], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) 06:15:15 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="46ff1400000000f80000004d34572900"], 0xf) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x5c, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$user(0x0, &(0x7f0000000080)={'syz'}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23", 0xc0, r2) add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$user(0x0, &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000200)="585ccbc4ed83b8dc4e00b66147b3c72170916900000000b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da270d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e2300"/192, 0xfffffffffffffef1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000000)={0x0, r4}, &(0x7f0000000700)=""/243, 0xf3, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000180)={0x0, r4}, &(0x7f0000000400)=""/258, 0x102, 0x0) keyctl$read(0xb, r3, &(0x7f0000000040)=""/199, 0xc7) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 1125.320673] FAULT_INJECTION: forcing a failure. [ 1125.320673] name failslab, interval 1, probability 0, space 0, times 0 [ 1125.377180] CPU: 0 PID: 5797 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1125.384156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1125.393515] Call Trace: [ 1125.396106] dump_stack+0x138/0x197 [ 1125.399742] should_fail.cold+0x10f/0x159 [ 1125.403905] should_failslab+0xdb/0x130 [ 1125.408010] __kmalloc+0x2f0/0x7a0 [ 1125.411565] ? lock_downgrade+0x740/0x740 [ 1125.415712] ? register_shrinker+0xbd/0x220 [ 1125.420040] register_shrinker+0xbd/0x220 [ 1125.423995] FAULT_INJECTION: forcing a failure. [ 1125.423995] name failslab, interval 1, probability 0, space 0, times 0 [ 1125.424202] sget_userns+0x9bf/0xc30 [ 1125.439099] ? kill_litter_super+0xa0/0xa0 [ 1125.443341] ? ns_test_super+0x50/0x50 [ 1125.447232] ? ns_test_super+0x50/0x50 [ 1125.451119] ? kill_litter_super+0xa0/0xa0 [ 1125.455355] sget+0xd6/0x120 [ 1125.458376] mount_bdev+0xd5/0x370 [ 1125.461918] ? finish_unfinished+0x1010/0x1010 [ 1125.466502] get_super_block+0x35/0x40 [ 1125.470396] mount_fs+0x97/0x2a1 [ 1125.473778] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1125.478280] do_mount+0x417/0x27d0 [ 1125.481832] ? copy_mount_string+0x40/0x40 [ 1125.486065] ? copy_mount_options+0x151/0x2f0 [ 1125.490564] ? __sanitizer_cov_trace_pc+0x31/0x60 [ 1125.495406] ? copy_mount_options+0x1fe/0x2f0 [ 1125.500027] SyS_mount+0xab/0x120 [ 1125.503484] ? copy_mnt_ns+0x8c0/0x8c0 [ 1125.507378] do_syscall_64+0x1e8/0x640 [ 1125.511264] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1125.516118] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1125.521312] RIP: 0033:0x45c4aa [ 1125.524581] RSP: 002b:00007fd726182a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1125.532289] RAX: ffffffffffffffda RBX: 00007fd726182b40 RCX: 000000000045c4aa [ 1125.539554] RDX: 00007fd726182ae0 RSI: 0000000020000080 RDI: 00007fd726182b00 [ 1125.546827] RBP: 0000000000000000 R08: 00007fd726182b40 R09: 00007fd726182ae0 [ 1125.554094] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 [ 1125.561367] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 [ 1125.568697] CPU: 1 PID: 5813 Comm: syz-executor.5 Not tainted 4.14.149 #0 [ 1125.575648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1125.585005] Call Trace: [ 1125.587603] dump_stack+0x138/0x197 [ 1125.591255] should_fail.cold+0x10f/0x159 [ 1125.595415] should_failslab+0xdb/0x130 [ 1125.599398] kmem_cache_alloc+0x2d7/0x780 [ 1125.603552] ? check_preemption_disabled+0x3c/0x250 [ 1125.609189] ext4_init_io_end+0x27/0x100 [ 1125.613259] ext4_writepages+0x1037/0x2fd0 [ 1125.617504] ? trace_hardirqs_on+0x10/0x10 [ 1125.621748] ? save_trace+0x290/0x290 [ 1125.625563] ? ext4_mark_inode_dirty+0x860/0x860 [ 1125.630326] ? wake_up_page_bit+0x1f8/0x260 [ 1125.633302] ------------[ cut here ]------------ [ 1125.634657] ? save_trace+0x290/0x290 [ 1125.639388] WARNING: CPU: 0 PID: 5797 at fs/super.c:1163 kill_block_super+0xc9/0xf0 [ 1125.639395] Kernel panic - not syncing: panic_on_warn set ... [ 1125.639395] [ 1125.643177] ? trace_hardirqs_on+0x10/0x10 [ 1125.662503] ? wbc_attach_and_unlock_inode+0x4c0/0x830 [ 1125.667805] ? find_held_lock+0x35/0x130 [ 1125.671858] ? ext4_mark_inode_dirty+0x860/0x860 [ 1125.676602] do_writepages+0xd0/0x250 [ 1125.680388] ? do_writepages+0xd0/0x250 [ 1125.684351] ? page_writeback_cpu_online+0x20/0x20 [ 1125.689270] ? _raw_spin_unlock+0x2d/0x50 [ 1125.693500] ? wbc_attach_and_unlock_inode+0x559/0x830 [ 1125.698780] __filemap_fdatawrite_range+0x23b/0x310 [ 1125.703786] ? replace_page_cache_page+0x630/0x630 [ 1125.708715] file_write_and_wait_range+0x8d/0xe0 [ 1125.713460] __generic_file_fsync+0x79/0x1a0 [ 1125.717861] ext4_sync_file+0x755/0x12d0 [ 1125.721912] ? ext4_getfsmap+0x880/0x880 [ 1125.725962] vfs_fsync_range+0x10e/0x260 [ 1125.730023] ext4_file_write_iter+0x68a/0xe90 [ 1125.734505] ? splice_direct_to_actor+0x29e/0x7b0 [ 1125.739342] ? ext4_file_mmap+0x2c0/0x2c0 [ 1125.743484] ? __might_sleep+0x93/0xb0 [ 1125.747364] do_iter_readv_writev+0x418/0x670 [ 1125.751852] ? vfs_dedupe_file_range+0x8f0/0x8f0 [ 1125.756601] ? rw_verify_area+0xea/0x2b0 [ 1125.760652] do_iter_write+0x154/0x540 [ 1125.764624] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1125.770069] ? __kmalloc+0x376/0x7a0 [ 1125.773778] vfs_iter_write+0x77/0xb0 [ 1125.777569] iter_file_splice_write+0x572/0xad0 [ 1125.782236] ? default_file_splice_read+0x7b0/0x7b0 [ 1125.787256] ? rw_verify_area+0xea/0x2b0 [ 1125.791303] ? default_file_splice_read+0x7b0/0x7b0 [ 1125.796307] direct_splice_actor+0x123/0x190 [ 1125.800707] splice_direct_to_actor+0x29e/0x7b0 [ 1125.805364] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1125.810197] ? do_splice_to+0x170/0x170 [ 1125.814158] ? rw_verify_area+0xea/0x2b0 [ 1125.818209] do_splice_direct+0x18d/0x230 [ 1125.822346] ? splice_direct_to_actor+0x7b0/0x7b0 [ 1125.827204] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 1125.831944] ? __sb_start_write+0x153/0x2f0 [ 1125.836255] do_sendfile+0x4db/0xbd0 [ 1125.839964] ? do_compat_pwritev64+0x140/0x140 [ 1125.844537] ? kasan_check_write+0x14/0x20 [ 1125.848757] ? _copy_from_user+0x99/0x110 [ 1125.852894] SyS_sendfile64+0x9d/0x110 [ 1125.856781] ? SyS_sendfile+0x130/0x130 [ 1125.860742] ? do_syscall_64+0x53/0x640 [ 1125.864707] ? SyS_sendfile+0x130/0x130 [ 1125.868757] do_syscall_64+0x1e8/0x640 [ 1125.872642] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1125.877476] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1125.882651] RIP: 0033:0x459a59 [ 1125.885825] RSP: 002b:00007f6092ba5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1125.893522] RAX: ffffffffffffffda RBX: 00007f6092ba5c90 RCX: 0000000000459a59 [ 1125.900787] RDX: 0000000020000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1125.908042] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1125.915299] R10: 00008080fffffffe R11: 0000000000000246 R12: 00007f6092ba66d4 [ 1125.922553] R13: 00000000004c748b R14: 00000000004dd038 R15: 0000000000000005 [ 1125.929831] CPU: 0 PID: 5797 Comm: syz-executor.1 Not tainted 4.14.149 #0 [ 1125.936771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1125.946118] Call Trace: [ 1125.948747] dump_stack+0x138/0x197 [ 1125.952373] panic+0x1f2/0x426 [ 1125.955557] ? add_taint.cold+0x16/0x16 [ 1125.959536] ? kill_block_super+0xc9/0xf0 [ 1125.963676] ? __warn.cold+0x14/0x36 [ 1125.967382] ? kill_block_super+0xc9/0xf0 [ 1125.971519] __warn.cold+0x2f/0x36 [ 1125.975060] ? ist_end_non_atomic+0x10/0x10 [ 1125.979439] ? kill_block_super+0xc9/0xf0 [ 1125.983589] report_bug+0x216/0x254 [ 1125.987260] do_error_trap+0x1bb/0x310 [ 1125.991139] ? math_error+0x360/0x360 [ 1125.994943] ? save_trace+0x290/0x290 [ 1125.998732] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 1126.003654] ? generic_shutdown_super+0x27c/0x370 [ 1126.008483] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1126.013320] do_invalid_op+0x1b/0x20 [ 1126.017033] invalid_op+0x1b/0x40 [ 1126.020494] RIP: 0010:kill_block_super+0xc9/0xf0 [ 1126.025247] RSP: 0018:ffff88805ae07b70 EFLAGS: 00010246 [ 1126.030603] RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc9000804e000 [ 1126.037860] RDX: 0000000000040000 RSI: ffffffff818e0379 RDI: ffff88808911fb20 [ 1126.045136] RBP: ffff88805ae07b88 R08: ffff88804ec78080 R09: 0000000000000001 [ 1126.052394] R10: 0000000000000000 R11: ffff88804ec78080 R12: ffff888092e88080 [ 1126.059651] R13: ffff88808911f780 R14: ffff888092e88080 R15: dffffc0000000000 [ 1126.067041] ? kill_block_super+0xc9/0xf0 [ 1126.071201] reiserfs_kill_sb+0x17c/0x1e0 [ 1126.075349] deactivate_locked_super+0x74/0xe0 [ 1126.079923] sget_userns+0x9d9/0xc30 [ 1126.083623] ? kill_litter_super+0xa0/0xa0 [ 1126.087948] ? ns_test_super+0x50/0x50 [ 1126.091832] ? ns_test_super+0x50/0x50 [ 1126.095716] ? kill_litter_super+0xa0/0xa0 [ 1126.099941] sget+0xd6/0x120 [ 1126.102954] mount_bdev+0xd5/0x370 [ 1126.106482] ? finish_unfinished+0x1010/0x1010 [ 1126.111056] get_super_block+0x35/0x40 [ 1126.114948] mount_fs+0x97/0x2a1 [ 1126.118322] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1126.122823] do_mount+0x417/0x27d0 [ 1126.126373] ? copy_mount_string+0x40/0x40 [ 1126.130599] ? copy_mount_options+0x151/0x2f0 [ 1126.135097] ? __sanitizer_cov_trace_pc+0x31/0x60 [ 1126.139929] ? copy_mount_options+0x1fe/0x2f0 [ 1126.144411] SyS_mount+0xab/0x120 [ 1126.147904] ? copy_mnt_ns+0x8c0/0x8c0 [ 1126.151787] do_syscall_64+0x1e8/0x640 [ 1126.155662] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1126.160489] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1126.165681] RIP: 0033:0x45c4aa [ 1126.168907] RSP: 002b:00007fd726182a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1126.176604] RAX: ffffffffffffffda RBX: 00007fd726182b40 RCX: 000000000045c4aa [ 1126.183872] RDX: 00007fd726182ae0 RSI: 0000000020000080 RDI: 00007fd726182b00 [ 1126.191124] RBP: 0000000000000000 R08: 00007fd726182b40 R09: 00007fd726182ae0 [ 1126.198378] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 [ 1126.205633] R13: 00000000004c8f13 R14: 00000000004e0398 R15: 0000000000000005 [ 1126.214806] Kernel Offset: disabled [ 1126.218550] Rebooting in 86400 seconds..