cb31fd77ebb6176f45ba315d70482399a46bf9420b8efdec1a0745cbbdbad89dd861359f367db481b90e569274b425a478b82167b69963c8a611bcba0fc3b1a7aec0a07ec61fa48785dfdc3fbabafad88d860d917fc69cb75396ea065b536af86e0c0d56eacd590ff911f66363ce4bf65da8488c5d7a1e133435c3bb80ea1412385d6170cf8d4bc1d321c4d83c55381383c459a4e22038ad29d2b2a2d13827cbee64ce0befe86d15d1d8b51faa9f31766e738d58e5563572b58d4381b5b16ec57768ed8531ae232cea86d55e57384103c0015d1e8997335691ef9a132ff6cafbef5890d432f0ff084f7d4e3b54ba2a01bf8b0c7dd4a81bdf63f52866a2f868bbe12a5fd2dba575f01b164fce7bb2b096e19d1a5ee44808c97ea1a4226575961370f247ac8c3d269f5dc9ede4e5d20d3e2aa3cd07ccb64a2811ecf51e8d95a85e2d42978940213bf7638785c34896e1b9d3a797aab2f58c15ee4aa7e091e1f00deec5bef78ece4860915e9b83eea440521ea94ad2e86afb2599dbbcdc5228978b6b20860532548e8873eb370fca4b1a7997c139104d1f66f76a8214f4df96343a53a7de6d0c6e11f51003a6a6d6e3816b23a5d1d40544ec2d796c2405c99059cb10d4dff21a5643e5a5aeec6fda2bf9429ed496622116f631f7ee0e4f4fcde965f8b3e8753045c6ce2d122c2f96bb7beb9748f4a4a526e73c7e0edd64490b9120bf65548e0e220752d4312624684b8a5db2780cd84100581363f58ac0eb0d5bf5ae884ca57c973c0bc085683ca3381586d2e7f2d82cc1b4b0806204c0d9b67c2219eb101b13e278290b2772292e83d3935072e0763a0a6fcc30ab4cae55e1d0acfbd11f7360ca54d1d02f981828c57ba469e817ba768caa6277d71a593ec73228c3444871409ceca423f06e318087dd00338c983caea61d249a20a536d38be2c93a383fff3fe196ecc736c1dfafca7eb1b061394e239925658c0a1a020a41ebff67310cbc915e54e53f7fcf97d40596a76359512d7c3879781b796a7d59ee3e31aff05555ff7ce8c963bcb64aa487e17d3a5258caa578f2f090efb50d57ce875a406544d48d024cb905231e88037a81ffa44cbe49d443a4bce017b2ebd5c700f1b6900d3e76643d32aa3943d1f93c012bf6fb96d64cbfedcdeb6aa888336e23f4df63bc35c91bda043dde9d697af3b83bbd1668e4c32fc1ec1e339e2511973fb4bdb055cc1bbffa8ae27079c8511678c24a062ff3cb6983c37374420d9dbee8fc96a18493f79d2bf82c55bbf03b3c056cdc805c05279ac4fe81291eebc728e5fa52db15d86deaad80ac1fe3edcdc535c660d1e2e2f4cc0775376f2753b1afd86d876f58c81c7bf9b6c4278df8a64a93fa98a203f5179c83feb0fc4c21b06b90f1d7f96e9371fab0ed63428924b87457c5f2d91092656664435b88a195e0d8c2451508bf6538b76e130447868bf0e929bb0012395a29793fb6252928e8185d35a2c4744ed89028295a6bdc879d07df19afc65d023e457ca62510a888939fe2a209efdf60d71c037e1ad0078a3f43af59cb3dd418516cb05848030b32e6650c14779111a47716ca82961d4457f6609be4e23cca8896dc73c35e706d3164c5bd0c274a96abac9af7655458dbb0f535a345bbd49989b155ac4dbc6a312695b6b76e1f57ecab6ff79fb3d01603423d6f9abc366d43414fd2dda6de3be8be49dfae7221a7805543bd499de794df8740293d4432459f29cf54c6de619dde80ccbfd863574ee1135491f430b7ef1f2ddca99d7bd47e70361d399f1f5b0e08895ca0ab3d920e32d840740c533b8a1d5851605f9a72a64e56e2fe6e2cfa1d2e4980dddcd880ec0cdedaa88e5e7f35e4c0f", 0x1000, 0x200}], 0x1000000, &(0x7f00000013c0)={[{@nodots='nodots'}, {@fat=@codepage={'codepage', 0x3d, '437'}}, {@dots='dots'}, {@nodots='nodots'}, {@fat=@tz_utc='tz=UTC'}, {@fat=@nocase='nocase'}, {@dots='dots'}], [{@hash='hash'}, {@measure='measure'}]}) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000001440)) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x1) 05:42:17 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, r0, 0x8) mremap(&(0x7f0000da1000/0x6000)=nil, 0x6000, 0x1000, 0x3, &(0x7f0000497000/0x1000)=nil) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x0, 0xc402) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000080)=0x4) 05:42:17 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1000, 0x80) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000040)=""/181) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) r1 = inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0x50000008) inotify_rm_watch(r0, r1) write$UHID_DESTROY(r0, &(0x7f0000000180), 0x4) 05:42:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) [ 927.522985] SELinux: security policydb version 18 (MLS) not backwards compatible 05:42:17 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x20) [ 927.583366] FAT-fs (loop2): Unrecognized mount option "hash" or missing value [ 927.602297] sel_write_load: 8 callbacks suppressed [ 927.602302] SELinux: failed to load policy 05:42:17 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, &(0x7f0000000000), &(0x7f0000000040)=0x4) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000b2b000/0x4000)=nil) shmget(0x1, 0x4000, 0x20, &(0x7f000000b000/0x4000)=nil) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000a32000/0x2000)=nil) r0 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f000094b000/0x4000)=nil, 0x6000) [ 927.791586] SELinux: policydb string length -1326411617 does not match expected length 8 [ 927.836247] SELinux: failed to load policy 05:42:18 executing program 1 (fault-call:2 fault-nth:0): clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) 05:42:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)}, 0x0) 05:42:18 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000da1000/0x6000)=nil, 0x6000, 0x1000, 0x3, &(0x7f0000497000/0x1000)=nil) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002080)='/dev/snapshot\x00', 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000000000)={0x2, 0x0, 0x2080, {0x100000, 0x1000, 0x3}, [], "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", "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"}) 05:42:18 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040)=0x6d8, 0x4) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000180)=0x5) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r1, 0x1, 0x6}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0xcb69caf346eeef22, 0x4) 05:42:18 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="8cff204c696e7578120000d982d867180600040007000000f3abb4d9d017c9a0897ffd99e3a6d2b1e729f06a000000000000014a9498bc18ce000000000000"], 0x20) 05:42:18 executing program 3: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x8000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000100)={{0x18f, 0x8000}, 'port1\x00', 0x28, 0x60000, 0x6, 0x7fff, 0xd285, 0x1, 0x88, 0x0, 0x1, 0xfffffffffffffffb}) mremap(&(0x7f0000ac1000/0x1000)=nil, 0x1000, 0x400000, 0x2, &(0x7f0000c00000/0x400000)=nil) 05:42:18 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ac1000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000d68000/0x1000)=nil) 05:42:18 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3, 0x400000) ioctl$SIOCRSACCEPT(r0, 0x89e3) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000000c0)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80080, 0x0) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.capability\x00', &(0x7f00000001c0)=@v1={0x1000000, [{0x176852f9, 0xfc}]}, 0xc, 0x1) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x4, 0xfff, 0x4, 0x6}, {0x400, 0x7, 0x9a1, 0x1}, {0x2000e1, 0x7, 0x2, 0x81}, {0xfb, 0x1, 0x0, 0x20a}, {0xfd1, 0x1f, 0x1, 0x5}]}, 0xfffffe2d) 05:42:18 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000200)) mremap(&(0x7f0000da1000/0x6000)=nil, 0x6000, 0x1000, 0x3, &(0x7f0000497000/0x1000)=nil) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/mls\x00', 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000340)='threaded\x00', 0x9) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) renameat2(r2, &(0x7f0000000280)='./file0/file0\x00', r0, &(0x7f00000002c0)='./file0\x00', 0x6) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000140)={r4, r5, 0xfff, 0x1b1, &(0x7f0000000080)="cf8a63685af86a66fa1304688d54490395526fed90e0cb31ef4d9bb3404879bac9a344dd1e24a30f17b7c02c2bbe2919437b1d54ac0d74bd18df83e055e5d4403f4b49d9f1cd6bd8cdf9c71aebbb197fd5d7855c2e032e959c81ad31facc7b89bb25555f5eb409ed389f1951ba61a869966ad825c4e7ae7c56df7ab21f799b539660c415dc62723bca", 0x7, 0x5, 0xfffffffffffffffa, 0xd519, 0x5, 0x2, 0xff, 'syz1\x00'}) 05:42:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)}, 0x0) [ 928.447949] FAULT_INJECTION: forcing a failure. [ 928.447949] name failslab, interval 1, probability 0, space 0, times 0 [ 928.528879] CPU: 1 PID: 14808 Comm: syz-executor.1 Not tainted 4.14.141 #37 [ 928.536033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 928.545501] Call Trace: [ 928.545521] dump_stack+0x138/0x197 [ 928.545538] should_fail.cold+0x10f/0x159 [ 928.545554] should_failslab+0xdb/0x130 [ 928.545569] kmem_cache_alloc_node_trace+0x280/0x770 [ 928.564954] ? lock_downgrade+0x6e0/0x6e0 [ 928.569107] __get_vm_area_node+0xf0/0x340 [ 928.573341] __vmalloc_node_range+0x9f/0x6a0 05:42:18 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2000, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000180)={&(0x7f0000000040)=@in6={0xa, 0x4e22, 0x5, @mcast2, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)="2bba17db89adfcc28f209507412d248aee4cb735330c78accd301b5feca0171deef32e8488e1f485afc209e74e930b05dbd2267c3edcda341d0be2027694b52578068f5bd771bb80df375a2c4543d63d578fec29507f5660d9c003b8bf33b806f3b1edc8de807e92706b3312e3d79a252cafb803368f393f536bb1af62add8904c8f494b5e3c30fd5a3dbe22bf335401ae6f0d17e68f1258faffa24c0afa3c1bba8701a2b4950a5147ede0f651ba40ca158d3f4a7375203c", 0xb8}], 0x1, 0x0, 0x0, 0x10}, 0x1) 05:42:18 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000112000/0x1000)=nil) shmat(r0, &(0x7f0000172000/0x4000)=nil, 0x6000) [ 928.577740] ? sel_write_load+0x1a0/0x1050 [ 928.577754] ? trace_hardirqs_on+0x10/0x10 [ 928.577765] ? get_pid_task+0x98/0x140 [ 928.590105] vmalloc+0x46/0x50 [ 928.593308] ? sel_write_load+0x1a0/0x1050 [ 928.597545] sel_write_load+0x1a0/0x1050 [ 928.601613] ? save_trace+0x290/0x290 [ 928.605421] ? sel_read_bool+0x240/0x240 [ 928.609484] ? trace_hardirqs_on+0x10/0x10 [ 928.613722] ? save_trace+0x290/0x290 [ 928.617523] __vfs_write+0x105/0x6b0 [ 928.621225] ? __lock_is_held+0xb6/0x140 [ 928.621234] ? sel_read_bool+0x240/0x240 [ 928.621243] ? kernel_read+0x120/0x120 [ 928.621252] ? __lock_is_held+0xb6/0x140 [ 928.621263] ? check_preemption_disabled+0x3c/0x250 [ 928.621275] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 928.621285] ? rcu_read_lock_sched_held+0x110/0x130 [ 928.621294] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 928.621307] ? __sb_start_write+0x153/0x2f0 [ 928.621318] vfs_write+0x198/0x500 [ 928.621330] SyS_write+0xfd/0x230 [ 928.668773] ? SyS_read+0x230/0x230 [ 928.672395] ? do_syscall_64+0x53/0x640 [ 928.676372] ? SyS_read+0x230/0x230 [ 928.679994] do_syscall_64+0x1e8/0x640 [ 928.683878] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 928.688726] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 928.693908] RIP: 0033:0x459879 [ 928.697511] RSP: 002b:00007f72c8633c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 928.705199] RAX: ffffffffffffffda RBX: 00007f72c8633c90 RCX: 0000000000459879 [ 928.712450] RDX: 0000000000000028 RSI: 0000000020000080 RDI: 0000000000000003 [ 928.719704] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 928.726956] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f72c86346d4 [ 928.734203] R13: 00000000004c9b08 R14: 00000000004e1248 R15: 0000000000000004 [ 928.756242] syz-executor.1: vmalloc: allocation failure: 40 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 928.769089] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 928.775141] CPU: 1 PID: 14808 Comm: syz-executor.1 Not tainted 4.14.141 #37 [ 928.782245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 928.782249] Call Trace: [ 928.782265] dump_stack+0x138/0x197 [ 928.782285] warn_alloc.cold+0x96/0x1af [ 928.782294] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 928.782306] ? lock_downgrade+0x6e0/0x6e0 [ 928.782319] ? __get_vm_area_node+0x27f/0x340 [ 928.782333] __vmalloc_node_range+0x3c3/0x6a0 [ 928.782344] ? trace_hardirqs_on+0x10/0x10 [ 928.782354] ? get_pid_task+0x98/0x140 [ 928.782366] vmalloc+0x46/0x50 [ 928.782376] ? sel_write_load+0x1a0/0x1050 [ 928.782384] sel_write_load+0x1a0/0x1050 [ 928.782393] ? save_trace+0x290/0x290 [ 928.782407] ? sel_read_bool+0x240/0x240 [ 928.782418] ? trace_hardirqs_on+0x10/0x10 [ 928.782428] ? save_trace+0x290/0x290 [ 928.782441] __vfs_write+0x105/0x6b0 [ 928.782450] ? __lock_is_held+0xb6/0x140 [ 928.782456] ? sel_read_bool+0x240/0x240 [ 928.782465] ? kernel_read+0x120/0x120 [ 928.782474] ? __lock_is_held+0xb6/0x140 [ 928.782484] ? check_preemption_disabled+0x3c/0x250 [ 928.782498] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 928.782509] ? rcu_read_lock_sched_held+0x110/0x130 [ 928.782519] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 928.782527] ? __sb_start_write+0x153/0x2f0 [ 928.782537] vfs_write+0x198/0x500 [ 928.782549] SyS_write+0xfd/0x230 [ 928.782559] ? SyS_read+0x230/0x230 [ 928.782568] ? do_syscall_64+0x53/0x640 [ 928.782577] ? SyS_read+0x230/0x230 [ 928.782588] do_syscall_64+0x1e8/0x640 [ 928.782595] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 928.782610] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 928.782617] RIP: 0033:0x459879 [ 928.782622] RSP: 002b:00007f72c8633c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 928.782631] RAX: ffffffffffffffda RBX: 00007f72c8633c90 RCX: 0000000000459879 [ 928.782637] RDX: 0000000000000028 RSI: 0000000020000080 RDI: 0000000000000003 [ 928.782642] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 928.782647] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f72c86346d4 [ 928.782652] R13: 00000000004c9b08 R14: 00000000004e1248 R15: 0000000000000004 [ 928.782803] Mem-Info: [ 928.802472] active_anon:380452 inactive_anon:215 isolated_anon:0 [ 928.802472] active_file:8765 inactive_file:16549 isolated_file:0 [ 928.802472] unevictable:0 dirty:336 writeback:0 unstable:0 [ 928.802472] slab_reclaimable:14669 slab_unreclaimable:114860 [ 928.802472] mapped:59085 shmem:276 pagetables:12308 bounce:0 [ 928.802472] free:981788 free_pcp:230 free_cma:0 [ 928.811455] Node 0 active_anon:1521808kB inactive_anon:860kB active_file:34928kB inactive_file:66196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:236340kB dirty:1344kB writeback:0kB shmem:1104kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1056768kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 928.824789] Node 1 active_anon:0kB inactive_anon:0kB active_file:132kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 928.831900] Node 0 DMA free:11812kB min:216kB low:268kB high:320kB active_anon:4096kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 929.097134] lowmem_reserve[]: 0 2580 2580 2580 [ 929.101769] Node 0 DMA32 free:129564kB min:36468kB low:45584kB high:54700kB active_anon:1517712kB inactive_anon:860kB active_file:34928kB inactive_file:66196kB unevictable:0kB writepending:1344kB present:3129332kB managed:2644888kB mlocked:0kB kernel_stack:21440kB pagetables:49232kB bounce:0kB free_pcp:768kB local_pcp:296kB free_cma:0kB [ 929.131939] lowmem_reserve[]: 0 0 0 0 [ 929.135760] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 929.162154] lowmem_reserve[]: 0 0 0 0 [ 929.165969] Node 1 Normal free:3785808kB min:53420kB low:66772kB high:80124kB active_anon:0kB inactive_anon:0kB active_file:132kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 929.193614] lowmem_reserve[]: 0 0 0 0 [ 929.197423] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 2*4096kB (M) = 11812kB [ 929.211051] Node 0 DMA32: 312*4kB (UE) 293*8kB (UME) 194*16kB (UE) 41*32kB (UME) 4*64kB (E) 26*128kB (UE) 71*256kB (UME) 93*512kB (UE) 51*1024kB (UM) 0*2048kB 0*4096kB = 129608kB [ 929.227228] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 929.237973] Node 1 Normal: 52*4kB (UE) 330*8kB (UE) 273*16kB (U) 59*32kB (UE) 13*64kB (UE) 9*128kB (UME) 5*256kB (UM) 4*512kB (UE) 3*1024kB (UME) 4*2048kB (ME) 918*4096kB (M) = 3785808kB [ 929.254823] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 929.263695] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 929.272304] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 929.281280] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 929.289930] 25599 total pagecache pages [ 929.294036] 0 pages in swap cache [ 929.297475] Swap cache stats: add 0, delete 0, find 0/0 [ 929.302849] Free swap = 0kB [ 929.305856] Total swap = 0kB [ 929.308851] 1965979 pages RAM [ 929.312069] 0 pages HighMem/MovableOnly [ 929.317518] 333228 pages reserved [ 929.320984] 0 pages cma reserved 05:42:19 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0xfffffffffffffe1d, 'SE Linux', "1200000001d8670006000400070000337ae1ebdb4e5d235400003cbf030003000000"}, 0xfffffffffffffcc4) 05:42:19 executing program 0: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80440000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x8, 0x70bd26, 0x25dfdbfd, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x3b}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000810}, 0x404c010) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) 05:42:19 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)}, 0x0) 05:42:19 executing program 3: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7e, 0x10000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x8000, @rand_addr="da97d2b305bb1d100dcd7d45402ac403", 0x80000000}, @in6={0xa, 0x4e21, 0xff, @remote, 0x7}, @in={0x2, 0x4e24, @rand_addr=0x4}, @in6={0xa, 0x4e24, 0x200, @mcast2, 0x7}, @in6={0xa, 0x4e23, 0xff, @loopback, 0x1284000}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e24, 0x2, @empty, 0x4}, @in6={0xa, 0x4e21, 0x0, @rand_addr="03d6d97b778a19ad6de3c27122c7f53d", 0xffffffffffff7fff}], 0xe8) mremap(&(0x7f0000ac1000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000d68000/0x1000)=nil) io_setup(0x3, &(0x7f0000000140)=0x0) io_cancel(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x86c7, r0, &(0x7f0000000180)="5483cb9faddad8d9f7275127ddc8ccc8385fd58c5fcf1f2817210b934d551ec8e0a4f80ef214954caa0b4dfc708563c2c6cb87bb2b54eece2e77a637787fc0aa4a", 0x41, 0x7ff}, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e21, @rand_addr=0x100000001}, @in={0x2, 0x4e20, @remote}], 0x30) 05:42:19 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000da1000/0x6000)=nil, 0x6000, 0x1000, 0x3, &(0x7f0000497000/0x1000)=nil) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="13e85da11655240a828eb2dbbb923f2a4d1ef4610921159be69a0e7df5415ced78880fafc26365e3c9152f4bf3f3a055d40b81f8e61f1814015084487924352000369a1ebffb10605f325d4529d7f31664d75aea3e09ad907a8c680dadf06c31d0f778119a0bd77e1deddbe415304ad255fb3a222807b4f6326386df3360c55015126cfc7204997b6fa507bd36fea9fd92611590ab5d45b1dc244a02214114bb338ae172435d1c2187d2d891bba8e5701ed554b137afa6569b5ee828f0a79da78d4dbf95edd544013df696839026611baf6ab16df6ba29e1bd289c2239d940c9b9155f6a4c8e71401ace4f01859c5409", 0xf0, 0xfffffffffffffffb) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-control\x00', 0x111102, 0x0) fcntl$setflags(r2, 0x2, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) keyctl$chown(0x4, r0, r1, r3) 05:42:19 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x494400, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000100)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), r2, 0x1}}, 0x18) [ 929.325497] SELinux: policydb magic number 0x4c20ff8c does not match expected magic number 0xf97cff8c [ 929.342579] SELinux: failed to load policy 05:42:19 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000140)='/dev/video#\x00', 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x7000) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0xfffffffffffffffd, 0x4b6, 0x0, 0x100000001, 0x2}, &(0x7f0000000200)={0x100, 0x1000, 0x7, 0x3, 0x0, 0x9, 0x0, 0x9}, &(0x7f0000000240)={0x6, 0x0, 0x3, 0x0, 0x2, 0x6, 0x401, 0x93}, &(0x7f00000002c0)={r1, r2+30000000}, &(0x7f0000000340)={&(0x7f0000000300)={0x3ff}, 0x8}) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:cpu_online_t:s0\x00', 0x22, 0x1) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400000, 0x0) r3 = dup2(r0, r0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) pipe2$9p(&(0x7f0000000380), 0x800) 05:42:19 executing program 3: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f00008ec000/0x4000)=nil, 0x4000, 0x3000, 0x7, &(0x7f0000c84000/0x3000)=nil) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 05:42:19 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x3}}, 0x0) 05:42:19 executing program 5: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x8000, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000040)=""/205) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000da1000/0x6000)=nil, 0x6000, 0x1000, 0x3, &(0x7f0000497000/0x1000)=nil) 05:42:19 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) semget$private(0x0, 0x1, 0x220) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000000)={'mangle\x00', 0x57, "55efac97493f0d84b739a450a449eaa9fa63962633d916c989e200615ca36d2013aacb098f88ad6359e612c5321e5d837c726fdba35ed6c9f42d826da1176dd0625edba724d4f3dea537b945539a7eb99e6adc4e36d98b"}, &(0x7f00000000c0)=0x7b) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x7fffffff, "7d7491f15fb2a8ccbb154b3e17777a30de12cb0527ea6e0365ed4d30a1682a83", 0x5, 0x1000, 0x9, 0x800, 0x4, 0x2, 0x80000000, 0xfff}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm-control\x00', 0x400000, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000480)=0xa832, &(0x7f00000004c0)=0x1) [ 929.431385] SELinux: security policydb version 18 (MLS) not backwards compatible 05:42:19 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x3ff, 0xbe, 0x4, 0x1, 0x0, 0x1, 0x20000, 0x5, 0x7fff, 0xffffffff, 0x100000001, 0xfb0b, 0x7, 0x3, 0x100, 0xfffffffffffffff8, 0x9, 0x9, 0x5, 0x8001, 0x3, 0x6, 0x80000001, 0x9, 0x3, 0x9, 0xffffffff80000000, 0x7, 0x4, 0x10000, 0x100000000, 0xffffffffffffff80, 0x100000000, 0x6, 0x6, 0x48e, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0xb760}, 0x4000, 0x7, 0x4, 0x789653376fcf101b, 0x100000000, 0xa91, 0x7fff}, r0, 0xb, 0xffffffffffffffff, 0x3) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) [ 929.500687] SELinux: failed to load policy 05:42:19 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @bcast, @bcast, @null, @bcast, @default, @null]}, &(0x7f0000000080)=0x48, 0x800) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f00000000c0)=0x2e, &(0x7f0000000100)=0x4) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) 05:42:19 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x3}}, 0x0) 05:42:19 executing program 1: clone(0x80000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) close(r0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) 05:42:19 executing program 3: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ac1000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000d68000/0x1000)=nil) pkey_mprotect(&(0x7f00003a5000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) 05:42:19 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000da1000/0x6000)=nil, 0x6000, 0x1000, 0x3, &(0x7f0000497000/0x1000)=nil) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @rand_addr, @empty}, &(0x7f0000000080)=0xc) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'U-', 0x200000000000000}, 0x28, 0x5d2a07002abd6d08) bind$packet(r0, &(0x7f00000000c0)={0x11, 0xf6, r1, 0x1, 0x2c05, 0x6, @broadcast}, 0x14) 05:42:19 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x3}}, 0x0) [ 929.645821] SELinux: security policydb version 18 (MLS) not backwards compatible 05:42:19 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x7, @local, 0x9}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000040)="514fa2ac5ca1ed4b9e431d087467c3fe", 0x10}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000002900000008000000cf00ffffffec0000"], 0x18}}, {{&(0x7f0000000100)={0xa, 0x4e22, 0x1, @ipv4={[], [], @multicast1}, 0xff}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000000140)="582704b2d76628b48a770259f14e1e2ea9a175711dc29f70345220eae7735ea21a0fe16830b021b97ee64871e61fd63f572c3a32a0d7dc7581b99e3b541993f5b20d3471f123db36a95de60528f2d06dc858bc5b21e0ac9b1c4a4d53e2e1e7aacbc7c49d13047e8f11897b180d4d814f9f3b4b5ae836ff", 0x77}, {&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="8026e5e9c0", 0x5}], 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="480000000000000029000000360000003a050000000000000502001a05020001000100c910fe88000000000000000000000000010107100000000602000800000800000000000000a80000000000000029000000390000000c1201000000000000000000000027000000000000000001ff020000000000000000000000000001fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000000000000000fffffffffffffe80000000000000000000000000001dfe8800000000000000000000000001010000000000000000000000000000000100000000000000000000ffffac141410"], 0xf0}}], 0x2, 0x10) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000b98000/0x4000)=nil) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000013c0)=0x7, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 05:42:19 executing program 3: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ac1000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000d68000/0x1000)=nil) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x101000) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000040)={0xa, 0x3, 0x4, 0xaf1, 'syz0\x00', 0x8}) [ 929.705239] SELinux: failed to load policy 05:42:19 executing program 2: clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x100, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f00000000c0)=""/29) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="6cff7cf9080000005345204c696e757812000000f1f5522c0007000000"], 0x20) 05:42:19 executing program 5: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x90100, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000040)={0x20, 0x2, 0x2, 0x20, 0x8000}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000da1000/0x6000)=nil, 0x6000, 0x1000, 0x3, &(0x7f0000497000/0x1000)=nil) 05:42:19 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x4}}, 0x0) 05:42:19 executing program 3: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ac1000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000d68000/0x1000)=nil) remap_file_pages(&(0x7f0000823000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x4000) 05:42:19 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d8670007000400070000003c9f030003000000"}, 0x1ea) 05:42:20 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x4}}, 0x0) [ 929.872145] SELinux: policydb magic number 0xf97cff6c does not match expected magic number 0xf97cff8c [ 929.898941] SELinux: failed to load policy 05:42:20 executing program 5: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x400041, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, r0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x8000, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:tape_device_t:s0\x00', 0x23, 0x3) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video1\x00', 0x2, 0x0) recvfrom$unix(r1, &(0x7f0000000080)=""/96, 0x60, 0x40, 0x0, 0x0) mremap(&(0x7f0000da1000/0x6000)=nil, 0x6000, 0x1000, 0x3, &(0x7f0000497000/0x1000)=nil) 05:42:20 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCCONS(r0, 0x541d) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x22000, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000040)={0x6, 0x300000, 0x101, 0x6}, 0x8) 05:42:20 executing program 3: r0 = getpid() ioprio_get$pid(0x2, r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ac1000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000d68000/0x1000)=nil) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0xcf9acd2a7ae39350, r1, 0x8) [ 929.944782] SELinux: security policydb version 18 (MLS) not backwards compatible [ 929.981797] SELinux: failed to load policy 05:42:20 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x4}}, 0x0) [ 930.028840] SELinux: security policydb version 18 (MLS) not backwards compatible [ 930.066577] SELinux: failed to load policy [ 930.088496] SELinux: security policydb version 18 (MLS) not backwards compatible [ 930.116072] SELinux: failed to load policy 05:42:20 executing program 0: mmap(&(0x7f0000eb1000/0x3000)=nil, 0x3000, 0x0, 0x5c831, 0xffffffffffffffff, 0xfffffffffffffffc) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) 05:42:20 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x20000007, 0x82002) write$P9_RLINK(r0, &(0x7f0000000040)={0x7, 0x47, 0x1}, 0x7) mremap(&(0x7f0000da1000/0x6000)=nil, 0x6000, 0x1000, 0x7, &(0x7f0000d8c000/0x1000)=nil) 05:42:20 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c0015000000000001"], 0x4}}, 0x0) 05:42:20 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x3, 0x1) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000040)) 05:42:20 executing program 3: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55515bdc50b38a3ebf3defb30f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000800)="8c", 0x1}], 0x1}, 0x0) readv(r2, &(0x7f00000007c0)=[{&(0x7f0000001d80)=""/4096, 0x20011b6f}], 0x1) mremap(&(0x7f0000ac1000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000d68000/0x1000)=nil) 05:42:20 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x40000, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r1, 0x200, 0x70bd28, 0x25dfdbfd, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0xffffffffffff8001, @media='eth\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000002c0)={r3, 0x0, 0x7}, 0x8) [ 930.584211] syz-executor.0 (14920) used greatest stack depth: 22688 bytes left 05:42:20 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c0015000000000001"], 0x4}}, 0x0) 05:42:20 executing program 5: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$unix(0x1, 0x2, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) mmap(&(0x7f000072e000/0x4000)=nil, 0x4000, 0x101, 0x5c831, r0, 0x0) mremap(&(0x7f0000da1000/0x6000)=nil, 0x6000, 0x1000, 0x3, &(0x7f0000497000/0x1000)=nil) 05:42:20 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_dccp_buf(r0, 0x21, 0xe, &(0x7f0000000000)=""/185, &(0x7f00000000c0)=0xb9) [ 930.641911] SELinux: policydb string length -103 does not match expected length 8 05:42:20 executing program 3: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x10000, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x2, r1}) mremap(&(0x7f0000ac1000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000d68000/0x1000)=nil) 05:42:20 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x200) pipe(&(0x7f0000000140)={0xffffffffffffffff}) setsockopt$packet_buf(r2, 0x107, 0x1, &(0x7f0000000200)="d7530da158ac0fbdce4a6dc390d04d3f48dbb4ed050c58ae0e61d45ad09748fc44f695f957d0a84c8c9b13057657acff9cfcfc2d5fea947988c02f937b443105510027ff", 0x44) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) 05:42:20 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0xffffffff, 0x0, 0x9, 0x400, 0xa, 0x1f, 0x1, 0x1000, 0x6, 0x1f}) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="8cff7cf916bd9d836b3445204c696e7578120000000000000000000008000000"], 0x20) syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x3, 0x2) 05:42:20 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c0015000000000001"], 0x4}}, 0x0) 05:42:20 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080), 0x0) mremap(&(0x7f0000da1000/0x6000)=nil, 0x6000, 0x1000, 0x3, &(0x7f0000497000/0x1000)=nil) [ 930.738368] SELinux: failed to load policy [ 930.757688] SELinux: security policydb version 18 (MLS) not backwards compatible 05:42:20 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, [], @raw_data=[0x80000000, 0x3, 0x2, 0x6, 0x9e, 0x4, 0x5, 0x0, 0x7, 0x3, 0x400, 0x1, 0x0, 0x5, 0x5, 0x3ff, 0xd2, 0xee9, 0x0, 0x2, 0x7, 0x3, 0x6ead, 0xffff, 0x7ff, 0x7, 0x5, 0x7, 0x1000, 0xee37, 0x7, 0x3]}) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) 05:42:20 executing program 3: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ac1000/0x1000)=nil, 0x1000, 0x1000, 0x2, &(0x7f0000d68000/0x1000)=nil) 05:42:20 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560a"], 0x4}}, 0x0) [ 930.869985] SELinux: security policydb version 18 (MLS) not backwards compatible 05:42:21 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x1c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000140)={r2, 0xbe11}, &(0x7f0000000180)=0x8) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) 05:42:21 executing program 5: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) mmap(&(0x7f0000faa000/0x4000)=nil, 0x4000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f00008dc000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000497000/0x1000)=nil) 05:42:21 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r0 = shmget(0x1, 0x3000, 0x2, &(0x7f0000498000/0x3000)=nil) shmat(r0, &(0x7f0000172000/0x4000)=nil, 0x4000) [ 930.921234] SELinux: policydb string length -2086814442 does not match expected length 8 [ 930.948116] SELinux: policydb string length -2086814442 does not match expected length 8 05:42:21 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560a"], 0x4}}, 0x0) 05:42:21 executing program 2: clone(0x80000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000180)=ANY=[], 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000080)={@local, 0x0}, &(0x7f00000000c0)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000000)={@mcast2, 0x7d, r2}) 05:42:21 executing program 3: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ac1000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000d68000/0x1000)=nil) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80200, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x59d, 0xcf, 0x80000000, 0x80000000]}) 05:42:21 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000da1000/0x6000)=nil, 0x6000, 0x1000, 0x3, &(0x7f0000497000/0x1000)=nil) r0 = socket(0x4, 0x6, 0x7f) setsockopt$inet_dccp_int(r0, 0x21, 0x4, &(0x7f0000000000)=0x6, 0x4) [ 931.014203] SELinux: policydb string length -103 does not match expected length 8 05:42:21 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3c6, 0x2000) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040)=0x2, 0x4) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="8cff7cf999fffbff5345204c696e75781200000001d86700060004003c9f030003000000"], 0x28) 05:42:21 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) getsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 931.082998] SELinux: policydb string length -103 does not match expected length 8 05:42:21 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560a"], 0x4}}, 0x0) 05:42:21 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x100, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x600001, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x100, 0x200) ioctl(r0, 0x0, &(0x7f0000000180)="14f86bd2983e1683b691f6dbeadeda1b2b7c4ea94f3b63686636c273e323a7583e841e50afc219dab1b7ce3a8ff1af80c73f3604c1b4f6caaee77ad962e74d553c457c643302dae6880b09ef9791963ee4bc5173618476dc2bf1a1e4a293500a6d4306e0f647d5cf3a3edf7023a38c0067e89f5ae7bc71763e751f13a31ee0d6b057634776751441348858421b99b2b534d8920ec96ae8de36353563f59a994719c4bb3ea7b65f49fe54d54ab839a5b22b272064bfd155ea") r2 = accept4$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000080)=0x10, 0x80800) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x7c933, r2, 0x1b2d8e1b) mremap(&(0x7f00002a1000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ce5000/0x1000)=nil) 05:42:21 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x408041, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000480)=""/52, &(0x7f00000004c0)=0x34) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r1 = syz_open_dev$usb(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x5, 0x4d8000) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000240)={0x6, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}]}) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000280)={{0x2, 0x3, 0x6ffc, 0x0, 0x7}, 0x2, 0x6, 0x401}) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="000c0000f9487411fc5d2dbd960416013471a5079c50d1b8bca0e3df6f4e22bf3d362aa92f211e4fb3ac8556a99c5edf6ba665b17e7b15da02de78c315049d3691edcc81daf1361aa81ce3ae19a1c27ec241147e8df70f4c77919f68de16d22a120000032a2f795ab0f31d84e9cd7b4b89eb825615b01e17852dd692f455852ef5adb22a0356b192a0de1077fa6bdad7d1030af7a1754c5e48b6a13965f3c692d4110d7d", @ANYRES16=r4, @ANYBLOB="107000fedbdf250100000000000000024100002264703a797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20004010}, 0x80) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, r4, 0x1, 0x70bd25, 0x25dfdbfd, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x0, @link='syz0\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x880}, 0x80) mmap(&(0x7f0000da4000/0x2000)=nil, 0x2000, 0x200010a, 0x12, r3, 0x0) mremap(&(0x7f0000da1000/0x6000)=nil, 0x6000, 0x1000, 0x3, &(0x7f0000497000/0x1000)=nil) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000000c0)=0x1, &(0x7f0000000340)=0x2) [ 931.189345] syz-executor.2: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 931.220931] syz-executor.2 cpuset=syz2 mems_allowed=0-1 05:42:21 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd2"], 0x4}}, 0x0) 05:42:21 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x1000) openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x10000, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xdbac8c9aad5b8f35, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040)={0x2, 0x8552}, 0x2) dup2(r0, r0) [ 931.290806] CPU: 0 PID: 15068 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 931.297950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 931.307305] Call Trace: [ 931.309898] dump_stack+0x138/0x197 [ 931.314812] warn_alloc.cold+0x96/0x1af [ 931.318796] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 931.323651] ? lock_downgrade+0x6e0/0x6e0 [ 931.327807] ? avc_has_perm+0x2df/0x4b0 [ 931.331786] __vmalloc_node_range+0x3c3/0x6a0 [ 931.336286] ? trace_hardirqs_on+0x10/0x10 05:42:21 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd2"], 0x4}}, 0x0) [ 931.340524] vmalloc+0x46/0x50 [ 931.343723] ? sel_write_load+0x1a0/0x1050 [ 931.347960] sel_write_load+0x1a0/0x1050 [ 931.352025] ? save_trace+0x290/0x290 [ 931.355827] ? sel_read_bool+0x240/0x240 [ 931.359891] ? trace_hardirqs_on+0x10/0x10 [ 931.364129] ? save_trace+0x290/0x290 [ 931.367934] __vfs_write+0x105/0x6b0 [ 931.371648] ? __lock_is_held+0xb6/0x140 [ 931.375706] ? sel_read_bool+0x240/0x240 [ 931.379767] ? kernel_read+0x120/0x120 [ 931.383658] ? __lock_is_held+0xb6/0x140 05:42:21 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd2"], 0x4}}, 0x0) [ 931.387716] ? check_preemption_disabled+0x3c/0x250 [ 931.392732] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 931.392747] ? rcu_read_lock_sched_held+0x110/0x130 [ 931.392757] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 931.403194] ? __sb_start_write+0x153/0x2f0 [ 931.403207] vfs_write+0x198/0x500 [ 931.403220] SyS_write+0xfd/0x230 [ 931.403230] ? SyS_read+0x230/0x230 [ 931.403240] ? do_syscall_64+0x53/0x640 [ 931.403250] ? SyS_read+0x230/0x230 [ 931.403260] do_syscall_64+0x1e8/0x640 [ 931.403269] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 931.439171] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 931.444359] RIP: 0033:0x459879 [ 931.447549] RSP: 002b:00007f056162ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 931.455256] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 931.462524] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 931.469789] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 931.469796] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f056162b6d4 [ 931.469801] R13: 00000000004c9b08 R14: 00000000004e1248 R15: 00000000ffffffff [ 931.530554] Mem-Info: [ 931.533882] active_anon:381188 inactive_anon:211 isolated_anon:0 [ 931.533882] active_file:8773 inactive_file:16570 isolated_file:0 [ 931.533882] unevictable:0 dirty:377 writeback:0 unstable:0 [ 931.533882] slab_reclaimable:14681 slab_unreclaimable:114269 [ 931.533882] mapped:59092 shmem:276 pagetables:12581 bounce:0 [ 931.533882] free:981029 free_pcp:313 free_cma:0 [ 931.567953] Node 0 active_anon:1524852kB inactive_anon:844kB active_file:34960kB inactive_file:66280kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:236368kB dirty:1508kB writeback:0kB shmem:1104kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1056768kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 931.596955] Node 1 active_anon:0kB inactive_anon:0kB active_file:132kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 931.623052] Node 0 DMA free:11812kB min:216kB low:268kB high:320kB active_anon:4096kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 931.649507] lowmem_reserve[]: 0 2580 2580 2580 [ 931.654176] Node 0 DMA32 free:126192kB min:36468kB low:45584kB high:54700kB active_anon:1520668kB inactive_anon:856kB active_file:34964kB inactive_file:66284kB unevictable:0kB writepending:1516kB present:3129332kB managed:2644888kB mlocked:0kB kernel_stack:21824kB pagetables:50284kB bounce:0kB free_pcp:1216kB local_pcp:700kB free_cma:0kB [ 931.684421] lowmem_reserve[]: 0 0 0 0 [ 931.688240] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 931.713586] lowmem_reserve[]: 0 0 0 0 [ 931.717399] Node 1 Normal free:3785808kB min:53420kB low:66772kB high:80124kB active_anon:0kB inactive_anon:0kB active_file:132kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 931.745572] lowmem_reserve[]: 0 0 0 0 [ 931.749377] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 2*4096kB (M) = 11812kB [ 931.762999] Node 0 DMA32: 343*4kB (UME) 206*8kB (UME) 167*16kB (UME) 44*32kB (UME) 5*64kB (UE) 25*128kB (UE) 75*256kB (UME) 93*512kB (UME) 48*1024kB (U) 0*2048kB 0*4096kB = 126588kB [ 931.779422] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 931.790187] Node 1 Normal: 52*4kB (UE) 330*8kB (UE) 273*16kB (U) 59*32kB (UE) 13*64kB (UE) 9*128kB (UME) 5*256kB (UM) 4*512kB (UE) 3*1024kB (UME) 4*2048kB (ME) 918*4096kB (M) = 3785808kB [ 931.807157] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 931.816040] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 931.824629] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 931.833490] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 931.842093] 25623 total pagecache pages [ 931.846067] 0 pages in swap cache [ 931.849510] Swap cache stats: add 0, delete 0, find 0/0 [ 931.854893] Free swap = 0kB [ 931.857897] Total swap = 0kB [ 931.860937] 1965979 pages RAM [ 931.864031] 0 pages HighMem/MovableOnly [ 931.868101] 333228 pages reserved [ 931.872218] 0 pages cma reserved [ 931.876598] SELinux: policydb string length -262247 does not match expected length 8 [ 931.886040] syz-executor.2: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 931.896229] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 931.901723] CPU: 0 PID: 15079 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 931.908934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 931.908940] Call Trace: [ 931.908955] dump_stack+0x138/0x197 [ 931.908971] warn_alloc.cold+0x96/0x1af [ 931.928555] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 931.933396] ? lock_downgrade+0x6e0/0x6e0 [ 931.937548] ? avc_has_perm+0x2df/0x4b0 [ 931.941536] __vmalloc_node_range+0x3c3/0x6a0 [ 931.946034] ? put_page+0x84/0xe0 [ 931.949496] vmalloc+0x46/0x50 [ 931.952675] ? sel_write_load+0x1a0/0x1050 [ 931.956889] sel_write_load+0x1a0/0x1050 [ 931.960938] ? save_trace+0x290/0x290 [ 931.964727] ? sel_read_bool+0x240/0x240 [ 931.968770] ? trace_hardirqs_on+0x10/0x10 [ 931.972982] ? save_trace+0x290/0x290 [ 931.976762] __vfs_write+0x105/0x6b0 [ 931.980458] ? __lock_is_held+0xb6/0x140 [ 931.984510] ? sel_read_bool+0x240/0x240 [ 931.988550] ? kernel_read+0x120/0x120 [ 931.992442] ? __lock_is_held+0xb6/0x140 [ 931.996501] ? check_preemption_disabled+0x3c/0x250 [ 932.001522] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 932.006982] ? rcu_read_lock_sched_held+0x110/0x130 [ 932.011985] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 932.016726] ? __sb_start_write+0x153/0x2f0 [ 932.021033] vfs_write+0x198/0x500 [ 932.024564] SyS_write+0xfd/0x230 [ 932.027996] ? SyS_read+0x230/0x230 [ 932.031603] ? do_syscall_64+0x53/0x640 [ 932.035554] ? SyS_read+0x230/0x230 [ 932.039159] do_syscall_64+0x1e8/0x640 [ 932.043026] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 932.047851] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 932.053035] RIP: 0033:0x459879 [ 932.056229] RSP: 002b:00007f0561609c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 932.063914] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 932.071187] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 05:42:22 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'os2.', '$em1\x00'}, &(0x7f00000000c0)=':\x00', 0x2, 0x2) 05:42:22 executing program 3: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="81534ab403d0a28a7563f8942c6acfa274707faa85dcec39a85a3e582e9c18c5fed6dcc0b9cd5f437f2f0ab5aee204eb0cd868bad1e3", 0x36) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x78) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="6d569f7ca786514f0da43d0f9bee38a90de8f1484844f5fa30b62d98d1d49e4b0b20b8c40607b0f82b01e93756531aa0c8ffeba6e56a0e608f67856265f0f64604d2df38e8fbbc36f8675b45cc5086c0dc41397accb92ac4e49bb43c5e6a9cf9a44c81506515009fa943b9e0d64b37814aa22b2c6753cb48bba8942bf4a3a2a31da37a77983e5f2af84537a2c17374109f118c82c780ea9c32fbaf52da", 0x9d) mremap(&(0x7f0000ac1000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000d68000/0x1000)=nil) 05:42:22 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000da1000/0x6000)=nil, 0x6000, 0x1000, 0x3, &(0x7f0000497000/0x1000)=nil) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10012040}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x800) 05:42:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d"], 0x4}}, 0x0) 05:42:22 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) 05:42:22 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685, &(0x7f0000000000)={0x1, 0x100000001, 0x1000, 0xce, &(0x7f00000000c0)="f4b0a6b3d2c3d5ae1ea650fffaa68061b9a73eed4231700963914ec4726c4c22f76c3a3c68b259c60d568944beea1dde10e76ff91de90a5f6a79be75e85ded5e429954e8194041c48bd205aaadd79f1ba97bb50d6161b557648cdd2dfa8fd9b408d0c34b18a222857820957cbd51747142145f7d6d3bd1bd83494513b5338f5c0ce15a929722a12db7488a7173ba3356608940196b96c877bce2fed4738aae5d32a034a4de4bef13f5d45810652b7085a444a54548997329fb281e569dbfc6bfc5aefb207848dcabc5c140bb12df", 0x91, 0x0, &(0x7f0000000200)="bed0c17ec50a74606c2586a5d28738ee775df7a88802423401063c463aea454fee859455f6774e00901a1965bc86e9b726d890599a8a832d7175123eb6ceff8c54c9c7ee4a9697f316cbdbfdc301fca2522cee65b7dc82a5be8dc8961ee2d5c977b0dd409f05e65908c61293ed256cf36d5938e17e95cbf91008c79ea96e6926dc64f8e5955ad8a4d7cbfffc04a93fb16a"}) r1 = syz_open_dev$swradio(&(0x7f0000000600)='/dev/swradio#\x00', 0x0, 0x2) write$FUSE_INIT(r1, &(0x7f0000000640)={0x50, 0x0, 0x8, {0x7, 0x1f, 0x2, 0x100041, 0x20, 0x7, 0x100, 0x4}}, 0x50) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000000480)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) setresuid(r2, r3, r4) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) [ 932.078445] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 932.085700] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f056160a6d4 [ 932.093041] R13: 00000000004c9b08 R14: 00000000004e1248 R15: 00000000ffffffff 05:42:22 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffb000/0x4000)=nil) shmget(0x3, 0x1000, 0x4, &(0x7f0000f2b000/0x1000)=nil) shmget$private(0x0, 0xd000, 0x40, &(0x7f000050c000/0xd000)=nil) shmget$private(0x0, 0x6000, 0x100, &(0x7f0000ff7000/0x6000)=nil) shmget$private(0x0, 0x2000, 0xabb165394b78fbfb, &(0x7f0000263000/0x2000)=nil) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x802, 0x0) shmget(0x2, 0x2000, 0x1, &(0x7f00008c2000/0x2000)=nil) r0 = shmget(0x0, 0x1000, 0x400, &(0x7f000040f000/0x1000)=nil) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x7000) 05:42:22 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x87, 0x3a840) write$cgroup_int(r1, &(0x7f0000000040)=0x9, 0x12) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) 05:42:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d"], 0x4}}, 0x0) [ 932.148860] SELinux: policydb string length -103 does not match expected length 8 [ 932.187145] SELinux: security policydb version 18 (MLS) not backwards compatible 05:42:22 executing program 3: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x8001, 0x0) ioctl$KDDISABIO(r0, 0x4b37) mremap(&(0x7f0000ac1000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000d68000/0x1000)=nil) 05:42:22 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200, 0x0) mremap(&(0x7f0000da1000/0x6000)=nil, 0x6000, 0x1000, 0x3, &(0x7f0000497000/0x1000)=nil) sendto$rxrpc(r0, &(0x7f0000000040)="d01cffe375f6f1", 0x7, 0x8005, &(0x7f0000000080)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0x70803a35, @mcast1, 0x215}}, 0x24) 05:42:22 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) 05:42:22 executing program 0: clock_nanosleep(0x7, 0x1, &(0x7f0000000080), 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000040)) 05:42:22 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) [ 932.322639] SELinux: policydb string length -103 does not match expected length 8 05:42:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d"], 0x4}}, 0x0) 05:42:22 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000003340)=""/196, &(0x7f0000003440)=0xc4) mremap(&(0x7f0000da1000/0x6000)=nil, 0x6000, 0x1000, 0x3, &(0x7f0000497000/0x1000)=nil) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0xffffffffffffffff, 0x1c, 0x1, @in={0x2, 0x4e24, @multicast2}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000180)={0x11, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18) 05:42:22 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x8000, 0x44842) write$P9_RREMOVE(r0, &(0x7f0000000040)={0x7, 0x7b, 0x2}, 0x7) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) socket$tipc(0x1e, 0x2, 0x0) [ 932.393807] SELinux: security policydb version 18 (MLS) not backwards compatible 05:42:22 executing program 3: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ac1000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000d68000/0x1000)=nil) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4002, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x6, 0x2, 0x1, {0x1, 0x6, 0xa05, 0x7ff}}) 05:42:22 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="8cff7cf92097b36a98687e296574c3e6e6633765a26d1c2423d4e0204c696e7578e90c000001d8670006000400"], 0x20) 05:42:22 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x2000, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000040)=0x80, 0x8) mremap(&(0x7f0000da1000/0x6000)=nil, 0x6000, 0x1000, 0x3, &(0x7f0000497000/0x1000)=nil) 05:42:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b4"], 0x4}}, 0x0) [ 932.494148] SELinux: policydb string length -103 does not match expected length 8 05:42:22 executing program 1: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000200)={0x561, {{0xa, 0x4e23, 0x0, @local, 0x7}}, 0x1, 0x9, [{{0xa, 0x4e22, 0x4, @rand_addr="e6ef578437c270b51fd42361b8aecbd4", 0xa4}}, {{0xa, 0x10000000004e21, 0x6, @rand_addr="6c7e384ef950eeb8bedd85cd0ca170a4", 0xaff3}}, {{0xa, 0x4e20, 0x3ff, @local, 0x6}}, {{0xa, 0x4e21, 0x3000, @mcast2, 0x7}}, {{0xa, 0x4e22, 0x3d3, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x100}}, {{0xa, 0x4e21, 0x1f, @local, 0x2a8}}, {{0xa, 0x4e22, 0x0, @ipv4={[], [], @broadcast}, 0x200}}, {{0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7f}}, {{0xa, 0x4e23, 0x62, @loopback, 0x3e}}]}, 0x510) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000080)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x56}) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) write$selinux_load(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x28) 05:42:22 executing program 0: mmap(&(0x7f0000989000/0x3000)=nil, 0x3000, 0x0, 0x5c933, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) lremovexattr(&(0x7f0000000040)='./file0/file0\x00', 0xffffffffffffffff) [ 932.581490] SELinux: policydb string length 1790154528 does not match expected length 8 05:42:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b4"], 0x4}}, 0x0) 05:42:22 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x401, 0x1) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0x4, &(0x7f0000aa2000/0x4000)=nil, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) munmap(&(0x7f00003af000/0x1000)=nil, 0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x5c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000da1000/0x6000)=nil, 0x6000, 0x1000, 0x3, &(0x7f0000497000/0x1000)=nil) [ 932.639153] sel_write_load: 12 callbacks suppressed [ 932.639157] SELinux: failed to load policy 05:42:22 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x8, 0x200002) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x40000, 0x0) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x3, &(0x7f00000000c0)=0x2) 05:42:22 executing program 3: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ac1000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000d68000/0x1000)=nil) [ 932.692328] SELinux: policydb string length -103 does not match expected length 8 [ 932.728444] SELinux: failed to load policy 05:42:22 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e20, 0x10000, @empty, 0x994}}, 0xffffffffffffffe0, 0x3}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000140)={r1, 0xffff, 0x7, 0x3, 0x1, 0x9}, &(0x7f0000000180)=0x14) recvfrom$inet6(r0, &(0x7f00000001c0)=""/43, 0x2b, 0x2000, 0x0, 0x0) [ 932.746939] SELinux: policydb string length -103 does not match expected length 8 [ 932.779231] SELinux: failed to load policy 05:42:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b4"], 0x4}}, 0x0) [ 932.844720] SELinux: security policydb version 18 (MLS) not backwards compatible 05:42:23 executing program 3: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000e84000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000259000/0x1000)=nil) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) [ 932.908561] SELinux: failed to load policy 05:42:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36"], 0x4}}, 0x0) 05:42:23 executing program 2: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x56fd43d25f7e339c) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)='SE Linux', 0xffffffffffffffff}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000200)={{0x1, 0x4, 0xc6, 0x0, 'syz1\x00', 0x101}, 0x2, 0x10000001, 0x40, r1, 0x3, 0x8, 'syz1\x00', &(0x7f0000000180)=['eth0\xa8\x00', '/selinux/load\x00', '#\x00'], 0x16, [], [0x3, 0xd51e, 0x3, 0x5]}) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xb) 05:42:23 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000adc000/0x200000)=nil, 0x6000) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e21, @local}, {0x6, @random="7573c69eb2b5"}, 0x12, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'ip6tnl0\x00'}) 05:42:23 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x3, 0x2000) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000040), &(0x7f00000000c0)=0x4) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) [ 933.049547] SELinux: security policydb version 18 (MLS) not backwards compatible [ 933.087392] SELinux: failed to load policy 05:42:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36"], 0x4}}, 0x0) 05:42:23 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="8cff7cf9010000005345204c696e75781200000001d845000600049d0700000090e3c8a2e93cc8f6a8d789f6f90b89365617de961d6deadf4272c25c9c35309699837e7e9c392f71b2e0553191f21ea0c05b12c62b21e7b5d2ffb7c9f92e69d82a8ad2be32a9a365fcc06cdcfd67871582ac88eb1d10b0ba07b836d8cab0fa531cdff6d3b1c7537f1196f7b2ff963d271ccfb9d83d1d15"], 0x97) 05:42:23 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000e81000/0x1000)=nil, 0x1000, 0x4000, 0x2, &(0x7f00005c5000/0x4000)=nil) [ 933.195226] SELinux: policydb string length -103 does not match expected length 8 [ 933.203856] SELinux: failed to load policy [ 933.218894] SELinux: policydb string length 1 does not match expected length 8 [ 933.235602] SELinux: failed to load policy 05:42:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36"], 0x4}}, 0x0) [ 933.246206] SELinux: policydb string length -103 does not match expected length 8 [ 933.266815] SELinux: failed to load policy [ 933.277947] SELinux: policydb string length 1 does not match expected length 8 05:42:23 executing program 3: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @broadcast, @dev}, &(0x7f0000000040)=0x4281) mremap(&(0x7f0000ac1000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000d68000/0x1000)=nil) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x40) r2 = getpid() write$cgroup_pid(r1, &(0x7f0000000080)=r2, 0x12) 05:42:23 executing program 5: mremap(&(0x7f0000da1000/0x6000)=nil, 0x6000, 0x1000, 0x3, &(0x7f0000497000/0x1000)=nil) [ 933.305062] SELinux: failed to load policy 05:42:23 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x80, 0x32a0a2dc55180e99) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x100, 0x70bd26, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40801) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$RTC_UIE_OFF(r3, 0x7004) 05:42:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951d"], 0x4}}, 0x0) 05:42:23 executing program 2: creat(&(0x7f0000000000)='./file0\x00', 0x90) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000001d867930600040007000000"], 0x20) 05:42:23 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x810, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180), &(0x7f00000003c0)=[&(0x7f0000000400)='vmnet1\x00', &(0x7f0000000200)='mime_typeselinux-bdev*@#ovboxnet1\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='wlan0#\x00', &(0x7f00000002c0)='md5sum:em0.self\x00', &(0x7f0000000300)='{vmnet0#!-]&!locgroup\x00', &(0x7f0000000340)='*mime_typewlan0keyring\x00', &(0x7f0000000380)='\'proc.bdev[:\x00']) 05:42:23 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$CAPI_NCCI_GETUNIT(r1, 0x80044327, &(0x7f0000000040)=0x4) 05:42:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951d"], 0x4}}, 0x0) [ 933.524542] SELinux: security policydb version 18 (MLS) not backwards compatible 05:42:23 executing program 5: openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/exec\x00', 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='.cgs\x02u\xf09\xae\x93\xc0\x95', 0x200002, 0x0) mmap(&(0x7f000099d000/0x1000)=nil, 0x1000, 0x12, 0x30, r0, 0xffffffffffffffff) mremap(&(0x7f0000da2000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000da2000/0x2000)=nil) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0xa090000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r2, @ANYBLOB="00042dbd7000ffdbdf250e0000002c00020008000d00010000000800090009000000080004000100000008000b000200000008000b000200000008000400010000003c00030014000600fe800000000000000000000000000831c6067de679a7000008000400635d000014000600ff0100000000000000000000000000013000010014000300ac1414bb00000000000000000000000008000800000000000800050001000000080005000000000014000200080007000900000008000600e0ffffff738655070935d72900f85f35c8d2bd84076d02c79b8cc158feae7b2b"], 0xc8}, 0x1, 0x0, 0x0, 0x20008080}, 0x4000000) getuid() syz_mount_image$reiserfs(&(0x7f0000000880)='reiserfs\x00', &(0x7f0000000080)='\x00', 0x2, 0x5, &(0x7f0000000440)=[{&(0x7f00000000c0)="ec95298b29158cb026f0d09281e89b1d676d5551e72d24444319056983ec3fd1bab459977bf9", 0x26, 0x9}, {&(0x7f0000000100)="bf10a78cccafa1b3ba5dc2afa15e50d78ae0ad75cb03470a82d0cd5b3df69826e7abe1690f67e145b1eac5c9ee6d67e3187a3252e1bb2479be7c498ae428bd", 0x3f, 0x3}, {&(0x7f00000001c0)="42f0c389c4279c00995961e7123b7ebe8eb755e5955026802aac98b148f797411d1bdb90b79f6613b079c38f694ad07eaa4097bdf48db7bb969f601272ba36bb3d09a042c789a8d87b4033caf02041ee56dd8269", 0x54, 0x8000}, {&(0x7f0000000240)="001e4d7e6eec7cec8eb96ad7e0e97c0e5935c1551dda589009cd4ec4c586757b96442a47cb330c531197a96105fc0a178ca2cc4236ca58a3d6dbffb9d1a277c0b742791f066a775f7f77079fca8819a3cfb2185c57dc22b02c3e108a43161e4970acda8325ffd5bfeead8e21e2d46f8d97220c9e9565069c953eeeb6ccfec1fabe9b87e214eb99aef8e53109db8521f21abb63f08d8d7d635b09fd3f2242b79c55b15d07ee5339c3dba241caf008ae9eaea78b9931e5eed66a7299b2a8ab53319daa6fbc556b34ad080828bb8d3e7b9f18c5fffa148d91f70bc46dd4ae8f52d1605a952349476f28dc37fdc884c9ff0c30633f59e54d", 0xf6, 0x3}, {&(0x7f0000000740)="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", 0x125, 0xfffffffffffffffe}], 0x80, &(0x7f00000004c0)={[{@resize_auto='resize=auto'}, {@jdev={'jdev', 0x3d, './file0'}}, {@tails_small='tails=small'}, {@data_writeback='data=writeback'}, {@jdev={'jdev', 0x3d, './file0'}}]}) [ 933.565067] SELinux: failed to load policy 05:42:23 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x0, 0x0) socket$kcm(0x29, 0x22cf52350f950b36, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x28, &(0x7f0000000100)}, 0x10) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000040)={0x7, 0x5, 0x3}) 05:42:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951d"], 0x4}}, 0x0) 05:42:23 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf97b0100005345204c696e75781200000001d867000600040007006cd83200003c9f030003000000"], 0x28) connect$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x324, 0x5, 0x10c2, 0x6, 0x9, @broadcast}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0xfffffffffffffffe, 0x200000) write$P9_RFSYNC(r1, &(0x7f0000000140)={0x7, 0x33, 0x2}, 0x7) fcntl$setpipe(r0, 0x407, 0x100000000) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000040)=0x5, 0x4) [ 933.588499] SELinux: policydb string length -103 does not match expected length 8 05:42:23 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) [ 933.668245] SELinux: security policydb version 18 (MLS) not backwards compatible 05:42:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0x3}}, 0x0) 05:42:23 executing program 0: r0 = socket(0x4, 0x802, 0x80000000) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='(\x00'}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, r1, 0x0) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) 05:42:23 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000da1000/0x6000)=nil, 0x6000, 0x1000, 0x3, &(0x7f0000497000/0x1000)=nil) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4) uname(&(0x7f0000000000)=""/15) 05:42:23 executing program 3: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x0, r1, 0x30, 0x1, @ib={0x1b, 0x4, 0x0, {"a5cef622a54a1b280b29dd797862cf23"}, 0x80, 0xd7f6, 0x1}}}, 0xa0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0xca2, 0x0, 0x10000, 0x7f70}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x0, r2, 0x10001, 0x8}) set_thread_area(&(0x7f0000000000)={0x6, 0x20000800, 0x2000, 0x3ff, 0xd14b, 0x7ff, 0x2, 0x9, 0xbb56b71, 0x74}) mremap(&(0x7f0000ac1000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000d68000/0x1000)=nil) 05:42:23 executing program 1: clone(0xc0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) [ 933.734453] SELinux: policydb string length 379 does not match expected length 8 [ 933.793380] SELinux: security policydb version 18 (MLS) not backwards compatible 05:42:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0x3}}, 0x0) 05:42:24 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x3, 0x400000) sendmmsg(r0, &(0x7f0000001d40)=[{{&(0x7f0000001640)=@ethernet={0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe9d13f4f7fd58c4c}}, 0x80, &(0x7f0000001c40)=[{&(0x7f00000016c0)="7638b4db187aa606b44c21e1bd9b600a0e25a15fa0271fd8a57f7ae586359048d1e94ff35bb08a149cb8b372e23d76b55fb12c8472f6bb73a32040510d48c3ea19f71a39bf68e157b07768a983c65f4b28510b530b06f172974f71ac9f1bc46d2f8a3c5134058573ba80046a383cd8364d9fc8a819b5b41de5c3b614d2301002d35d6328d57a320be89b016ea84b44643fdc404e1a30f48aaebee18bc5b2541cdc564cba72fa3321754e0a06ea61956453", 0xb1}, {&(0x7f0000001780)="7d074939cb714a59d29b24625dd6391605c4fc68a1e319b0a3eaf0f5c519eac4336be3b8204998087b07d7824580137655d56473015df85d1822bf9adaf925d03ae0dd53731717685036fb69e32b431ff443d9de8097913d141e5107a3a7f8e7d1f8c7a830a7d8d55ca78070653c0e53548ae5d5aa7c018b93f63a7df690fbea56a485004c46878fdad025e74f0d26eae3258b37", 0x94}, {&(0x7f0000001840)="569754b8d9d2acfe5e62497a4b70a1efc947f7ff93f4eb0b3618f10b846a02a07e2dda6c", 0x24}, {&(0x7f0000001880)="db6d51c4d48a342edf589e50df950e2e92747976b3dce551de753205dff028fc82b1c28189ea8856f9a308d5db1f2552366fcb78344ce1184ffdc43a8baeac24387c01d041507e73b5150d14d16da5735cdbfcb7c1666d4321a6f667f855b60c551b459521da2d4dc5472ca975be07c949c895a805780483a091959105812ca257a4ffcfd53fb76995a47b93f7aafdbc54ae02f5d688f3bf99e4ea7536a50603e002143b106478eb2dd2bdae9e0f58eb6bcc73014f7e7fdf2649ce4b01074af947c3fa8243d5bf44", 0xc8}, {&(0x7f0000001980)="643f3c521e0b202f1dcaae42859d3ea8a4f1a247376d0d280f7d4687491bda08ba062e11878817d8094f2e989182ad65a7020eb9954aab5e38c9b004e4e827b3bd223e3426bb371ddc", 0x49}, {&(0x7f0000001a00)="e7a1c29615063e463ab2056a34ea56fc25a2ebbdf5eff9e842364219a3d93a62f0ff7d6a6820047130a54275bceacb9b53c5ee1888a8ba39e8766c828643fcd083de", 0x42}, {&(0x7f0000001a80)="4a1e0c6d1b7590b0d4a6292457f4d70669ccb319342a9577a109762ebc6d92710db59b471763f98933b436e50e6643e9ade2d7785dc99e33f14b8dc16f7f0610f74ae60350d2b54c2ea1fa3e186c800ed8947c401ae6c711a3b247929bd0bcada3642942b09f3756b96fc817e8a250a6cd47885e6f9c995ef54532b8a20d4908fe193678ef46010c703dc65aedee74a30ed4ce8b56625002edfdde188730f95ac2a9d5096e5a10a0b280d67167df54e518684ac7e89f36430d742c05707c1dee3a18cf301112dba2dc26b7ca777c93bbfc554c6c24952af56c1ff3217c3a4076cec2a6e7a1", 0xe5}, {&(0x7f0000001b80)="ef49db51b9467469fb14ef7c67bd33814154ce3cd1f2c984d37f821455c7305611772bb0db7c3e317a584d9fe295ec438db9f807998afab7f792c835caf7ac1f62295f6fd1c4426e903207d2b7e2db2dd614cd86e3d3a1ce985a0610f55e99e0836fbf42d77d93d77e9cbd42de4c8a76b39be41ce50fd478648ea0d15b607be9ecd0ff0dd9c879326baa2d720b46483dcebef3", 0x93}], 0x8, &(0x7f0000001cc0)=[{0x80, 0x1, 0x5, "6f9eadaec75d1da040b2fcd58b26f13bd79563fc603fd763ab4915d8ae8e6b9d616666e90beb44de976a1a9541d6e15b5f1e3160fcba352a56ec6261918be2217a19ccb8212cb9e05d2a8d37da50412fa6511fab55081f21845e448dba7a4da5a73cf3680ffc84f446a4e049"}], 0x80}}], 0x1, 0x4000000) recvmsg$kcm(r0, &(0x7f0000001600)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000001540)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/215, 0xd7}, {&(0x7f00000011c0)=""/113, 0x71}, {&(0x7f0000001240)=""/90, 0x5a}, {&(0x7f00000012c0)=""/147, 0x93}, {&(0x7f0000001380)=""/167, 0xa7}, {&(0x7f0000001440)=""/240, 0xf0}], 0x7, &(0x7f00000015c0)=""/37, 0x25}, 0x40000040) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) 05:42:24 executing program 3: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ac1000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000d68000/0x1000)=nil) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000000000)={0x200, 0x8001}) 05:42:24 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000200)={0xa, 0x4, 0xfa00, {r2}}, 0xc) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1008}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r3, 0x800, 0x70bd26, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x2}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000240)={0x0, 0x4, 0x30, 0xdc5c, 0x4}, &(0x7f0000000280)=0x18) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000002c0)=r4, 0x4) r5 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x801) getsockopt$sock_int(r5, 0x1, 0x1f, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 933.887776] SELinux: security policydb version 18 (MLS) not backwards compatible [ 933.922942] SELinux: policydb string length -103 does not match expected length 8 05:42:24 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0x3}}, 0x0) 05:42:24 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) socketpair(0x5, 0x1, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r0, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000240)=0x80) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) r3 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x0, 0x1) r4 = semget(0x2, 0x7, 0x100) semtimedop(r4, &(0x7f0000000140)=[{0x0, 0xda, 0x800}, {0x3, 0x0, 0x1000}, {0x2, 0x1f, 0x410448ce00a11ea6}, {0x3, 0x8, 0x1000}, {0x0, 0x5, 0x1800}], 0x5, &(0x7f0000000180)={0x0, 0x989680}) sendmmsg(r2, &(0x7f0000002000)=[{{&(0x7f0000001440)=@pppoe={0x18, 0x0, {0x0, @remote, 'syzkaller0\x00'}}, 0x80, &(0x7f0000001880)=[{&(0x7f00000014c0)="1963310a040ee98a04791383ce4ba4eb6bfb8efd2f5a2b3440f60fc2fb9f13b048f36723517570b69fc45b29ce91fa8623c59f1a1080f683892e2eb73ffa63663ccff1e1eb6bc989898b67d92d5fb13bf5bf27267319da9a5dd1ec7d4dad0270f891631b9f96dfd081a75a69b70b171f169e75617dd250091451f9f88c85fe87ef1280e2629514bb2ec79f61e889441afbf5b61505afefe241d29c7cbb9cc4275f649e95635c5de24aa753d67f8bc6266b76eb5941e417972d231dfdf17c089dde743e467874c88f7e0d94921c", 0xcd}, {&(0x7f00000015c0)="a9d7b740c0e0ce820e094eaef654d7f29d83b30d28d7f02fdc24948fb52f2980c1bd185bd87ba9", 0x27}, {&(0x7f0000001600)="80c8902f32f5ec986958b145c2538d7905042549d17584b96909a81805d9e0296364b3dff5e74c3c0233511787885ba32b4beefb260483fd85604f72dd5cca48c4b8d53ab84b57e7bd5caebd94f510bfa9d6b9d56d5d540bc9e5583af67538e6194f7e183ec1135aa4d7cd882f9f3b47f693415c4f2281c6e94943f9bfa84e061ac02661c85d30c1b071409cd6fb3167b91f297ca5c5fcfb39c0704a0c30ee35cb9c63be9a", 0xa5}, {&(0x7f00000016c0)="c50ad849fc9d615c04c012904587a502e5770aff97e5659e531a704f689029469eb69f15213f902d4f6d33a6ae961653d30cbfa7e13730317af24a8a1169b3bd3ecc9ca3154fbf86e94db5947f2ad77bd790672dfc092a29aee3aca4997a7641b527b82337cc14a8ac5e0b2ec7ce8d3ca6330f88304dbde90f7a573c518ddf9c3c8984036c9b9d6ad3c231f58f33", 0x8e}, {&(0x7f0000001780)="9941f8e16005567071a87fbde5f98dbcdf14dc5ced2ecdeb1f376193dc6becaca3081d5cb4faca12937ed7a386c08515cef442c5fbee4b6ae79a2303a9bca257d431f9bd70954a0af132540d9715e9ea3bbeb3af5e6da930e85120e8eb23cfdcc1f137205f295f1ef8198de2e295eddd252b39d496bb560ef8fb14fa900a1ab53823b2e45a6f4ed9516e14013d18091d840dead0198dc0070a26886f7f2f9ea81c89ef1f36918925dbf3312d9ea9973535a2d4630fffd093627b8fa50d5e69d2447b8b8557215c02a4e97abcdf8f76113aedc41046b07dff2e", 0xd9}], 0x5, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x1d0}}, {{&(0x7f0000001b00)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0x3c823a3f}}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001b80)="54da096e1da10120d9c013b0bc43c2dc3b7b8c18770882df5445c0a853c3670b1ba6e4b3515c965e73d398368d788b29366d1a6bfff8fb060b9e3636ec0ebef9ed573392f4aba2292b62a0d5b81b", 0x4e}, {&(0x7f0000001c00)="2754792d4b7a162a980f197336be565bf276808ce9de0525d6c4a1033221491a76c336b9c9640c3fb3ebcfe661ec0596403dd75a4f447073f87ae2cedee7b476bb7ab03f3ab02dffc8727f4f694ed5d92a43c3a1781e6647cd3aa429c12cebfa837a2305c2c849ca8a9f2155abd410782ae0", 0x72}], 0x2}}, {{&(0x7f0000001cc0)=@sco={0x1f, {0x8, 0x23, 0x200, 0x3f, 0x6, 0xd8}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001d40)="090683d0ba64c95187eb6eddfe97d7a8ffa6456cc94beae8b729ebae25a8d2322956b2dcba93aee99aa920884c0ae0e6e6941148c77269eaebad67a48e61c3954ee0d4a1e12a9093a5d41ee9b09375fe18a8264860b9721dbd6176c89a29bfdeb71a7aacdf8c9813a2dd6402147bffeb7e08732c019cc137d0d3ca291b7cddd9856a57d531f48d9af33778572f0d8aeabe1767514b7c583724d503e9b6b598ef6757dfc4098b8cccf0945c707fbf8cb982a723705e58b490898101393d48a847c3161f33ecf0e3e8261a189d098ccec8ddf920c320ba2c089b4df135851c71d29fe7760f5deeea399da79e69a762b1", 0xef}], 0x1, &(0x7f0000001e80)=[{0xd8, 0x105, 0x2, "86154897a5a3f1df72e32a5ec98a5e8367574ed93904eb19da94f8888aaa9f8d3bf886065cdb3d1ff0aa1c693c63163ff63863f06584c1bd67c392bf2e6dce52fbc37405124c9a458355732f6c17b3268bc12cbaab528f90e88474dcd216c9509dad97fd22562c18e19dad26615bcf76a4f49af10f6d8a68cf87e8fbb6b4a4fd3ec3282bbb2e40e5aea88eb4383f52b31f6fdb24319ded76737b16a8dff78a95eb2ac843176349409ebe65e758301fdc0e88edec85fd2550cd1b3c1e817893be87d31f9545"}, {0xa8, 0x112, 0xbe, "2bd14d611c7e816d7b2562706fd105203d74ce2ed1faff423b3ae4f0e6d1ff5a30e970eb57348bed0d509ac54589e217126221447f3ee1323072b55331b167f3c44e88c7e70ef1c6b89d26eeff42a8c5ca3592f303fb30d7145e0e1c8d4c73e958c597a85c07af4d971b8b8170223932f27f5750ce7424c47b9d1e40310cdacc6cc02b9bd07d909f431da3497a2e2b76bb55031bc3b1d6"}], 0x180}}], 0x3, 0x40) syz_open_dev$adsp(&(0x7f0000001400)='/dev/adsp#\x00', 0x80000001, 0x28000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x108, 0x5c831, r3, 0x2) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f00000020c0), &(0x7f0000002100)=0x4) mremap(&(0x7f00006b6000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000497000/0x1000)=nil) recvmsg$kcm(r3, &(0x7f00000013c0)={&(0x7f0000000280)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/23, 0x17}], 0x2, &(0x7f0000001380)=""/23, 0x17}, 0x40002020) [ 934.018071] SELinux: security policydb version 18 (MLS) not backwards compatible 05:42:24 executing program 0: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, r0, 0x0) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) 05:42:24 executing program 3: r0 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x6, 0x5bd6902086234576) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ac1000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000d68000/0x1000)=nil) r1 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0xe25d08cceb41156c) [ 934.065812] SELinux: policydb string length -103 does not match expected length 8 05:42:24 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) fchdir(r0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) 05:42:24 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0x3}}, 0x0) [ 934.116555] SELinux: security policydb version 18 (MLS) not backwards compatible 05:42:24 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) connect$caif(r0, &(0x7f0000000040)=@util={0x25, "5780e9b0dfd5fe77e49a8559c51a5fec"}, 0x18) 05:42:24 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0x3}}, 0x0) 05:42:24 executing program 3: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x1, 0x0, 0x10000, 0x1}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f00000000c0)={0x1}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000080)={0x3, r1}) mremap(&(0x7f0000ac1000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000d68000/0x1000)=nil) 05:42:24 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000da1000/0x6000)=nil, 0x6000, 0x1000, 0x7, &(0x7f0000bc4000/0x1000)=nil) [ 934.259732] SELinux: policydb string length -103 does not match expected length 8 05:42:24 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) r1 = syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0x20007, 0x40006) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$kcm(r1, &(0x7f0000000180)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @empty}, 0x0, 0x3, 0x1}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="9bab54088cbf4735b68b974044d5", 0xe}, {&(0x7f0000000200)="4b4f94c855e2953d2ca128da16f3b0a3db61e615e7f78e2f96f68c4dcd82fa3d1c81340966307c95c4b72312389b3a159efe76c66d166eafbebbe5e37fd17d2c2acf3d3acc5b68886888e216173a96cd31dd71e381eca14adf37e0a8bfc40eae0a27f6c45495219fc51041853109d5dd41ba9764406249258776ffa5d1c4c1402112314c2915041d2946a3353060e25181e82a1ef591b903ad99172334546b14463a8d45c14ee9dae73fed925ab4c1fa211966c16739ebf5f22910b422", 0xbd}], 0x2, &(0x7f00000002c0)=[{0x1010, 0x103, 0x5, "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"}, {0x10, 0x11, 0x30}, {0xa0, 0x103, 0x2, "e0c5d75e1ee42130a0ef96593838f3e377378330bd85d53ab0c7009c667f57caf38a1795e22221cc3213eccee129c5259fad97bb91e52ff116b361011b39702c2ecd3e2f639432eb176e29f543bd3cadc81c697bd5e092e57a7a8d8f0b593c1551be896179afb0150edcc2287872c5015ec4c02f5406ecc2c0b057901a412f7a5689bced7b38929e9feea01593"}, {0xb0, 0x10c, 0x5, "5ddcd964b7cb201b338cabdbd1c5a2630c2ba3ccac807c268a41639f34d5845fe18982b444a171cef1ee14d19cbad76adb6955595f4d2b2f9e633ded82c573a18d3db940104b7a9071de7bb43abe89b5eb02a15921da0f4808735ad01631e81856c2ccc043238c000f6d76d93ac13795fb72d7064a0937e891f117d9bd71d8e8a05d74c9028352b5a6314d9d1fd0ab400270c6dd7ec1962303827e"}, {0x28, 0x111, 0x0, "4801f731adf00f120bcfecbffe2f3aecf56ba6d70091"}, {0x50, 0x10d, 0x4, "6545a05740e384184ec1b2875c2ca56c31b8799dca92bb1106a8f95b9bfe19a58846c7752f21f7b3246331639f032bad6f13738b8ca3888a9cb3"}], 0x11e8}, 0x8000) openat$full(0xffffffffffffff9c, &(0x7f0000001500)='/dev/full\x00', 0x200000, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000000)) 05:42:24 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000040)={0x0, 0x401, 0x6c}) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f00000000c0)) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) 05:42:24 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000fe7000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) 05:42:24 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0x3}}, 0x0) [ 934.407225] SELinux: security policydb version 18 (MLS) not backwards compatible 05:42:24 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x7f, 0x40200) sendto$inet6(r0, &(0x7f0000000040)="89af44c5a09736d3091adfbfaf97122e70fc47a119307b771020aeeb7719db0240687b0189696e4f7c3f7eda069f4565c0a8f9caf4d3ce65066cf0ddf6cd1c76d42aa786cfa38af58c148168444c43df4392f2e052e29d742977dcf94fa1628a83c180c1796fa298a9a5657c105e9d463654e7b702934efe48693d28d49438d56e1b4b3cdab1cfceb6496ad4811755b5765ea5d1cfdce795d27ed829f69a9f300f7b682581dc4f7c11422f4aa9f461f7386e10b94913e54c7a2b0c96cc81bb2d2132b8b27cb03bfe0b290ad2b8e91ebde461d4d25c12332da7cdf9", 0xdb, 0x20004880, &(0x7f0000000140)={0xa, 0x4e21, 0x401, @ipv4={[], [], @loopback}, 0x7ff}, 0x1c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ac1000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000d68000/0x1000)=nil) 05:42:24 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000da1000/0x6000)=nil, 0x6000, 0x1000, 0x3, &(0x7f0000497000/0x1000)=nil) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') unlinkat(r0, &(0x7f0000000340)='./file0\x00', 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="e4018000", @ANYRES16=r1, @ANYBLOB="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"], 0x1e4}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) 05:42:24 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000200)=""/4096) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) 05:42:24 executing program 1: clone(0x2a002000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_MCE_KILL(0x21, 0x1, 0xde1dc3fe92aac809) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={r2, 0xfff, 0x30}, &(0x7f00000002c0)=0xc) write$selinux_load(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x28) 05:42:24 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000000)=""/220) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000100)=0x10, 0x4) syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x1, 0x2) [ 934.465962] SELinux: policydb string length -103 does not match expected length 8 05:42:24 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0x3}}, 0x0) 05:42:24 executing program 3: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x2000, 0x0) fstatfs(r0, &(0x7f0000000040)=""/115) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ac1000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000d68000/0x1000)=nil) 05:42:24 executing program 2: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="8cff7cf908000200535b204c696e7578f4ffff064a235abc9b7f7f375c96dd6d6f8bf94b7c2d895600"], 0x20) [ 934.578692] SELinux: security policydb version 18 (MLS) not backwards compatible 05:42:24 executing program 0: openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/member\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/context\x00', 0x2, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) mmap(&(0x7f00000fe000/0x3000)=nil, 0x3000, 0x1000009, 0x405c831, r0, 0x0) shmat(0x0, &(0x7f0000100000/0x1000)=nil, 0x6000) 05:42:24 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000000)="cf3e562edcbf70e8b6356e91de608e9fd3318b0f454b4b4e0030d304fb99b0f42c7f5e4eb371c0455deb96af697c3fde3089159fa95c7baf7b9f7cc860fd31375086df0f035f6225e3eca486377d98e8cb8880a7ce", 0x55) 05:42:24 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0x3}}, 0x0) [ 934.677982] SELinux: policydb string length 131080 does not match expected length 8 05:42:24 executing program 3: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x810, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x300, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x4, 0x2, 0x1000, 0x2000, &(0x7f00007b1000/0x2000)=nil}) bind$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xa4e5, 0x200000) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r2, 0x3ff, 0x8, 0x8, 0x7}) mremap(&(0x7f0000ac1000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000d68000/0x1000)=nil) fallocate(r1, 0x3, 0x7, 0x3289) ioctl$RTC_WIE_OFF(r0, 0x7010) getsockopt$packet_buf(r1, 0x107, 0x1, &(0x7f00000001c0)=""/234, &(0x7f00000002c0)=0xea) 05:42:24 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x47d, 0x400000) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040)=0x8, &(0x7f00000000c0)=0x4) 05:42:24 executing program 0: mmap(&(0x7f0000f9c000/0x2000)=nil, 0x2000, 0x11, 0x5c831, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x2000, 0x78000520, &(0x7f0000174000/0x2000)=nil) r0 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000f9d000/0x1000)=nil) r1 = socket$inet_sctp(0x2, 0xcb7b32fdc6aa4109, 0x84) setsockopt$inet_buf(r1, 0x0, 0x24, &(0x7f0000000000)="4670cec69abd443adf7d6271b593a22a2e32cc11ce353d86dcc2641e6fdc6c5ba43c0a77c51ede2cb39a0363d0fc64e1f74f0c338c5a46a567420dda734a0856c6a174a5f5457857e366d19a236fb4cbfb3f62f213029f25a189dd2dca9dced1fa3d1fcf0434c0546147642910832db8", 0x70) shmat(r0, &(0x7f0000f9d000/0x1000)=nil, 0x1000) 05:42:24 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0x3}}, 0x0) [ 934.761535] SELinux: policydb string length -103 does not match expected length 8 [ 934.791377] SELinux: policydb string length -103 does not match expected length 8 05:42:24 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x23) 05:42:24 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000da1000/0x6000)=nil, 0x6000, 0x1000, 0x3, &(0x7f0000497000/0x1000)=nil) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000040)=0x800) 05:42:25 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={0x800}, 0x8, 0x800) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x4) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) [ 934.861153] SELinux: security policydb version 18 (MLS) not backwards compatible 05:42:25 executing program 3: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000e93000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000d68000/0x1000)=nil) 05:42:25 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000340)='/dev/snd/pcmC#D#p\x00', 0x1f65, 0x400) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000040)=0x1000, &(0x7f0000000080)=0x4) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x1f, 0x1a, 0x11, 0x19, 0x2, 0x8, 0x5, 0x12e, 0x1}}) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) 05:42:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0x4}}, 0x0) 05:42:25 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e20, 0x100000001, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1f}, {0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, 0x299, [0x7, 0xd9, 0xffff, 0x0, 0x80000000, 0x8000, 0x7]}, 0x5c) mremap(&(0x7f0000da1000/0x6000)=nil, 0x6000, 0x1000, 0x3, &(0x7f0000497000/0x1000)=nil) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0), 0x4) [ 934.979118] SELinux: policydb string length -103 does not match expected length 8 05:42:25 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x400000, 0x0) connect$caif(r1, &(0x7f0000000040)=@dgm={0x25, 0x80, 0x48dac4fe}, 0x18) 05:42:25 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) write$selinux_load(r0, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "f3729fca7dc93a3167998a8f40c3b32cc876d0099a7d281132ac1280e47699876ecd696458704167029cde73aee1e2110652584a3022f0d710536104e9f0aefd50330888c8f375011128ecff64848152668f404b0a40aa949068ea6da4ccb166cfbc2c87dae16ee04f4abf9508d2b35c08d57ad82c687ad8fb87b3e73bf5dde894d4bf8b0b9458381a73ac10204ec0d29260d17ad0f9cf03d57cb915c813564d58bdac8e5411337f7c71f7db6c2abf3acc5dbaec2e6342fb77"}, 0xc9) 05:42:25 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x101082, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x400) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mremap(&(0x7f0000ac1000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000d68000/0x1000)=nil) [ 935.019662] SELinux: security policydb version 18 (MLS) not backwards compatible 05:42:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0x4}}, 0x0) 05:42:25 executing program 0: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f00000000c0)={{0x3ff, 0x0, 0x2, 0x4, 0x101, 0x7}, 0x1000, 0xfffffffffffffffb, 0x9, 0x7ff, 0x7, "70debb33e0bdea5fc573cf956941f9231a27870bc1e88e818b09fc0d76fe75881613fb98ce7967335085f2c49702790fdda60a04a7322c28ecf9d0b5bc4aee77677c65cfe573d9ef0867479af59ae91febf145cc283ef4cfdec29579baba2f64c8b14e0f56378ad2a8bdde345697753ae86a1d64d6365deefd14631bb24e2c9f"}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x112, 0x5c831, 0xffffffffffffffff, 0x10000000000004) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) 05:42:25 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000da1000/0x6000)=nil, 0x6000, 0x1000, 0x3, &(0x7f0000497000/0x1000)=nil) memfd_create(&(0x7f0000000000)='mime_type-self\x00', 0x2) 05:42:25 executing program 1: clone(0x2004000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRES16=r0], 0x69ffc9a0) [ 935.146272] SELinux: policydb string length -103 does not match expected length 8 05:42:25 executing program 3: ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x3, 0xffffffffffffffff, 0x1}) r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x1, 0x800) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10010, r0, 0x0) mremap(&(0x7f0000ac1000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000d68000/0x1000)=nil) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="04002bbd7000fbdbdf2511000000080006000800000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x4c050}, 0x4) 05:42:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0x4}}, 0x0) [ 935.210821] SELinux: security policydb version 18 (MLS) not backwards compatible [ 935.241103] SELinux: policydb version -895520013 does not match my version range 15-31 05:42:25 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="8cff7cf94c696e75781200000001d867000600040007e6ff00000000000000000c0367739b7efd774a262d34344ad83d14834a2ef2f6a856f438641948507efea063a6a7d08cb50a21cadcdbed97e4a1e2b33e0856deb9f1353dd32557437b659ce8e6d72e5b5a43de14be846202d7b1ce866f09a0dd39e2f932156125eb52225c814329788e79fa9d5a90b522"], 0x20) 05:42:25 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000000c0)={'lo\x00', {0x2, 0x4e20, @empty}}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x4) mremap(&(0x7f0000da1000/0x6000)=nil, 0x6000, 0x1000, 0x3, &(0x7f0000497000/0x1000)=nil) [ 935.268720] SELinux: policydb version -895520013 does not match my version range 15-31 05:42:25 executing program 3: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f000055c000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000d68000/0x1000)=nil) 05:42:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aa", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0x4}}, 0x0) [ 935.351267] audit: type=1400 audit(1567230145.429:6796): avc: denied { map } for pid=15556 comm="syz-executor.3" path="/dev/vcsa1" dev="devtmpfs" ino=13701 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file permissive=1 [ 935.391699] SELinux: policydb string length 1970170188 does not match expected length 8 05:42:25 executing program 0: r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x80800) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000580)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000000780)=0xe8) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f00000000c0)={0x2, 0x4e21, @rand_addr=0xe0e0}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000100)="55e346c68da0f6b9bc5bb6a0b552311512a40a93dc7ea0e4e8a7a81536b1d0aea5a0c7863d4b3da130977a3803b62448e06cbbbdc2cca69eb3e67db847a71aee7f63e5fa9f80b99b5a4b2d09b991e582772988646cd984b8c9ce12cbced36b39d9062536ff313b26ecb5b081", 0x6c}, {&(0x7f0000000180)="e53095ce1b5704f3d0eedfdd46114d1b6ce1de119404961e86b1b11072c0f310cb33a341e1256d2026951c0a1e35433f56d75a35b35e723f19111c463d95cce037212acea9be96523e5e5ae8743a3d0ada68bc7b0b8e7ea0d4ae11639a5562240896bde05d1fd48530cf2cb48098d95a84d2aefb121628b300de2aea063eb20651d851c8b3fba62b9b76b9b5027d38a10623ab9f0071461737caee25b4ba4e9fb3a0507945621c3923a8966f8116f43837dadc1f84bb1100f380748f61fb690c187aa4c1f4a023fce04e7600c5ae83aa5956338a7e1e1a46296b66ca", 0xdc}, {&(0x7f0000000280)="c0f2bc7fd2a7c4a5a212ee2a041b59", 0xf}, {&(0x7f00000002c0)="597eaac05fe9801e866bbabb45b7d7985a6afdf81bbdfa00060148b2dbde89e6aeda55fc9d542efc20dc89b68e068e6081d749d1f93ea9058aa9e773a031d1ccff14602c41ebe0efbcff5e0341506ac6619942c334ea7b3b26871bbbc5abe0dbd0efa436dd0e1b4403f65c628418e414df0feea8347a7870896a5b5211bd", 0x7e}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r1, @ANYBLOB="7f000001ac1414aa000000001400000000000000000000000100000007000000000000001c000000000000000000000008000000", @ANYRES32=r2, @ANYBLOB="ac1e013e857f2fd847e901000000020000000080000000000000000000000007000000072353e0000002ac14141000000004ac1e000100000007e0000002ac1414bbac1409aa44340501ffffffff0001000000000d35000000000000000300000006ac1414aa00000005e0000001000000060000000600000000071705e0000001ac1414aa7f0000010000029bffffffff0000110000000000000000000000f9ff00000300000000000000140000000000000000000000010000000600000000000000110000000000000000000000010000000100000000000000140000000000000000000000020000000942098cb51791b47823ea27ae2bbbe34d613642d594c6e8879c262cb270d66222e1dde0666160bd6da3ba29f6c1394591915fe49c70f0355455557bf875c623973c1871370b44d9b4751c664e48a87c80de07f6dd26e1aea6c2c74243e9cd9840f34fdd55907c5a792ee120fa16915e"], 0x138}, 0x40080) 05:42:25 executing program 2: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) write$selinux_load(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000001d867000600040307000000b28521a27a376a9aca9b1e3658bc"], 0x20) r1 = getpid() move_pages(r1, 0x2, &(0x7f0000000040)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000080)=[0x7f8, 0x3ff, 0x5, 0x7, 0x200, 0x7f, 0x3], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) 05:42:25 executing program 5: mmap(&(0x7f0000a52000/0x4000)=nil, 0x4000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000da1000/0x6000)=nil, 0x6000, 0x1000, 0x3, &(0x7f0000497000/0x1000)=nil) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40, 0x0) sendto$ax25(r0, &(0x7f0000000040)="ae991a163d628c5a19bda1c4dc678a3306ad939e1fa8d40011edc59a59d0529ebdb4dded4b427b12d3eaeb99e091eece475dee3ca55e4f98d1b6f8aaad594b57307c3b03e2e905602823873ab3754563b82e7ddd4ee862aacbd8d03021e0e0c0e2ccf32b507bab8265b2b365ed753dbafe687a4bdb8203a51881adc44093", 0x7e, 0x10, &(0x7f00000000c0)={{0x3, @bcast, 0x3}, [@bcast, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) 05:42:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aa", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0x4}}, 0x0) 05:42:25 executing program 3: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f00002bc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f000010d000/0x4000)=nil) r0 = fcntl$getown(0xffffffffffffffff, 0x9) capset(&(0x7f0000000000)={0x20080522, r0}, &(0x7f0000000040)={0x4, 0xfff, 0x2, 0x200, 0x7, 0x7}) [ 935.558434] SELinux: security policydb version 18 (MLS) not backwards compatible [ 935.598750] SELinux: security policydb version 18 (MLS) not backwards compatible 05:42:26 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000000)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "11f958f1011b7dcb17fb65ad6f29764449a2c6b09d84cec527"}, 0xffffffe7) 05:42:26 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x644180, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x9, @ipv4={[], [], @multicast1}, 0x2}}, 0x1, 0x200, 0xff, 0x301e, 0x4}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000003c0)={r1, @in={{0x2, 0x4e24, @loopback}}}, &(0x7f0000000480)=0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0xffffffffffff5b2b, 0x202000) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f00000000c0)=0x1, 0x4) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000180)={0x1, 0x8, 0x4, 0x200000, {0x77359400}, {0x3, 0x1, 0x7, 0xff, 0x200, 0x1, "34c7ae56"}, 0x20, 0x3, @planes=&(0x7f0000000140)={0xfffffffffffffffd, 0x6, @fd=0xffffffffffffffff, 0x5}, 0x4}) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x11, 0x5c831, r3, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000200)={{0x7, 0x9}, 'port0\x00', 0x4, 0x40, 0x4, 0x3, 0x3, 0x100, 0x4, 0x0, 0x2, 0xfffffffffffffff9}) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) 05:42:26 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aa", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0x4}}, 0x0) 05:42:26 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x101000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000000, 0x5c831, r0, 0x0) mremap(&(0x7f0000da1000/0x6000)=nil, 0x6000, 0x1000, 0x3, &(0x7f0000497000/0x1000)=nil) r1 = getpid() prlimit64(r1, 0x8c9256d5551a7590, 0x0, &(0x7f0000000000)) 05:42:26 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x20) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x220000, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000380)=""/111) r2 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_INSTALLED(r2, 0x80024322) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @mcast2, 0x1}, @in6={0xa, 0x4e23, 0x7, @remote, 0xb5e}, @in6={0xa, 0x4e23, 0x7fffffff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7818}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x17}}, @in6={0xa, 0x4e23, 0x1, @local, 0x8}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, [], 0xd}, 0x800}, @in={0x2, 0x4e22, @broadcast}], 0xcc) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x40000, 0x0) 05:42:26 executing program 3: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000040)={0x1, 0x2}, 0x10) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f00000000c0)={0x0, 0x0, {0xfffffffffffffffe, 0x8, 0x81, 0x7}}) mremap(&(0x7f0000ac1000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000d68000/0x1000)=nil) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000100)=0xfff) 05:42:26 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/load\x00', 0x2, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xa000000000000000, 0xa0343516c2da4687) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f00000000c0)) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) 05:42:26 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe8000"/48, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0x4}}, 0x0) 05:42:26 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) lookup_dcookie(0x10000, &(0x7f0000000000)=""/216, 0xd8) 05:42:26 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040)={0x81, 0x9, 0xfffffffffffffffb, 0xd69a, 0x0, 0x2}, 0xc) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x1, 0x0) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000140)) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="8c2fbfec02954f3cff09000000ffff5345204c696e75781200000001d835f4465776f28ae68dd38baca96606c0670006000400070000003c9f030003000000"], 0x28) prctl$PR_GET_TIMERSLACK(0x1e) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) getcwd(&(0x7f0000000000)=""/59, 0x3b) [ 936.229499] SELinux: policydb magic number 0xa8deff8c does not match expected magic number 0xf97cff8c [ 936.235508] audit: type=1400 audit(1567230146.299:6797): avc: denied { getrlimit } for pid=15610 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=process permissive=1 05:42:26 executing program 3: 05:42:26 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'system.', ']nodev\x85wlan1~\x00'}, &(0x7f0000000080)=""/112, 0x70) r0 = shmget(0x1, 0x1000, 0x78000000, &(0x7f000046e000/0x1000)=nil) shmat(r0, &(0x7f0000eea000/0x2000)=nil, 0x4000) mremap(&(0x7f0000da1000/0x6000)=nil, 0x6000, 0x1000, 0x3, &(0x7f0000497000/0x1000)=nil) 05:42:26 executing program 2: clone(0x2000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000180)=0x7) ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/create\x00', 0x2, 0x0) signalfd4(r1, &(0x7f0000000000)={0x10000}, 0x8, 0x80800) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x7, 0x40000) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000080)={0x32, @rand_addr=0x1, 0x4e20, 0x2, 'wlc\x00', 0x12, 0xc8, 0x7f}, 0x2c) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000000c0)=0x3ff) write$selinux_load(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000001d8670006000400070000007f7b9b885bafaa20ce6d8a06489e5e0f18f7ee65bc3daa6157269f2409ee47d101cff1aba6364b27602577f274a661d2043a91a9fbc06b7f18bf4a066fd3e72154a3a808632787130100008000000000e4ba02849fe6d7c1403af30014d82c21a7b6144b2f04947eb225fe975e22cf40b472e8ab174dae121079fb5655d587a544f916d55a08c520334284d5c1509d913f43d901363b6c6e30423014443175fb00a1739522d0a99c975ff2f0af143209f421ad4e4ac3675e28674421f8e300"], 0x20) [ 936.303651] SELinux: security policydb version 18 (MLS) not backwards compatible 05:42:26 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x101000, 0x8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x401, 0x4) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) 05:42:26 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000da1000/0x6000)=nil, 0x6000, 0x9000, 0x7, &(0x7f00009dd000/0x9000)=nil) 05:42:26 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x1) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000040)={0x1b, 0xffff, 0x6, 0xa, 0x40}) [ 936.436497] QAT: Invalid ioctl 05:42:26 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe8000"/48, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0x4}}, 0x0) 05:42:26 executing program 3: 05:42:26 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x4, 0xab0dbacdd8c52fa7) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4048000) [ 936.497659] SELinux: security policydb version 18 (MLS) not backwards compatible 05:42:26 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000da1000/0x6000)=nil, 0x6000, 0x1000, 0x3, &(0x7f0000497000/0x1000)=nil) r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0xffffffffffffffff, r0, 0x0, 0xd, &(0x7f0000000080)='cpusetlnodev\x00', 0xffffffffffffffff}, 0x30) timer_create(0x4db90925d03c1a87, &(0x7f0000000340)={0x0, 0x36, 0x6, @tid=r1}, &(0x7f0000000100)=0x0) timer_getoverrun(r2) r3 = openat$vcs(0xffffffffffffff9c, 0xfffffffffffffffe, 0x202, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000000c0)={r3, 0x3, 0x90d2, r3}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x8, 0x9, 0x3f, 0x1, 0x400}) 05:42:26 executing program 3: 05:42:26 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe8000"/48, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0x4}}, 0x0) [ 936.568464] SELinux: security policydb version 18 (MLS) not backwards compatible [ 936.607380] SELinux: policydb string length -103 does not match expected length 8 05:42:26 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x4) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) 05:42:26 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x4003) accept4$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14, 0x800) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x7) write$selinux_load(r1, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) 05:42:26 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x8000, 0x0) r1 = shmget$private(0x0, 0x2000, 0x54000000, &(0x7f000066f000/0x2000)=nil) shmat(r1, &(0x7f0000172000/0x4000)=nil, 0x6000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'team_slave_0\x00', 0x1000}) accept$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00', r2}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000080)=r3) 05:42:26 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe8000"/56, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0x4}}, 0x0) 05:42:26 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40000, 0x0) ioctl$CAPI_CLR_FLAGS(r0, 0x80044325, &(0x7f0000000040)=0x1) mremap(&(0x7f0000da1000/0x6000)=nil, 0x6000, 0x1000, 0x3, &(0x7f0000497000/0x1000)=nil) mremap(&(0x7f0000094000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00003a4000/0x1000)=nil) 05:42:26 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000240)={0x7, 0x100000001, 0x0, 0x35, &(0x7f0000000040)=""/53, 0xff, &(0x7f00000000c0)=""/255, 0x34, &(0x7f0000000200)=""/52}) ioctl$int_out(r1, 0x0, &(0x7f0000000000)) 05:42:26 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r1 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000100)) pwrite64(r1, &(0x7f0000000080)="c7f6c35e482971085232f4ef5ebfa409652caf8cd35d8eb7e679f02d72cf52643b60ccbe5d63f195433ec14cdc0055a0bb61935dbeb39ae3ce0dcc5396e9652e3fb51b65997750373da622bf363462", 0x4f, 0x4b) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) 05:42:26 executing program 3: [ 936.770405] SELinux: security policydb version 18 (MLS) not backwards compatible [ 936.795675] SELinux: security policydb version 18 (MLS) not backwards compatible 05:42:26 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000100)={0xf97cff8c, 0x8, 'SE Linux', "ebb72594f0ea7c6a10c41ddb3d5e5d7c3992ee5b5113511c6c32b1f060f8490ea3d94c6050b3fd72c896"}, 0x3a) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000340)={r2, 0x1}) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000040)=0x8) ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f00000000c0)={0x3, "532ddedbe1bb8877e8eb41cf9e5cc539a3b268ebbff9a3d44c6108208f1849a4", 0x2, 0x1}) ioctl$TIOCSSERIAL(r1, 0x541f, &(0x7f0000000140)={0x1ff, 0x80000000, 0x8, 0x936, 0xffffffff7fffffff, 0x7, 0x4, 0x4, 0x100, 0x4, 0x6, 0x4, 0x6, 0xa4b, &(0x7f0000000080)=""/30, 0x10000, 0x100, 0x6}) write$selinux_load(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="8cff7cf9b00200005345204c696e7578003c9f03000300000000000000000000f4ffffffffffffff079940c8c3878820548f318802f999b635bcf3f318cde01ab1c5eef85d7a7a7710cc871654ee7489bd3e1acd17531e03e92c3e75d4c3621bd125edd4f8cab17c2edbfaa76b4aff02ef2d1d59fad0564777d2fd86c6949214f576015e366756b8eeb259724cc5b8ceef50b360fef631878503c90a355951db557536da0b7b582a11119b7b91e312aca7424469f9682d94fa74c04ebf50b5fad4000000000000"], 0x2b2183a9505b9a38) 05:42:27 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x48, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0x7, 0x1, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/49, 0x31, 0x2, 0x1c}, @fda={0x66646185, 0x5, 0x0, 0x3f}}, &(0x7f0000000100)={0x0, 0x20, 0x48}}}, @register_looper], 0x5, 0x0, &(0x7f00000001c0)="d758629312"}) 05:42:27 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0xffffffad, 'SE Linux', "1200000001d867000600040007000000"}, 0x2d8) write$selinux_load(r0, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "fe39906ab63aa7fca3d85f74b106ef40c5789f873dd918da7338af182b7d66b724a1bea590fdc5bedddbd231d067ab426ee48fd23d0e290fbdf0efa65f940ac1ddc4aaae1367d732e3d1397d0286bc945dcfe6f62eec604257aa00482bcbd022e3f1d4942487cfab444fcd56d36cd93384acab4044215a05ebab826021268ec163fd3aa8189e345e9d6a13b5d13007693496e9b2ab0f0d5ffc87545728cca84bfa32805dbbd53ade1687a9842019e50177765a9619117500d1b521ab8649fa1ec3c64be0e137bb994f39f7d0a4035d943a17fd3f10fcf0f4f6edcb43c789bd00802af7cb062f5aeb49f12f2e75"}, 0xfd) r1 = dup3(r0, r0, 0xd68ead204b24c477) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000200)={r2, 0x100000000}, &(0x7f0000000240)=0x8) 05:42:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe8000"/56, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0x4}}, 0x0) [ 936.889763] SELinux: security policydb version 18 (MLS) not backwards compatible 05:42:27 executing program 3: 05:42:27 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ebf000/0x3000)=nil, 0x3000, 0x1000, 0xddc56d33bf5e766b, &(0x7f0000497000/0x1000)=nil) r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x1, 0x240000) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000080)) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f00009bb000/0x1000)=nil, 0x1000, 0x2, 0x80010, r1, 0x0) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f00000000c0)={[], 0x7, 0x0, 0x1, 0x0, 0x375, 0x1000, 0x1000, [], 0x1000}) close(r1) 05:42:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe8000"/56, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0x4}}, 0x0) 05:42:27 executing program 3: [ 937.047417] SELinux: policydb version -1809467413 does not match my version range 15-31 05:42:27 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x4, {0x200, 0x4, 0x1020000}}) 05:42:27 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xfff, 0x8000) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) 05:42:27 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) getresgid(&(0x7f0000000140), &(0x7f0000001640)=0x0, &(0x7f0000001680)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vga_arbiter\x00', 0x40200, 0x0) write$cgroup_type(r2, &(0x7f0000001940)='threaded\x00', 0x9) getresgid(&(0x7f00000016c0), &(0x7f0000001700)=0x0, &(0x7f0000001740)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001780)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000001880)=0xe8) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x8, &(0x7f0000001540)=[{&(0x7f00000000c0)="33889f5c5608d4bff64a3d330d68257bc3ea371bdea24a4a8aaf5397ce6744559e20f439abb57d1b54fb552f917baf4fa7578d1ef9abccf79f31dc0a11e7bb788ef157a3fb3a7628ca5bb0d1a8a7ea4798b827cee6cbeebd26e1fdec703898998071afa1", 0x64, 0xfff}, {&(0x7f0000000200)="8cb161bb882ad1daa34f3b1a59f7852a5fc848284e1052108a95c3399d51566007099f1049781c9eb4ffa70a128c106c3694ece5cb78ef9dfb04155437ef97c621b351b1f4c6f94421e18012adc02b90333378b84b90de673dc0fb1bcca5c106717921aed5b98fbda7ed3e3ae3163395d818a7ac601563b3ca83316d80b978ea8f3e7cd5094bf6ffe3bf01f2bb3970975210d305a7e40a0daac9ea535534d2504d85fd5131c12fc70c437bbc9a229ca7bf6e14bb8962d7a21c7c6325fee702b0fae5ab0cc3c1b2de3cb242da31d6286162e25a92163b1cf037b9f5075d22cbb0707cc5396cb601520ea14d5aad2cea4faa2ea6dbf5880ec415b74eff7e8bfe359b0468bb63628336aa8e5c093b36092ab6f98a943f35d6121fc4a94105057ae54c85560a8c4b4afa2928c921d608640b3237100945e061cf4ac40d06079ae06894033d38e0fdf84c58d13ff46bbf991ce63a9853296b20905e335781e462e1d7177d2d967b12dcbe48757c946a059d91ab75d6b5e9edb7cecea3dd3330d1e1765d61d6a82d8a0c2fb9fade1db672e8a76041ae5ddf952d66bab6619c3331a3c2b1929b87d6150b64121e65fb6d3eb65933a3abf0c4513310cf54be66923f323888dfa5462c631fa89f54561c7307428272c3fa71b6d81285b6d6a429475dfcbdfa91736d19a6188fc488fa025991395ffdd5af4ed8c80d0926ce989898e13a527525f191131167b00f6042fe52155a6579f1a289af9d0e39b3c5e3575e6bc884d906a0e1215e2e81de1664db1d101662a0c41448613046857151f225d2a8b00cf679d0c93014c72dbd07ebee04f30a19002e84aee7818200d9b6c8272f3fa125cd48f6217dfa45c3df9a4db078698d419f5fa67ba6cd2366530caf19e5c066a49b4b86202e058c6bcd75aef0bf413d180b4947a1211c280734ce4e150c4e380a5ab2f3a223d9d94f473ac90f5d5fc1d7f6294ae717b47c49240d3931a12e4527d2555181aa530fdbfd0d8ea17cc5d40a50308c055c8f16e92cd1c2d6d5ebf2d1c0ef9803bcadd8f644b8c96062b8f54ececd971b5124b4c358aedc4f372be186e5fb27e11008901a4da28a32ba3589f9c08ae07bf4eab4832c728640e555c6544b24fe654a627c4aecf5a0152e87cc2a673499b71d3e4f663ad41dc2fde9c187de66fe80fe62825527bfaca051bcf85a3a9d55c5513fd8dde40c07697a0328a61d69e9e7116bb72d8f36bf045d386a581e58dd3656540d658889db53b6f34fd9c7f66a32c7f0c84c8f1d2e86214acc99dcac54cb0190d4d630db7cb58aa0a9d21b4981279e196981d973c3bad5a56b1f45f3051c0d436a37839ebbae723f36d95523bfc6faf472c5bea0a2a3373ec0f19ca90a3b6e6221dd7eda40bf725e3c316c26d9b98f68bfd0e30aee7948be9352136e4c7899ea1392aca655fc91067aa6e06a546d305d88c6e1bea9498eed85152990eceb3344185f6e0b081d72ed6d12d966d10cde139253d8828ef94827d838174596b53e5de73221901ee7722a45c6bcdaa2b25d36cd13ee34d777533648be5c8eb4d7490c6ca823c05744828c0f6d7f2c2f68d7b8efe73d270a5a7fd469a297c0f2998520a46bf3728d1e6f25bc445ebf39ff9485d5eb7ced64f964cd55f09edb3ecb620e763a9d8242012ed157c212ac7585e0c8bd92dd1bc980a894b9a9009ff769a8211a4337a19af2fa77cb39673b148317530749d1d14f3417ff80d638fb9f65931d5ac6d26eba87649ee25b3c22ca3940faceef522cca0001b076477bb3c8fad6b870f39f3220fbc781c9ed0506116f51723a5acc76b5b25c52de70d02b526c21aca6acd31af04b77d315586a7b12963e421f156dfdad84e247f7be43656c2d9cf4fdbf249b5964e53af99827b049536216542cebeaf0819f6879139353f5f3d712f926c1ca840ea335bd2eba8470c5dfd926b94aaef2127a0b85d0f860a723528b3c1c59c467efaf4528b4c795263dfb016b91609387bba63b4f2379f777573de3eb0fc09ab061e3255534569c5c3d2de4639df94a2394be272c91606771c6c4b8a6a29fe4844384d13ad613ea8709d5604fa979f7a5f82a64cfea9144726bd725b98fd3ad24052767d948cca32d67565c69eae301f4dcd23137be0790eecbc915d1fecacfe255a0aa829190fdda67143f39496762edf5a132a00ee10a231fb2bbaabef8872427f2932c33948ff14d609472654d76be288938c4b20275b680f85f209ef0aebd20e31f7963e51c1ffb955cc5e1c91314a223788d0c077328e23e76a800d240e78187190f597ee8c026515fd8dae46b1312fc294be7bea66fa309f83994c552cb65ffe71d5e36c96d8537e5df149ee8bdaf17877d40fa5d4b649be3348c217f7afae6eb010bfe1baad48d0af6da44971104982ce4b1c30b73a5499a8d875d518fa520cd94abbd8fd0497fb3a0e4c9a93e0318ed73d29706840c297acb421b0716151ee7a82daaca4307f0ac10357d37a788d37d5777240a6e9075cc96076d260223ae29f34a6b7d15ce9486a7ae1993508ae959548331886783882f8370eb0254e76d6d6b074af58e3b72b9057c8f48bc3c267369652f34f5856abb5a44d308fe23c66c9401d5ccaef77bc74f72cbbbaebed05966f416ad17f5b4064f6414ea0fdb23ec66921218e3795578d1747687f343d4658adf85d054e1d3f70cacf5d5b68be61181b663d13daee6280ea79172d7aeacf7a561c4a2f7097a34a403aff84ca3ea1020a5f043b1ad7aef0f1f76120019625fff955ff40f81e78631b8a4c8a5b539565a9e3633d0537f7053d735506309b1a59d8d0b65b222d4bbcffaa83099ee4941a23a68bd437f0e950b2cd5a3c2bc506e0b2225212280eadcbcd0cf2e988aae28b2ad1380489c75d86a905291bac04adabb54b2dd43d9873a2947939dd7d45c2430686db9923ce3d7d8fc6891fa7f4c3c58fd4cbc6066602c49d829b44de4a300bb35085d9b4ce1d4a63e46c8e4d054fe2b9c91c498780d4cc51941ad104f6952ebf7f2f1142c35ed4fb7c701e0b00ec3fa479d36389535ff37cafc9bafe5d601991f6f761eb575455d5a22b3fd40c4aac4842b1952360e06c7ff554f92bacd255a8a7de49e8d6640156e17c39a6f1c771c28181825ef2422f0e1605d94883371b97d7d1f1a60e0bf601524b8daa1de853d1945a5d7d94bb804192a01b563f0cf04d45778ebea07b4cf6ee265e0b176c6819c98b321df6342212dab4f9da8a7517a093dcff6af8be1b60067e13231b692da76b8872592360360c8e1e136db8edf8579e38226c28d281ef2f0d2a1efc2d0f7c76ef2c5bcb6af19f4037ea61966f56a02c88fc351137161c710d03d2061fa77df4076ed101978dc136448eb93fa48499619a7922cffb5fbdeac9238faa8bed61c8059759d5bb95e3ab91be94d1e7acb453d2b72ab4f3b7bc612b9d7d6584066c85365fb8870d08a316220d7c4ad58ac9950da11cdfd5d7992ba040d6314341a713795da5293b6a42a58269fbd5c82092f41fc927a68f597676953a169eebe513e4ed200ed58ed6c56eada44c0b3603ba0ea8253bd025a60968c02b0615a9630c9764e82651eacb77f662f09cac1966b72df49619cce7262983fac680007a6e7d9fd4c51dd36bc9a5ac90d966c87103010aa89dba5028adb961944ebe8812b6c91de96a5fb7e5d22c6238ac0ea30640b5f84b271d451c1dbee97c63af68771178f24ea10ae2dcf4231f5a85aeb4914a88b5f891363e984082ea41f09356db59cfc735d811a6728fc8e7c8466941fd92644d51296597534b5c6cbb49b3589767817029e91d2d79914a57a609d7bd613756e25efb1dd5d170ed0f947f12bc3d8f53d5de8521e1ac276bb3fcb5377b6ff2c0c634cc10f3fe26d6c2b38d7ae8156caa6657992c87a9fbf94021838786a87ddc0b46c877632b5478e0ae81b086b77e466ba3cb961c3c959b5e51fbd7e87b420aead15dbe8a5341acf43019f2542ddbf848b053885bfbf53c2f5d4349c71c02464f817ac329d97d2be13a4af75f1c42975b58162275e07a40597cfa7dcb78500c309c980adaf4ecb052c043b36b1b201a312a691d51672ef873e356fe248017b545f1a9a9c90e3d0aa1227da117d238a6113851b4966494de910dbfa9714f32e7f7f9a200e43861bec611e74286416a095369bce4c088e28b94472cd012af37840a7c6efa44438602476b781ff764df3b6e51300ca55392b7319e4daeb730c6f0fe5f01551d316a1234d78c5fc358c1cac66d8e91dc99d1d27881585f6294d9c08d2d724e103f565d24dd9ee90b8d0503025b0f5f846bde6aaafe1acc86117113441cb0ab6bf3c5b13b9f382d2b2a126584387686f9f4a5e72f6e3bffba84b0d00811d80a17b5726bc15973e225ac2ff7336f905041f09edbd98576463d52c6514f8093e6581be9d300848310272e74f76118c2f9f5967cd323536cffccd1d24e1ed73436047780b2f33a73577882fda78a1b0f8d0592a3e9ab7a9936121ae3334eaee2b1dd441df662efbc47bc380850d1525959e6c654d3e772109a48d6f752547a86f200ee47dc0807f68547342839d2ab8741c74866955cdd1a2ca131ed9533ff876e94f5e68d092221948a11009e26c660b7d7acfa51da7b30ce5d55cd0f2bffc315e517e64e9dc234a0f6ca1659ea663aafb7b189be032eb54c4a42e3f7520d78d520f558edff2a00d6fa056556f1d93ea247935f79bdf0d6a38d1dfad89a50597a7510cb68aabcd91405273f2727913e6fa403bec28d44e0fa9a93783b3dfbd6f38ba6798f7a5b45fd0dbb9931f50b16b022eda73834fc6c6b8b79395fd8ced75d5d373361133d45b11da8ca2afe626f9021f9b3b01036743a738ad93d2904de295672be8513e671e84254b24e9b64d15892478477735d6d77b01c3448fd696d244ec376b7a42b258ba578f1388ccd97d8693fe6bbcf5ef61b156ee97e2b7c455050045317c7da7e220ed9e80ecd85a42dd339c4779ac8dba2e3ccf90887d8c754e0395bc063c1bdc71fb76f1068e8e4939ed7a38a95ba9257503e5e10d649508ee34db3c1197b3eacb1297e4248920a2e38c3ac8a7c4cd8c817c10653b5f33e5be3b1a584413a4099fc4ee8b13618e2360456f343fa030c3bb8eee7bc44a9ef5e9f0a50d3902c3dec779fa68a963d5b6b6f5a11147d9527cc0e8eceed4eb5a682a3e89ee2d76d1987959ddebd985f45c142032e52cf4f2cf035ce88d23cd67c774594658509841899d693720cacb9652019f54e981a8a2caf3b18b5f1cf2f5b29647c2a850c067d84a63513a561b06352babba6aa0b011af26d87b7000fc0f39c4ff9e2d9e632a67eae030673892b094ae2f3edfe925100804ce20d36bdb0478161e1302757570097eafc1dda5ad122ae1b450d4332845c06ae1719c38aefeae581d6b3ab928c4fe99b886820cc5d9b27d759e3109e33a7dfee9ebea241c0009f142f50b5bcadd152d9185f3d2a16bb0608de03800f82089dffb95e14b0f92ed74dfaa591062eb40305cf38d2128f49970018b864025578783f5b9708880f128c60b838004e8e6c11d173e5b0c67d67fe1603625cd3be0096a58076790df1d9cae21d7bd91fa863322774f5a0636b36107b0456e2d9ea7eb33d5edea00883bce0c69374c8e350773a5ac44aab0ce5ef7e171bb45f816871f8fddf94ec74390db099fe2cb9e750b238ab37a2b5726f51159603a9f3006a6d19f987403f8857445fcda188f1d5043952e50f20a89b8f08d9d8f668b384c4dec0b42f350b4", 0x1000, 0x401}, {&(0x7f0000001200)="810017f9f4f968112c844256892730a88a7554884f693ad01bdeb2c2a61aafb0c65a6b9c69d8c37f5fdd3d8d896eb7e9850c51fd210e705e17b9b4f54ae6741cd4928556ec9b6fd959ccdbef1853b4ba876143153e00f2b731e3ce4c3e9d1df30f22991adaddf9a822d5b500d42b45d175673d2d7d79bb3f4d94bafbb97b3972447fce59e41ac81f027ee21e55165dc1be41c111f213a5a42c9d52adbd7f71f07d6e652e3d964ed53ef2c4ad7b7f25e0b2c85b919b18960b3689366b5fe9bbc9af00796dc9d3d3bb9fa5fb3b850fc091440f8072409ef8beee6a6b9fb88b377290433bd6b83e", 0xe6, 0x8}, {&(0x7f0000001300)="9a37c01a3746b9af0ffd7f6b87d55f38b64ba02497505c7d496cba71ab03d183c07b2996a7d9936af5f5774bf083e083278a5a10755585ef87fbea65c90ef0a28f40bfb9ca288c70d5b3c7f776fc5090ffe327f203bb13dac7bc8289f86d05c97e0eb9dc3f73f6f2254a6d88b1ea4629d17c78b82019ca984ac6cb69ae586c7e478157710d0c8505fefaf9b21417aa0c2ff523e6a2f8c3204f1b26f0ad219b33b97359fc247b633a302a5b0d775e8c7765784902ee9eb49e133b9a3e9c9fde33fda4c8", 0xc3, 0x6}, {&(0x7f0000000140), 0x0, 0xfff}, {&(0x7f0000000180)="a2cfe099eda7806c8b17e96d", 0xc, 0x7}, {&(0x7f0000001400)="80d459b2f1584ec6d2f9160946c46786cfcd46d5ac20f51ab10ee529df5dc31929c1b9c60a5de5e01c9e52d03e33c0e48b6460dd5b764cf890a430ccd3bfb47449aa448cfc957a4be59d2135864c215a53bfc11ceb89a450be", 0x59, 0x80000001}, {&(0x7f0000001480)="e80d703061a3277fbfdf8455e71a1b96fa8ea455940562dcc94b3113fd46ae638e033cdaa0118dd0e0648fbaf43868f05a3676f2ca07736e5a7a07ee0da86933d21be1aa1b71ff872df847b2dcaa765dc87d59d7f0a1a119c3187a2f38a019d190ae32e0a4a36c81a8d548eb817a68fea9098328e86676df2c1f00aa4604ddb590cb6c7e0ce9dd7c", 0x88, 0x10001}], 0x800000, &(0x7f00000018c0)={[{@session={'session', 0x3d, 0xffff}}, {@gid={'gid', 0x3d, r1}}, {@gid={'gid', 0x3d, r3}}], [{@fowner_lt={'fowner<', r4}}]}) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) 05:42:27 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000da1000/0x6000)=nil, 0x6000, 0x1000, 0x3, &(0x7f0000497000/0x1000)=nil) [ 937.097344] SELinux: policydb string length -83 does not match expected length 8 [ 937.126821] SELinux: policydb version 1787836926 does not match my version range 15-31 05:42:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a000080", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0x4}}, 0x0) 05:42:27 executing program 3: 05:42:27 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x7, 0x0) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) [ 937.233847] SELinux: policydb string length -103 does not match expected length 8 05:42:27 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000140)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="39f214931b719565753afe44fd83c84de2b1701c0acd94ac430e2efa459295bd715194611dee2944a2a9f059ff5cb638569a166727115b9e46886553d4a13e42718d752f9d016dab5821793c8ea039d797158c5b2ac6a100670b56331b4b0871be4265d6395b77a93eda7d5e2d1083e0afa1aa9ae153e045de1e21a57334ef71c5185ecdb14613542e3ece777784dab2fe527d2eebe2b2077d2986976f6bdc9302d39c3b1393da9006879978f6c8ca1cb143b96937d82e2897c499340f7c0da2f63daefe7e352f1b4cf2e104a96b8d00ada38a47c5f34f", @ANYPTR64, @ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYBLOB="8e7457b3a61740b1ac551381f19846", @ANYRES64=r0, @ANYPTR64, @ANYPTR, @ANYRES32=r0, @ANYPTR64, @ANYRESDEC=r0, @ANYRES16=r0], @ANYPTR64], @ANYBLOB="cc488f27a46d0667364e34648bb2a5fc79f9d468b43a274027e587998364d4500eeee782632fdcafd13cf04aec35c3f8c5e4cc510fd6b6e76211981b8fee49732abd13812d16536204dd8051a2c1a1c20e35763a1a07e82b7326fb1d94a93afe837a790e32b90417365865c65266496fe0213d74da4e4c493fa03e82f26e077c557f8a0fbdc0cbf21e8d98a395067d6c0a521210db654ae134163269e0ac2b605559fd1397b91651f2380c3f1987d447db1b381d756b5a97d077363a9de6955f2f0a14bed3559bfe04b1942591cabb3d6d918f2d63a100a3c3dc7f2c205da51782c66f", @ANYRES16=r0, @ANYRES32=r0], 0xf1) [ 937.284051] hfsplus: unable to parse mount options 05:42:27 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000da1000/0x6000)=nil, 0x6000, 0x4000, 0x3, &(0x7f00003e8000/0x4000)=nil) 05:42:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a000080", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0x4}}, 0x0) [ 937.318350] SELinux: security policydb version 18 (MLS) not backwards compatible 05:42:27 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x11f) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r3, 0x0, 0x10003, 0x0) [ 937.394157] SELinux: security policydb version 18 (MLS) not backwards compatible 05:42:27 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) getresuid(&(0x7f00000012c0), &(0x7f0000001300)=0x0, &(0x7f0000001340)) r1 = getgid() r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001400)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}}}, &(0x7f0000001500)=0xe8) ioctl$VIDIOC_S_AUDIO(r2, 0x40345622, &(0x7f0000001580)={0x200, "2780a0a8e3db96ab106947e7dcc1226a299e675da13bcaf8fb9966437ae1ae02", 0x3, 0x1}) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000001540)=r3) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x4, &(0x7f0000001240)=[{&(0x7f0000000080)="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", 0x1000, 0x7f}, {&(0x7f0000001080)="0a3e3da7a89ae31db46634e41d64c0bf7db4d085c4fc369ff07cc679f926cb9cdf5c220d7084f74742bc58cff70cef0ba1e286a305b4a7718adf7aa8de64ee3ad7f22748cc56be03036e43eeb396e006acaaf7d36947e5ae9ace4bd0702615aa477b32eec325cd0a682459f55564d5c9a0fda0c7f19cf80fb20a67c33d4c0f6e16d30a99abccce3282cbc6c4b91466de8146cbe451f2d11b06e6c5314d2de65d5dd67b8c5596745866db1eea0ef9ef18d89ca793fb62d7", 0xb7, 0x7}, {&(0x7f0000001140)="86bd0790ac7089e3bec8ed4fcffdb93b9b3bf11c26e0f615dd89bb8e944807c84c03a156ac06f6127857d5f4bf0747f2cbfb3b17757e749d3081a53c38a187f054ad659e1b2cd940b9f3ae535872d61b2255e96743c8f124f27161831131", 0x5e, 0x40}, {&(0x7f00000011c0)="bc66ecddab9ab166f49d04629db682a9c0a7b83bbd6f9bb34fb6e24ee7a117a397c84e921b2de29d69bea9009d7da871a7dd5e2d2ea12dd8f366bcdbdbf78dad4e2f8ea8e411cec79473c26eb9ba519d1dcc4ab4603d8827ea062bb5ac", 0x5d, 0x3}], 0x800000, &(0x7f0000001380)={[{@disable_roll_forward='disable_roll_forward'}, {@four_active_logs='active_logs=4'}, {@resuid={'resuid', 0x3d, r0}}, {@noinline_data='noinline_data'}, {@discard='discard'}, {@resgid={'resgid', 0x3d, r1}}, {@user_xattr='user_xattr'}], [{@audit='audit'}]}) mremap(&(0x7f0000da1000/0x6000)=nil, 0x6000, 0x1000, 0x3, &(0x7f0000497000/0x1000)=nil) 05:42:27 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) signalfd4(r0, &(0x7f0000000000)={0xc976}, 0x8, 0x800) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) r2 = request_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='/\'vboxnet0bdevvboxnet0proccgroupvboxnet0ppp0vmnet0]\'\x00', 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_MOVE(0x1e, r1, r2, r3, 0x1) 05:42:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a000080", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0x4}}, 0x0) [ 937.438430] SELinux: policydb magic number 0x20000140 does not match expected magic number 0xf97cff8c 05:42:27 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0x2a4, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x192) 05:42:27 executing program 0: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, r0, 0x0) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000140)={{}, {0x1, 0x5}, [{0x2, 0x2, r1}, {0x2, 0x3, r1}, {0x2, 0x2, r1}, {0x2, 0x4, r1}], {0x4, 0x4}, [{0x8, 0x5, r2}, {0x8, 0x7, r2}, {0x8, 0x5, r2}, {0x8, 0x4, r2}], {0x10, 0x1}, {0x20, 0x1}}, 0x64, 0x2) bind$isdn(r0, &(0x7f0000000000)={0x22, 0x6, 0x0, 0x9f0, 0x8}, 0x6) 05:42:27 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) bind(r0, &(0x7f0000000000)=@in={0x2, 0x4e23, @empty}, 0x80) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) 05:42:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a0000800000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0x4}}, 0x0) 05:42:27 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000b75000/0x3000)=nil}) mremap(&(0x7f0000cf3000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000497000/0x1000)=nil) 05:42:27 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r0, r0) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000040)=0x7a, 0x4) [ 937.637082] SELinux: security policydb version 18 (MLS) not backwards compatible 05:42:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a0000800000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0x4}}, 0x0) 05:42:27 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578546885dd095777e50600040007000000c5f8862ccdc6e38161a0dab6263b000000000000dd72954d4b09fb379387a25de5d2816776aa8a9bf9b58a7c449298f02fbd80aab90b138ec7edb111da691a4b119075cfd34132a1fdea0a7eea4b7be18e13372a4da96cea9062b2885f786c8d49179235122f90485ca5d821c3119c277b5c341bd6796725fda962c1f796203df591224e2d5d11016996"], 0x20) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x40000, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000040)) [ 937.679426] sel_write_load: 41 callbacks suppressed [ 937.679431] SELinux: failed to load policy [ 937.717689] SELinux: policydb string length 676 does not match expected length 8 [ 937.755175] SELinux: failed to load policy [ 937.809510] SELinux: policydb version -578459564 does not match my version range 15-31 [ 937.822008] SELinux: failed to load policy 05:42:28 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0x1}}, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000000200fd000005000500000000000a004872bbb6896209000055781309e339be593f7710aa000001001700410000"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 05:42:28 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x800, 0x8, 0x80000000, 0x0, 0x3}, 0x14) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) 05:42:28 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x200, @time={0x77359400}, 0x1ff, {0x7, 0x1000}, 0x630, 0x0, 0x8}) dup(r0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="8cff7cf999ffffff5338204c696e75781200000001d8670006000400070000003c9f030003000000"], 0x28) 05:42:28 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x400, 0x80000) getsockopt$inet6_buf(r0, 0x29, 0xd2, &(0x7f0000000040)=""/200, &(0x7f0000000140)=0xc8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000da1000/0x6000)=nil, 0x6000, 0x1000, 0x3, &(0x7f0000497000/0x1000)=nil) 05:42:28 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a0000800000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0x4}}, 0x0) 05:42:28 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x800, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8c0995c266c75b485e9835d6f7052a08000000000000000000000000243dad040884ccdef033c20f00"], 0x20) accept$unix(r1, &(0x7f0000000100), &(0x7f0000000080)=0x6e) 05:42:28 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f00005d3000/0x2000)=nil, 0x6000) 05:42:28 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a000080000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0x4}}, 0x0) [ 938.349450] SELinux: policydb magic number 0xc295098c does not match expected magic number 0xf97cff8c [ 938.369823] SELinux: failed to load policy [ 938.384170] SELinux: policydb string length -103 does not match expected length 8 05:42:28 executing program 5: mremap(&(0x7f0000da1000/0x6000)=nil, 0x6000, 0x1000, 0x3, &(0x7f0000497000/0x1000)=nil) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x240000) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000040)=""/146) 05:42:28 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0xa) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = geteuid() r3 = getegid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000003c0)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) fstat(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001840)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001880)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000001980)=0xe8) r9 = getegid() fcntl$getownex(r0, 0x10, &(0x7f00000019c0)={0x0, 0x0}) r11 = getuid() r12 = getegid() fcntl$getownex(r0, 0x10, &(0x7f0000001a00)={0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001a40)={{{@in6=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000001b40)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001b80)={0x0, 0x0, 0x0}, &(0x7f0000001bc0)=0xc) r16 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000025c0)={0x0, 0x0}, &(0x7f0000001c40)=0x136) getresgid(&(0x7f0000001c80), &(0x7f0000001cc0)=0x0, &(0x7f0000001d00)) r19 = getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001d40)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000001e40)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001e80)={0x0, 0x0, 0x0}, &(0x7f0000001ec0)=0xc) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002300)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003e40)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@ipv4}}, &(0x7f0000002440)=0x88) getgroups(0x2, &(0x7f0000002480)=[0x0, 0xffffffffffffffff]) r25 = getpid() r26 = getuid() fstat(r0, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r28 = getpgrp(0x0) fstat(r0, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000003e00)=0x0, &(0x7f0000002600), &(0x7f0000003dc0)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000002680)=0x0) r32 = geteuid() lstat(&(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f0000003cc0)=[{&(0x7f0000000000)=@abs={0x8fd2a5e5960dae57, 0x0, 0x4e22}, 0x6e, &(0x7f0000000380)=[{&(0x7f00000000c0)="caedd83cdb794d4e201ca6c0c768c7c4bf095c3c869eeac36393e6ca2c446f435c074f8cd500941e445b3f6c6ef3e9bb4f6812f0ce76d419e4c66f208575ad5b60af7b1e8e63ee31a50e1e07ff03567849216e9344a60fa1614a20ba04f0a7578b8b3688c6cd28c789345dc3f2dc288d1166400fccdc352ae143b64f453be90ef2673c3e7102112507166f086c54931085df92e7834d08bec52bfe59957ed4cdc9ad14a348d7d1c31ae54773e551560ed55ff65e23ce15ec14fd420d1fcbff961cd49cfe7c35f86961cf61467bca8308b16e70a603b76c6afd6822b02cd9ffe58526516a", 0xe4}, {&(0x7f0000000200)="65879f49bf501772f8e4870295b5a242526807df3af721938ed3e00ffe134d46645df6626288907f5359b3ca4bd229c5574a57af2e63254e9a45277f07c721979f4edfd778621d742cc307c15b9f64c881cf5636a986b9047a311e3c53227073bf2462b0bb9c6604c1938bfd248b78f350e32d6d96748d4d6d0a7e339e238c03b47a820e31572c6b048ca662b0efeccad1294b2bf3e430d2b9af5f939e20ce46cc6262af5a6cf269b8e56d891d84cd5f34c195ae74b5db198c97b1ad59cb05aea8997c523970229ce2f76896657a1ead1a0fc19828040229a69bde5a5f20fdd2e5c166", 0xe3}, {&(0x7f0000000300)="46f0668c47a2b74602d4f336f6fd1a3c129af3602cd6d457e9b510e1de85bd110ea163878596f8bcaef07aea092ddb06cfe7d4cdaf4f34e76e34370623a7073f2129827e1904cb968133418d", 0x4c}], 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="16000000000000000100007773ba6cbb", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x80, 0x40080}, {&(0x7f0000000580)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001800)=[{&(0x7f0000000600)="0d7767bbba3c0e506648604d3b76c66fc80bdc3238b0830a0f2c69b79ae7ceeb2122c14f6215f5e82a92d18334cf1a4ec968608c178073ff0443df9cad770c5363ad0644f100daa610f3b936572a187a27", 0x51}, {&(0x7f0000000680)="5d33a2e5374e6d858a042c8f3a0cdbed273c5528b42877b529a73554e2cdc98514b95827db0aa5ff696ecf231fd2f3135a215fa87b3ce0381b3be5dc6a119c29ded08e720a5f317d122d5cddbc34c30d7202fc5b49354830c7d33fb745571b1880008eea9410efc8aedbe998c6baa2f0ea45c7f4aa00d016167074ae254448d6a031156c7260cb47bafe05dd009c1c3c0b4429c43b1ca3a37a4d3c2a669a6f3a07bfb782ba98208fb0d9e9f9a58279b79a026331116c1db8515a4dd69634f66e82dbd3ad9e461fd8b059ebf333cfcc37d29c7805da6662123e53eb481d405f1572d288b40c8d438c1f9bd4dbe2546685", 0xf0}, {&(0x7f0000000780)="c4e332b176113ac57a5ee1e0a4687e038f209302eb8d83951c06cdd0dedf49fe730f837a6069bad7e63f9aa07a0ef682228a16d7d2221c10ee3a5057e60ae2198de970b81ab544885bbad17f4cde5fd00841f78e19a93dd8c8d3d2a701a4fc7ea882ccf85981155603789b8f232d70d4e11db019", 0x74}, {&(0x7f0000000800)="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", 0x1000}], 0x4, &(0x7f0000001f00)=[@cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, r18}}}, @cred={{0x1c, 0x1, 0x2, {r19, r20, r21}}}], 0xc8, 0x20000800}, {&(0x7f0000002000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000022c0)=[{&(0x7f0000002080)="73b9c43bda0dda05eb7ecf29bb9d5951f11e4ecd970587849f7d1dac37f2dc75a1c0e20f7f9d6ce727a173921f71188791b048a696de31660ccb80511e6fd19d0cc6d54ec48ea75f6bb0e3f1ff88e4a597f1292853abea7b53051efefa8b56aa0cde4d397cfb9d4d5bdf97400fc876a0f9081cbfa274c059fdf9dcbf8f", 0x7d}, {&(0x7f0000002100)="225ba11605c500b107050b24374a95fd3af9a7202973ce585834c40bc835ec0d0c8b84782dedb9d6f71c81b811a96423089e474c434f5e265af69b2acbe43be93f0c5c34298c82127b324f7a24ea5a37663217b5d0d086c17bfe2cd3aed5360b020d998da8652f922128aaea286805b6d166e1ef9fbb3debff4fd24e2ab7fd75ece948552c5c461ebc68f02cacf6743c074afd7bbcdfed63b818cf50a7a9ffe9e89598d5cc69a7ceb50acdfd8f5a5fd19374d0771d8cee8ff60033730fbfa55b2f10acd71ffe18c2ebf1e30e491eaa2062bc70799ed24e40a0d7da5e33d9b144e01b237ffa409642c477d264b3729b3164169b844418", 0xf6}, {&(0x7f0000002200)="cf3165ec9e791e789de36f6d6ea2beea1aa72c5aa743faf227266510abf5fad87ebe2672c6916d512646e690100f2f5eb9fa2e9bfb2830813ded8504f0b7dd85f85887164e1d79159c1cd9f581ebdeb95bbc067247302e17d5341d8a41a2a473aac88204872cfd2f2432cefb8d6ae64c5e43c0927b1b6e88e4ef5cd9d4d8756bc77a709143361cbab2e365f35611b9b155cafb3745f5036f47", 0x99}], 0x3, &(0x7f0000002780)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r22, @ANYRES32=r23, @ANYRES32=r24, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r25, @ANYRES32=r26, @ANYRES32=r27, @ANYBLOB="2413f53301684a97ec0000800100000001000000", @ANYRES32=r0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r28, @ANYRES32=r29, @ANYRES32=r30, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r31, @ANYRES32=r32, @ANYRES32=r33, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0], 0xf8, 0x43549f704a6c273b}, {&(0x7f0000002880)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000003c00)=[{&(0x7f0000002900)="340fce776980a13e12bc1d39684f8dee1681315bbe4db6dbe9d8951b4b156c3e538ab9ec3ae28af2aaa97fce00cd998467f7d6445c42cae6c21a10690bf67f8927fa0d5c1c4993abd092ec7f8b19f5673ebb02fe27b4517c6caf4c7f95e0732e340fcb7bfbddffba5797851e8a7852547bb00b3e952f692ffa82c4e77f3ccfe91d9998354e3a769ea0e16080520c147f46a7c9d8e809e042c6b284189517f5d59be6ac954fa0", 0xa6}, {&(0x7f00000029c0)="3076a937e9fabda368d7a2b42a74db90518ec0a93ffb771339fc04b5242b4f7a408ddfb363b6617bb1c2be42a71040f62e3080710f7b5f541b7c9863786660c0a16d79b5e4474da60c314114bd42f9ab38841aa497609c4d4382f948da29be50d906e16b6755230b4baa53bb8287fcd7e1ed822507c9ac67b464a1c92df074c5037fc276f35867307ab11efde6d785ca2867a541c75e07d58d3dbdd56d51fa447c153f05071eb00a64e7", 0xaa}, {&(0x7f0000002a80)="007130c9eb7396d9366e7cdbd7", 0xd}, {&(0x7f0000002ac0)="a03035c76c52f1dd10a1460a44e8063c7fa32e0160082311a44f839fe2da3a23994f7c58c6857afb573e720188f40e2213eb09685bd1129642313af88b2ecc3e1a9af41b7d8050da0cf844e2b8fd12f77be9404f9605a154fe78b12c2c368422a9f974a423f459875a8776bbded14bc0a4e405106a31ee7cd8f74965fa10629a6e74f2c1999077d1be79c4953ebfd650672fe63d2b6000367f6427cd047cc88d957cb81b3a1a1631c2", 0xa9}, {&(0x7f0000002b80)="2c3d7dcaa05e7e33fd0f38fb5092155270c5756c82b4f9e4433e592a2cd47b28f8def067019ffe306f455ea237a828f8f09b13b5f13830859924549833876650dcd75050f9b32ec1350af9f7ad53bfd9dc5113014b122d4d0354c324c84df0ae379629ab848908cbe3b8685e1b632cfff77ecb912e2a4cadd060d5bd960b475ae43e1c05095c698cc2d17bf9847f397f5da53da2cde47df5e8e7ea07fd81ec3cf7b2e21eba874a419b1360c30840080f5eb3da11b1d281c66e217df3a87928bd6ac265ed52a37c388ba231297178200ff02d0bc15e45c56691bd3d02fc1f9f123ee31943dc342776d92ea76ca7595f702b8e5f5b5b115f5ce7634afaf423ccfe6fb9a63d6926cd46dbe35a11a9d53dfb80e162a8191a9f0c12b073ee5ccc43d711b36d86ad78e32964b44dd48a81f0f8c15b5757c8c1416baa252aa5efdeb55a39055956ae9d71b49f3dbcb43481cbe84925b2790f4a8c35a3a0724e1ab89e6a2d97d39afe23f41bd0285b8dd02f01545000c3191f498d878d59abc1c54bdedd1ef464a216f953b353112834c46b998518baab6eff4ed97ecbc7d899aa8fe32011beb23d13fead68697ec121767a5cc317ec5b834ef04eb6948cf071654f4b4cf864f05ab4dfd4e2ce913222432c190b98a5e5ff3dcefc42bd059d8867e479a803ff4f1fac68ad2137a354803436182b410a2134ded150a4f72908b365eb3b176d3e85db459b60f66188b74973a64ff934f4db4f36ddcaf13b346bb49820911ccccca2078d1f2b093d002d4ce6a5313ee8734ddbfb9f3a7cb9dc860b4e4e162eb798abbe86aeff6cccaa5baa0a16acb9d60193efd267b9accfb56f7eb833fdf826c7ef52d88d7d8a45dc9bc2e1300a0f30a204554ff7073759295387614c58f9334067c4b91e7afdcdecfce369ed44cf7932aa56db467eecd8a7aa5cbc2abb755c680ba5212e100e89c5be86ed6969c07225c0fd50414bb1bd2da3896f662894594097df0c56bb326efceb0bd5914f42cbc3f51f84008da542a44ec92e8a86fe4ab5aaef5ca75abe1339ff2107a063d74d41a21d032a5d950822ab510120730fdd2429dcbb2812ebb857ed11f46dfb9acb484f37aec761ce17df7c60c39c64babb9ae22df3b31656936c5ddd2cb82f8149d88d014c5285bdc77b03296c86b86f2101b72a10221613ab60492d64adbe42bc17f307cfe60be7d017a450cdd7151b737c3ffc15a0ae94902ac71854f52f7eda8970096d77998f3ab8caf88e25081cc39e29b1ce32206beca7fedd08524419558a983086fa8a2422f892ecc11f487dd4d28859f44dfb1e29945cdedd8713059a0fe21aefae63b4affb14d93f8bd4965746bfbe20445c1cda18ba73b970bb79941d5ab6299ade498b19bdb057b36e6d372f660b18d7b4e0b66bd81235c70f9eb8f623aa3d36262685ecd3a9b1ebc17596007fb51bb193c714c94321cc5ee38bfb39a777cc0adea678a8c8526140baf3febba3041782a930604a02c08cdca7fc5fa1991ffceff5d45c31f5c5c1a661338199f73a69f973bd611bfb376084b1fa7a433595fc61c70d3db414ae19a0c52c8042f239a230dc6d70876018f61cd04a0f4ecc75dae091e9c9fbde6039e511fb4a7c90fd289881d78f6805b19dc063f08f107a245008afd94872b24c2c1f80fcb201481edf866756cf7ea29c026dd91e7f67c15bc0adf9cbd498131512db8039cc8962baa76c38a8904abdf5094a9a04395c9c0eb5287cb6452d9f1cc0116aeebafce113d5a497ac3688fc279e9c82e89fe286415296c48d8760c7943df13c6c07c39b44d84e44afec4373c0131aac339a56fed0f7676250f4b753b288f5f23dcc9218b4ce883c4da363b49de3b08286b6f4da2805a427ecd4ae13304a13daf2b20a90f6c657ad090d5b52fd66257eaf7523b6fb64c68f7cdf0c6cfd57d4948e1ea41ff0be0e4d7f652ac5091c143a9075d079a00004fff34cece824b45ad68ce4f27cbf29f036255626d80b1968665bd4d77ddc4fae56485292927137563085f1473b8a46671c5b3a919f17faeb613d13a6081804ea6d376e74ce6f7418894c9abf64d7fb6e4189f59bb1670b41595ac23d93cf3141fb73615b424c1a11665ea3620d6a41d593685d440ba76e052bc079522c680e5fc9baa4c874be46e61a57ba283b7a8f4db5ed22e43fa41c50f6d77ce9dd8af33c02f4ab001cb24be8b1047a5a141e1453833c68af2b0d23436e875a2649424fadd2c86761140c51521dbab51cfff200ba84de57acc148f85ab293e8d5b5cd2ced7e33f6e00504e9279b14aff4d8d1acf88ea346232e395c3b5f90c7c61bebfa9cb5c6282e7d2749d707394c18d59023aa345f3e4fac74005c57362d7e1178ae1fc493564cec9ab27a9ce7f4cb12e6d6c36bb7634ecaf3f6e851aac827dd37ec0e745a0f4f3fb8b8bf17e27f06dfab48e058ddbfcf8cc48c4562999b66353eb78d580b85d4fbea4d1d3da4d7523abb68b2188bdb670ce00c7e02f66e1d875e73f1afdbda109037c6ef01ddc1c1700cef75b698384665772c1f0599be7c83fc278919898635f9517f9c89c360dea385f62be5923f68f626fce6edea601669ca46900ac96a07ccec1e8e3229833c391fe6e65908506389b3a8d43abd9c3b5e5289c4470c3f1e41ff3a35c7b956831a8e1b719c6a7769a1191e955b356badc4d0390f48825b99d6b62e4e782b23e07bea7437ea592addcc60d7cc5dbe2d2740da344b96090e5180f788db4e0941be74d8d05c28d2eea94a52bf312a110baac776ad653f4ac3d04b21c78a77704ee7179b463a8dda84d5585ccdf3508db3f8a7e0af48d4a5caa7f3411f63d1468b17265e2eeeb2af315edf1553b478117c542e8a6abefb6b1e6ed943373d03f33daaa8cec5904cea6d7a278b22282c1583cada74f65cad240c06b6d98fb66c9f5922537e6b69130e25389d0593d9f74c00f3add5c6f29e46ed81b511386244904d6e80aaa0daf9670d75af3bf1494eab7bb0a5487eb0a1fdd1c422d09ac22bf5e5d8b6eda03eb26af07ec35e4f300c43a3340e0dca1e65476b941bed01cf9ad59080ccd924bd4cb13287a6f9fa9cd6d3516c23ca9746ff51ba3ee91db3f58613da2d1a4194b829edb6d09a78523a6e37def68ba0c64e901fb3f4ad337a5a46da06e47c736f3b09866df209a75c261a3e366ad31238fb00b60802fca133d52c9ca58888ca8ae4a712f4771cf49d769affc59d90d47df38108fb1ef9928ff09c6cdd8e3b054ed5755eb9e861cf2c89e7cc1a1be194dc3aea5c39ac33df4a3a0aac1b637523554e3a6cf498cb421ef14f07068e610a0bc47498e22123ea22d07dce9e3baf1588df7d7aaefa62c28f3a58b3add4ccf49c50b6d3789ead762bf327106decbc94bd3448d944373b4eef9f5cea7168d5dd77b9c8389fead042fad9f46c2246b90438afb0a4b061ba17d3eebafaebf94a136a2e86b6b9fe73c5882cc55a0f8b8c0ab1f14e4fb543f292f1edb2224f397fa305dcc5690cf7cfd4ad1af4c5bbf984a71262b80788540dccc9d690b188cbb4b683b8be651f43a837f6d5513d1fb255474922542a93d462d36d91935ac3e662bd1620edb664746fa5cfec7fdbbd39766031a6c670b14571b8c3ba02a717a405e86b8e20392e0509285aa3f936b332b627ce6a146f31910900d39ac7bea4c343256b2af30514e7d9eba6f038db1f2cec8ff9bd73a6f7c236779e9ae2f923cdc619d3834b9be8873e9aff932d965e55a29285e93a234e9f29cf9e5708aada4761b3f16a5954e0fb11ca045b3eb50cc5e740468ac8ed713def631bf225f560cf1c80f6d7f69e266672f27a187e07686ca4ebee6396942b693a640fd6d8410bb4d30aba52ef2014d7138c551de398fb052720e2b746b5e8cf551e05b95e97f9c9064fc677aa239ca4410f9b63ac213154a5d873cf69f0ecc63da2d4cda8a3aa427ced8d49740f697df216c8f3a46e87dd27f7753f0ea486ffecc1df3e235ed249da3cafc1c579645e79eb130994088b9418742474148e2b37ad664f75e230a18745ee23cf201d712d333dd6ff376d462d8dcd09133de87c31dc776140f0fe79af0169837ac66ec4f055c6673a07c0875ed214ef49e2058349576a23e75f48b13fea7ecc6f4573d0817f740aa904240d4f6ab6022bd74eedac3e30bc546345436ed0f204bb23ab0f9427113499c0c43010e5a5607451a5988928022cd2cc2bdb3561403ba4370e33d9df655836e6462dc849913f022c33574f26032bb1075500d0e39edaabf0e6a0b81250f8fa2680deb3cd3fff761b5b8556bc15fd565e981a7c680f06fa8623ef5f8cc5cf9927b82e364c2ededc9929535b10e4047b16f3a707812dd43aa91a9b55d49adbd403df5757f1ec9f67c94ece722b43c2a4bb1cd43f4a9c2ce2d934d2d46ea43ba0b202e2f6ce8f1178f9b4f2d401a0ce6959fa54a9eaa3eef7c9a15cebd7ab63e11cae37ef1032104aea77b435a919806ae11f658c473da21083100a8d72b10e1d1d137b6767b8e8e1df7605d982530ed267a8e75074d6e0f630ec36c797e421f530827230fec9b077611a6e450cc6ac1792e491f729b929ab0f392cd72428955a692a817ec7e62a75c885ae5da87ebd60e0c08e8f7b3afc99570d2e691a2b5f6a67141ae7102928a29961238f1c2d431def8650fa34c417f61542c2f849362e7c5dc705bf6856739c8fb28c29c49b9ca8db326c02410781cdfcad0167e76502e71311f9ce2864e41af091e9f174da53396bfca85ea6b7644a8b65f21081c6a76ec5ec717917be6b96d2c6fb0f774271e4445d445ee35cd885876332e4eaca9472d8e1d87ca060e3fc9b50a149adb7e9873feef8122bbff4d6c44fd62e21bd2215726cb47d016bb2b79eae48b8f3c126f14dbf9ac0568b8809fe51a4381658524640add6751e7ee91ddead1e123ef92511f3a9317399814376e6260bc30b7300b4d71a42640b19020bb093838342470ff4a31a6a6bfc93566fe998072ed1b327c185ee10f9457e66d4e745b96c99d780c2afaa82eada15e54c4ea8f64aa151c704e1209635a09438689baecbebfa7609fba739fc6600a3faababc28b6c8e1cd183ee09fab6938009ad0154fd286b1217093c14e1dc6d020fd5009049fb426cd479ba49b0769da62e80a511bcaf257e1c0606e069d9891db8f1b9c22587d547dc989c7294918dc23872afdbbe42c9ef45ab6680e95aa9749a8c1737a576e3898bec669645e9ffcb27bd2492c10171e361dd3146acff192d4e8ceb7083b75c2f62d9f32fb66850670382bdf025a5d9e5c2ac409456c0190d76b2bf3a99f5bda2da41bf2b9842a6aacc2eee9a5bb5dd8cdee2d43da78aa2ae29851cba20f63450652d081e82d224e57536e5ee728a81e0868f6a6d3f84cf267497c11d0c5151baccb04422da80b48b8d4667bced02114e685ae87317c0eec93f48a2c885ef1390d0722529b7c34d2a19c3315a1f34ea4c7db2447d9876f08f1a61ba30be1853ca7d7e1d56fcf20596a5a83724206629858ac3000a44e43bb49d44c2670905e554fa7acd0ba0d12ffcba47a346ebea2272efb8cb0975d5980e903520b042a6a7cbd659bc5f4f11be8e8f8b1e01291a5037c3f6e90ff5eca16415b22317a243c8195227caa3c0c3bd85c42152e680faf9cd13a636388e9ac428ed8be5efd510706d579b8e1910f720fd091202618446ada72a192fb73ec4029b80907dc5c97d72ffa1504f88baa9f65465c734647314b75b42b2eda2ded85dacee73878a2689e3d426c63d40", 0x1000}, {&(0x7f0000003b80)="b84452", 0x3}, {&(0x7f0000003bc0)="4b4a76cbc05976967402f702736c7280f976110240742ad722daf1d4efdc264bc7372384748c9094b357a499025b39", 0x2f}], 0x7, &(0x7f0000003c80)=ANY=[@ANYBLOB="2c00000000f700010100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x30, 0x20040004}], 0x4, 0x10) r34 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r34, &(0x7f0000000080)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000001d867000600040007000000"], 0x20) [ 938.407804] SELinux: failed to load policy 05:42:28 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x9, 0x86000) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x9, 0x1, [0xec4d]}, &(0x7f0000000140)=0xa) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000180)=r2, 0x4) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x3d56aaa7, 0x4000) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000040)=0x6, 0x4) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) 05:42:28 executing program 3: setuid(0x0) setreuid(0x0, 0x0) geteuid() r0 = getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) getresgid(&(0x7f0000000740), 0x0, 0x0) getresgid(&(0x7f0000000880), &(0x7f00000008c0), 0x0) getgroups(0x0, 0x0) getgroups(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000c00)={{}, {0x1, 0xd7debeae4cd72f4b}, [{}, {}, {0x2, 0x3}, {0x2, 0x4}, {0x2, 0x4, r0}, {}], {0x4, 0x7}, [{0x8, 0x4, r1}, {0x8, 0x6}, {0x8, 0x4}, {0x8, 0x2}, {}, {0x8, 0x0, r2}, {}], {0x10, 0x2}, {0x20, 0x5}}, 0x8c, 0x2) setreuid(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f0000000bc0)) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000f40), 0x0, &(0x7f00000000c0)={0x1b7}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:42:28 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a000080000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0x4}}, 0x0) 05:42:28 executing program 0: r0 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x2, 0x8000) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x11, 0x64, 0x0, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write(r2, &(0x7f0000000040)="62dd7e1910bda61855bec8904d57072b8191febe6855ef5f553356c28edae77e2477c5557f5c16d8a5aca4b87888c049ce2e78da2447af46f02f168cafc7faddd3df8004510db3d8a33032861809e5f04dac30c646074f6eeed7dbbd767fa84bb371d53c7599352eac3623a9f094b4107157dbac935186a9de1f0aa160294d5de1", 0x81) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) ioctl$VIDIOC_DBG_G_CHIP_INFO(r0, 0xc0c85666, &(0x7f0000000400)={{0x4, @addr=0x7f}, "830c99fb668aca7272b63c40a3c39ab5564a34d8fca2e1afa3048b4a8f85595c", 0x2}) r3 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x4, 0x1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000240)) accept$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) ioctl$VT_RELDISP(r3, 0x5605) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={&(0x7f0000000140), 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002800000426bd7000fedbdf2500000000", @ANYRES32=r4, @ANYBLOB="0400080007000e00ffff0d0008000500000400000800050017ff8000080005000000"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sigaltstack(&(0x7f0000a28000/0x1000)=nil, &(0x7f0000000200)) [ 938.541219] SELinux: security policydb version 18 (MLS) not backwards compatible [ 938.561100] SELinux: failed to load policy 05:42:28 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0xc2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x1, 0x4, 0x0, 0x401}) mremap(&(0x7f0000da1000/0x6000)=nil, 0x6000, 0x1000, 0x3, &(0x7f0000497000/0x1000)=nil) 05:42:28 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$selinux_load(0xffffffffffffffff, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x141000, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)={0x76f, 0x6, 0x4, 0x100000, {}, {0x3, 0x8, 0x7, 0x20, 0x9, 0x96, "7ff0cec3"}, 0x3, 0x4, @userptr=0x8, 0x4}) 05:42:28 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a000080000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0x4}}, 0x0) 05:42:28 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) 05:42:28 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x10000, 0x0) mmap$perf(&(0x7f00004cb000/0x4000)=nil, 0x4000, 0x0, 0x10010, r0, 0x0) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) [ 938.584071] SELinux: policydb string length -103 does not match expected length 8 [ 938.604344] SELinux: failed to load policy [ 938.619752] SELinux: policydb string length -103 does not match expected length 8 [ 938.670551] SELinux: failed to load policy [ 938.695962] SELinux: security policydb version 18 (MLS) not backwards compatible [ 938.715943] SELinux: failed to load policy 05:42:28 executing program 5: syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @random="7ca77c4e0961", [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x44}, @initdev, {[@timestamp={0x7, 0x8, 0x6, 0x0, 0x0, [{}]}]}}, @tipc=@payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}, 0x0) 05:42:28 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_access\x00') [ 938.797051] SELinux: policydb string length -103 does not match expected length 8 [ 938.911621] SELinux: failed to load policy 05:42:29 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) syz_read_part_table(0x6, 0x7, &(0x7f0000000440)=[{&(0x7f0000000000)="14f8cbd996e230c0906a90", 0xb, 0x8}, {&(0x7f00000000c0)="c549c5e73b7de38918d9ee5e80fb655d9909ab52bf4d1ad6fbb79a4f9ed36074723de587d339bcd5d7ae7531a882215eb01495c2a5eabb1733e36ce93f79e241ac6ee53dc91cdefd6d7d6d9981091c7f76ccb621853f4a99202082db8b55941bb0be37fbdea3303b9cbe63e4599c217d65fc635f50b88f", 0x77, 0x5}, {&(0x7f0000000040)="3d4cff786a4c23ee8be34b88e47489cc2a92e9c2b980a1b7921f3b3b03d148391592bdc6151ec851d381e5b5ecbadc", 0x2f, 0x100000001}, {&(0x7f0000000200)="32d7fa7aae4b22ce1beee94ae760f865f0e7b6797964ff973105a0fedb1a3288c7e78d6f035b05e1325876bb3cebd686691a7559e7037bbf71a630b8c9dda9e6b2eff11ddba89831c52b4abe11a322494865b26b985a4f853ecb0f96c0fc21d96378e948e4031d5451015c9dbb40775018d5146849297d01746017351a65b3f39662ec5974e40b8dba20648cbebcda1ab26e1db3b086f08066fdddfce5c9ec43b8aa49d5c1ba01616cf60f7c982237b1ce7433c31b", 0xb5, 0x6}, {&(0x7f0000000140), 0x0, 0x8}, {&(0x7f00000002c0)="511e94f62ad8de5f828a0d6abb975fd821f3f01042285f2f8d1b72775d1c2198cae2d1ee360ea247e9f64d164cf4e75a869fb4f95d829d7b85402d9c5ef118ebf5a7d3a132a77bd109564708d18f6fa6b66f7959921ec21c4523e9b618b7b3e75eb035b8dc9991ae888504be084fd82d4c360f5a443cf4901531ecfdb7aa10d1b9fb4fa2e7c59d921254ea6647e3a923c331770b8202daba46ef242dc090e0bcd9f6553e07dcfd06eb46565501ea7dfcba3e0775aad9eeb0afd0aca21459676a04d42c36d950f913c375206b77845fe498df0ef01f8685f9fb6fee7d6b84", 0xde, 0x4}, {&(0x7f00000003c0)="f82c46a3e32046d0ccd183383442b566be06ffbace57705288c92cce13b9a054ae46c1eb0506b3bc3a8cd45383c616188988f3f44530f725d3cb43440a3369f383d4cd14cbe48e555a8a9f056464da0ab6846efe0b7b8c60e61508dd622b098e79", 0x61, 0x7}]) ioctl$KDDELIO(r0, 0x4b35, 0xfffffffffffffffd) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) 05:42:29 executing program 0: syz_open_dev$char_usb(0xc, 0xb4, 0x957d) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/access\x00', 0x2, 0x0) socket$netlink(0x10, 0x3, 0x5) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x101000, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x400, 0x80000) socket$rxrpc(0x21, 0x2, 0xa) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x5, 0x0, 0x7, 0x48, 0x0, 0xffffffffffffffff, 0x7, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r1 = dup(r0) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) [ 939.056922] SELinux: security policydb version 18 (MLS) not backwards compatible 05:42:29 executing program 3: setuid(0x0) setreuid(0x0, 0x0) geteuid() r0 = getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) getresgid(&(0x7f0000000740), 0x0, 0x0) getresgid(&(0x7f0000000880), &(0x7f00000008c0), 0x0) getgroups(0x0, 0x0) getgroups(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000c00)={{}, {0x1, 0xd7debeae4cd72f4b}, [{}, {}, {0x2, 0x3}, {0x2, 0x4}, {0x2, 0x4, r0}, {}], {0x4, 0x7}, [{0x8, 0x4, r1}, {0x8, 0x6}, {0x8, 0x4}, {0x8, 0x2}, {}, {0x8, 0x0, r2}, {}], {0x10, 0x2}, {0x20, 0x5}}, 0x8c, 0x2) setreuid(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f0000000bc0)) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000f40), 0x0, &(0x7f00000000c0)={0x1b7}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:42:29 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000004c0)={0xffffffffffffffff}, 0x0) close(r0) 05:42:29 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f00000003c0)='id_legacy\x00', &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000500)="84", 0x1, 0xfffffffffffffffa) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000001640)="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", 0x5c0, r0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000200)=0x10001, 0x4) setxattr$security_evm(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)='security.evm\x00', &(0x7f0000002640)=@v2={0x0, 0x0, 0x13, 0x0, 0xb80, "379bbc3a560a1425d6059253a0f58e3449551f317b672e24e938f1f4a40c040041458810466a4fe487555eb8ac0f43240b86f0ee1951b103c0668918f59a9bc00130ec899c19ff08a6548e23af8c24b6d1f5dc3a5d1844d198432c4cb6d851150bb524918fc205d6cdd30acea6f5cebe06e4cc03e63d7dbac799d51adda06aa8672da8976b5a9a4bf5c00d5ceffbe88c6c2e4f16bd1e0478f1efc5546627b29ca6036e779a542d5822b6a8bcb8d3f12119c15efeeb10f22975c1893d0d8c04b6a387c9bc50ae644c57138df5b9ca2402efefb3ca3f8108c5b0302196e25c7d4955aff5d09a7915cdc0c2deefa4d6810aaad308bfd16dd9584a05cfaab66ce3659c03f404110368f31669862882c45c497e8f4b7874c60ef56f98bb3fb9b5963d28317dbad145e9f6040590abb91cb4b2ff30664cee7d94b2764a2a1a6bc1a44f893fc3947505f3863bcd859e52177ca1cf37bf7a3a9c8bdc1d88f6af39c9495007c89cb1c18e7a6b7c158201aab83edeaf2310b6c95862aa80fc22e28dd4beec178def5d1171d8ab2600134827cf5bd51c81469a890e0bd5d0b1882ae1a19e03930a59618f60cc8e3d523c5942bd31c230e813b9da180f2c922dad8c4a71eec7c20de82c427f279ad43a5f88507d47536845edbe749745985f365521e5d0119fdce3750c2ceb889fb5bc0073d7bf0fc6340d7d70b653630ed67165e18990bb5d5ba23b3a88823118f3431a9138498c24a9454072bca2ed7ac5d959984a1903c2329d569a7cc0798c1e3e22329386031e11fb4f6f444f793bb66e5898efd6f911b27e9c6b6c77d3655e1b32449e430d75d7a149d03f0b0d6ebb59fc4c528539b43d8c7115854fc162e2afdb97a5c8fe92a526f91719efb264a36d09260eafb8802438345621183de900deb5cef1d0f9ca72077c09afc3749811b01909e3c3905d06090ae3b48816b22a5fd437b6055770f87044b77ad43264d2699ff33194d33d77547aa27cdfeedcff9cfb5481192ff4ab8e11ce6ac039ef33aa543d29ba25af8111dc59190fe23a586c92451dcd5c7ecd2cf9332a31637a8f7a11669a8a5cb5caa38518c4e3ab86c47e2d1eb57bb2d51ebaa0274a7baba7da7d81271d3c002fab7202902021ee458d52cf12636e1bf3b2e667951b84862abc40d5058e10cf59ce06cceae8591d3afe945dfd6e70e0a4e5ba3d6ed946cf1e6b2ec5e9b181a9a978cca55bd4a7fe23d841817e11aecfb7448805e5db934530fa9dee954c3b0527c423e1cb5c03e6b7693418c342c262b8b18b8522d3b5cbb3342bf92190951f8209359cf10ea24ab066974e6b205f656094c583447f3f65333a200f0e01ff565f3894220645f43faf7a546b4aab70738361870b43fbde8a6fd9217f8829400546819bec2340436b60f047f27c0d85904230c7ac656724e4b3ebe19773e6bbd1f088268d8994f6bfa1cdcbd35424cc4c8c9edd5c5f30d30f3eb3720b788fa34374e306e7e3a6721580e13a05d1a5659068759931772865b94d7be374b4e2740df8d727f29480a4243be7bdb3adc49ed704674b77823d4c67f3ab6476e78d2ace3c4620f5c5f00a5ec36185c0fe333da653efb83e61fdc222c4fc31d9cb97147001549a2281a6551f636f1dd0811b505a17221392251bd63e9c25c2cd08993cd414364ef6f19aa61b2acf666f97649d0bf6235306dcfc1b11050962e3a0f15913a2ed06db089440a147e216b8b4d70091fb8532ac3bf6f859e31c847a7afa64f098bc96de2d5c38c78a4e8ff07058220a774efda49ce6b5dc7d100950d53f9de2964b3aab60ee7dd60f12c0194d793e2bca60cddd085dc75b910b6dbf05e9f809c4e11980d83f1fb00fdbaec68c91bf97ee03f4d552a3e061482a36772e8bca14127a51f34a860aa012ba0d2891823ff3da24d05b1dc5e41eb3b6f8244d382054a1a7ec643b65e9d22c72d9832b623f00edf7e74740409cb13940e2addd3b336d52c5f2495f83eb07b016cb443d39b30822e8bc303e062d7fdca445225e92eba9281deffe7b7f39103d3183bf3b787ae0b9cf74bccf3769c48658945020190d4783c2c8afda83fb3ee9468be1f44fc011572bf2ecb69cd9719ce5d1ab05f0dd27561e66fd093edcb0c2183547bc3c5c1ca22341b8b1e327ecfcb547b0800677a414adebefb23e306542145f747135a4fe775bcf7f2aa053b1113022cf1b4dcf9d645f82d323fc9c76d6e577b76a755c7b6a4cec5d7cb7c98e89315a37efcc9706198aef1716950f4052901db284b31c0d44da26b75a6e6bbd8cf351810e4d532f7b01b259f0148586ec7f8a4c491a84acf27f044c940f7527859f7d5112cea5b3e3f4dfcbeeb2551d937345b35243cb9ce2ebf76971c53c3982938b8026b147acdf4ada50b1e32a69679957f2e6fc6aef107495713cc7e72cbca1a76a4d6646b727d9c43aadda962c260c1992845ebf60363c002aad9ca5bf3b1b20567809c0c266f24d74930cbb3de1b9b553c7554af44a69b18c19df7d79d685e53de1f8107153f019335258fe52bb6324df141d116ec868b3c7ecce50356ea5f70065cb4947eb7d36d8136b419a9427e8d7a61bdfcb23960bbec91c5680925b60f1b2ce66f537002a1ab9b47e53dd1921ca9012d70f55162f8bfdcb718c515be0f3f22296b2597f8586a5d8457ad04c0d9ffb4c791e9049dfbab7b7701692593e90364123498d0bffdd8bb4bf8503346609e3d26694b6d7ca316ece149e48c9eb743f1d57de1734de41f07c654ef390bc1c0366a521d0b0a6f7169601de205fbda52b07510b97fcd8d0d72599139f9524d2cc8c6734ae0e21047b4a8cd06d08baf6ceb7cc112628855fae98a455d6075f5d902c12e2aa22238c7ac18c97e126db14e6b2fe721239682d0b52efbaaa594521b65bd9c940c8ace96bbc1d85aa4fb345f82265943091188e4be80d3a7cfa86ec4f26dca072de6aed74ecdcde8065d3edc7844235ea8a9314fda6cc1898c8a21d2e0eeb081879b9dcfee1a17a0924c9a2d107b6ebbc4006e2ca2d31b4a0b0d0522897200d0e28ffaf26f88957aaf31c28eccaeadd7d131c02b7532d46fc0910a90592bd8e957a687c94544349b65d6b56d67bd87f1fa6efe0c67d0e662f667c6f285b2b9cb83deb39b05b39f1424512ca69579520228309960b9b1ded5eaaac06bfb0b3438b9b496de04d4d1fb31de737a172404b288dda0fb7d1671f43b3bc0d3a9954affd1d92f725ead227e96188860fd7d8f12d8473d46fa52af3303819c21150a20fe7a7aaa4f5f27fab5c51c39287fd1300a305025ac302e94392c4e237a3b7829bd131bcc52bf1a848559c51fff60fe84293c052fdfa2f29bd9735b99b4312788c9f9b16adf37a1fa29e7d0684153e803ff832ac0c34fd335cdd2e03dec0e2767f547008f2b01b63a05998b0361d71de0b8a4501121b68931d7f93cbc243cc960d7388d1e61f0dd4c0a15cfbc2786c88f48fc095223013a82063d728fb68ad8a2d964e32ecac38095fc10f596e92be0e841c3dc49111f5d60a3e4fe40d17e2752669013dc04d7bb2af469c3be248e3f9414f8b79d421a0d250531927cb090707f723f2be48decb6fafe82f27fc2b91776be3dc5f82738a39c6b7a57e8becb4f9a9a1d47c896b71844a53eede44c9625c390cbf7882ca8f061e418124901fef31c10fc50a7da44fd2564c4cbbb0ef70c9a9c456916a5dcf477e50b5f9e12c08f29365b64cccbe86c70ae473499f4d41858bc508c822ffe335c9fce39ebce0ef08c107a51c18c95282deac9173fc012577a7106cfe53dabd55df9ae085005cfa1251eaf53375fff84713835280924785018097079dce8ceb266c89447929d16374a16e499c9303d28db1452c7af9031f99476e9c31fd1addecaa1092618205b2cb1cad1bedeb899a4d81fd5a78d1d801bff2398604f4147bc2aeb95746407505728fbcb7070d2964ea88aebf6ffd46e287269e12d285c6ec319f16649f5058562e30a9cf150fddac7c7c0bca70e7e382d51c2cab6a8824885fe2f5fff59ef47da5e7d5552c58d018aeba3b28b8c503603a594fe9d5c14e0c6e1609095af54a431fc6c7564db65430f630e0d93b09b905f92018d88bbc72e979f843fd355af0f0506c3270acbe157e8f921bc07626baf3f0acc6"}, 0xb8a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1003, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) 05:42:29 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="8cff12002042fdffffff3b"], 0x84) 05:42:29 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x2f5) 05:42:29 executing program 0: mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x15, 0x5c831, 0xffffffffffffffff, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x8002, 0x0) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x76af0af8, 0x101140) r2 = getgid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@uname={'uname', 0x3d, '/dev/urandom\x00'}}, {@access_user='access=user'}, {@uname={'uname', 0x3d, '/dev/urandom\x00'}}, {@dfltgid={'dfltgid', 0x3d, r2}}, {@nodevmap='nodevmap'}, {@aname={'aname', 0x3d, '/dev/media#\x00'}}, {@dfltuid={'dfltuid', 0x3d, r3}}], [{@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user', 0x3d, 'port0\x00'}}, {@dont_measure='dont_measure'}, {@smackfsdef={'smackfsdef', 0x3d, 'd'}}, {@dont_measure='dont_measure'}, {@pcr={'pcr', 0x3d, 0x15}}]}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000080)={{0xffffffffffffffff, 0x6}, 'port0\x00', 0xa4, 0x0, 0x5, 0x6, 0x0, 0x3, 0x5, 0x0, 0x2}) 05:42:29 executing program 4: 05:42:29 executing program 2: r0 = getpgid(0x0) ptrace$cont(0x3f, r0, 0x2000000000002, 0x6) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_ENCODER_CMD(r3, 0xc028564d, &(0x7f0000000140)={0x2, 0x1, [0x4, 0x8, 0x3, 0x7ff, 0x1, 0x800, 0x4, 0x7]}) r4 = gettid() ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000200)="533ddcfe49ba32054efe0f65dd7cdd48e57922ed64089ebd3038a7911261bf9cb71d311f82a799e64c40b58919c1ed05601de56465904912491b4bb0d487478ed1382f06fc72aaea5f9f25ff05636692ab40992c35acc8c822fd86187b7dcc48c769f7346569063575d1609a6b5f12b7d6497bd7ee02c74a78496984be0f50f77797f705e57ebdd9255603983fea7c7559269cffab8b63101fdf494d4f116f182638f613865fa05b828c4474740c04ddf2a1a0bad11949aca4") r5 = syz_open_procfs(r4, &(0x7f0000000000)='attr/prev\x00') ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000040)={0xb, 0x1d, 0xc, 0x18, 0x5, 0x7, 0x5, 0x9a}) 05:42:29 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) 05:42:29 executing program 5: [ 939.540845] SELinux: security policydb version 18 (MLS) not backwards compatible [ 939.571634] SELinux: policydb magic number 0x12ff8c does not match expected magic number 0xf97cff8c 05:42:29 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x1) r0 = shmget(0x3, 0x2000, 0x1000, &(0x7f0000621000/0x2000)=nil) shmat(r0, &(0x7f0000172000/0x4000)=nil, 0x6000) r1 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x7, 0x800) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000100)={0x0, 0x4623, 0x0, [], &(0x7f00000000c0)={0x990a90, 0x1000, [], @value=0x1}}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7fff, 0x200) faccessat(r2, &(0x7f0000000040)='./file0\x00', 0x60, 0x800) 05:42:29 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x3137166346c137ee) [ 939.703034] SELinux: security policydb version 18 (MLS) not backwards compatible [ 939.734172] SELinux: policydb string length -103 does not match expected length 8 05:42:30 executing program 4: 05:42:30 executing program 5: 05:42:30 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000001d86300060004000700000036388b99cdf3ca54b7cdd8bd5687845c87f326f8dd8396d6173e79f4bb28aaef5de56746e6314480e47c13a76e3bfa3d3ee60d9cf0b086036371ed56ee0f9030e13ba027229332a30f3a17c54d60609073ba4fa856694e4810da3bed331d6968cf022218f01455176763c1bdfb86e8dfdc5131ef359774519602cc5852"], 0x20) 05:42:30 executing program 3: 05:42:30 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x400, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x5, @mcast2, 0x5}, {0xa, 0x4e21, 0x20, @loopback, 0x80}, r1, 0x3}}, 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x7000, 0x0, &(0x7f00001c4000/0x7000)=nil) shmat(r2, &(0x7f0000172000/0x4000)=nil, 0x6000) 05:42:30 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x8000, 0x0) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000040)={0xa000000000000000, 0xf000, 0xffffffffffffff81, 0xd, 0x12}) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf999ff696e7578120000681ba3bafa45a8880001d8670006000400070000003c9f030003000000"], 0x28) renameat(r0, &(0x7f0000000200)='./file0\x00', r0, &(0x7f0000000240)='./file0\x00') 05:42:30 executing program 4: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) [ 940.436760] SELinux: security policydb version 18 (MLS) not backwards compatible 05:42:30 executing program 5: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) 05:42:30 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000001d867100600040007000000"], 0x20) r1 = shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) 05:42:30 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f00005c0000/0x2000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/95) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x10001}, &(0x7f0000000100)=0x8) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000280)=0xe00000000000000, 0x4) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000380)={0x21}, 0x21) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x2}, 0x8) [ 940.477753] SELinux: policydb string length 1852440473 does not match expected length 8 05:42:30 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001480)={0x0, 0x0, 0x0}, &(0x7f00000014c0)=0xc) getresgid(&(0x7f0000001500)=0x0, &(0x7f0000001540), &(0x7f0000001580)) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x2, 0x6, &(0x7f00000013c0)=[{&(0x7f00000000c0)="108f0242d26297f796daae556a29d1f60eaa57f809a4f46494cd1e9dc1701084b66d4ab51f73b0398211b3e417dccc0e5380fad4d0592ee924856c91150a79c30e0094ecf9df2f09c594944b68e764ea8d31488b5d0041d18fa50a6bf6d28501bb0681e5c5822ef415c523107187259d9265dbd9985edd1c0188bda1aa37b145139306c70766e9c78938af364cfa438f05173330cc51c9a58d10a5d9d83b249532", 0xa1, 0x5}, {&(0x7f0000000180)="4670586fb1fc70f518ca73679d5a01f092a006a12e6a0b0ec889f1fbbc307faa02bfc55828aed9", 0x27, 0x6}, {&(0x7f0000000200)="cfed803063b4245dabfd3704b4d42488f41883dc94a475cc844d0080cf5e9195b52401e8ebde49aa1323d26ab596e13dbe12c7cd62bbf9e8b4cf9405d43339f836623adae5e1bf5dada6c423763b875fff7f039a318377cb2694f2b578c6428059c6415f73deeea556ff6a070119a59df4bcc0735f6d00d8ba873b43693bec919ee8c42aed7bf4ffc68226", 0x8b, 0x368c}, {&(0x7f00000002c0)="6cd8400954230fa7a117aab90846e3a25ae25f20583998d51669966de2bffc9472f374a883b8831467a185c7ec5b47047c746c2fb4a7bd1abaebf910ffc34f9cc54748a19114f9823c11f05d1446869b575afec19e05651a9aaa8acfb2e4a8568dd6eb8cc0a42a1101da97f527c1003d98ddf9aa9a3d8816d8f35c069c04ca97fbbc89b2c03ea3baceced1a933eb18e73b7d349ff1bb7b15071abd525677e07c995e5fd99eadbc6e912c5ce5f91005f00fca20a2e545b6f57ee38d27e12ea5e095904e0f7778012e63ce5fa3df655a9748bfccec95f9d6bbf49d55739e6509c943cbb7d5affa35839d2b906d9bb55630984779cb173d853c9e838935c2737f57a5c6f6d42c7d0ccd34580490112cf839b47d5df7769ed82e1b52502dcabb2bfb7f26f0b2a0530d682f4553baf34f50129eecb682a917a47df497aa4a5b80a6b0ebe05ff960fc321b1bfbbd88b5092e466e4b4803a812f9be046b0505223857f8237df791267adefe7977c68b586f85538e3e1cfe1fc66c3278eba2212dd7f84d38dc6dffc1cd6d5468a199ea1742dea2d31f51bca5c99c98c1b2f617198c5acae3ac724c6a6522196f080a4ff25d180ee6a56c276290a9789e10d65ea5be692d9ee921528b6ae4e4804ed10d5744e3c93d408d86132b4c26b757e7e3807409d063cc0dcc6d65586751a9c2575c8a43527456ee8a40659117c15c3e573afe7150184c170dd0ec71be35d4e6c410a8553fb4536cbaf8a3b9942d33d7082a43af7004db124facee641baf7418918c3e9919a1d6255bb9a26db2062302132e53bc50ea5973f1c51353910f93806f7448fc9bafb163850d248c96bb1740cae32d4d9b1faf549d27b7ba9bd5ae240e4c05dbb1da829d50cabf4ff5680fe5a84a5403f84602e79fb6a2dbd4d3fdb28e7c75db74c1a40b21a77fe8283f61b298ad67dea3ea1bc1e3d09e4cd9a9b10f0b5ea027b224e26d1152d080bcc3fad8bc339bb3a6e4d1312ccc8da1ab533606fd20a5fc010b9893bb901380bdd8dd556e1222dcdf85c7f34dc5b7e61af488011ace985b454d976cfe87e97a5f810efb19ce3c07dcb1d32f8d37fcd422431d41386840ee801b39eefc5286e1f0a2c2fbc7f3b588eacf0362e333fad11d628cd6b66d84daf830d1c8a84883aa58b904e8b7f69508dce458abd555ef250ade96919ec98483559863248a2f4a4ff11598c843e2f4a0a261a5868f031af2c0eebfa751f7dc6602187ca6ca3b00e6d5ed25dcefca77015bd8cb353ea3d8287f3bbbcad9f79a66a2e5fd8490b65b20d06c7e480e0f2225c655209e6c1ed99a0323fcea67a2dcad4dee331f6af5ca5c5045afb73143b5994b2f1c73938b30cef9348985302cb9ef42e501d050f338bf1996f65734d419f235de79985589fe68e95f71c86db1f0c4afffd6849917624fa8cdeba01ba628633ef1c0e4d663aa02ea678c5eee76e74bed821dfb921ee1757333197ce7f7d26e8d693c8b7967376b623e74d0530cd67ec62a5c89750f7f2088754a70562a77543dc53d9e360da0eafb027b5b45423ae87c33d3e2ec3be606e6661deecb9c3ad59ba1b071f577a10885c6fb5dd8eb383355f5cd607e33bcae1ff3c6c7d294a74d6bde2acb53b9a01b954a06b6682d6390a231fd26eee0108b2ea33dcff82cb4eb51fb58ee4aa409ec2f63eceebc570bbdd577b8a6ab91ab70561b64c7ce95f077ccfc42d04622af6532ff69bd03371f6774cecd6c3e53db2637091a32d0852fb23544cda087f3cf0d93174984d3a9af8db4dae99b3fd57126a74b110a75d59094afcbc1b95437633bf95addf6ffbccedb87205ed136a6e367c6e44049918a2a8e2fbfb34ac720bf8cc9a939179c8cf3d37926fdf71b8de8f4433f94e2e375e8b5038d1eaa4e2df699151176643eef86bca2d5313b251f87006c0afe952a814916995063611ae80f094904a855570c8bbbf0d490adc37b5891ab48c1c3508e7322035857b1937904d910abca7d34576ea07d3ca7d214d663f9d49a32bdadfe354075fbddd37cdd061b69c434db987db00984b520e31e94f4fb01c82b2fd1b1f7ad1f7bfd48a9c5836c5f15c3b5bfaafbf39049a30d0c4608855357db59877a387b3f3f030c0f167b5a61f2d3f32a6bebd29732c95e57e2139f79125f5794f6cf76e3d57856ba1970754aa43579ac5282dd82e3ea2baf1f94b480a8120f3ab4551a0aa394f25d6775dd9b4f6a70754b7a6c733090033e00e0d922bf006debb57f29b2f3be538019f5d154b5070293d43a98b5da11b7c2b07d9e6700b2920b6752c5ad62b9079fd0227267f968ed0c11cc3799b74bf67ffb5e823d63808f4c297a19252c600914fbe7bad01f1915cf270c3a4d5fe2cdc113998d4f5a1c21a8acacac65bbdadddfb5c15ffc50f677ffe7e7b27349deca0e63e4ed8287b30078d3524cab3426155abf9d79c1fd25041a09e54da3eddc7c7c6673a25f25dd954a67f867d1ba14f6c6ad629ecf590e4487eb0bdbad3c66f1ec20a1aafe9fc1cc20de563dcef021130261cf420265001caf9fb4a5ed9c7b23e76589c690ae6c030e9dc94fd9c5b4314d5f85c6b3ea6615465a1bcae8d810d245388dace6b6823af6a5fdafb140d117f70d0d73f06c43d4179b4334039b8efd28f2409d1c65bf7dd72368e963769466ef26ec76f944f7b14eda42dae60c34f0ae8237e857a842fa78369ffcf74c0213163f88272b777a1d1c40fdf43f23247c96fcf02bf96401fc8ab8dd10c86b0a31fab7adaf9fc5bf5a102e684e8196f600fd67b52d69fae520f949fe8103d7aaf9b21d6c2df12adc0a0c038f42213be1ea91b35048c183c076928e2be8a5fa9e70f58040844e29a212edb90776a3788d28cc29a737380217bb43bd2b80d68a10e2cff33b0b6f327a5a4ad1e8dbf2efd440a7f65cd10b2e94d1cda74dd420ebe525e96ad1e8dc53632cae0a9059987dd2c07856e4d81d8f44ee907fd55a09ebe420e9c193ef9fbaaaaca5e27795e27a9e28f90aad86864fc4d7cbe71127097bf1481699678a4151de6ccf5a01ebcd4ea1448583da6d1f0b533166a4f44d7d7aff91582460d338c119b846f2a2132d87504114f618aae62be465d39c69afe7fd76a5968cce44e0016695d1c45092ebda23cde2785614b05157cbc163f316b03b9e95d01fda1c27d2e8f132c68097394ecd2af5119faa9172ba2934861db46f8144f6e5796d2067db988f9e9fc8784888c760838f0e8fdf6a4a4abe99656c317e566ddd8e89a3872e7917a22b6f9fc9b4541e46b4e1be932232f32e9c1d930f19042fff446f1ece3032afdab3f4f0c1fd67618c5d0c310db9e9ae93a6716114ad73996edaf4b3322bd4cbda9b5a82976fddd1408b6b918e6186ca8bfc1f4585048ea18ac94dafec866c73777f8cffc4859fd8ae9f5ff838ae55ed0a99aadab0817fefa30b498e5886209a8b826edd258e4d44cae5d04689bafb0f5d43a25454fe9e474f226a09162a00fc0117d06c4b75fa9f97d629eaa9a07f3eb939aeb3087f4012f3ceef4f59a703a6a5043dd923e42c4c18080731c569cc6028d1c277e43c62e3697d38cb210b8fd669317a5cd893fedbf3d6a4678569d723487baf91e453b9c217303fad559fc45b7827e7e702277f53d492bbf39e6c4f7360a0ac727674ae073cb3e1d3e96f2d3ff7bddf3ecef10396e2508d31a18ea7c53e059b9aeb606d5de2cce25b5bb0cbd6679a1c15daa1d640c215122db649e71788061c310da752adc57c97dac409bcd19b73d7123459443597e69a58de8157391ac553adeaa9ab89437f883c4c9cda03f79af343588342f84588e3671d9c75b11961dd78c90aae37065dd470003367a1f1d5d985cef3279852fca9f059da02cbe3123edae83cbe1139ff606b3c880d4f98ba247b02aac4c695cd3c0e5aacd96a4b9a51bb542276847078db3ff2de211253cae5f0fe347d77da81271ff706716373d3e161594f399468c11a8469ecffa8e7980e9a6b07209b3a6d45efffad6a86be6c3d9823a0bd5072afafe2c5865e8139e138e6c1449ea319db5d7345a39961c614724fc013e8e90f4f70f50c3a1d4664077ee322b2c0f0edf05bc1c5a6fa896fcd074e94300eb4ce4cb9995c2f608942f7a6e6e562c69861a63a2afdf7fcea6db907e72b3988447a07046889113032ec0eb615aa520b37e650b196f5364a6eaa69fc08f0cb1cb0d33a3c1593f1674f4d74e375e8a6dbeec271ef62d187fef29d101b5e895c94b2619fac9577c54e7a4b7012035f87156cb099f89919927617e94295d5fc819967d1df5c95957b4764edba787749a167406941bf64faeeed7f56f51f39ef9d7ccc99458b3e49f702727a43402cd754efd06b91abc325e82ab8e2954c171aac1a136a29bd9e960353108bfc45607c4fedd6587ae0744c92e78653fc591c222427072051a67e7ed57a029340704be3beefdbbfb4b6f65fe45d66c213986336db75d8212c9eb0608a0173b057b409761384e3478a3f5706aca3c12aef6a1c5b946a024b437924992a36f3a84df7d5d82ed06b940839a6f631d66f3788a8a17518b0ed03c8ab0c46c00cb108c67ed6a9c70cdfc6e568f25e7a09f0556aa5f01d3b54a06b594cb36b8d589a66742250b8ce922b98fcf78a16cfff68409f1efcac0b1058ec39d54435f4956eb1dd85ed593e7adfefb54779310a2c60c5cb324181f7d86d9d3eb1bf97618fdf552f7aed2c1735cec94236e4194bc3e685b91d2868966528d0ccfce84c3238c27207114ec2de72b0e1a738174a706e9fabdcb89a82f2d35d4f33bad2536ea53a5138ec58519f9b028948719d85ef38edd674a2ca9a1c53579cd9391fe25e8d44fed0ae036b5777af46661b9e5dcb11c0e0eeefd7aa3364f793f76d04de642ddda262d52c60f93783dea9b6bec7338cfc081b9db7e9c118e0ba05fd46e014773a76b66ccb5436089dde5f8a70b2414a7c7f0f141307b87bdb2c7f7ec422bf044ce8fb508b53e3d4b646a68349aa6878c6536e5b4e8a41130d339d64819b4701ec77f6b4c94fb842f7a99dcfca7a80623fd7aee576b976ef4d192ccada6b995a7ad5a9401be85ce69bdf8ca1834696542cef708e044ac0c9976d75d7ada967c60e5797bc7db07e0316c1c865167ac24a220507dc0dd05b46448f3d3ccd9292d45c592353013be9323c9e0e98b4c140eefb307071dbf5cd6c34471587ba958862b33016a07a1e89ecbee9489d5e080c1670da4be8c9af856ae2d90304b2a2b1dc9cbd264f6c26970abd71736cba96c5eb81d9fc7ff850880157d58428349442351f3d78668076d89cd79471fb5c2b3e7a394e0e1aa3a7c90e29c97c10eafab4b4fbd333198a278b9cc3656bd68570c5802e3c5218ac1fbde620fac0ca1d73e15b21144a44347d5aaca7166d445bb271b6397420982ae1ffa546c054aa158b87316b0656848f3dc556b533811e29557589b0e47a9a5e563cfd52f42b400d109e30bba112c046d3ddec61936500ee7ca9d006ad76946988c1d7ef4f960d9b0a1030fbff8af4364c4a3b36f9d6b76ed8bff29a278c64d4f91457d07b50cd3016501f432baa5e9ef22b9b35767df9a006586fe76c4e3e091083b1bd8be530ea9141cf8977ec99aaa822354c89111a4f221051877875c0d15ef9f559f12c46bf283c003cb9c654d097eb8a8ba04622ad24cc2f0c93e043009cc93038b1ce91ddbbb983790afc1285fa1f795490e51b6eb60c7494eac30bc3be8b832fbad36fb5e99ea22391117e79a55641c4c9b07f925000de633cb1022df5", 0x1000, 0x100000001}, {&(0x7f00000012c0)="ac2cefe0ebec60ea9c84a54ac45c56d604b07a1b698c47b9a08235b14640e959c171ab3505ed412bf3", 0x29, 0x2}, {&(0x7f0000001300)="648329fd614a87e6eb20fff8e69b367d9548fc623fe321cab8808d1e61881b6d5008a9e400adac3c985462c4b123073239c74468a84c31dfaf365d1cd314c66b7d0fb3baafa95ebbc209aa4e2aa308cc66c67e29cbef88149a7285f0fcabaddb63d49054fa6a06ef67c589c6dfade1f76cabaacc76fcbb9136936889e10700173830ad2ba14a9d031f", 0x89, 0x7}], 0x8, &(0x7f00000015c0)={[{@gid={'gid', 0x3d, r0}}, {@gid={'gid', 0x3d, r1}}], [{@obj_role={'obj_role', 0x3d, 'vmnet1'}}, {@smackfsroot={'smackfsroot', 0x3d, 'SE Linux'}}, {@measure='measure'}]}) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000001640)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) 05:42:30 executing program 3: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0xc2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x1, 0x4, 0x0, 0x401}) mremap(&(0x7f0000da1000/0x6000)=nil, 0x6000, 0x1000, 0x3, &(0x7f0000497000/0x1000)=nil) [ 940.528163] SELinux: policydb string length -103 does not match expected length 8 05:42:30 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r0, r0) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000040)=0x7a, 0x4) [ 940.618042] SELinux: policydb string length -103 does not match expected length 8 05:42:30 executing program 0: socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$vsock_dgram(0x28, 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x240, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="e7620440a0e9c805"], 0x87, 0x0, &(0x7f0000000080)="4c3b80ad7ad5a81c272db4be1e15fef86ba2059c49858515b3b336101f4e0a004f68d43191dcb8a2281c5b79234bf05cf0357b412895d9209e72510a15ceeb8eef43193e619e803af0d4204ad7a3c80d7446bdf9ca019a5b6c1c330021df57db7a468baf6d1fd5c327f3e754d70934e16259ff4f73d570a6e70cba6e0b2488a9b1fd696d8253ea"}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) 05:42:30 executing program 3: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000da1000/0x6000)=nil, 0x6000, 0x1000, 0x7, &(0x7f0000bc4000/0x1000)=nil) 05:42:30 executing program 5: r0 = getpid() ioprio_get$pid(0x2, r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ac1000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000d68000/0x1000)=nil) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0xcf9acd2a7ae39350, r1, 0x8) 05:42:30 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) [ 940.659434] SELinux: security policydb version 18 (MLS) not backwards compatible 05:42:30 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x200) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) 05:42:30 executing program 4 (fault-call:1 fault-nth:0): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) 05:42:30 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'osx.', '+em1vboxnet1-]mime_type/.G{-[]user/\x00'}, &(0x7f00000000c0)=""/236, 0xec) 05:42:30 executing program 5 (fault-call:4 fault-nth:0): setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 05:42:30 executing program 3 (fault-call:1 fault-nth:0): r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) 05:42:30 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="3a5b62db9d63832a033a408504bf95", 0xf, 0xfffffffffffffffa) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) [ 940.883721] FAULT_INJECTION: forcing a failure. [ 940.883721] name failslab, interval 1, probability 0, space 0, times 0 [ 940.902306] SELinux: policydb string length -103 does not match expected length 8 [ 940.924687] CPU: 1 PID: 16099 Comm: syz-executor.4 Not tainted 4.14.141 #37 05:42:31 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x8001, 0x80000) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000080)={0x2, 0xfffffffffffffffd, 0xf887, 0x6, 0x6}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xfca7) 05:42:31 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000001d8670006000400070000007b36bf6ad79bb58600ae17fe02a64294655da1c610256ff3252bb94ad9671887eaa74b95c02809ebc2ad0045660b675b6be47095fd2a673756e4bdbc16868badb07afea11e0bf85510a7ceddcdda858b8e6fe0fdffdc491de2"], 0x20) [ 940.925876] SELinux: security policydb version 18 (MLS) not backwards compatible [ 940.931808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 940.931813] Call Trace: [ 940.931830] dump_stack+0x138/0x197 [ 940.931849] should_fail.cold+0x10f/0x159 [ 940.931863] should_failslab+0xdb/0x130 [ 940.963024] kmem_cache_alloc_node+0x287/0x780 [ 940.967612] __alloc_skb+0x9c/0x500 [ 940.971239] ? skb_scrub_packet+0x4b0/0x4b0 [ 940.975564] ? netlink_autobind.isra.0+0x1c9/0x290 [ 940.980490] netlink_sendmsg+0x874/0xc60 [ 940.984553] ? netlink_unicast+0x640/0x640 [ 940.988793] ? security_socket_sendmsg+0x89/0xb0 [ 940.993551] ? netlink_unicast+0x640/0x640 [ 940.997796] sock_sendmsg+0xce/0x110 [ 941.001512] ___sys_sendmsg+0x70a/0x840 [ 941.002238] SELinux: security policydb version 18 (MLS) not backwards compatible [ 941.005482] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 941.005494] ? __fget+0x210/0x370 [ 941.005505] ? find_held_lock+0x35/0x130 [ 941.005515] ? __fget+0x210/0x370 [ 941.028714] ? lock_downgrade+0x6e0/0x6e0 05:42:31 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/load\x00', 0x2, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x80000001, 0x40) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) ioctl$RTC_UIE_ON(r1, 0x7003) 05:42:31 executing program 0: mmap(&(0x7f0000898000/0x4000)=nil, 0x4000, 0x0, 0x5c831, 0xffffffffffffffff, 0x100000000000) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) [ 941.032863] ? __fget+0x237/0x370 [ 941.036319] ? __fget_light+0x172/0x1f0 [ 941.040293] ? __fdget+0x1b/0x20 [ 941.043657] ? sockfd_lookup_light+0xb4/0x160 [ 941.048161] __sys_sendmsg+0xb9/0x140 [ 941.051960] ? SyS_shutdown+0x170/0x170 [ 941.056041] SyS_sendmsg+0x2d/0x50 [ 941.059578] ? __sys_sendmsg+0x140/0x140 [ 941.063640] do_syscall_64+0x1e8/0x640 [ 941.066092] SELinux: security policydb version 18 (MLS) not backwards compatible [ 941.067523] ? trace_hardirqs_off_thunk+0x1a/0x1c 05:42:31 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipmr_getroute={0x1c, 0x1a, 0x0, 0x70bd2a, 0x25dfdbfc, {0x80, 0x10, 0x10, 0x9, 0xff, 0x1, 0xfd, 0xb, 0x9ebb6506795963d0}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000733000/0x1000)=nil, 0x6000) [ 941.067542] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 941.067555] RIP: 0033:0x459879 [ 941.088385] RSP: 002b:00007f8d7ab1fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 941.096098] RAX: ffffffffffffffda RBX: 00007f8d7ab1fc90 RCX: 0000000000459879 [ 941.103369] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 941.110636] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 941.117907] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8d7ab206d4 [ 941.125306] R13: 00000000004c77d9 R14: 00000000004dd030 R15: 0000000000000004 05:42:31 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x480000, 0x0) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) 05:42:31 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x5, 0xa, 0x4, &(0x7f0000000000)={0xffffffffffffffff}) getsockname$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, &(0x7f00000000c0)=0x1c) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0xfffffffffffffe92) [ 941.138392] FAULT_INJECTION: forcing a failure. [ 941.138392] name failslab, interval 1, probability 0, space 0, times 0 [ 941.162110] CPU: 1 PID: 16111 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 941.169232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 941.169237] Call Trace: [ 941.169254] dump_stack+0x138/0x197 [ 941.169272] should_fail.cold+0x10f/0x159 [ 941.184811] should_failslab+0xdb/0x130 [ 941.184824] kmem_cache_alloc+0x2d7/0x780 [ 941.192915] ? selinux_capable+0x36/0x40 [ 941.192927] getname_flags+0xcb/0x580 [ 941.192943] user_path_mountpoint_at+0x29/0x50 [ 941.201213] SyS_umount+0x10c/0x380 [ 941.201223] ? SyS_write+0x15e/0x230 [ 941.201234] ? __detach_mounts+0x2f0/0x2f0 [ 941.201244] ? do_syscall_64+0x53/0x640 [ 941.209592] ? __detach_mounts+0x2f0/0x2f0 [ 941.216902] do_syscall_64+0x1e8/0x640 [ 941.216912] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 941.233191] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 941.233199] RIP: 0033:0x459879 [ 941.233204] RSP: 002b:00007f81198fec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 941.233216] RAX: ffffffffffffffda RBX: 00007f81198fec90 RCX: 0000000000459879 [ 941.243202] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000020000540 [ 941.243208] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 941.243213] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f81198ff6d4 05:42:31 executing program 4 (fault-call:1 fault-nth:1): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) 05:42:31 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.events\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000280)={@broadcast, @initdev, 0x0}, &(0x7f00000002c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000780)={@mcast1, 0x0}, &(0x7f00000007c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000009c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000800)={0x14c, r2, 0x10, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x130, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0xdea24457e0d55596}, 0x4000000) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000240)={0x80000001, 0x31363553, 0x3, @discrete={0x80000000, 0x1a8}}) r5 = fcntl$dupfd(r0, 0x406, r0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x2a, 0x200, 0x7fff}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f0000000080)={r6, @in={{0x2, 0x4e22, @empty}}}, 0x84) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) [ 941.243219] R13: 00000000004c902a R14: 00000000004e01b0 R15: 0000000000000004 05:42:31 executing program 5 (fault-call:4 fault-nth:1): setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 05:42:31 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000001d867000600040007001b01"], 0x20) 05:42:31 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="8cff7cf999ffffff5345204c696c82781200000001d8670006360400070000003c9f030003000000"], 0x28) 05:42:31 executing program 0: r0 = mq_open(&(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x1, 0x20, &(0x7f00000001c0)={0x575b, 0x0, 0x1, 0x1, 0x7, 0x4, 0xffffffff}) mmap(&(0x7f00001a3000/0x3000)=nil, 0x3000, 0x2000000, 0x10, r0, 0x0) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x20800, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000140)={0x0, 0x5, 0x9}) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000040)={0x2001, 0xb8, 0x54, 0x5}) ioctl$RTC_PIE_OFF(r1, 0x7006) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000100)={0x8, @broadcast}) 05:42:31 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000040)=0x4, 0x8) [ 941.366858] SELinux: security policydb version 18 (MLS) not backwards compatible [ 941.384927] FAULT_INJECTION: forcing a failure. [ 941.384927] name failslab, interval 1, probability 0, space 0, times 0 [ 941.389394] QAT: Invalid ioctl [ 941.401161] QAT: Invalid ioctl [ 941.405958] SELinux: policydb string length -103 does not match expected length 8 05:42:31 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="8cff7cf999ffefd07166204c696e75781200000001d8670006000400070000003c9f030003000000"], 0x28) [ 941.415681] QAT: Invalid ioctl [ 941.424313] QAT: Invalid ioctl [ 941.439470] CPU: 1 PID: 16157 Comm: syz-executor.4 Not tainted 4.14.141 #37 [ 941.446583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 941.446588] Call Trace: [ 941.446606] dump_stack+0x138/0x197 [ 941.446624] should_fail.cold+0x10f/0x159 05:42:31 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000007500)='/dev/adsp#\x00', 0x4, 0x498000) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000074c0)=0x8) shmget$private(0x0, 0x2000, 0x20, &(0x7f0000594000/0x2000)=nil) shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffe000/0x2000)=nil) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000007300)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000007100)=[{{&(0x7f0000000040)=@can, 0x80, &(0x7f00000014c0)=[{&(0x7f00000000c0)=""/234, 0xea}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000000240)=""/151, 0x97}, {&(0x7f0000000300)=""/4, 0x4}, {&(0x7f0000000340)=""/19, 0x13}, {&(0x7f0000000380)}, {&(0x7f00000003c0)=""/48, 0x30}, {&(0x7f0000000400)=""/147, 0x93}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x9}, 0x406}, {{&(0x7f0000001580)=@nfc, 0x80, &(0x7f0000001800)=[{&(0x7f0000001600)=""/128, 0x80}, {&(0x7f0000001680)=""/114, 0x72}, {&(0x7f0000001700)=""/197, 0xc5}], 0x3, &(0x7f0000001840)=""/33, 0x21}, 0x657}, {{&(0x7f0000001880), 0x80, &(0x7f0000001980)=[{&(0x7f0000001900)=""/83, 0x53}], 0x1}, 0xdb1}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f00000019c0)=""/47, 0x2f}, {&(0x7f0000001a00)=""/188, 0xbc}, {&(0x7f0000001ac0)=""/213, 0xd5}, {&(0x7f0000001bc0)=""/7, 0x7}, {&(0x7f0000001c00)=""/133, 0x85}, {&(0x7f0000001cc0)=""/136, 0x88}, {&(0x7f0000001d80)=""/204, 0xcc}, {&(0x7f0000001e80)=""/36, 0x24}, {&(0x7f0000001ec0)}], 0x9, &(0x7f0000001fc0)=""/60, 0x3c}, 0x7fffffff}, {{&(0x7f0000002000)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000003480)=[{&(0x7f0000002080)=""/219, 0xdb}, {&(0x7f0000002180)=""/57, 0x39}, {&(0x7f00000021c0)=""/10, 0xa}, {&(0x7f0000002200)=""/177, 0xb1}, {&(0x7f00000022c0)=""/167, 0xa7}, {&(0x7f0000002380)=""/85, 0x55}, {&(0x7f0000002400)=""/81, 0x51}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x8, &(0x7f0000003500)=""/165, 0xa5}, 0x5}, {{&(0x7f00000035c0)=@nfc_llcp, 0x80, &(0x7f0000004640)=[{&(0x7f0000003640)=""/4096, 0x1000}], 0x1}, 0x421}, {{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000004680)=""/178, 0xb2}, {&(0x7f0000004740)=""/157, 0x9d}, {&(0x7f0000004800)=""/1, 0x1}, {&(0x7f0000004840)=""/89, 0x59}, {&(0x7f00000048c0)=""/64, 0x40}, {&(0x7f0000004900)=""/240, 0xf0}], 0x6, &(0x7f0000004a80)=""/159, 0x9f}, 0x3}, {{&(0x7f0000004b40)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000006f80)=[{&(0x7f0000004bc0)=""/4096, 0x1000}, {&(0x7f0000005bc0)=""/4, 0x4}, {&(0x7f0000005c00)=""/4096, 0x1000}, {&(0x7f0000006c00)=""/69, 0x45}, {&(0x7f0000006c80)=""/244, 0xf4}, {&(0x7f0000006d80)=""/226, 0xe2}, {&(0x7f0000006e80)=""/196, 0xc4}], 0x7, &(0x7f0000007000)=""/218, 0xda}, 0x3f}], 0x8, 0x42, &(0x7f0000007340)={r2, r3+10000000}) shmget$private(0x0, 0x3000, 0x54000000, &(0x7f00009f4000/0x3000)=nil) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000007400)={@ethernet={0x6}, {&(0x7f0000007380)=""/75, 0x4b}, &(0x7f0000000380), 0x50}, 0xa0) shmget(0x3, 0x3000, 0x800, &(0x7f000020a000/0x3000)=nil) shmget(0x0, 0x1000, 0x20, &(0x7f000003a000/0x1000)=nil) r4 = shmget(0x3, 0x1000, 0x9, &(0x7f0000aa7000/0x1000)=nil) shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0xbad48f38f8e043e3) [ 941.446640] should_failslab+0xdb/0x130 [ 941.459673] QAT: Invalid ioctl [ 941.462171] kmem_cache_alloc_node_trace+0x280/0x770 [ 941.462186] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 941.462202] __kmalloc_node_track_caller+0x3d/0x80 [ 941.462217] __kmalloc_reserve.isra.0+0x40/0xe0 [ 941.469024] QAT: Invalid ioctl [ 941.470314] __alloc_skb+0xcf/0x500 [ 941.470325] ? skb_scrub_packet+0x4b0/0x4b0 [ 941.470337] ? netlink_autobind.isra.0+0x1c9/0x290 [ 941.470349] netlink_sendmsg+0x874/0xc60 [ 941.470363] ? netlink_unicast+0x640/0x640 [ 941.476281] QAT: Invalid ioctl [ 941.478632] ? security_socket_sendmsg+0x89/0xb0 [ 941.478644] ? netlink_unicast+0x640/0x640 [ 941.478655] sock_sendmsg+0xce/0x110 [ 941.478665] ___sys_sendmsg+0x70a/0x840 [ 941.478676] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 941.489023] ? __fget+0x210/0x370 [ 941.489037] ? find_held_lock+0x35/0x130 [ 941.489046] ? __fget+0x210/0x370 [ 941.489062] ? lock_downgrade+0x6e0/0x6e0 [ 941.521159] ? __fget+0x237/0x370 [ 941.521175] ? __fget_light+0x172/0x1f0 05:42:31 executing program 5: fstat(0xffffffffffffffff, &(0x7f0000000200)) getresuid(&(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) fstat(0xffffffffffffffff, &(0x7f0000000300)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380), &(0x7f0000000400)=0xc) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000580)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0}, &(0x7f0000000500)=0xc) fstat(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, r1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f00000001c0)=0x400, 0xf2) getsockopt$inet_buf(r2, 0x0, 0x24, &(0x7f0000000680)=""/229, &(0x7f0000000780)=0xe5) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)) 05:42:31 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="8cff6e75781200009fd2d867000600040007000000"], 0x20) [ 941.521185] ? __fdget+0x1b/0x20 [ 941.521196] ? sockfd_lookup_light+0xb4/0x160 [ 941.521208] __sys_sendmsg+0xb9/0x140 [ 941.530169] ? SyS_shutdown+0x170/0x170 [ 941.530194] SyS_sendmsg+0x2d/0x50 [ 941.530202] ? __sys_sendmsg+0x140/0x140 [ 941.530214] do_syscall_64+0x1e8/0x640 [ 941.537869] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 941.537888] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 941.537896] RIP: 0033:0x459879 [ 941.537901] RSP: 002b:00007f8d7ab1fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 05:42:31 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) [ 941.550125] RAX: ffffffffffffffda RBX: 00007f8d7ab1fc90 RCX: 0000000000459879 [ 941.550132] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 941.550138] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 941.550144] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8d7ab206d4 [ 941.550150] R13: 00000000004c77d9 R14: 00000000004dd030 R15: 0000000000000004 [ 941.589305] SELinux: policydb string length -789577831 does not match expected length 8 05:42:31 executing program 4 (fault-call:1 fault-nth:2): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) 05:42:31 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d8670046000400070000003c9f030003000000"}, 0x28) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x200, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000200)={0x9, 0x4, 0x1, 'queue1\x00', 0x40}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f00000000c0)=""/94) 05:42:31 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x1000, 0x78000000, &(0x7f000022a000/0x1000)=nil) shmget(0x2, 0x4000, 0x8, &(0x7f0000ffa000/0x4000)=nil) shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffd000/0x2000)=nil) shmget(0x0, 0x3000, 0x40, &(0x7f0000526000/0x3000)=nil) r0 = shmget(0x1, 0x3000, 0x10, &(0x7f0000de8000/0x3000)=nil) shmat(r0, &(0x7f0000efb000/0x1000)=nil, 0x4000) 05:42:31 executing program 5: setreuid(0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) sendmmsg$sock(r0, &(0x7f0000003080)=[{{&(0x7f0000000080)=@generic={0x9b85ea23c474dd3b, "93513b85ad625e3c3df288bc028cd9d253ca356243e94c2eada937a50900b1410a302b06364a34c52616d6921b4337b28cf5bfd9bd77f0d0cbcba620c3ff929792f0d4146feb7d4da0cb76a8e3844cf94490af54f4289acf0c2650d6aa91a61c30828ac1da7a38937992a5960c0c720e10e70b990c79ee04ed4cec3ac88b"}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000140)="1f2571a0f399342b4ba8255871", 0xd}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000000180)="c3b4926f23174332c455d1110e40ec9fc2686f0cc7304bd73b05ff7aa2658527b7bb3c24c1f18f6f20436d196ba69b7efe929583765b4ff3eefef8c8e5a63e158854d84444391babb388392b564b277c5e74baf0dd05bbd09e1e9a02bd2ba99f2e2663fd1b01f0d0f82b38a40439f88d89c5ee58aec64144667ddc611e9bc6d92a2ea1fd2b5fb534853134aca5c9", 0x8e}, {&(0x7f0000000240)="cb4a073d5d893d58847fa7111819a017763ffc838c387b2ab8adc5903d4d90fe54d58749c57e207e5c4106d9ccaf4963abb5666ec37160e107eb924a3c612afcd2312abd970e4ac48b4875614271b5bdd17715051978bd2e70b7c7df51", 0x5d}, {&(0x7f00000002c0)="4609629dd7611ecbf7b791096593aac922e3293116a6061b9f7fef243f704eed70d01115b98f7fd35c6ab05cb7af3a9c13a20254e08e44c0b7ccaeaa", 0x3c}, {&(0x7f0000000300)="4a00365f1f1fd573320092ffb08d0c7469f0a892dc798b529317fcd90647155c0a285c4a", 0x24}, {&(0x7f0000000340)="03e0158f33a17c1d8153630d819498b8c50374066f308de3014ec5da4b35aa9f78be5ffdd473e7989e59de06ad87021bb60ce4fafbccb4ad056be3edf1ece9bea5d3fcdd404220bd1f3e183d2285406d4374e4f5709c7fda569032bef134a09fb3fd01a0e6bbc28ba40400e1b27c957ed2835dcc182cb4", 0x77}, {&(0x7f0000001580)="c98ac0361fd5b27bf158310b4b461a1c8d3edc9ca9c0e43040f472cb3756a14b9db01150f15117d3274e6974f986adf9ce188e2d075964d1d7f8814f9e63c5eb3770ffff0bb0f06a8f09544a024023e33a9c2afcc97dacf3cc8ede7ad3e6c6193070e7ac1148b477f44f118326c00f360e1b6e50ffff7fbe3873d86239fac2627552ba7dc0ee40974443efd560d6d9119c987f61a8a93b58b1269e748e1ce0e9c270d4b1e06ff3cb02eea8d4b6b49bbd8aea9b3cc51abfbb2c78687a0f669630ef627c08d7f60ab404acdfa20bc9355a4328322a0894722e0d28", 0xda}], 0x8, &(0x7f0000001680)=[@txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x81}}, @timestamping={{0x14, 0x1, 0x25, 0x53}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffffffffffff8}}, @timestamping={{0x14}}], 0x78}}, {{&(0x7f0000001700)=@can={0x1d, r1}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001780)="af9efefb6a75a4e566957b3a25e71969afe8058be5d86d188b9a349e896c7bcf81ecdea6c1898501ce556254ac27d7c012ddd14dffe8c670a09ddec3716b91f855215390ab2c3df515655ac10a1441383c41f021ec88a4979146760024ce77242ebb2e62d649fc554071b845b21ecb7676c97c3ef5e3c3e5459e83d024c709df1633682f46afc34ae1aeae39f1277d98c262825624c9b8f38cc4c4b5402530ab97b0997959dbfe9cf4e90abb12384dbf4d2b28f58683cf86d9813ff693298921b1deb327b867d35eb68e8da9a20b7587be40c9afaaebef80a07a9db3e006147f687e17", 0xe3}, {&(0x7f0000001880)="6dcf563e6584929d2ff6dc0a1a8bb852a8f370a0e1929474e6c84a5b8b9f60f8f8ce026db39fde912757c1f0e11eb889b4bc23891abca8695bfd5f208485663b68a0d67ccfd43d", 0x47}], 0x2, &(0x7f0000001940)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x7fffffff}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x48}}, {{&(0x7f00000019c0)=@rc={0x1f, {0xd2ed30d, 0x7, 0x8, 0x1, 0x5, 0x2}, 0x12f}, 0x80, &(0x7f0000002c80)=[{&(0x7f0000001a40)="513ca29e72982f27e98342ca6ecf9ec09f16efa26ef7181ba1bbcefa55459e8f80143198e86a7d6a6f6a93fee60bab77b69d1b4926a1dc553ceae2e9637470d5fef49c24faa934bf3a69110db7623a0aba92f68533268d61ef49e544d993ffffe4d3c0ce64a1b3", 0x67}, {&(0x7f0000001ac0)="7970f636ef3552de6427ad5db558cc8ad5b2f0752c7d23d4d2166e1153cdf51b05f7baf27b2a9f51595b6f448429f24e829855eca8b8889e29eb752afe976996523cf73498bc3450bf3480f47d4bbad41dadc53eb15bcdb3cb6be412bccaa470b85cd0b06ff445d51ba02414875bf047cf82df72f990d2b7ce0af378defc12f8f93f57b080bf51f40796214f8396147cac", 0x91}, {&(0x7f0000001b80)="2c26eb9b58f36b323af201e6a65fdc7c4020d3cd0b248a513ff1b16e85111fd0234be877d7018040451803682b6f9833090ffa120c87b93bfb2996ad5fa86340ccb68bf8d5578a17c3c8dee181732fd97495a47518cbe0280b0a0836be527f70a7ec2886096c4eaf648344b32e2be35d6323c7edb3d701ccd0fac3c1dc5a1ea470e05dd076278930b3d921847e6277b42a6ca2537f69c7078bada8f4b8f9e1c5ad8e62ec11a686983a0aacc1d55b19", 0xaf}, {&(0x7f0000001c40)="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", 0x1000}, {&(0x7f0000002c40)="57c28ab78c5b00e577ea95f98bfd9bd9acd8faddf33e6ac9a86ad8f85bb5b8c0bcb982fe1f3b07cd8436a085ac2a269fe55731c6f502", 0x36}], 0x5}}, {{&(0x7f0000002d00)=@isdn={0x22, 0x6, 0xc3bd, 0x6, 0xdedb}, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000002d80)="f7b8d6021811a47574f82c15b4ada1395cbb1133d277b6c366f50f1639eb2617039332d8e0cc941bf129ea529baa9971d7a96597bb02b2f2a42a6164b74233a188638bc2edc4bc29ca9fa5536e9ed22050852d411b16f2a781d0e2f41a288bb28e341f65e6b2bca45e782c42f00624752661000ef3a3f5ac12a179981539047ec32d814d6fb023ae21", 0x89}, {&(0x7f0000002e40)="2a2c5be588e5ffee32ea7e023a879f9b", 0x10}, {&(0x7f0000002e80)="9cf8bead4a5ff707a27f0e85632e010a7099f9d36af43c6a031f421ec9ed51d820c72d1cbf3af4f78456aca6117a3c16987d4838e8f26efa5950171a0d10deed417d27f17cb4b5e592922e46c434e49819af1a90c2ecd2eb17a91ccef0f67f3f04f89d62c784ab3472a5a74be51b0207d22619f3de4b19657b282aa598", 0x7d}, {&(0x7f0000002f00)="0af6104e32668817f464bfa3d4bb2170adf3395c38d14e06687aefba2e9c1465ab5efe8746871bf89e66058a557a8c5c64ec62a4e0a124919e48a9743dd1854287a6a3c544a465733b810b66d77d7364399bb50110ffb306d66851d339a9e850751350416ce13f9b40c8f60a99210cbad6516082fd24aabbc188dc8f9644310d031ad2ceea29f79e68a017e0a1425025db15dfe874158d05cba0ddac9e2153845a2aa7ba3d5da7ddc3d484d23d76d7e03049aa455055b137", 0xb8}], 0x4, &(0x7f0000003000)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x5d0}}, @timestamping={{0x14, 0x1, 0x25, 0x77ca}}], 0x78}}], 0x4, 0x40000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480), &(0x7f0000003180)=0xc) 05:42:31 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x20) [ 941.682370] SELinux: policydb magic number 0x756eff8c does not match expected magic number 0xf97cff8c [ 941.699843] SELinux: policydb magic number 0x756eff8c does not match expected magic number 0xf97cff8c 05:42:31 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x9, 0x200, 0x9, 0x3, 0x0}, &(0x7f0000000080)=0x10) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000180)=""/67) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r2, 0x9}, 0x8) [ 941.804728] FAULT_INJECTION: forcing a failure. [ 941.804728] name failslab, interval 1, probability 0, space 0, times 0 [ 941.811985] SELinux: security policydb version 18 (MLS) not backwards compatible 05:42:31 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r0 = shmget(0x0, 0x1000, 0x1030, &(0x7f0000a04000/0x1000)=nil) shmat(r0, &(0x7f0000172000/0x4000)=nil, 0x6000) [ 941.887745] raw_sendmsg: syz-executor.5 forgot to set AF_INET. Fix it! [ 941.909476] CPU: 1 PID: 16196 Comm: syz-executor.4 Not tainted 4.14.141 #37 [ 941.916617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 941.925971] Call Trace: [ 941.928562] dump_stack+0x138/0x197 [ 941.932221] should_fail.cold+0x10f/0x159 [ 941.936382] should_failslab+0xdb/0x130 [ 941.940363] kmem_cache_alloc+0x47/0x780 [ 941.944434] ? lock_acquire+0x16f/0x430 [ 941.948413] ? check_preemption_disabled+0x3c/0x250 [ 941.953431] skb_clone+0x129/0x320 [ 941.956973] netlink_deliver_tap+0x681/0x8f0 [ 941.961388] netlink_unicast+0x4b2/0x640 [ 941.965454] ? netlink_attachskb+0x6a0/0x6a0 [ 941.969867] ? security_netlink_send+0x81/0xb0 [ 941.974454] netlink_sendmsg+0x7c4/0xc60 [ 941.978522] ? netlink_unicast+0x640/0x640 [ 941.982761] ? security_socket_sendmsg+0x89/0xb0 [ 941.987516] ? netlink_unicast+0x640/0x640 [ 941.991751] sock_sendmsg+0xce/0x110 [ 941.995464] ___sys_sendmsg+0x70a/0x840 [ 941.999441] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 942.004195] ? __fget+0x210/0x370 [ 942.007667] ? find_held_lock+0x35/0x130 [ 942.011755] ? __fget+0x210/0x370 [ 942.015212] ? lock_downgrade+0x6e0/0x6e0 [ 942.019361] ? __fget+0x237/0x370 [ 942.022815] ? __fget_light+0x172/0x1f0 [ 942.026785] ? __fdget+0x1b/0x20 [ 942.030139] ? sockfd_lookup_light+0xb4/0x160 [ 942.030150] __sys_sendmsg+0xb9/0x140 [ 942.030158] ? SyS_shutdown+0x170/0x170 [ 942.030181] SyS_sendmsg+0x2d/0x50 [ 942.045941] ? __sys_sendmsg+0x140/0x140 [ 942.050002] do_syscall_64+0x1e8/0x640 [ 942.053889] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 942.058738] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 942.063925] RIP: 0033:0x459879 [ 942.067107] RSP: 002b:00007f8d7ab1fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 942.074811] RAX: ffffffffffffffda RBX: 00007f8d7ab1fc90 RCX: 0000000000459879 05:42:32 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x200, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x158, r1, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER={0x128, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'irlan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6gre0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x33e, @ipv4={[], [], @multicast1}, 0x3}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x60, @rand_addr="d546150074ca187fb430dbf5050d20bc", 0xfffffffffffffffd}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x800, @mcast2, 0xbe1}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'ib', 0x3a, 'veth1_to_team\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x40000}, 0x801) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080)) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000040)={0x200, 0x5e69, 0x6, @random="97a672376452", 'veth1_to_bridge\x00'}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000001, 0x5c831, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) 05:42:32 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20002, 0x100) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x9, 0x4) 05:42:32 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000280)=0x8000) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000240)={0x5, 0xfffffffffffff555, 0x8, 0x80, 0x8001, 0x1, 0x192d}, 0xc) syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x2) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x2400, 0x0) timerfd_gettime(r2, &(0x7f0000000480)) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{}]}) r3 = request_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)='\x00', 0xfffffffffffffff8) r4 = request_key(&(0x7f00000003c0)='logon\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0xffffffffffffffff) keyctl$link(0x8, r3, r4) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)={&(0x7f00000002c0)='./file0\x00', r2}, 0x10) [ 942.082099] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 942.089363] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 942.096643] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8d7ab206d4 [ 942.103906] R13: 00000000004c77d9 R14: 00000000004dd030 R15: 0000000000000004 05:42:32 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) [ 942.115255] audit: type=1400 audit(1567230152.189:6798): avc: denied { getattr } for pid=16233 comm="syz-executor.0" path="socket:[335827]" dev="sockfs" ino=335827 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 942.146366] SELinux: security policydb version 18 (MLS) not backwards compatible [ 942.162160] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 05:42:32 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x200, 0x0) 05:42:32 executing program 4 (fault-call:1 fault-nth:3): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) 05:42:32 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000001c0)={r2, 0x400000000010001}, &(0x7f0000000200)=0x32c) umount2(&(0x7f0000000540)='./file0\x00', 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 05:42:32 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="8cff7cf999e8ffff5345204c696e75781200000001d8670006000400070000003c9f030003000000c994753939964f99"], 0x28) [ 942.260736] SELinux: policydb string length -103 does not match expected length 8 [ 942.342862] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 942.373814] SELinux: security policydb version 18 (MLS) not backwards compatible 05:42:32 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x8000, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, [], [{0x9, 0x7fffffff, 0x4, 0xc0c, 0x3, 0x80}, {0xffff, 0x8, 0x80000001, 0x4, 0x3, 0x5}], [[], []]}) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={&(0x7f0000b17000/0x2000)=nil, 0x800, 0x3, 0x80, &(0x7f00000a4000/0x3000)=nil}) 05:42:32 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x3, 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000000c0)={{0x4, 0xffff}, {0xd650}, 0x9, 0x1, 0x5}) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) 05:42:32 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x20000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r2, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2518}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x510}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x200000c1) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x4, 0x768, 0x7, 0x80000, r1}) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) read$alg(r3, &(0x7f0000000080)=""/183, 0xfffffffffffffd22) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x2, @rand_addr="be2c0be37711461fa0ca22d6ee388862", 0x2}}, [0x0, 0x8, 0x36704463, 0x1000, 0xf247, 0x1, 0x80000000000000, 0x8, 0x7, 0x9, 0x1, 0x8, 0x400, 0x3, 0x4]}, &(0x7f0000000280)=0x100) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000002c0)={r4, 0x130000000000, 0xfffffffffffffff8}, 0x8) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x40000, 0x0) 05:42:32 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = dup3(r0, r0, 0x80000) r2 = accept4$tipc(r1, &(0x7f0000000280)=@id, &(0x7f0000000140)=0x34e, 0x800) connect(r2, &(0x7f0000000180)=@in={0x2, 0x4e23, @remote}, 0x80) umount2(&(0x7f0000000540)='./file0\x00', 0x4) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000080)={0x0, {0x6, 0x20}}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 942.397545] FAULT_INJECTION: forcing a failure. [ 942.397545] name failslab, interval 1, probability 0, space 0, times 0 [ 942.415729] CPU: 1 PID: 16261 Comm: syz-executor.4 Not tainted 4.14.141 #37 [ 942.422853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 942.432333] Call Trace: [ 942.434926] dump_stack+0x138/0x197 [ 942.438574] should_fail.cold+0x10f/0x159 [ 942.442728] should_failslab+0xdb/0x130 [ 942.446706] kmem_cache_alloc_trace+0x2e9/0x790 [ 942.451388] ? vprintk_emit+0x171/0x600 [ 942.455374] xfrm_policy_alloc+0x5c/0x440 [ 942.459523] xfrm_policy_construct+0x2f/0x590 [ 942.464014] ? printk+0x9e/0xbc [ 942.467290] xfrm_add_policy+0x1b2/0x4f0 [ 942.467304] ? xfrm_policy_construct+0x590/0x590 [ 942.467320] ? nla_parse+0x186/0x240 [ 942.479815] ? __netlink_ns_capable+0xe2/0x130 [ 942.484398] ? xfrm_policy_construct+0x590/0x590 [ 942.489170] xfrm_user_rcv_msg+0x3c9/0x690 [ 942.493397] ? xfrm_dump_sa_done+0xe0/0xe0 [ 942.493409] ? __dev_queue_xmit+0xd33/0x25e0 [ 942.493442] ? netlink_deliver_tap+0x93/0x8f0 [ 942.493451] ? xfrm_netlink_rcv+0x61/0x90 [ 942.493462] netlink_rcv_skb+0x14f/0x3c0 [ 942.493472] ? xfrm_dump_sa_done+0xe0/0xe0 [ 942.510102] SELinux: policydb string length -5991 does not match expected length 8 [ 942.510695] ? netlink_ack+0x9a0/0x9a0 [ 942.510718] xfrm_netlink_rcv+0x70/0x90 [ 942.510726] netlink_unicast+0x45d/0x640 [ 942.510739] ? netlink_attachskb+0x6a0/0x6a0 [ 942.519006] ? security_netlink_send+0x81/0xb0 [ 942.519019] netlink_sendmsg+0x7c4/0xc60 [ 942.519039] ? netlink_unicast+0x640/0x640 [ 942.519052] ? security_socket_sendmsg+0x89/0xb0 [ 942.519061] ? netlink_unicast+0x640/0x640 [ 942.533575] SELinux: security policydb version 18 (MLS) not backwards compatible [ 942.534701] sock_sendmsg+0xce/0x110 [ 942.534713] ___sys_sendmsg+0x70a/0x840 [ 942.534726] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 942.534736] ? __fget+0x210/0x370 [ 942.534753] ? find_held_lock+0x35/0x130 [ 942.576317] ? __fget+0x210/0x370 05:42:32 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x20000, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000140)={0x34, 0x0, &(0x7f0000000100)}) 05:42:32 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) recvmsg(r0, &(0x7f00000012c0)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001340)=[{&(0x7f0000001300)=""/63, 0x3f}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/2, 0x2}, {&(0x7f0000001180)=""/85, 0x55}, {&(0x7f0000001200)=""/15, 0xf}], 0x5}, 0x20) [ 942.576337] ? lock_downgrade+0x6e0/0x6e0 [ 942.576350] ? __fget+0x237/0x370 [ 942.585056] ? __fget_light+0x172/0x1f0 [ 942.585068] ? __fdget+0x1b/0x20 [ 942.585080] ? sockfd_lookup_light+0xb4/0x160 [ 942.585093] __sys_sendmsg+0xb9/0x140 [ 942.592599] ? SyS_shutdown+0x170/0x170 [ 942.592625] SyS_sendmsg+0x2d/0x50 [ 942.592633] ? __sys_sendmsg+0x140/0x140 [ 942.592644] do_syscall_64+0x1e8/0x640 [ 942.592653] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 942.592671] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 942.645142] RIP: 0033:0x459879 05:42:32 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x20000, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000040)='security.evm\x00', &(0x7f00000000c0)=@v1={0x2, "6472e4bacd711920a77a0b8e"}, 0xd, 0x3) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000140)={0x4, 0x10, &(0x7f0000000100)="92b3fb1f", {0x4, 0x70, 0x34325842, 0x490b0a8f44125b64, 0x0, 0x9, 0xb, 0x6}}) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) [ 942.645151] RSP: 002b:00007f8d7ab1fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 942.656042] RAX: ffffffffffffffda RBX: 00007f8d7ab1fc90 RCX: 0000000000459879 [ 942.663324] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 942.663330] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 942.663336] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8d7ab206d4 05:42:32 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0x2d, "ee9295608b1452d7b62db152a2e4e3020f0b9f922d364b99172ab127445fd5291f9940cf638d3594d755724752"}, &(0x7f0000000140)=0x35) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e20, 0x37a5, @empty}}}, 0x84) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000240)=0xc7f9, 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 942.663342] R13: 00000000004c77d9 R14: 00000000004dd030 R15: 0000000000000004 [ 942.733683] SELinux: security policydb version 18 (MLS) not backwards compatible [ 942.733877] sel_write_load: 25 callbacks suppressed [ 942.733882] SELinux: failed to load policy [ 942.735774] Unknown ioctl -1072150264 [ 942.746839] SELinux: security policydb version 18 (MLS) not backwards compatible [ 942.777254] SELinux: failed to load policy [ 942.798339] SELinux: policydb string length -103 does not match expected length 8 05:42:32 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x135000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000080)={r1, 0x2}) [ 942.816368] SELinux: failed to load policy 05:42:33 executing program 4 (fault-call:1 fault-nth:4): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) 05:42:33 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0xb0000, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000340)=0x2, 0x4) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000080)=0xb) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000000200)) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x800, 0x10000) r3 = semget(0x3, 0x2, 0x1) semctl$SEM_INFO(r3, 0x2, 0x13, &(0x7f0000000100)=""/81) ioctl$SG_GET_SG_TABLESIZE(r2, 0x227f, &(0x7f00000000c0)) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf90000ffb74a8063d5300e1d8ab428503843e3e5ff5345204c696e75781200000001d86700776bec157b50c67f7faecd04fb5de698408decf444c9a35d4b063b51431fc5b23a1cc4ec1e77c62062e48bc303f1e6cd7aabbf034ebe7fa5da5ed2755e24d5906065b4e856812d58cb504b6eca0470fec1442960bd0f9ae2b3831b38e3d9457d74b75af5ca21b32e658fb75d66643bf67425ac2a1912402e2a02350683972a6c08c612895c4aa1bae1b074e3861fcdaf26b4"], 0x28) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) ioctl$RTC_UIE_ON(r2, 0x7003) 05:42:33 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0x1f) clone(0x400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) r2 = shmget$private(0x0, 0x1000, 0x80, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000040)=""/147) write$selinux_load(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="8cffc19b0800588d76439500005345204c696e75781200000001d86700060004e8ab76334172191d5d5f5bb93e737e0535bf5803277ba59de32b7c578af56c5fec5163d6a658b6e1b6b3145b673c11a107e13c845000a1d847"], 0x20) r3 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x3f, 0x101000) connect$rxrpc(r3, &(0x7f0000000200)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x2b94, @mcast2, 0x8}}, 0x24) 05:42:33 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x77ff, 0x14400) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) 05:42:33 executing program 0: r0 = accept(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x80) mmap(&(0x7f0000e40000/0x3000)=nil, 0x3000, 0xfe62840b1f127c9c, 0x5c831, r0, 0xdffffeffffff7ffd) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001ac0)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001b40)={{{@in=@broadcast, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@initdev}}, &(0x7f0000001c40)=0xe8) getpeername(r0, &(0x7f0000001c80)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000001d00)=0x80) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001d40)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000001e40)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001e80)={'vcan0\x00', 0x0}) getpeername$packet(r0, &(0x7f00000021c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002200)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', r3}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000002280)={0x0, @broadcast}, &(0x7f00000022c0)=0xc) accept4(r0, &(0x7f0000002300)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000002380)=0x80, 0x800) accept4$packet(r0, &(0x7f00000023c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002400)=0x14, 0x800) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000003840)={@remote, @dev, 0x0}, &(0x7f0000003880)=0xc) getsockname(r0, &(0x7f0000003900)=@can={0x1d, 0x0}, &(0x7f0000003980)=0x80) getpeername$packet(r0, &(0x7f00000039c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000003a00)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003a40)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003b00)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003b40)={'ip6_vti0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000003b80)={{{@in6=@local, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000003c80)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000003cc0)={{{@in, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000003dc0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000003e00)={{{@in, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000003f00)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000003f40)={{{@in=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000004040)=0xe8) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000004880)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000004840)={&(0x7f0000000180)=ANY=[@ANYBLOB="b4070000", @ANYRES16=r1, @ANYBLOB="200a2bbd7000fbdbdf250000000008000100", @ANYRES32=r2, @ANYBLOB="7c00020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004000900000008000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="3801020038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000800000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004002d66ffff40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e00000008000400ffffff7f08000600", @ANYRES32=r5, @ANYBLOB="44000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000001400040009003e07ff7f000000000a5d08000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008000400d2f5ffff08000600", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="7c00020038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000008000300030000000800040000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000104000008000600", @ANYRES32=r8, @ANYBLOB="651f41398ff17f2cfd07cec8c7d69d3ce775f134e5005addd9c6c8a408187b4dd9e9acbeb469a8473fa09d40310790e15eea46214dcd05252342fe0a48477336c272357bb788aa5bc1fc485dc0102f29f861d758efa70e23a836244b971d44aa82c32aa6940c54365bfadce9640513d7b6", @ANYRES32=r9, @ANYBLOB="3c00020038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400c901000008000100", @ANYRES32=r10, @ANYBLOB="5402020040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000600000008000600", @ANYRES32=r11, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r12, @ANYBLOB="5c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000002c0004000600023f050000000500038106000000080004040600000032101fe4e6530000040101013f00000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400c1ffffff40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000200000008000600", @ANYRES32=r13, @ANYBLOB="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", @ANYRES32=r14, @ANYBLOB="380102003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r16, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000000c00040072616e646f6d000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000400000008000600", @ANYRES32=r17, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000500000008000600", @ANYRES32=r18, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="2c01020038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400ff00000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r20, @ANYBLOB="080007000000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462616c616e63650038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004003f00000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000500000008000100", @ANYRES32=r21, @ANYBLOB="3c00020038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400a2000000"], 0x7b4}, 0x1, 0x0, 0x0, 0x840}, 0x4000801) 05:42:33 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) 05:42:33 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x40000, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f00000000c0)={0x9d8, "dc93baf2632ed5dd6f8505f1a52a3bdd2f56252fd5d1fad9324c5bbd06239617", 0x1, 0xfffffffffffffff8, 0x5ad1, 0xe0, 0x2}) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x77fb, 0x4) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)={0x3, 0x0, 0x7, 0xffffffff, 0x0, 0xffffffffffff8001}) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, 0x0) 05:42:33 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f00000000c0)={0xb96a, "6c091352fccecbc4deb4c2dfe6018265aa5df99bfe788bf452821e0c3b736e8e", 0x3, 0x200, 0x6, 0x400, 0x8}) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e21, 0x8, @rand_addr="9fde4ffda888e02a59628f88fe2cf3db", 0x7}}, 0xfffffffffffff801, 0x8, 0x10000, 0x4, 0x49}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={r2, 0x80000000, 0x5, [0x8, 0x9, 0x5, 0x83, 0x5]}, &(0x7f0000000180)=0x12) [ 943.010934] SELinux: policydb string length -1208025088 does not match expected length 8 [ 943.022754] SELinux: failed to load policy [ 943.041095] SELinux: policydb magic number 0x9bc1ff8c does not match expected magic number 0xf97cff8c [ 943.050542] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 05:42:33 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x829, 0x400) mmap(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x10, 0x5c831, r0, 0x0) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) [ 943.074331] SELinux: failed to load policy 05:42:33 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0xf3f8d1ead71f3e3b, 0x0) fchdir(r0) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) ioctl(r0, 0x5, &(0x7f00000000c0)="079e69104544832ca799b51705c986f5bbdcfcfd9797ec7c941ce76ee73df33251a704dfc81c5fbc3ae9358782") lsetxattr$security_ima(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)='security.ima\x00', &(0x7f0000000340)=@md5={0x1, "ba80408349edb927a7bf701867319846"}, 0x11, 0x3) umount2(&(0x7f0000000540)='./file0\x00', 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 943.112779] FAULT_INJECTION: forcing a failure. [ 943.112779] name failslab, interval 1, probability 0, space 0, times 0 [ 943.126961] SELinux: policydb magic number 0x9bc1ff8c does not match expected magic number 0xf97cff8c [ 943.149540] Unknown ioctl -1069001168 [ 943.159884] Unknown ioctl -1069001168 [ 943.165211] CPU: 0 PID: 16346 Comm: syz-executor.4 Not tainted 4.14.141 #37 [ 943.168138] SELinux: failed to load policy [ 943.172319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 943.172329] Call Trace: [ 943.172348] dump_stack+0x138/0x197 [ 943.172368] should_fail.cold+0x10f/0x159 [ 943.172383] should_failslab+0xdb/0x130 [ 943.172397] kmem_cache_alloc_node+0x56/0x780 [ 943.172406] ? __call_rcu.constprop.0+0x2d2/0x820 [ 943.172419] ? trace_hardirqs_on_caller+0x400/0x590 [ 943.172433] __alloc_skb+0x9c/0x500 [ 943.196318] ? skb_scrub_packet+0x4b0/0x4b0 [ 943.196335] xfrm_send_policy_notify+0x494/0x13d0 [ 943.209593] ? check_preemption_disabled+0x3c/0x250 [ 943.209610] ? xfrm_send_acquire+0xa20/0xa20 [ 943.237201] km_policy_notify+0xbb/0x1c0 [ 943.237215] xfrm_add_policy+0x33e/0x4f0 [ 943.237227] ? xfrm_policy_construct+0x590/0x590 [ 943.237241] ? nla_parse+0x186/0x240 [ 943.237251] ? __netlink_ns_capable+0xe2/0x130 [ 943.237260] ? xfrm_policy_construct+0x590/0x590 [ 943.237270] xfrm_user_rcv_msg+0x3c9/0x690 [ 943.237283] ? xfrm_dump_sa_done+0xe0/0xe0 [ 943.249571] SELinux: policydb string length -103 does not match expected length 8 [ 943.250133] ? __dev_queue_xmit+0xd33/0x25e0 [ 943.250167] ? netlink_deliver_tap+0x93/0x8f0 [ 943.250177] ? xfrm_netlink_rcv+0x61/0x90 [ 943.250189] netlink_rcv_skb+0x14f/0x3c0 [ 943.254848] SELinux: failed to load policy [ 943.258451] ? xfrm_dump_sa_done+0xe0/0xe0 [ 943.258471] ? netlink_ack+0x9a0/0x9a0 [ 943.308674] xfrm_netlink_rcv+0x70/0x90 [ 943.308686] netlink_unicast+0x45d/0x640 [ 943.318151] ? netlink_attachskb+0x6a0/0x6a0 [ 943.322552] ? security_netlink_send+0x81/0xb0 [ 943.327143] netlink_sendmsg+0x7c4/0xc60 [ 943.331204] ? netlink_unicast+0x640/0x640 [ 943.335424] ? security_socket_sendmsg+0x89/0xb0 [ 943.340186] ? netlink_unicast+0x640/0x640 [ 943.344407] sock_sendmsg+0xce/0x110 [ 943.348102] ___sys_sendmsg+0x70a/0x840 [ 943.352069] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 943.356812] ? __fget+0x210/0x370 [ 943.360266] ? find_held_lock+0x35/0x130 [ 943.364324] ? __fget+0x210/0x370 [ 943.367781] ? lock_downgrade+0x6e0/0x6e0 [ 943.371915] ? __fget+0x237/0x370 [ 943.375350] ? __fget_light+0x172/0x1f0 [ 943.379307] ? __fdget+0x1b/0x20 [ 943.382659] ? sockfd_lookup_light+0xb4/0x160 [ 943.387166] __sys_sendmsg+0xb9/0x140 [ 943.390950] ? SyS_shutdown+0x170/0x170 [ 943.394912] SyS_sendmsg+0x2d/0x50 [ 943.398430] ? __sys_sendmsg+0x140/0x140 [ 943.402483] do_syscall_64+0x1e8/0x640 [ 943.406358] ? trace_hardirqs_off_thunk+0x1a/0x1c 05:42:33 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) r2 = accept(0xffffffffffffffff, &(0x7f0000000000)=@alg, &(0x7f0000000080)=0x80) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)=""/87, &(0x7f0000000180)=0x57) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, 0x0) 05:42:33 executing program 1: clone(0x28018000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) [ 943.411184] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 943.416350] RIP: 0033:0x459879 [ 943.419522] RSP: 002b:00007f8d7ab1fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 943.427226] RAX: ffffffffffffffda RBX: 00007f8d7ab1fc90 RCX: 0000000000459879 [ 943.434476] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 943.441739] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 943.448995] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8d7ab206d4 [ 943.456256] R13: 00000000004c77d9 R14: 00000000004dd030 R15: 0000000000000004 05:42:33 executing program 4 (fault-call:1 fault-nth:5): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) 05:42:33 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) 05:42:33 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 05:42:33 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x10000, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x10) [ 943.556440] SELinux: policydb string length -103 does not match expected length 8 [ 943.579938] SELinux: failed to load policy 05:42:33 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000080)={0x3, 0x200, [{0x100000001, 0x0, 0x2}, {0x81, 0x0, 0x1}, {0xffffffff, 0x0, 0x1}]}) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0xffffffffffff42cb, 0x8b07f506bc5eff6) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000000c0)=""/120, &(0x7f0000000180)=0x78) [ 943.609330] SELinux: policydb string length -103 does not match expected length 8 05:42:33 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm_plock\x00', 0x80, 0x0) getsockopt$nfc_llcp(r0, 0x118, 0x1, &(0x7f0000000240)=""/202, 0xca) setreuid(0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) fchdir(r1) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x100}], 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x100, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f00000001c0)=0x7) 05:42:33 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/unix\x00') setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="999dd397d03eb82943fb5dcae77d03d0", 0x10) [ 943.658931] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 943.665167] SELinux: failed to load policy [ 943.689609] SELinux: security policydb version 18 (MLS) not backwards compatible [ 943.703614] FAULT_INJECTION: forcing a failure. 05:42:33 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r1) bind$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x2, 0x2, 0x0, {0x2, 0x4e20, @local}}, 0x24d) write$selinux_load(r0, &(0x7f0000000000)={0xf97cff8c, 0x8, 'SE Linux', "120000000400070000003c9f03df03000000"}, 0x22) [ 943.703614] name failslab, interval 1, probability 0, space 0, times 0 [ 943.726867] SELinux: failed to load policy [ 943.738618] CPU: 1 PID: 16401 Comm: syz-executor.4 Not tainted 4.14.141 #37 [ 943.745742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 943.755095] Call Trace: 05:42:33 executing program 0: r0 = socket$inet6(0xa, 0x800, 0x1) mmap(&(0x7f0000092000/0x1000)=nil, 0x1000, 0x0, 0x4010, r0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000080)={r2, 0x1}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000000c0)={0x3, 0x0, 0x10001, 0x3}) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xfb8e) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000100)={0x7, r3}) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) [ 943.757690] dump_stack+0x138/0x197 [ 943.761331] should_fail.cold+0x10f/0x159 [ 943.765490] should_failslab+0xdb/0x130 [ 943.769473] kmem_cache_alloc_node_trace+0x5a/0x770 [ 943.774497] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 943.779955] __kmalloc_node_track_caller+0x3d/0x80 [ 943.784884] __kmalloc_reserve.isra.0+0x40/0xe0 [ 943.789562] __alloc_skb+0xcf/0x500 [ 943.793188] ? skb_scrub_packet+0x4b0/0x4b0 [ 943.797512] xfrm_send_policy_notify+0x494/0x13d0 05:42:33 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) r1 = dup2(r0, r0) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) [ 943.797769] SELinux: policydb table sizes (-1623457792,253699) do not match mine (6,7) [ 943.802370] ? check_preemption_disabled+0x3c/0x250 [ 943.802387] ? xfrm_send_acquire+0xa20/0xa20 [ 943.802398] km_policy_notify+0xbb/0x1c0 [ 943.802410] xfrm_add_policy+0x33e/0x4f0 [ 943.802421] ? xfrm_policy_construct+0x590/0x590 [ 943.802434] ? nla_parse+0x186/0x240 [ 943.802446] ? __netlink_ns_capable+0xe2/0x130 [ 943.826125] SELinux: policydb table sizes (-1623457792,253699) do not match mine (6,7) [ 943.828071] ? xfrm_policy_construct+0x590/0x590 [ 943.853953] xfrm_user_rcv_msg+0x3c9/0x690 05:42:33 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1280000001d8670006000400070000003c9f030003001400"/40], 0x28) [ 943.858193] ? xfrm_dump_sa_done+0xe0/0xe0 [ 943.859202] SELinux: policydb string length -103 does not match expected length 8 [ 943.862423] ? __dev_queue_xmit+0xd33/0x25e0 [ 943.862458] ? netlink_deliver_tap+0x93/0x8f0 [ 943.862468] ? xfrm_netlink_rcv+0x61/0x90 [ 943.862481] netlink_rcv_skb+0x14f/0x3c0 [ 943.862492] ? xfrm_dump_sa_done+0xe0/0xe0 [ 943.883336] ? netlink_ack+0x9a0/0x9a0 [ 943.891603] xfrm_netlink_rcv+0x70/0x90 [ 943.891613] netlink_unicast+0x45d/0x640 [ 943.891626] ? netlink_attachskb+0x6a0/0x6a0 [ 943.907983] ? security_netlink_send+0x81/0xb0 [ 943.912574] netlink_sendmsg+0x7c4/0xc60 [ 943.916646] ? netlink_unicast+0x640/0x640 [ 943.920891] ? security_socket_sendmsg+0x89/0xb0 [ 943.925667] ? netlink_unicast+0x640/0x640 [ 943.929906] sock_sendmsg+0xce/0x110 [ 943.933619] ___sys_sendmsg+0x70a/0x840 [ 943.933632] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 943.933643] ? __fget+0x210/0x370 [ 943.933655] ? find_held_lock+0x35/0x130 [ 943.933664] ? __fget+0x210/0x370 [ 943.933679] ? lock_downgrade+0x6e0/0x6e0 [ 943.942386] ? __fget+0x237/0x370 [ 943.942399] ? __fget_light+0x172/0x1f0 [ 943.942410] ? __fdget+0x1b/0x20 [ 943.942420] ? sockfd_lookup_light+0xb4/0x160 [ 943.942430] __sys_sendmsg+0xb9/0x140 [ 943.942440] ? SyS_shutdown+0x170/0x170 [ 943.942460] SyS_sendmsg+0x2d/0x50 [ 943.968565] SELinux: policydb magic number 0x8012 does not match expected magic number 0xf97cff8c [ 943.972726] ? __sys_sendmsg+0x140/0x140 [ 943.972741] do_syscall_64+0x1e8/0x640 [ 943.972750] ? trace_hardirqs_off_thunk+0x1a/0x1c 05:42:34 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x80, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) r2 = getpid() write$cgroup_pid(r1, &(0x7f0000000080)=r2, 0x12) [ 943.972768] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 943.972775] RIP: 0033:0x459879 [ 943.972781] RSP: 002b:00007f8d7ab1fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 943.972791] RAX: ffffffffffffffda RBX: 00007f8d7ab1fc90 RCX: 0000000000459879 [ 943.972798] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 943.980114] SELinux: policydb magic number 0x8012 does not match expected magic number 0xf97cff8c [ 943.980540] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 943.980547] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8d7ab206d4 05:42:34 executing program 4 (fault-call:1 fault-nth:6): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) 05:42:34 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000040)=0x20) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000000000005345204c696eda144befc4e0aeb301000600040007000000"], 0x20) 05:42:34 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) 05:42:34 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r2 = add_key(&(0x7f0000000140)='pkcs7_test\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="d24ca1b8be638bd55c0a9bae092f591791eefd55744315e1b1d9e64812784f88b24d3f1d2df996d36df7f222d85224a7ec", 0x31, 0xfffffffffffffffb) r3 = request_key(&(0x7f0000000280)='syzkaller\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)='eth0)g\'\x00', 0x0) keyctl$instantiate(0xc, r2, &(0x7f0000000200)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'user:', '/selinux/avc/hash_stats\x00', 0x20, 0x9, 0x20, [0x77]}, 0x43, r3) ioctl$CAPI_GET_ERRCODE(r1, 0x80024321, &(0x7f00000000c0)) getresgid(&(0x7f0000000380), &(0x7f0000000400), &(0x7f0000000440)) keyctl$instantiate(0xc, r2, &(0x7f0000000340)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'user:', 'keyringwlan1', 0x20, 0x1}, 0x34, 0xfffffffffffffff9) umount2(&(0x7f0000000540)='./file0\x00', 0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000580)=0xc) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x10000, 0x400) 05:42:34 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) exit(0x4) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x100, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}}, [0x24000000, 0x76b1, 0xffff, 0x4, 0x4b, 0x0, 0x9, 0x8, 0x4, 0x7, 0x9, 0xff6, 0x100000001, 0x2, 0x6c4]}, &(0x7f00000009c0)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000a00)={0x8, 0x2, 0x800a, 0xffff, 0xffff, 0x10000, 0xffffffffffffffff, 0xace, 0x0}, &(0x7f0000000a40)=0x20) sendmsg$inet_sctp(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@in={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000280)="d081c57af053eb4e7df041de6bf3929797c8e151ac", 0x15}, {&(0x7f0000000540)="a0fd54a9620708b9ea1a2dcf1a7e3624b076", 0x12}, {&(0x7f0000000580)="85c1c784ae1eb4907bc0137ba774ff31305d0d8f0adbaba81da5a7b0aa5405da83da7abbd5ea807757420052607c66cd30536ac602603a496e9d33ab4cda97527f8eafdab11f345645069a14d9bf0f9512ffd1adb03a1b8758d07987edd6048b5b5ebcb1c7c0812235317d7d9d26eb68b14b9d576db0b9cd31411080745448c795afc441f10238a4e4", 0x89}, {&(0x7f0000000640)="75f629f6a2f3604da366a41caf8a3176ff37682a00565aa886e4993833693b55887b5b2107fc3aded4e1720fdcfbd904d9f0e98aec2b7557b02b0b03591072a83fd0c27202d05e8df3aa57fce064fa72d5c0bf2f52", 0x55}, {&(0x7f00000006c0)="3bca8951a679fde01c719c1a1fd5fbe468e0bd11a0a837d63cfcd65953649425891c478c8dac112e1d2848f9e5e731b0a2735c5bc026a0227510befc2a44749a0f4bdd1bac67de0657875d8c12b39196bcb17b9a3b82ebc4371ecc982849e889aa99925848e3973678ad2f490f2f9cd3ca90fc14bae57dfc13225b4cdd8ec46d407cb8950a0f84b1691e8f152bfb6f83fbc548aa80c48cf008e28f4c3ed3989b05e3563e4ef200", 0xa7}, {&(0x7f0000000780)="7090cd2f69e4fa983af3c71da1d5790d6bf08b650350dd65cc3d7d2cda030f02a511a4bf48646f646e4bf49fba37d583bc3490ffe17e0e3595cd9e8e3fa14beedfd1de5072abdd8c0cf7cc28836e3721ce77ccd218af283a6f02606e277dba9d6820b3ea9803a4c8ec3aa753ca07951145d55c94843c5186b3797c0e9a0b5d64ebf7b02d0d", 0x85}], 0x6, &(0x7f0000000a80)=[@sndinfo={0x20, 0x84, 0x2, {0x9, 0x8000, 0x55, 0xffff800000000000, r2}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @sndrcv={0x30, 0x84, 0x1, {0x0, 0xffff, 0x8004, 0x9, 0x3, 0x40, 0x3ff000000, 0x8c4, r3}}], 0x88, 0x4000000}, 0x4000) readahead(r1, 0x3, 0x80000000) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000040), &(0x7f00000000c0)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000080)={0x0, 0xffffffffffffff02}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000140)={r5, 0x1f}, &(0x7f0000000180)=0x8) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000b80)) write$selinux_load(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x28) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e23, 0xbc, @remote}}, 0x0, 0x8, 0x0, "ddaaccb2c803c2208602fa9b14a53d067d5b1508d5e9e0cce83cb4206259f5d70fe8bd9cab11b8e5a83871a62b32c4f76925a006f1093f6f96e71b6162fd091e7d07af1d7d71e0d0f43463080e3b5056"}, 0xd8) [ 943.980553] R13: 00000000004c77d9 R14: 00000000004dd030 R15: 0000000000000004 05:42:34 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) open(&(0x7f0000000000)='./file0\x00', 0x42, 0x1) 05:42:34 executing program 3: syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x8f8d3dfed3f53fd1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111, 0x2}}, 0x20) exit(0x63) [ 944.179109] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c 05:42:34 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'mangle\x00'}, &(0x7f0000000040)=0x54) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) 05:42:34 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x10) umount2(&(0x7f0000000540)='./file0\x00', 0x4) fcntl$dupfd(r1, 0x1, r0) [ 944.228306] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 05:42:34 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x1, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) r4 = epoll_create(0x6) accept4$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f0000000140)={r3, r4, 0xa00}) r5 = msgget(0x2, 0x1) msgsnd(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="03000000000000008c63b7874cd91961a956fecb3b1eef16d03378138cbf0402f30b64db771bfb295c94c127"], 0x2c, 0x800) [ 944.319586] FAULT_INJECTION: forcing a failure. [ 944.319586] name failslab, interval 1, probability 0, space 0, times 0 [ 944.337925] CPU: 1 PID: 16467 Comm: syz-executor.4 Not tainted 4.14.141 #37 [ 944.345047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 944.354398] Call Trace: [ 944.356989] dump_stack+0x138/0x197 [ 944.360623] should_fail.cold+0x10f/0x159 [ 944.364781] should_failslab+0xdb/0x130 [ 944.367232] SELinux: policydb magic number 0x53ffffff does not match expected magic number 0xf97cff8c [ 944.368753] kmem_cache_alloc_node+0x56/0x780 [ 944.382657] ? __nla_put+0x37/0x40 [ 944.386192] __alloc_skb+0x9c/0x500 [ 944.389817] ? skb_scrub_packet+0x4b0/0x4b0 [ 944.394141] ? pfkey_xfrm_policy2msg_size+0x1d8/0x230 [ 944.399329] pfkey_xfrm_policy2msg_prep+0x2a/0x50 [ 944.404166] pfkey_send_policy_notify+0x115/0x8a0 [ 944.408999] ? pfkey_sendmsg+0xb20/0xb20 [ 944.413056] km_policy_notify+0xbb/0x1c0 [ 944.417112] xfrm_add_policy+0x33e/0x4f0 [ 944.417125] ? xfrm_policy_construct+0x590/0x590 [ 944.417139] ? nla_parse+0x186/0x240 [ 944.417149] ? __netlink_ns_capable+0xe2/0x130 [ 944.429635] ? xfrm_policy_construct+0x590/0x590 [ 944.429648] xfrm_user_rcv_msg+0x3c9/0x690 [ 944.429660] ? xfrm_dump_sa_done+0xe0/0xe0 [ 944.447407] ? __dev_queue_xmit+0xd33/0x25e0 [ 944.450744] SELinux: security policydb version 18 (MLS) not backwards compatible [ 944.451837] ? netlink_deliver_tap+0x93/0x8f0 [ 944.451854] ? xfrm_netlink_rcv+0x61/0x90 [ 944.463858] netlink_rcv_skb+0x14f/0x3c0 [ 944.472031] ? xfrm_dump_sa_done+0xe0/0xe0 [ 944.472043] ? netlink_ack+0x9a0/0x9a0 [ 944.472061] xfrm_netlink_rcv+0x70/0x90 [ 944.484103] netlink_unicast+0x45d/0x640 [ 944.488167] ? netlink_attachskb+0x6a0/0x6a0 [ 944.492577] ? security_netlink_send+0x81/0xb0 [ 944.497156] netlink_sendmsg+0x7c4/0xc60 [ 944.497172] ? netlink_unicast+0x640/0x640 [ 944.497186] ? security_socket_sendmsg+0x89/0xb0 [ 944.505448] ? netlink_unicast+0x640/0x640 [ 944.505460] sock_sendmsg+0xce/0x110 05:42:34 executing program 0: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x80000000, 0x6, 0x4, 0x400000, {r0, r1/1000+10000}, {0x0, 0x0, 0x400, 0x6000000, 0x100000001, 0x9, "43973501"}, 0x9, 0x7, @fd=0xffffffffffffffff, 0x4}) mmap(&(0x7f00002ce000/0x3000)=nil, 0x3000, 0x4, 0x4010, r2, 0x0) shmget(0x1, 0x2000, 0x1, &(0x7f0000b33000/0x2000)=nil) r3 = shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) shmat(r3, &(0x7f0000239000/0x3000)=nil, 0x2000) 05:42:34 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x40800, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="8cff7cf999ffffff5308204c696e75781200000001d867000600070000003c9f0800030000000000"], 0x28) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000140), &(0x7f0000000180)=0x30) [ 944.505470] ___sys_sendmsg+0x70a/0x840 [ 944.522100] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 944.526863] ? __fget+0x210/0x370 [ 944.530329] ? find_held_lock+0x35/0x130 [ 944.534390] ? __fget+0x210/0x370 [ 944.537856] ? lock_downgrade+0x6e0/0x6e0 [ 944.542008] ? __fget+0x237/0x370 [ 944.545466] ? __fget_light+0x172/0x1f0 [ 944.549480] ? __fdget+0x1b/0x20 [ 944.552854] ? sockfd_lookup_light+0xb4/0x160 [ 944.557351] __sys_sendmsg+0xb9/0x140 [ 944.561149] ? SyS_shutdown+0x170/0x170 [ 944.565135] SyS_sendmsg+0x2d/0x50 [ 944.568673] ? __sys_sendmsg+0x140/0x140 [ 944.572729] do_syscall_64+0x1e8/0x640 [ 944.576604] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 944.581465] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 944.586655] RIP: 0033:0x459879 [ 944.589834] RSP: 002b:00007f8d7ab1fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 944.597538] RAX: ffffffffffffffda RBX: 00007f8d7ab1fc90 RCX: 0000000000459879 [ 944.604802] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 944.605325] SELinux: policydb string length -103 does not match expected length 8 05:42:34 executing program 4 (fault-call:1 fault-nth:7): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) 05:42:34 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8001, 0x181000) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f00000001c0)={0x4, 0x2, 0x18aed1c0, 0x77, &(0x7f0000000040)=""/119, 0xbf, &(0x7f00000000c0)=""/191, 0x22, &(0x7f0000000180)=""/34}) 05:42:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x408002, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x7fffffff, 0x0, 0x8aa, 0x7e, 0xff, "fafca09d57afdf35467dc99579e602c4393851", 0x7ff, 0xfff}) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) 05:42:34 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x13f, 0x1}}, 0x20) [ 944.612063] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 944.612069] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8d7ab206d4 [ 944.612074] R13: 00000000004c77d9 R14: 00000000004dd030 R15: 0000000000000004 05:42:34 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x4, 0x80000) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000040)) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="8cff7cf999ffffff5345204c69cc00000000003c9f030003000000"], 0x28) 05:42:34 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000140)={{0x3c, @dev={0xac, 0x14, 0x14, 0xa}, 0x4e23, 0x1, 'fo\x00', 0x463090d4dd43ba0, 0x1, 0x30}, {@local, 0x4e20, 0x4, 0x9, 0x8, 0x3}}, 0x44) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) shmget(0x1, 0x1000, 0x2, &(0x7f0000fff000/0x1000)=nil) r1 = shmget(0x2, 0x2000, 0x4, &(0x7f00005be000/0x2000)=nil) shmat(r1, &(0x7f0000ffe000/0x1000)=nil, 0x6000) r2 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x20, 0x400000) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000100)={&(0x7f0000c88000/0x1000)=nil, 0x15b, 0x5, 0x18, &(0x7f0000ffa000/0x5000)=nil, 0xfffffffffffffa81}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000001c0)={0x0, r2}) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) [ 944.725605] SELinux: security policydb version 18 (MLS) not backwards compatible [ 944.778745] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 944.793952] SELinux: policydb string length -103 does not match expected length 8 [ 944.816134] FAULT_INJECTION: forcing a failure. [ 944.816134] name failslab, interval 1, probability 0, space 0, times 0 [ 944.835476] IPVS: set_ctl: invalid protocol: 60 172.20.20.10:20003 [ 944.839079] CPU: 1 PID: 16525 Comm: syz-executor.4 Not tainted 4.14.141 #37 [ 944.843897] IPVS: set_ctl: invalid protocol: 60 172.20.20.10:20003 [ 944.848928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 944.848933] Call Trace: [ 944.848950] dump_stack+0x138/0x197 [ 944.848968] should_fail.cold+0x10f/0x159 [ 944.848982] should_failslab+0xdb/0x130 [ 944.879001] kmem_cache_alloc_node_trace+0x5a/0x770 [ 944.884026] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 944.889484] __kmalloc_node_track_caller+0x3d/0x80 [ 944.889498] __kmalloc_reserve.isra.0+0x40/0xe0 [ 944.889511] __alloc_skb+0xcf/0x500 [ 944.899083] ? skb_scrub_packet+0x4b0/0x4b0 [ 944.899095] ? pfkey_xfrm_policy2msg_size+0x1d8/0x230 [ 944.899108] pfkey_xfrm_policy2msg_prep+0x2a/0x50 [ 944.899118] pfkey_send_policy_notify+0x115/0x8a0 [ 944.921874] ? pfkey_sendmsg+0xb20/0xb20 [ 944.925928] km_policy_notify+0xbb/0x1c0 [ 944.929970] xfrm_add_policy+0x33e/0x4f0 [ 944.934011] ? xfrm_policy_construct+0x590/0x590 [ 944.938751] ? nla_parse+0x186/0x240 [ 944.942452] ? __netlink_ns_capable+0xe2/0x130 [ 944.947013] ? xfrm_policy_construct+0x590/0x590 [ 944.951748] xfrm_user_rcv_msg+0x3c9/0x690 [ 944.955968] ? xfrm_dump_sa_done+0xe0/0xe0 [ 944.960280] ? __dev_queue_xmit+0xd33/0x25e0 [ 944.964679] ? netlink_deliver_tap+0x93/0x8f0 [ 944.969159] ? xfrm_netlink_rcv+0x61/0x90 [ 944.973287] netlink_rcv_skb+0x14f/0x3c0 [ 944.977332] ? xfrm_dump_sa_done+0xe0/0xe0 [ 944.981548] ? netlink_ack+0x9a0/0x9a0 [ 944.985418] xfrm_netlink_rcv+0x70/0x90 [ 944.989369] netlink_unicast+0x45d/0x640 [ 944.993412] ? netlink_attachskb+0x6a0/0x6a0 [ 944.997804] ? security_netlink_send+0x81/0xb0 [ 945.002375] netlink_sendmsg+0x7c4/0xc60 [ 945.006421] ? netlink_unicast+0x640/0x640 [ 945.010647] ? security_socket_sendmsg+0x89/0xb0 [ 945.015389] ? netlink_unicast+0x640/0x640 [ 945.019604] sock_sendmsg+0xce/0x110 [ 945.023298] ___sys_sendmsg+0x70a/0x840 [ 945.027255] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 945.032010] ? __fget+0x210/0x370 [ 945.035460] ? find_held_lock+0x35/0x130 [ 945.039514] ? __fget+0x210/0x370 [ 945.042948] ? lock_downgrade+0x6e0/0x6e0 [ 945.047082] ? __fget+0x237/0x370 [ 945.050542] ? __fget_light+0x172/0x1f0 [ 945.054496] ? __fdget+0x1b/0x20 [ 945.057854] ? sockfd_lookup_light+0xb4/0x160 [ 945.062330] __sys_sendmsg+0xb9/0x140 [ 945.066110] ? SyS_shutdown+0x170/0x170 [ 945.070081] SyS_sendmsg+0x2d/0x50 [ 945.073604] ? __sys_sendmsg+0x140/0x140 [ 945.077653] do_syscall_64+0x1e8/0x640 [ 945.081519] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 945.086344] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 945.091516] RIP: 0033:0x459879 [ 945.094699] RSP: 002b:00007f8d7ab1fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 945.102403] RAX: ffffffffffffffda RBX: 00007f8d7ab1fc90 RCX: 0000000000459879 [ 945.109657] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 945.116923] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 945.124172] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8d7ab206d4 05:42:35 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x107000) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000080)={0x800, 0x800}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r2, 0xe02, 0x70bd2d, 0x25dfdbfc, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x44, @link='syz1\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 05:42:35 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="8cff7cf9080001005345204c696e75781200160001d867000600040007000000"], 0x20) 05:42:35 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) r1 = getpgrp(0xffffffffffffffff) waitid(0x1, r1, &(0x7f0000000080), 0x20000000, &(0x7f0000000140)) rt_tgsigqueueinfo(r1, r1, 0xe, &(0x7f0000000200)={0x0, 0x1f, 0x20}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 05:42:35 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x80582, 0x80) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) 05:42:35 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="8cff7cf999ffffff5345204c696e757812002000000400070000003c9f0300030000000000000000f73492a81ce66929b9fcdfe56bd56d9b0669"], 0x28) [ 945.131507] R13: 00000000004c77d9 R14: 00000000004dd030 R15: 0000000000000004 05:42:35 executing program 4 (fault-call:1 fault-nth:8): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) 05:42:35 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) r1 = getpgid(0x0) r2 = gettid() rt_tgsigqueueinfo(r1, r2, 0x17, &(0x7f0000000000)={0x30, 0x4, 0x89}) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="8cff7cf908000001d86700060004c22897211d3b0e6300"/32], 0x20) [ 945.195090] SELinux: policydb string length 65544 does not match expected length 8 05:42:35 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f00000c8000/0x4000)=nil, 0x4000, 0x100000f, 0x40010, r0, 0x0) shmat(0x0, &(0x7f000011a000/0x3000)=nil, 0x6000) 05:42:35 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x100, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f00000000c0)={0x0, 0x0, @ioapic}) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000080), &(0x7f0000000280), &(0x7f00000002c0)=0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0x0, 0x3, {{0x5, 0x0, 0x5eb, 0x8, 0x6280, 0x4, {0x6, 0x1, 0x6, 0x5, 0x7, 0x3, 0x8068, 0x5, 0x81, 0x7, 0xff, r2, r3, 0x5c2a, 0x9}}, {0x0, 0x7}}}, 0xa0) write$selinux_load(r0, &(0x7f0000000300)=ANY=[], 0xffffffffffffff16) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000003c0)={0x100, 0x1000, 0x6, 0x5d9d2722}) 05:42:35 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) fcntl$dupfd(r0, 0x0, r0) [ 945.267990] SELinux: policydb string length -103 does not match expected length 8 05:42:35 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x8040, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000040)) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)=0x0) r3 = fcntl$getown(r1, 0x9) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f00000000c0)={r1, r0, 0xffffffffffffffe1}) [ 945.345154] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 945.376350] SELinux: policydb string length 16777224 does not match expected length 8 [ 945.377684] FAULT_INJECTION: forcing a failure. 05:42:35 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000040)={0x0, 0x3, 0x9a, 0xffffffffffffff6a, 'syz1\x00', 0x200}) write$nbd(r1, &(0x7f0000000100)={0x67446698, 0x1, 0x0, 0x1, 0x1, "6684efe772b5ca7f99eaf59cc4622df6223fd3f76c498112d2e4b624791c212acdad7ff502f6338837a84c3810d7b5467d86ffbb5cf3523aeebeabf8fb81a816e93a0f9093d5b356098d10cb56d35d7222164fa06e294a311dee3ddb"}, 0x6c) timerfd_create(0xa, 0x80000) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f00000000c0)={0x7, 0x1}) [ 945.377684] name failslab, interval 1, probability 0, space 0, times 0 05:42:35 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="8cff7cf999ffffff5345204c696e75781200000001d8670006000400070008003c9f030003250000"], 0x28) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) 05:42:35 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={0x1, 0x28, &(0x7f0000000680)={0x0, 0x0}}, 0x10) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r0, 0x4, 0x8}, 0xff7d) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000780)='/dev/hwrng\x00', 0x2000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0x80045500, &(0x7f00000007c0)) r4 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@local}}, &(0x7f0000000380)=0xe8) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$audion(&(0x7f0000000700)='/dev/audio#\x00', 0x7fff, 0x20001) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r8, 0x10e, 0x8, &(0x7f0000000740)=0x9, 0x4) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getgid() getresgid(&(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)=0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="02000000010005000000000002000000", @ANYRES32=r2, @ANYBLOB="02000200", @ANYRES32=r4, @ANYBLOB="02000200", @ANYRES32=r5, @ANYBLOB="02000400", @ANYRES32=r6, @ANYBLOB="02000700", @ANYRES32=r7, @ANYBLOB="02000200", @ANYRES32=r9, @ANYBLOB="04000400002e17dc3d67265c", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="10000200000000002000020000000000"], 0x64, 0x2) r12 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) mmap(&(0x7f0000de9000/0x2000)=nil, 0x2000, 0x0, 0x110, r12, 0x0) 05:42:35 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7802, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) 05:42:35 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$9p(r1, &(0x7f0000000140)="5fc34f05aca6aa69172f55d69779d4bbb0ad904c65341a42582f99c088e4d44a61b61d93e4bc8f409eebdfe0d7e94ef2d2ef6054fb289631a93b51bac7ad661c757f7339a4890b8d0154adc5f1b6e447b93ea2d4bbd748dca5419e356d40f3d733292339278a72c63b", 0x69) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 945.521893] CPU: 0 PID: 16571 Comm: syz-executor.4 Not tainted 4.14.141 #37 [ 945.526082] SELinux: security policydb version 18 (MLS) not backwards compatible [ 945.529030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 945.529035] Call Trace: [ 945.529050] dump_stack+0x138/0x197 [ 945.529068] should_fail.cold+0x10f/0x159 [ 945.556268] should_failslab+0xdb/0x130 [ 945.560257] kmem_cache_alloc_node+0x287/0x780 [ 945.564851] __alloc_skb+0x9c/0x500 [ 945.568480] ? skb_scrub_packet+0x4b0/0x4b0 [ 945.572809] netlink_ack+0x21c/0x9a0 [ 945.576522] ? netlink_sendmsg+0xc60/0xc60 [ 945.580754] ? xfrm_netlink_rcv+0x61/0x90 [ 945.583711] SELinux: policydb string length -103 does not match expected length 8 [ 945.584900] netlink_rcv_skb+0x2fc/0x3c0 [ 945.584914] ? xfrm_dump_sa_done+0xe0/0xe0 [ 945.584926] ? netlink_ack+0x9a0/0x9a0 [ 945.584943] xfrm_netlink_rcv+0x70/0x90 [ 945.608938] netlink_unicast+0x45d/0x640 [ 945.613002] ? netlink_attachskb+0x6a0/0x6a0 [ 945.617401] ? security_netlink_send+0x81/0xb0 [ 945.621983] netlink_sendmsg+0x7c4/0xc60 [ 945.626055] ? netlink_unicast+0x640/0x640 [ 945.630295] ? security_socket_sendmsg+0x89/0xb0 [ 945.635049] ? netlink_unicast+0x640/0x640 [ 945.639284] sock_sendmsg+0xce/0x110 [ 945.643000] ___sys_sendmsg+0x70a/0x840 [ 945.646979] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 945.651727] ? __fget+0x210/0x370 [ 945.651741] ? find_held_lock+0x35/0x130 [ 945.651751] ? __fget+0x210/0x370 [ 945.651765] ? lock_downgrade+0x6e0/0x6e0 [ 945.651778] ? __fget+0x237/0x370 05:42:35 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000180)={0x3e6, 0x0, {0x0, 0x2, 0x9, 0x2, 0x2}}) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}) [ 945.651790] ? __fget_light+0x172/0x1f0 [ 945.651799] ? __fdget+0x1b/0x20 [ 945.651808] ? sockfd_lookup_light+0xb4/0x160 [ 945.651819] __sys_sendmsg+0xb9/0x140 [ 945.651830] ? SyS_shutdown+0x170/0x170 [ 945.659341] SyS_sendmsg+0x2d/0x50 [ 945.659348] ? __sys_sendmsg+0x140/0x140 [ 945.659359] do_syscall_64+0x1e8/0x640 [ 945.701446] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 945.706300] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 945.711481] RIP: 0033:0x459879 [ 945.714658] RSP: 002b:00007f8d7ab1fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 945.722362] RAX: ffffffffffffffda RBX: 00007f8d7ab1fc90 RCX: 0000000000459879 [ 945.729632] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 945.736893] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 945.736898] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8d7ab206d4 [ 945.736903] R13: 00000000004c77d9 R14: 00000000004dd030 R15: 0000000000000004 05:42:35 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={r0, 0x0, 0x3, 0x4, 0x8}) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) 05:42:35 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x10) accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000180)=r1) splice(r0, &(0x7f0000000040), r0, &(0x7f00000000c0), 0x9, 0x8) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={@empty, 0x1f, r1}) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="8cff7cf999ffffff5345204c696e75781200000001d867000600040049031ffa070000003c9f03000300000065fb69de8f07e3ba8747f32e16669084b034e4d4f63253118b257f5ea0ce86071e40599a932835049cd8e980f242e280d29ee2ea4ec84dbb0906e58f858d50e8d9286161e00d25fcfceceaab7d46e16dcaff0a315183f4156e781e1735ad9f4a60858c230004983c6162076c68763656648d21ddc7ce5dfa"], 0x28) 05:42:35 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xceb, 0x101400) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002300)=0x0) r3 = getuid() fstat(r0, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000023c0)={0x0}, &(0x7f0000002400)=0xc) lstat(&(0x7f0000002440)='./file0\x00', &(0x7f0000002480)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0xa, &(0x7f0000002500)=[0xee00, 0xee00, 0xee01, 0xee01, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xee01, 0xffffffffffffffff]) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000002540)=0x0) getresuid(&(0x7f0000002580), &(0x7f00000025c0), &(0x7f0000002600)=0x0) r10 = getegid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002640)=0x0) fstat(r0, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000002700)='./file0\x00', &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = fcntl$getown(r0, 0x9) stat(&(0x7f00000027c0)='./file0\x00', &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x0}) r16 = getegid() sendmsg$unix(r1, &(0x7f00000029c0)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="26b9327f530fa9c9735a6ef5c398d9ec95e4b023e55ffe06499cf37ada8adcc7d0082bc7545c6c61a25423a6c667a60b0451cf7b55780ce7c83c3400305ed01f3cc8639e95cf23d5c969b329632b13e8690922f874a4c384b896ac16053ac37beb91ce40b69f14a6563925475c9d6229181d37195f5336e27c4939d45c29fe455952abd6abd558f807d60f182be32d1081d00a3bb58db9d570f5184ede98d5a6deee873673634d201da513325acbc466ccc1601bc90df07f270eb9f0968cb5ce868cafd97dec8d097e2514268c6e58341e603917775430c9f5ce7fe55caf5fbdec188a659c060b67f1d8169278ffae283d1ede4d143d1a0d0dd3382c6174dd76cc1de1cb1042a2fbc5b79c74cd09d8dd684b81e8dc76d94bcf35f5f69a21e9ff6cf987623f295f040b23bd05bd82690b483c3a12c3b5a6de86288bd39e49bf54cc9813e42d2cbe5f78e32f0f7aee350dba89ac54bf1d15b49a25010c5266bcb76883d7f06e330eb354f3a1008a71ed5b2108411caa7180bfcc26c8d9274ed1a3655ec370a81977862d61d0dd1f72e2935005682b5aa76bbaf7bd2d393438aeedccf2cc0c02c24d3fa8c95380fabc28f1c04991498339abd5a23ecf9605c132204afbd4c0366c449fb5b2ea8e92f64210b40877b92dc9446aa0186503dfe9cdaa2e7b34f32cd1b929fa82b66fbfed539006a3b58cad9ca069fae06ffccd32d37dc23a4a218ba98f797e00b3a18644903ae3d23054c069b596b9180a645de9c4ea0539bd7c7112e5e1acb5297d4fd0e7e6e8e1a5ab67e6a720ec024983a9d1622fe600b890f1996030576448da114c8075f2dced502af587e991c42997eec0785bc6ed09ff6469e6880f091ac4a42b53529b19a6bd4f6c3a574f486e7c8b6739be634dd0967816d22313efcc8f40ce59d5f534d919e9b4013fc36262013cf0921e5bb3a4fefb7e7d3424abe69065472117f6eeea41b1c64705d555e059bbbd3814838f8948e897df010fc8862b3368ea4a3d821534146c4ec1e9ee8746b7913b9b635fdf238e85c14c40b03091e60df94f7b39b6e980e5a6291e13d195089593317f8ed928effbbdbd0e0d13cac791989f3f2256142e7b28b78837f04a2e3b1217c793abae414d7333bcce3e96d3b51ee24b3f5135d1a2dcdbb02b9b862dae8dd3fe724742b1724e98f90294c28358f9a04ec54ecdcd0ca76e039091aa4feec24d92d4a7fd93cdf14da02e39f7a0c69de1a748d5e5763eb5b5bd0400b5e68e2bbf4b237ce5e6ae71467b0c4d2bfef47281fb9d5f934c1ef5584c9ec36ad80022256e08190745a8137923f271ddf071fd4da80808641b1032175926b739f621fe899acede5975bf799cf977566acaa9195a1cc4ab34b96956ab28d7a2ae79040b4fa901f3bd4d8bf37c23bacca7b999248ba1cb8b39cbf940b90a6ee965c994fac6414846b9accd244ff37294cb523086547b10d75c629ad160fcdda3188bfab1e39b13e38d80731bdd6a72c58340704bc61f3e4cd97785b7134b21d11e7fa1604d5d7f327d068bcbd75e679b5a73803f9376b4fef5de52dc487968fe61f456d5bcda99e6d9765d86256fb73117eedf29a620c32867664863aa65aa9296e065b1a31b65c447f75c20616be7824f85ce7413a0f1cee3cb8dcf5d48c590f6fd61245981b42e512dad4f4cbd9479d4b6597615015b5943fccd91a53e4c895f9d69cdc43ab1086dce0198422173ea5c644a7499a3418b2ec6b016c9e467f3e2d103687da7ed5b244a8c8d6a9bf466e37cd2da0084821adc724ecbb7de85bb08974cb7803f46c986b8482d6464f1fe4faceaacf1b42c89f77ff3d2faa4d3cb4f898a4509e40459c0f4429ce0288209d7807645ef66b147f7facf3404ccf1b97c147c0caf26ff62da5e38d2f8c47cb2b82b79f0dc861468b363adb4eaea30fca3ef07b2be2150dceef09c0fea558c32c6f28cf614df31ad15559f150e5d60015f5301f6f039cc716ab4d97b1f79a441664bff48fce36c9a95e9d438d08d066db0fe12a17386e83380551926c95fdc87144ff601721ecf81fc5ed51b52dc4f3fc8c379a708e9a958ec11ed1b32d377432a253b4a740c10967eab83b756462129d1ea8f09bfbd1f2671dd37f691d63293f2d64485631b0781a74340e5d9095e5f3fe39ff848099d89608486c8eea95063ac79959a608948abe596ea60868a1b2af570aa7447bf9385ffb6f990cc72fb3e96f8a3e462ce8f38122a4beec4b8cb3082dc8cc5eef0596e9583ed4b57be989873163908ae7ab2382dd39ef1dc66ade17c4d253f3224cdce158088fca85d7ffc4fd4765b2dcff9ad3f89c2fc0bc8f9a5bec1a4709228c2be2e88707c808123e342d09ec7162f85a5e8f06cedc7414ac2c107ac4ca67b15eaa120b5ab96382961e0303da6182785dd12d23162a0325e3e7b6a24b2dc0b05a9f85ae4fa8a0a0e672da8ec20c7cc1110bf35759881dc660d248fd7df65d9d1578edacbe5223dc971aea05fa3aab18b02f2ffad943f5767299053fb9e06174a59ae54928ca36e8232169959b4faa362e1852e152b063a33af0015465ad41191b679e62e2d81fa75778e3fe54417884bc24bafccc3753465dd109a60218c4f29b3839fb7b589b91eaead55b78c4a700a35e1e44ea52add7aa030bfceba48f44438f075010356ce65fc8d67f916f45eaec44e085383a17b29ce86d9197f3f3228b9a18125a2258ed2d126340693d6436fb9b8febd7549713b9ff8bedc4eee1592600321c264b144f403ed3bf788d2bae4c94d4ed59f95c735cc51e7e3fbc7690473ceaee11cb82d652531086139910db91afe976ff357ea0c6eba2e9edd59933d7bc598b19511251ecc5923d7d3c2d274664162129c7228aa796fc042d22992e50b580c2676f41cde7b7887556ebcd69946b78370e569f2ad4bf69040629da3fc4ff2734947ff7d7e5ed53c5fbb67e5a80f61fc9d8574a22347621e48a40136afbda083a55e99a7c758b4541fc43c94d0d1f6c38491bfe7185e914c4eff96e7fa6bb968ac3c4e7a40261ac6592e43909f29cfdbd5878e72f85a6d38db41d688e4ad7a48991ff59cbabfc729be7b4ecf6a3be4ec70ea5af0be54aeb2faf48430b2053ca6491434e10aaeb631c78ac9a04ebf34a2139fcb5f267050137b2aac9f89f949d64a7dfd15c384a1c74311cbc11644fd90abede5b1d323e6d578f36154cbe8a26f14f0757ace4e3e59f6b50cdf39266b318579d65ce7dfd3056f7d4fd8bc1587f60da9d49b8a8baaac665afaae70f7de8a6ec7a9535a59e69d3a317ac17f91a09c7efaef7759dbf3e2b0082eafb4bb85670bca24658aa3edac1bc594383d36ea2de1bfc23d14d2e7c1c1f3568d38a2bd4d18e5b501d058abaff226dc86ed7f2689502700411a2ff8eb0048a3f9c88099cf93b3778229413b61202e3fd4461910fe08568203ea879a527cf2ca214b305c470b0e535b79ca59274b4acb7783eeda9ba2f9a3799e6baa653f44658f6593e98b4b73f2af823b6e84ec0f7f0dd93f3435a5696d305cb4d7492a6f895b64d8029c59ecf926e3495eba478243f37bb7c62332d07bb783f958ec694f36d10e84e660e55d61b11ac70d1ba7e5cb9e3f3c472e9636bdca5fd51acb8e423834a10a635d96a3700968db738ea82ec3fe223ea6bfa626f40e788b6247d6cc3f33dc7e29108fd6e5fbe6140a92bf099c6c2b7a5436fc1cef4232e4c6c580de97099f7e99fdc954e86db783932994eb863b9890aee3c40c01947c49df011daffc75cda503966eb919ae8c10bf384e9eeca049baf3e3179330f6e0ff7e9b1c8813e7e4a815ad837cf9a54b4ca5e3f77e2879dfebb302a6a5b61bb32d1f78ec87de9b497ab15e2d61e1bcd830b8f865d52b5ffa1ffb96c79aee33d69c02c8b22fa01f37a81a0abd33db658acaecb38b00f86d08de209bbc4e88b3e5aa731c369552ae2e5fa4360d8dc13a0c31ac52e1ed7fe8d64b2a3074193f6c5fd1f8d5a67086195e73df5acd6196e43bafe895f53be2c22eeae0aedb93b8338e09a3b69f73efda421fce52ad8cd8c7325f61da3b37200a1c7eed3d000551b44a246d0148cce8d59297acdab0d378d72205ea3643d0b6531e2674a7a69def73f96130f9848e99f633771a1daa6d605bee63e6193297717c076e4181915e31738980f36f417c4da15bce22ffae3bf9bb99ceac9a60b1c0511eced5f76d46ba0e78330e67d64d0b611c9c38cbe85ca687735fdd119fc80ecc1b6f0302852da3fbebd01bb94008cff4e094ef8f493f1c177412fd23f6f204e73847a623613f37c5ec241c69a55522439e65262caa0faa027d3fd2be66010dd59c08fb472fb1075fa6b697eb97477ce47cc0d675a467c9c1a8ce55e5e4257e5f5993a984c43b91f29813f912057e96469a30873a9ad4b99c7decc3ea39e3676a910942012229445cc18a4bca2a71092e8e03dfd29b62b66c7b584015e7136b2812d9c542116d9ed7ad3dd178797c04575e82830a4b17a7584e6cefd828488cbc34d936c1449f7cd8e750aabce572cb4dfa307ed158775a17889412b379dde9791bb0051f1b9e7e2ba05f942c78f8ba5fcfb8cb9e4c56b371910b5ca2525c89a4f2cb7ffdd8e9f023d05260fac19c3ddb721e0671bb9fdb300caa0969572da918aed37706237a35fd17f2ad19ab0adae88f4ef52aa05be58212920814e7cecf012e5168ccd1612a5d309cb8be46459d574f4e6628a9116ddf8f5eaffcc1c2a7770478569e10929a9f5dab9607158444b508739d66b7a0a01cbc85c68413feec9f25bacc438923889f47f108fa808b9195c9363f508ee363508d6ddd2db7a95ae079b93454ecdacf153d742de7866d2dca9cf13493a4a752d98795d3c6b35b3e33423f315e9d044b3661f1228f4c1822cfdb032be44e1d66af37482be5f4057ce7cce86e7fd6a92ba43cf6965a7f61b37b10c78ab5f29475a0318a96d7fd2e4bd8854360723c3bc9acd3c105e130ec52bc1b0de82a6b3845de86b76c939232184449b3a097cfed1365b0ff194ae6a5ce04e6d1d325411c35cecbc38d0ecb6b5bf9b7654562705a695db520f9de62f230eb9d671d502878e89dbc0dae57865412b8c65251ec564c0c59afab18f00590b6870bf308a0dd2caa0eb25bce8dfa196c7dfdae97fea5ef668d41d9ee6cd935418a044ce67752332505de19af6ffc8d612e9ec57d6f0195430a0725597474348ed7a04f2fd8bbb59c78e49259120c04cc865d4575f8ce3599eaed80a8d8454aa2d863c979cc3357a1c82225dc5b72b383b4d81e054e0d9279283a83125557fd340bebabba09e28c15a6fd7c0b7d6eeb8ac554d60a9b23906c22de02020f530286aa5b094eab89e4931819c29a2d29bda8879552cf2ccae8112c2e317352055d7f1374c885f80e2a049bf9c3b29228cf1ee9b5ebf0eec3c047d52e5ff0050685ca2bb1830391b924ccfa6812c24b3beb9622b61d65f63a199cb9f01d0870f3c43084d7cdc40d8c317d1903b815701daea8655b83fa2b1a1229c10160757997d402fbcbf3d9385a8b71781f49eed53ba93770dc6d18b8d87d9055a297d8f6b599e4b07d05ed26806f75d369b7211a371bab924ff7ed3f6b5555f9237b9a6e9751bad4fafbab2d996f51556fb404bcd631e9c893300d02efbbf7e8ba2b1f5ce704494cea186e933271e3069517b1cafeb1deadc51fffa7e4b1a2521b2a6391ea9bb626b78969ae42756af3b8b1c9b66b9235c9e98c68ecb0d51af5093b52e7454c8d838bc1361d4931974974591768588245", 0x1000}, {&(0x7f0000002200)="475ba239cf41918f1e32f4dc4b2fb13fa1e28339617960c537ed34525e506e11f540cd82d09fbc6df3f3378da8b12f9f48d02f7ff723705db19aa20c097938776494fa9f972d181d03fc15ebb38f372ea93b4850e1f5858f6e40e5f3cdb96111554993c3e82799192750c76b94d4d8f9bd4131c11b4d6251ee5f4ac752ab03cef143728dc8247e81a727abeda2b7865897ca6b15640754f108948803ceb88391f9511dfffd932f5d20def118bcee1479a7603515c1d602699b1ce94832e71167877029757cea2cee8c25fe8c887efdf4f7ba5c802987e5743c7095b721136b2d8238e3", 0xe3}, {&(0x7f0000000140)="7461890f010d6a999362589c43519e3c1ae597c49ac80066a2901043afc359d1cd86ae6e668c8e31f7b6ec29e8b7e0ccbe9d0d8c1e7fa1a005bbdbc473f05c3f7b62d48befbbfcb95abdbd7f24619ae962579b1db0df153e", 0x58}], 0x4, &(0x7f0000002880)=[@rights={{0x24, 0x1, 0x1, [r0, r0, r0, r0, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x120, 0x8010}, 0x20000000) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) 05:42:35 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x4) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x80600, 0x0) connect$vsock_dgram(r1, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 05:42:35 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x4000, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1000, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000e55000/0x2000)=nil, 0x2000}, &(0x7f0000000080)=0x10) r2 = shmget$private(0x0, 0x1000, 0x4, &(0x7f0000933000/0x1000)=nil) r3 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140), 0x0, 0xfffffffffffffff9) keyctl$read(0xb, r3, &(0x7f0000000180)=""/4096, 0x1000) shmat(r2, &(0x7f0000fff000/0x1000)=nil, 0x2000) 05:42:35 executing program 4 (fault-call:1 fault-nth:9): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) 05:42:36 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x200, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000040)={{0x80000001, 0x8000}, 'port0\x00', 0x63, 0x10010, 0xc40, 0x1000, 0xff, 0x4591, 0x7fffffff, 0x0, 0x2, 0x8}) 05:42:36 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r1 = shmget(0x2, 0x3000, 0x54000000, &(0x7f0000515000/0x3000)=nil) shmat(r1, &(0x7f0000172000/0x4000)=nil, 0x6000) 05:42:36 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000280)=0x2) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="8cff7cf999fffff25345204c69ee75d1f4789207000000d867000600040000030000000000000000"], 0x28) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f0000000200)=""/98) r3 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x80000) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000100)={0xffff, 0x9, 0x1, 0x0, 0x6, 0x0, 0x1, 0x7, 0x1, 0x2, 0x81, 0x7, 0x0, 0x5, 0xffffffffffffffff, 0x2, 0x1000, 0x3880, 0xcc}) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) [ 945.886310] SELinux: policydb string length -103 does not match expected length 8 [ 945.909123] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 945.917094] SELinux: security policydb version 18 (MLS) not backwards compatible 05:42:36 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x10000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f00000008c0)={0xf97cff8c, 0x8, 'SE Linux', "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"}, 0x219) [ 945.945949] SELinux: security policydb version 18 (MLS) not backwards compatible 05:42:36 executing program 5: setreuid(0x0, 0x0) getresuid(&(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f00000002c0)) syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file1\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="4e759c46c5f03867a58d29102b16ed9b049a5a1e4b52c3d84b0460abe581078e8a4f977ed6e28620972504eef4133893e15f6dd8db4c438720e3495caf7196dd9826143038cf423d36f11a64952fd01a4788b7fa64de8e46e92937a347b6b61a87175f0b40b1ea03ed8613da02e0e844817eb40cdd0d80ea42955763492ae14efada971723b375ec46", 0x89, 0x2}], 0x10042, &(0x7f0000000300)={[{@nogrpid='nogrpid'}, {@grpid='grpid'}, {@gqnoenforce='gqnoenforce'}, {@nobarrier='nobarrier'}, {@filestreams='filestreams'}, {@sunit={'sunit', 0x3d, 0x2}}, {@rtdev={'rtdev', 0x3d, './file0'}}, {@prjquota='prjquota'}, {@attr2='attr2'}], [{@smackfsroot={'smackfsroot', 0x3d, 'vfat\x00'}}, {@euid_lt={'euid<', r0}}]}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 946.003805] FAULT_INJECTION: forcing a failure. [ 946.003805] name failslab, interval 1, probability 0, space 0, times 0 05:42:36 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000d57000/0x1000)=nil) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x100, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000634000/0x4000)=nil, 0x4000}, &(0x7f0000000080)=0x10) shmat(r0, &(0x7f00005ab000/0x3000)=nil, 0x3000) 05:42:36 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) lsetxattr$security_smack_transmute(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x2) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x9, 0x10}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000240)={r1, 0x2, 0x40, 0xf3}, &(0x7f0000000280)=0x10) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='yam0\x00', 0x10) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000002c0)=0x0) syz_open_procfs(r3, &(0x7f0000000300)='net/ipx\x00') [ 946.055943] SELinux: policydb string length -218103911 does not match expected length 8 [ 946.066388] CPU: 1 PID: 16647 Comm: syz-executor.4 Not tainted 4.14.141 #37 [ 946.073504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 946.090678] Call Trace: 05:42:36 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="8cad797a802b8e7a8900c6d082bc2eff7cf999ffffff5345204c696e75781200000001d867000600"], 0x28) [ 946.090702] dump_stack+0x138/0x197 [ 946.090721] should_fail.cold+0x10f/0x159 [ 946.090736] should_failslab+0xdb/0x130 [ 946.090749] kmem_cache_alloc_node_trace+0x280/0x770 [ 946.090761] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 946.090775] __kmalloc_node_track_caller+0x3d/0x80 [ 946.090786] __kmalloc_reserve.isra.0+0x40/0xe0 [ 946.090797] __alloc_skb+0xcf/0x500 [ 946.090806] ? skb_scrub_packet+0x4b0/0x4b0 [ 946.090820] netlink_ack+0x21c/0x9a0 [ 946.090832] ? netlink_sendmsg+0xc60/0xc60 [ 946.090842] ? xfrm_netlink_rcv+0x61/0x90 [ 946.090854] netlink_rcv_skb+0x2fc/0x3c0 [ 946.090864] ? xfrm_dump_sa_done+0xe0/0xe0 [ 946.090874] ? netlink_ack+0x9a0/0x9a0 [ 946.090891] xfrm_netlink_rcv+0x70/0x90 [ 946.090900] netlink_unicast+0x45d/0x640 [ 946.090912] ? netlink_attachskb+0x6a0/0x6a0 [ 946.090923] ? security_netlink_send+0x81/0xb0 [ 946.090935] netlink_sendmsg+0x7c4/0xc60 [ 946.090949] ? netlink_unicast+0x640/0x640 [ 946.090962] ? security_socket_sendmsg+0x89/0xb0 [ 946.090971] ? netlink_unicast+0x640/0x640 [ 946.090981] sock_sendmsg+0xce/0x110 [ 946.090991] ___sys_sendmsg+0x70a/0x840 [ 946.091003] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 946.091013] ? __fget+0x210/0x370 [ 946.091025] ? find_held_lock+0x35/0x130 [ 946.091033] ? __fget+0x210/0x370 [ 946.091049] ? lock_downgrade+0x6e0/0x6e0 [ 946.091062] ? __fget+0x237/0x370 [ 946.091076] ? __fget_light+0x172/0x1f0 [ 946.091086] ? __fdget+0x1b/0x20 [ 946.091095] ? sockfd_lookup_light+0xb4/0x160 05:42:36 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x7800, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) 05:42:36 executing program 4 (fault-call:1 fault-nth:10): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) [ 946.091106] __sys_sendmsg+0xb9/0x140 [ 946.091115] ? SyS_shutdown+0x170/0x170 [ 946.091138] SyS_sendmsg+0x2d/0x50 [ 946.091145] ? __sys_sendmsg+0x140/0x140 [ 946.091156] do_syscall_64+0x1e8/0x640 [ 946.091164] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 946.091179] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 946.091186] RIP: 0033:0x459879 [ 946.091191] RSP: 002b:00007f8d7ab1fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 946.091201] RAX: ffffffffffffffda RBX: 00007f8d7ab1fc90 RCX: 0000000000459879 05:42:36 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x88001, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0x71a, 0x7ffffffd, 0x6, 0x1, 0x2}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) 05:42:36 executing program 5: getuid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000700)={{{@in=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000500)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000800)={{{@in6=@initdev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000900)=0xe8) setreuid(r0, r1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) fstat(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$sndpcmc(&(0x7f0000000480)='/dev/snd/pcmC#D#c\x00', 0x8, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f0000000400)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000440)=0xe8) ioctl$BLKBSZSET(r5, 0x40081271, &(0x7f00000009c0)=0x7) syz_mount_image$iso9660(&(0x7f0000000080)='iso9660\x00', &(0x7f00000000c0)='./file0\x00', 0x5, 0x1, &(0x7f0000000180)=[{&(0x7f0000000140)="2e6e2f9a3adf4479f0ddc2dd4b2976dd7a749ca4e811e2dc22b38d4dea87c9d457703799b59a39e978e438102d0299cc1f9d", 0x32, 0x3}], 0x1000, &(0x7f0000000d00)=ANY=[@ANYBLOB="6e6f6a6f6c6965742c636865636b3d72656c617865642c636865636b3d72656c617865642c756e686964652c6769643de26c294080b94af66cb5923e75c6904455420bb31a09e8102512b3fb92f14eaf8f5085055a68e82af437c0b657314dbfd78380055fa96c5893e9f668fe10558449b62a0e0a1c4e4a", @ANYRESHEX=r3, @ANYBLOB=',nocompress,iocharset=cp852,uid=', @ANYRESHEX=r4, @ANYBLOB=',dont_hash,fsmagic=0x0000000000000003,uid<', @ANYRESDEC=r6, @ANYBLOB="f949eb8317341aa6a9cb06c08cac842a721c660cf11213b921ddc20a7d0a9d6d97b1e3c1407ba7e0383d1f3c06cbb36030ed291c19eb49ed9357eb3d56460b9d0439bae98e11ea03e7e6081af25de0ee21cd665aec990f0197c29a6d77cb6bdad6fbba10605c06ead370b4dd00c382a9e755", @ANYRESDEC=r7, @ANYBLOB="07f8b97f3159b404e6be39837c8a4d009e0fba230de66cc38d7c6e158894ed48d00165db5c865fc8ff2174cc967332d7f662eb87dac85a0859f3680df2637903548d83e3b6bd5ff6e129447f9870e57e0d0b0f3b59912a8bd63cd1d6b96161878167576fb0917eb58021411ffa8eda6c102286fd2e05f1244396e91b1822b56be8afb5e2faaf7880b99f2a763c8955103154897aae6370dac0f7d124aba0115067a125d2507e3d95170eda9f918458b4e9e1b4c17c75defff48dfec5eb3d5d0d06decc6bfb68a75284fef0d6e96f4b8ef61505ba1fed74839d291de25f4bf5c921"]) fchdir(r2) getsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f0000000940), &(0x7f0000000980)=0x4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) fcntl$getown(r2, 0x9) getsockopt$nfc_llcp(r5, 0x118, 0x1, &(0x7f0000000680)=""/74, 0x4a) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 946.091206] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 946.091212] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 946.091217] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8d7ab206d4 [ 946.091222] R13: 00000000004c77d9 R14: 00000000004dd030 R15: 0000000000000004 [ 946.170928] SELinux: policydb version 3 does not match my version range 15-31 [ 946.259830] SELinux: policydb magic number 0x7a79ad8c does not match expected magic number 0xf97cff8c [ 946.329387] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 05:42:36 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) sendmsg$inet(r1, &(0x7f0000001740)={&(0x7f0000000400)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000440)="96e65ba04428b7e545d1e07f0c7dbe1ae5086f6bef2bbe1758fd4a82fd3add6ee2c85433e19d89557684a8b0dc18745099a55872b3d87d4b11488efcb58d4e475379f670886a1a1dbfb198ba6d3fd27f6975807a0237b480", 0x58}, {&(0x7f0000000680)="5050cb033a8679408c223c2ac62678f89e006ff0aa607928876eb172f0e7e6d4c7fbb850f07b3b0c0ecf08f968f1b77a52109a67f76e29693af8dfebc6d63f714871d67571d9bd9e4e84bdf912bc66bb765c1788f477e6697c33e13a7aec64e62fc24cdea024e1fe20c49ea2bf0bbb3f55e62c2d8b06b740a7dd1f7c0c55c4771fb9ffb0ed56432529a595bfd666109f3f13", 0x92}, {&(0x7f0000000740)="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", 0x1000}], 0x3}, 0x4000) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{}, {}, {}, {}, {}]}) syz_open_dev$radio(&(0x7f0000000580)='/dev/radio#\x00', 0x2, 0x2) r3 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x2, 0x2) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, &(0x7f0000000140)={0x1, 0x24, [0x10000, 0x1, 0x100000000, 0x6391, 0x3, 0x20000, 0x2, 0x1, 0x1]}) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f00000000c0)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x200000, 0xe) mount$9p_unix(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x2, &(0x7f0000000340)={'trans=unix,', {[{@nodevmap='nodevmap'}, {@cache_none='cache=none'}, {@noextend='noextend'}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@noextend='noextend'}], [{@hash='hash'}]}}) 05:42:36 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x800000000077ff, 0x200) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000080)=0x4004) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f00000000c0)=0x6) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) 05:42:36 executing program 0: signalfd4(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffff7}, 0x8, 0x800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0900000000000000eaffffffffffffff"]) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0xa00, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000280)={@empty, @dev={0xac, 0x14, 0x14, 0x28}}, 0x8) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x200001, 0x0) mmap(&(0x7f0000d30000/0x4000)=nil, 0x4000, 0x1b89416133cd08a6, 0x11, r1, 0x0) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x4000) get_thread_area(&(0x7f0000000000)={0x21, 0x100000, 0x2000, 0x2, 0x4, 0x4, 0x0, 0x2, 0x7ff, 0x20}) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x2, 0x200) connect$caif(r2, &(0x7f0000000180)=@dgm={0x25, 0xff, 0x2}, 0x18) fstat(r2, &(0x7f0000000080)) ioctl$RTC_PIE_ON(r2, 0x7005) 05:42:36 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x9832, 0x0) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000200)=""/215) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 05:42:36 executing program 1: clone(0x10000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) [ 946.455568] SELinux: policydb version 3 does not match my version range 15-31 [ 946.470975] FAULT_INJECTION: forcing a failure. [ 946.470975] name failslab, interval 1, probability 0, space 0, times 0 [ 946.525505] CPU: 1 PID: 16693 Comm: syz-executor.4 Not tainted 4.14.141 #37 [ 946.532645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 946.542004] Call Trace: [ 946.544593] dump_stack+0x138/0x197 [ 946.548225] should_fail.cold+0x10f/0x159 [ 946.551518] overlayfs: unrecognized mount option " " or missing value [ 946.552373] should_failslab+0xdb/0x130 [ 946.552387] kmem_cache_alloc+0x47/0x780 [ 946.552400] ? lock_acquire+0x16f/0x430 [ 946.552415] ? check_preemption_disabled+0x3c/0x250 05:42:36 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000e00000/0x200000)=nil, 0x5000) [ 946.564206] overlayfs: unrecognized mount option " " or missing value [ 946.566992] skb_clone+0x129/0x320 [ 946.567006] netlink_deliver_tap+0x681/0x8f0 [ 946.567017] ? sock_ops_is_valid_access+0x70/0x70 [ 946.567029] __netlink_sendskb+0x49/0xa0 [ 946.567040] netlink_unicast+0x525/0x640 [ 946.590492] ? netlink_attachskb+0x6a0/0x6a0 [ 946.590506] netlink_ack+0x51d/0x9a0 [ 946.590517] ? netlink_sendmsg+0xc60/0xc60 [ 946.590526] ? xfrm_netlink_rcv+0x61/0x90 [ 946.590537] netlink_rcv_skb+0x2fc/0x3c0 [ 946.599110] 9pnet: p9_fd_create_unix (16711): problem connecting socket: ./file0: -111 [ 946.599419] ? xfrm_dump_sa_done+0xe0/0xe0 [ 946.599433] ? netlink_ack+0x9a0/0x9a0 [ 946.615795] xfrm_netlink_rcv+0x70/0x90 [ 946.615809] netlink_unicast+0x45d/0x640 [ 946.615822] ? netlink_attachskb+0x6a0/0x6a0 [ 946.615834] ? security_netlink_send+0x81/0xb0 [ 946.626613] SELinux: security policydb version 18 (MLS) not backwards compatible [ 946.632089] netlink_sendmsg+0x7c4/0xc60 [ 946.632106] ? netlink_unicast+0x640/0x640 05:42:36 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x13000, 0x2, &(0x7f0000fa0000/0x13000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xe5b9e57c0908acb1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x100, 0x0) renameat2(r1, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000080)='./file0\x00', 0x3) [ 946.632122] ? security_socket_sendmsg+0x89/0xb0 [ 946.632131] ? netlink_unicast+0x640/0x640 [ 946.632141] sock_sendmsg+0xce/0x110 [ 946.632150] ___sys_sendmsg+0x70a/0x840 [ 946.632161] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 946.632173] ? __fget+0x210/0x370 [ 946.677871] ? find_held_lock+0x35/0x130 [ 946.694487] ? __fget+0x210/0x370 [ 946.694507] ? lock_downgrade+0x6e0/0x6e0 [ 946.694522] ? __fget+0x237/0x370 [ 946.694534] ? __fget_light+0x172/0x1f0 [ 946.694543] ? __fdget+0x1b/0x20 05:42:36 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'security.', '\x00'}, &(0x7f0000000140)=""/134, 0x86) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 05:42:36 executing program 1: clone(0x200000002a801100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0xca1eeed9b44106d0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0x9, 0x401, 0x1, 0x3, 0x4, 0x40, 0x5, 0x9, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000200)={r2, 0xe1, "96e56c32c444ea41427867b404a32f9fc732c7ea5bd2d16601824afb6459e8ad1f5cee2739100475a1028b102652cfddee09a09070ba58a449a7faa18d3b683f1ab7064cab7f561192694567ca5ced506aeab2c17765300cd88769f3e22d8aa68a00e9d78acce73e4b0c6e08129ee48981d83f9a258d1e81d14d4d64f05c98197f89c47169194f7edce2fbace17b00829e6be7141d29fbd41f941802e6b1179bf3df49d7e06964605960b5a9c8e48230cb1ea2787e51ba1c2f2b63b93e6837695e9bad05bc109dba9a0f86b1d1a0e741392564071990d38626aae1a4813fb4c154"}, &(0x7f0000000140)=0xe9) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/member\x00', 0x2, 0x0) [ 946.720375] ? sockfd_lookup_light+0xb4/0x160 [ 946.720388] __sys_sendmsg+0xb9/0x140 [ 946.720397] ? SyS_shutdown+0x170/0x170 05:42:36 executing program 4 (fault-call:1 fault-nth:11): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) 05:42:36 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) [ 946.720419] SyS_sendmsg+0x2d/0x50 05:42:36 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xfd, 0x3, 0x8001, 0x3, 0x0, 0xe2f, 0x1000, 0x4, 0x7, 0x5, 0x1f9200, 0x80000001, 0x0, 0x8001, 0x9, 0x4, 0x4, 0x3, 0x5, 0x100000001, 0x3, 0x2797, 0x0, 0x3, 0x6, 0x7fffffff, 0x7fff, 0x200, 0x100000000000, 0x5, 0x401, 0x0, 0xfffffffffffffffc, 0x8, 0x81, 0x80, 0x0, 0xffffffffffffff2d, 0x4, @perf_config_ext={0x5, 0xfffffffffffffff7}, 0x14, 0x5, 0x8000, 0x7, 0x7, 0x7, 0xa9}, 0x0, 0xe, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x3, 0x70, 0x100000000, 0x3f, 0x400, 0x80000000, 0x0, 0x7fffffff, 0x2400, 0x5, 0x8, 0x6, 0x288259c2, 0x1, 0x1, 0x8d2, 0x0, 0x6, 0x7, 0x4, 0xffffffff, 0x7fffffff, 0x5, 0xfffffffeffffffff, 0x4, 0xffffffff, 0x5, 0x4, 0x6, 0x4, 0x200, 0x8, 0x1, 0x7, 0x0, 0x1ff, 0x8, 0x0, 0x0, 0x0, 0x641dce43555e1bb1, @perf_bp={&(0x7f0000000080), 0x4}, 0x883c61cd8fd3e062, 0x2, 0x7, 0x4, 0xeab, 0x7, 0x80}) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x9, 0x900) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000180)) [ 946.720426] ? __sys_sendmsg+0x140/0x140 [ 946.720438] do_syscall_64+0x1e8/0x640 [ 946.720447] ? trace_hardirqs_off_thunk+0x1a/0x1c 05:42:37 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xfffffffffffffc00, 0x20000) getsockopt$nfc_llcp(r1, 0x118, 0x7, &(0x7f00000001c0)=""/52, 0x34) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) accept4(r1, &(0x7f00000007c0)=@un=@abs, &(0x7f0000000840)=0x80, 0x800) getresuid(&(0x7f0000000380), &(0x7f0000000480), &(0x7f0000000500)=0x0) syz_mount_image$xfs(&(0x7f0000000200)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x8, 0x4, &(0x7f0000000680)=[{&(0x7f0000000280)="0b4b5bf84df7889a13c9c5478878cec1640b4606", 0x14, 0x1}, {&(0x7f00000002c0)="94471cd92eda4de69bb569ceb29a2bcc50df3b00f451dbb5f5829215ad273da563db348b0623ad1fc042971ec451abb0818db11acd73621fda4818f4617c748bb27f521aa24357b660b50a59aa82405f3ca551327a1fa7c2ea5cb9e79a55d4e630143039cfa5c69f7b35f9d301dfce8de770bfc0a1f9b6f83d91f50d3d8e083549f299c94132a612c7c73ccfb2bd9478b48869bcf4debbc366f0119d953ee207ee475062a0cdf5a4ebb4e252caf61844194df76127ce582840", 0xb9, 0x400}, {&(0x7f0000000580)="83b5196a4d7d55542f9ecf59c4e037cfe0ed0cc381087670a43027b62692f5e88754cad6e8bef4f472660a9383664cfa77fa56ebe8416b9813dcd5f70b84d655b146b3e220c00d243ab47892f626ed06aece85833a41d961c4bc67601d4ae99dcb82d0b8765ea1941e272ee44051a1811dc31c2df4c9d76624eacd1e9b0137c8c58202629d8385cc77e2f293464ced7b3a3ea9fecff6475ba5b89528e665431f699117d6412a121a3b1b00d7be8d910de8d254bc5541f00524525cbb90a10c3f39133ae8bf7564da3ff15629f1ed76a3804cd8b3719c3a966e554a45f7269f678466e0798ecd", 0xe6, 0xb}, {&(0x7f0000000400)="12749e69533964b506ced5bcbaa8e3dfa5aa329984c72dfb61f6db9293142aef961406ce871fcf7698c5beb0fb09131a789766bf39ba75c38e8779b689d8d231086f2781c33f34c3f194cb8f01", 0x4d, 0x1}], 0x80084, &(0x7f0000000700)=ANY=[@ANYBLOB='nobarrier,barrier,noattr2,noikeep,wsync,nolazytime,subj_role=,smackfsfloor=/}^cgroupcgroup.ppp0{],obj_user=/dev/midi#\x00,fowner<', @ANYRESDEC=r2, @ANYBLOB="3173646cefb775769afe86883b792a45002f2e2c00f1000000008800"/38]) setxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000140)=@md5={0x1, "4c04fda05929f6569a48114eee2951a9"}, 0x11, 0x1) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 05:42:37 executing program 1: clone(0x40a0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64MMAP\x00', &(0x7f0000000080)='em0\'loGPL^self\x00', 0xf, 0x2) write$selinux_load(r0, &(0x7f0000000380)=ANY=[], 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@mcast1, @in6=@ipv4={[], [], @multicast1}}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000100)=0xe8) write$selinux_attr(r1, &(0x7f0000000140)='system_u:object_r:removable_device_t:s0\x00', 0x28) 05:42:37 executing program 3: syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x10000077ff, 0x0) [ 946.720464] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 946.720472] RIP: 0033:0x459879 [ 946.720478] RSP: 002b:00007f8d7ab1fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 946.720488] RAX: ffffffffffffffda RBX: 00007f8d7ab1fc90 RCX: 0000000000459879 [ 946.720494] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 946.720499] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 946.720505] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8d7ab206d4 [ 946.720510] R13: 00000000004c77d9 R14: 00000000004dd030 R15: 0000000000000004 [ 946.744539] SELinux: policydb string length -103 does not match expected length 8 [ 946.746616] SELinux: policydb string length -103 does not match expected length 8 [ 946.901693] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 946.905469] SELinux: policydb string length -103 does not match expected length 8 [ 947.102957] syz-executor.1: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 947.139905] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 947.146684] CPU: 0 PID: 16773 Comm: syz-executor.1 Not tainted 4.14.141 #37 [ 947.153779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 947.163121] Call Trace: [ 947.165691] dump_stack+0x138/0x197 [ 947.169302] warn_alloc.cold+0x96/0x1af [ 947.173260] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 947.178089] ? lock_downgrade+0x6e0/0x6e0 [ 947.182235] ? avc_has_perm+0x2df/0x4b0 [ 947.186202] __vmalloc_node_range+0x3c3/0x6a0 [ 947.190686] ? trace_hardirqs_on+0x10/0x10 [ 947.194909] vmalloc+0x46/0x50 [ 947.198084] ? sel_write_load+0x1a0/0x1050 [ 947.202307] sel_write_load+0x1a0/0x1050 [ 947.206375] ? save_trace+0x290/0x290 [ 947.210170] ? sel_read_bool+0x240/0x240 [ 947.214229] ? trace_hardirqs_on+0x10/0x10 [ 947.218448] ? save_trace+0x290/0x290 [ 947.222241] __vfs_write+0x105/0x6b0 [ 947.225964] ? __lock_is_held+0xb6/0x140 [ 947.230014] ? sel_read_bool+0x240/0x240 [ 947.234064] ? kernel_read+0x120/0x120 [ 947.237932] ? __lock_is_held+0xb6/0x140 [ 947.241981] ? check_preemption_disabled+0x3c/0x250 [ 947.247004] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 947.252454] ? rcu_read_lock_sched_held+0x110/0x130 [ 947.257450] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 947.262197] ? __sb_start_write+0x153/0x2f0 [ 947.266508] vfs_write+0x198/0x500 [ 947.270036] SyS_write+0xfd/0x230 [ 947.273476] ? SyS_read+0x230/0x230 [ 947.277083] ? do_syscall_64+0x53/0x640 [ 947.281050] ? SyS_read+0x230/0x230 [ 947.284680] do_syscall_64+0x1e8/0x640 [ 947.288550] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 947.293479] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 947.298651] RIP: 0033:0x459879 [ 947.301822] RSP: 002b:00007f72c8612c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 947.309517] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 947.317743] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 947.324996] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 947.332244] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f72c86136d4 [ 947.339492] R13: 00000000004c9b08 R14: 00000000004e1248 R15: 00000000ffffffff [ 947.348988] warn_alloc_show_mem: 1 callbacks suppressed [ 947.348991] Mem-Info: [ 947.357227] active_anon:389029 inactive_anon:215 isolated_anon:0 [ 947.357227] active_file:8877 inactive_file:16701 isolated_file:0 [ 947.357227] unevictable:0 dirty:574 writeback:0 unstable:0 [ 947.357227] slab_reclaimable:14635 slab_unreclaimable:115107 [ 947.357227] mapped:59060 shmem:276 pagetables:15080 bounce:0 [ 947.357227] free:968211 free_pcp:287 free_cma:0 [ 947.391271] Node 0 active_anon:1556116kB inactive_anon:860kB active_file:35376kB inactive_file:66804kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:236240kB dirty:2296kB writeback:0kB shmem:1104kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1056768kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 947.419806] Node 1 active_anon:0kB inactive_anon:0kB active_file:132kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 947.445616] Node 0 DMA free:11812kB min:216kB low:268kB high:320kB active_anon:4096kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 947.472041] lowmem_reserve[]: 0 2580 2580 2580 [ 947.476635] Node 0 DMA32 free:75224kB min:36468kB low:45584kB high:54700kB active_anon:1552020kB inactive_anon:860kB active_file:35376kB inactive_file:66804kB unevictable:0kB writepending:2304kB present:3129332kB managed:2644888kB mlocked:0kB kernel_stack:24928kB pagetables:60320kB bounce:0kB free_pcp:1140kB local_pcp:696kB free_cma:0kB [ 947.506774] lowmem_reserve[]: 0 0 0 0 [ 947.510626] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 947.535917] lowmem_reserve[]: 0 0 0 0 [ 947.539734] Node 1 Normal free:3785808kB min:53420kB low:66772kB high:80124kB active_anon:0kB inactive_anon:0kB active_file:132kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 947.567461] lowmem_reserve[]: 0 0 0 0 [ 947.571314] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 2*4096kB (M) = 11812kB [ 947.584986] Node 0 DMA32: 366*4kB (UME) 211*8kB (UME) 170*16kB (UME) 50*32kB (UME) 39*64kB (UME) 18*128kB (UME) 18*256kB (UME) 70*512kB (UME) 22*1024kB (UM) 0*2048kB 0*4096kB = 75248kB [ 947.601664] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 947.612406] Node 1 Normal: 52*4kB (UE) 330*8kB (UE) 273*16kB (U) 59*32kB (UE) 13*64kB (UE) 9*128kB (UME) 5*256kB (UM) 4*512kB (UE) 3*1024kB (UME) 4*2048kB (ME) 918*4096kB (M) = 3785808kB [ 947.629280] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 947.638151] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 947.646751] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 947.655614] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 947.664254] 25859 total pagecache pages [ 947.668219] 0 pages in swap cache [ 947.671690] Swap cache stats: add 0, delete 0, find 0/0 [ 947.677041] Free swap = 0kB [ 947.680116] Total swap = 0kB [ 947.683132] 1965979 pages RAM [ 947.686229] 0 pages HighMem/MovableOnly [ 947.690237] 333228 pages reserved [ 947.693676] 0 pages cma reserved 05:42:37 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[], 0x0) 05:42:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000540)=ANY=[@ANYBLOB="2bbab32a797cae6a606dd3cfa218e06b055ad0d2a354eae95104169afe82c5ed5b6ed819a1adce52e139b9aede8cec1783fd9cd6b3b5468185356f80efd1253ebcc991b71d5dc7e8261c4664e0991fc5ea29ea6e3bc62dc29d5100f96ecff934b7091f0d148eb488c8008398", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0x4}}, 0x0) recvfrom(r0, &(0x7f0000000000)=""/48, 0x30, 0x40000103, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x3, @remote}}, 0x80) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000001780)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x8b2024}, 0xc, &(0x7f0000001740)={&(0x7f0000001a80)=@delsa={0x108c, 0x11, 0x8, 0x70bd2d, 0x25dfdbfe, {@in6=@mcast2, 0x4d3, 0x2, 0x2b}, [@output_mark={0x8, 0x1d, 0x9}, @coaddr={0x14, 0xe, @in6=@local}, @algo_auth={0x1048, 0x1, {{'sha224-ssse3\x00'}, 0x8000, "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"}}]}, 0x108c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f00000016c0)={0x5, &(0x7f0000000100)=""/125, &(0x7f00000004c0)=[{0x3c60, 0x74, 0x1, &(0x7f0000000180)=""/116}, {0x5, 0x1000, 0x20, &(0x7f00000006c0)=""/4096}, {0xdedd, 0x4b, 0x8000, &(0x7f0000000200)=""/75}, {0x79, 0xd4, 0x0, &(0x7f00000002c0)=""/212}, {0x6, 0xd8, 0x6, &(0x7f00000003c0)=""/216}]}) 05:42:37 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 05:42:37 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x101000, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x2, 0x3}, 0x10) 05:42:37 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) 05:42:37 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={r1, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xfffffffffffffecc) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) [ 947.698412] SELinux: security policydb version 18 (MLS) not backwards compatible 05:42:37 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) lgetxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000240)=@known='trusted.overlay.impure\x00', &(0x7f0000000140)=""/134, 0x86) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) 05:42:37 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000080000004, 0x400) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0xff, 0x101000) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) 05:42:37 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r0 = shmget(0x3, 0x3000, 0x100, &(0x7f0000a7d000/0x3000)=nil) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x800, 0x400000) write$P9_RRENAME(r1, &(0x7f0000000040)={0x7, 0x15, 0x1}, 0x7) shmat(r0, &(0x7f0000172000/0x4000)=nil, 0x6000) 05:42:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = open(&(0x7f0000000140)='./file0\x00', 0x4000, 0x40) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80080000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r2, 0x100, 0x70bd28, 0x25dfdbfe, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x100, 0xfffffffffffffffc, 0x100, 0x57}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x200080c0) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) [ 947.844759] syz-executor.2: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 947.887903] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 947.905773] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 947.918991] CPU: 1 PID: 16791 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 947.926198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 947.935552] Call Trace: [ 947.938144] dump_stack+0x138/0x197 [ 947.941775] warn_alloc.cold+0x96/0x1af [ 947.941788] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 947.941803] ? lock_downgrade+0x6e0/0x6e0 [ 947.941817] ? avc_has_perm+0x2df/0x4b0 [ 947.950610] __vmalloc_node_range+0x3c3/0x6a0 [ 947.950626] ? trace_hardirqs_on+0x10/0x10 [ 947.950641] vmalloc+0x46/0x50 [ 947.950650] ? sel_write_load+0x1a0/0x1050 [ 947.950659] sel_write_load+0x1a0/0x1050 [ 947.970727] ? save_trace+0x290/0x290 [ 947.982780] ? sel_read_bool+0x240/0x240 05:42:38 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x9, 0x2, 0x2, "c45573dd071f7a2abe85c9b276b25cbc667296a1fb88a29ae3d4c676c3249dbd", 0x20323159}) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0xffff, 0x400001) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000080)={{0x2, 0x4e21, @remote}, {0x1, @broadcast}, 0x4, {0x2, 0x4e24, @multicast2}, 'teql0\x00'}) 05:42:38 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x13000, 0x2, &(0x7f0000fa0000/0x13000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xe5b9e57c0908acb1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x100, 0x0) renameat2(r1, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000080)='./file0\x00', 0x3) [ 947.982793] ? trace_hardirqs_on+0x10/0x10 [ 947.991060] ? save_trace+0x290/0x290 [ 947.994866] __vfs_write+0x105/0x6b0 [ 947.998581] ? __lock_is_held+0xb6/0x140 [ 948.002645] ? sel_read_bool+0x240/0x240 [ 948.006710] ? kernel_read+0x120/0x120 [ 948.010597] ? __lock_is_held+0xb6/0x140 [ 948.014663] ? check_preemption_disabled+0x3c/0x250 [ 948.019684] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 948.025133] ? rcu_read_lock_sched_held+0x110/0x130 [ 948.030152] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 948.034908] ? __sb_start_write+0x153/0x2f0 [ 948.039230] vfs_write+0x198/0x500 [ 948.042768] SyS_write+0xfd/0x230 [ 948.042781] ? SyS_read+0x230/0x230 [ 948.042792] ? do_syscall_64+0x53/0x640 [ 948.049858] ? SyS_read+0x230/0x230 [ 948.049874] do_syscall_64+0x1e8/0x640 [ 948.061311] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 948.066157] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 948.071344] RIP: 0033:0x459879 [ 948.074530] RSP: 002b:00007f056162ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 948.082236] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 948.082242] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 948.082247] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 948.082252] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f056162b6d4 [ 948.082259] R13: 00000000004c9b08 R14: 00000000004e1248 R15: 00000000ffffffff [ 948.117851] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 05:42:38 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) 05:42:38 executing program 0: getuid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000700)={{{@in=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000500)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000800)={{{@in6=@initdev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000900)=0xe8) setreuid(r0, r1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) fstat(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$sndpcmc(&(0x7f0000000480)='/dev/snd/pcmC#D#c\x00', 0x8, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f0000000400)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000440)=0xe8) ioctl$BLKBSZSET(r5, 0x40081271, &(0x7f00000009c0)=0x7) syz_mount_image$iso9660(&(0x7f0000000080)='iso9660\x00', &(0x7f00000000c0)='./file0\x00', 0x5, 0x1, &(0x7f0000000180)=[{&(0x7f0000000140)="2e6e2f9a3adf4479f0ddc2dd4b2976dd7a749ca4e811e2dc22b38d4dea87c9d457703799b59a39e978e438102d0299cc1f9d", 0x32, 0x3}], 0x1000, &(0x7f0000000d00)=ANY=[@ANYBLOB="6e6f6a6f6c6965742c636865636b3d72656c617865642c636865636b3d72656c617865642c756e686964652c6769643de26c294080b94af66cb5923e75c6904455420bb31a09e8102512b3fb92f14eaf8f5085055a68e82af437c0b657314dbfd78380055fa96c5893e9f668fe10558449b62a0e0a1c4e4a", @ANYRESHEX=r3, @ANYBLOB=',nocompress,iocharset=cp852,uid=', @ANYRESHEX=r4, @ANYBLOB=',dont_hash,fsmagic=0x0000000000000003,uid<', @ANYRESDEC=r6, @ANYBLOB="f949eb8317341aa6a9cb06c08cac842a721c660cf11213b921ddc20a7d0a9d6d97b1e3c1407ba7e0383d1f3c06cbb36030ed291c19eb49ed9357eb3d56460b9d0439bae98e11ea03e7e6081af25de0ee21cd665aec990f0197c29a6d77cb6bdad6fbba10605c06ead370b4dd00c382a9e755", @ANYRESDEC=r7, @ANYBLOB="07f8b97f3159b404e6be39837c8a4d009e0fba230de66cc38d7c6e158894ed48d00165db5c865fc8ff2174cc967332d7f662eb87dac85a0859f3680df2637903548d83e3b6bd5ff6e129447f9870e57e0d0b0f3b59912a8bd63cd1d6b96161878167576fb0917eb58021411ffa8eda6c102286fd2e05f1244396e91b1822b56be8afb5e2faaf7880b99f2a763c8955103154897aae6370dac0f7d124aba0115067a125d2507e3d95170eda9f918458b4e9e1b4c17c75defff48dfec5eb3d5d0d06decc6bfb68a75284fef0d6e96f4b8ef61505ba1fed74839d291de25f4bf5c921"]) fchdir(r2) getsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f0000000940), &(0x7f0000000980)=0x4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) fcntl$getown(r2, 0x9) getsockopt$nfc_llcp(r5, 0x118, 0x1, &(0x7f0000000680)=""/74, 0x4a) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 05:42:38 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0xa, 0x10000) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000040)={0x0, @motion_det}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x400, 0x40) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x3, 0x1, [0x2]}, &(0x7f0000000180)=0xa) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r2, 0x101}, &(0x7f0000000200)=0x8) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) 05:42:38 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) connect$bt_sco(r0, &(0x7f0000000080)={0x1f, {0x9, 0x200, 0x4, 0x1, 0x0, 0x4}}, 0x8) umount2(&(0x7f0000000540)='./file0\x00', 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 05:42:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x1, 0x2) accept4$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14, 0x80000) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 948.138157] SELinux: policydb string length -103 does not match expected length 8 [ 948.175049] sel_write_load: 28 callbacks suppressed [ 948.175053] SELinux: failed to load policy 05:42:38 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="8cff7cf999ffffff5345204c696e75781200000001d8670006000400070000003c9f030003000000c00e6e1d77cbaa2037e26d53a2c7e1d702d2856097c90bce41608880484f5d5b97b61d398be5ebaae568d78ff322042bcf465b41a14cf1a904d0dc47f74d49e710f43a33589648348d81a7e0043e9d64ef0f91e8e6cb5d8da63973d9e52884a85ea8b3547993fd61788ab1d472e1f71893837e7280866cbc5dd62040d57bb80e5ee27f4b9d52fd2551801da52ebd21a696745d81306088180aed7e"], 0x28) syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x401, 0x80240) 05:42:38 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x401, 0x4, 0xb2, 0x7f}) fcntl$setflags(r0, 0x2, 0x1) [ 948.225663] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 948.231907] SELinux: policydb string length -103 does not match expected length 8 [ 948.247232] SELinux: failed to load policy 05:42:38 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 948.294347] SELinux: security policydb version 18 (MLS) not backwards compatible 05:42:38 executing program 0: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000280)=0x2) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="8cff7cf999fffff25345204c69ee75d1f4789207000000d867000600040000030000000000000000"], 0x28) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f0000000200)=""/98) r3 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x80000) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000100)={0xffff, 0x9, 0x1, 0x0, 0x6, 0x0, 0x1, 0x7, 0x1, 0x2, 0x81, 0x7, 0x0, 0x5, 0xffffffffffffffff, 0x2, 0x1000, 0x3880, 0xcc}) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) 05:42:38 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000000)) 05:42:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xc4}}, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x4) [ 948.336310] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 948.343747] SELinux: failed to load policy [ 948.361247] SELinux: policydb string length -103 does not match expected length 8 05:42:38 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000200)={0x7f, 0xa, 0x0, [{0x401, 0x100000000, 0x25e, 0x4, 0x6, 0x9, 0x100000000}, {0xbca, 0x5, 0x101, 0x7, 0xffffffff, 0x3f, 0x4}, {0x5, 0x7, 0x58972d24, 0x16, 0x0, 0x87, 0x268a}, {0xfffffffffffffb53, 0x1000, 0x0, 0x9, 0x80000001, 0x0, 0x8}, {0x0, 0x80000001, 0x80000000, 0x31, 0x9, 0x6, 0x2}, {0x0, 0x2, 0x9, 0x7f, 0x20, 0x7, 0x401}, {0x3ff, 0x6, 0x4, 0x98, 0x0, 0x2, 0x20000000000000}, {0x0, 0xb60, 0x100, 0x10000, 0x5, 0x8, 0x468}, {0x0, 0x5, 0x7, 0x0, 0x100, 0x7fffffff, 0x6deb}, {0x8, 0x7, 0x20, 0x54e1, 0x9ab, 0x4, 0x5}]}) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) [ 948.411402] SELinux: failed to load policy [ 948.429707] SELinux: security policydb version 18 (MLS) not backwards compatible [ 948.454446] SELinux: failed to load policy [ 948.461688] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 948.477395] SELinux: policydb string length -218103911 does not match expected length 8 [ 948.500474] SELinux: failed to load policy 05:42:38 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x10201, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) 05:42:38 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x80077ff, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000001540)='/dev/amidi#\x00', 0x8, 0x264081) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000140)=0x0) process_vm_readv(r2, &(0x7f0000000280)=[{&(0x7f0000000180)=""/220, 0xdc}], 0x1, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/118, 0x76}, {&(0x7f0000000340)=""/233, 0xe9}, {&(0x7f0000000440)=""/143, 0x8f}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x4, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x88100, 0x46) ioctl$BLKIOOPT(r3, 0x1279, &(0x7f0000000080)) write$P9_RAUTH(r3, &(0x7f0000001580)={0x14, 0x67, 0x1, {0x4d, 0x3}}, 0x14) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f00000000c0)=ANY=[@ANYBLOB="05003e00e33a04f57e22cf8a448c3f5a1e9e39227496d988321749fc31b78bf826a3baac6042ee4ee77cbf0d73b1581234ebba8bba26e7780000000099987cc7b54b"]) 05:42:38 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ncpfs\x00', 0x1, &(0x7f0000000180)='./cgroup\x00') fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 05:42:38 executing program 0: r0 = accept(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x80) mmap(&(0x7f0000e40000/0x3000)=nil, 0x3000, 0xfe62840b1f127c9c, 0x5c831, r0, 0xdffffeffffff7ffd) shmat(0x0, &(0x7f0000172000/0x4000)=nil, 0x6000) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001ac0)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001b40)={{{@in=@broadcast, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@initdev}}, &(0x7f0000001c40)=0xe8) getpeername(r0, &(0x7f0000001c80)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000001d00)=0x80) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001d40)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000001e40)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001e80)={'vcan0\x00', 0x0}) getpeername$packet(r0, &(0x7f00000021c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002200)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', r3}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000002280)={0x0, @broadcast}, &(0x7f00000022c0)=0xc) accept4(r0, &(0x7f0000002300)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000002380)=0x80, 0x800) accept4$packet(r0, &(0x7f00000023c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002400)=0x14, 0x800) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000003840)={@remote, @dev, 0x0}, &(0x7f0000003880)=0xc) getsockname(r0, &(0x7f0000003900)=@can={0x1d, 0x0}, &(0x7f0000003980)=0x80) getpeername$packet(r0, &(0x7f00000039c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000003a00)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003a40)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003b00)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003b40)={'ip6_vti0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000003b80)={{{@in6=@local, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000003c80)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000003cc0)={{{@in, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000003dc0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000003e00)={{{@in, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000003f00)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000003f40)={{{@in=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000004040)=0xe8) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000004880)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000004840)={&(0x7f0000000180)=ANY=[@ANYBLOB="b4070000", @ANYRES16=r1, @ANYBLOB="200a2bbd7000fbdbdf250000000008000100", @ANYRES32=r2, @ANYBLOB="7c00020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004000900000008000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="3801020038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000800000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004002d66ffff40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e00000008000400ffffff7f08000600", @ANYRES32=r5, @ANYBLOB="44000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000001400040009003e07ff7f000000000a5d08000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008000400d2f5ffff08000600", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="7c00020038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000008000300030000000800040000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000104000008000600", @ANYRES32=r8, @ANYBLOB="651f41398ff17f2cfd07cec8c7d69d3ce775f134e5005addd9c6c8a408187b4dd9e9acbeb469a8473fa09d40310790e15eea46214dcd05252342fe0a48477336c272357bb788aa5bc1fc485dc0102f29f861d758efa70e23a836244b971d44aa82c32aa6940c54365bfadce9640513d7b6", @ANYRES32=r9, @ANYBLOB="3c00020038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400c901000008000100", @ANYRES32=r10, @ANYBLOB="5402020040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000600000008000600", @ANYRES32=r11, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r12, @ANYBLOB="5c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000002c0004000600023f050000000500038106000000080004040600000032101fe4e6530000040101013f00000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400c1ffffff40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000200000008000600", @ANYRES32=r13, @ANYBLOB="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", @ANYRES32=r14, @ANYBLOB="380102003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r16, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000000c00040072616e646f6d000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000400000008000600", @ANYRES32=r17, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000500000008000600", @ANYRES32=r18, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="2c01020038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400ff00000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r20, @ANYBLOB="080007000000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462616c616e63650038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004003f00000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000500000008000100", @ANYRES32=r21, @ANYBLOB="3c00020038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400a2000000"], 0x7b4}, 0x1, 0x0, 0x0, 0x840}, 0x4000801) [ 948.508802] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 948.513702] SELinux: policydb string length -103 does not match expected length 8 05:42:38 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7f, 0x80201) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x0, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x1) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) [ 948.564459] SELinux: failed to load policy 05:42:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ppoll(&(0x7f0000000000)=[{r0, 0x8}, {r0, 0x10}, {r0, 0x2001}], 0x3, &(0x7f0000000040), &(0x7f0000000080)={0x6}, 0x8) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[]}, 0x1, 0x0, 0x0, 0x2}, 0x0) 05:42:38 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/23) [ 948.628711] SELinux: security policydb version 18 (MLS) not backwards compatible 05:42:38 executing program 0 (fault-call:3 fault-nth:0): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x29000400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 05:42:38 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='gid_map\x00') getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="402f00005c69241f8d663660c134b416a21fa70767215f25b12df7fd6641bef1e8523582b2d4c8b24e9666610107ff01a3f32d50a0019971e3babd01368b452c55ce8cb2"], &(0x7f00000000c0)=0x48) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000001c0)={r2, 0x1}, &(0x7f0000000200)=0x8) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) write$FUSE_GETXATTR(r1, &(0x7f0000000240)={0x18, 0x0, 0x3, {0x10000}}, 0x18) umount2(&(0x7f0000000540)='./file0\x00', 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 948.697648] SELinux: failed to load policy 05:42:38 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x6, 0x1050c0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) 05:42:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0xd542671f5a3192c8, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a0000808d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) [ 948.720940] SELinux: security policydb version 18 (MLS) not backwards compatible [ 948.728667] SELinux: failed to load policy [ 948.746101] FAULT_INJECTION: forcing a failure. [ 948.746101] name failslab, interval 1, probability 0, space 0, times 0 [ 948.757016] SELinux: policydb string length -103 does not match expected length 8 [ 948.777436] SELinux: failed to load policy [ 948.807395] CPU: 0 PID: 16921 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 948.814534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 948.817528] SELinux: security policydb version 18 (MLS) not backwards compatible [ 948.823884] Call Trace: [ 948.823904] dump_stack+0x138/0x197 [ 948.823925] should_fail.cold+0x10f/0x159 [ 948.823941] should_failslab+0xdb/0x130 [ 948.823961] kmem_cache_alloc_node+0x287/0x780 [ 948.823976] ? get_pid_task+0x98/0x140 [ 948.844736] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 948.845866] copy_process.part.0+0x17d5/0x6a00 [ 948.855684] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 948.862858] ? save_trace+0x290/0x290 [ 948.862872] ? proc_fail_nth_write+0x7d/0x180 [ 948.862882] ? proc_cwd_link+0x1b0/0x1b0 [ 948.884274] ? __f_unlock_pos+0x19/0x20 [ 948.892287] ? find_held_lock+0x35/0x130 [ 948.892304] ? __cleanup_sighand+0x50/0x50 [ 948.892314] ? lock_downgrade+0x6e0/0x6e0 [ 948.892328] _do_fork+0x19e/0xce0 [ 948.892342] ? fork_idle+0x280/0x280 [ 948.892356] ? fput+0xd4/0x150 [ 948.892366] ? SyS_write+0x15e/0x230 [ 948.892380] SyS_clone+0x37/0x50 [ 948.892390] ? sys_vfork+0x30/0x30 [ 948.925798] do_syscall_64+0x1e8/0x640 [ 948.929676] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 948.934503] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 948.939673] RIP: 0033:0x459879 [ 948.942878] RSP: 002b:00007f5d58de2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 948.950573] RAX: ffffffffffffffda RBX: 00007f5d58de2c90 RCX: 0000000000459879 05:42:39 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x6, 0x3, [0xffffffff, 0x1, 0x1574c00]}, &(0x7f0000000140)=0xe) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x9}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000200)={r2, 0x6, 0x7f00320a, 0x632b, 0x400, 0x7f, 0x80000000, 0x10000, {r3, @in={{0x2, 0x4e23, @empty}}, 0x73, 0xff, 0x4, 0x8, 0x2}}, &(0x7f00000002c0)=0xb0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 05:42:39 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)={0xb, 0x3, 0x2, {0x1, 0x8, 0x9, 0x8a}}) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) 05:42:39 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x0) 05:42:39 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4b7580e9a4328093) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x100) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="8cff7cf998ffff0dd8670006000400070000003c9f03000300"/40], 0x28) 05:42:39 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0xffff, 0x400000) accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @local, @empty}, &(0x7f00000003c0)=0xc) sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xc0100080}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@newneigh={0x4c, 0x1c, 0x0, 0x70bd29, 0x25dfdbff, {0xa, 0x0, 0x0, r2, 0x2, 0x80, 0x9}, [@NDA_LINK_NETNSID={0x8, 0xa, 0xb7}, @NDA_MASTER={0x8, 0x9, 0x9}, @NDA_PORT={0x8, 0x6, 0x4e21}, @NDA_MASTER={0x8, 0x9, 0x1}, @NDA_SRC_VNI={0x8, 0xb, 0x7}, @NDA_IFINDEX={0x8, 0x8, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0x4}}, 0x0) [ 948.957829] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000029000400 [ 948.965076] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 948.972334] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d58de36d4 [ 948.979588] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 05:42:39 executing program 0 (fault-call:3 fault-nth:1): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x29000400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 05:42:39 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0xfffffffffffffe25, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[]}}, 0x2) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') [ 949.098330] SELinux: policydb string length 234880920 does not match expected length 8 05:42:39 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 05:42:39 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x47803, 0x81) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000040)={{0x2, 0x1}, 'port0\x00', 0x1, 0xc81371000001cfbe, 0x8, 0x10000000000000, 0x3, 0x4, 0x4d78, 0x0, 0x4, 0x6}) 05:42:39 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x90000, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x3) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r1, 0x80044326, &(0x7f00000001c0)=0x7) clone(0x8965e9b6c2581164, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.events\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000000c0)=0x7ff, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r1, &(0x7f0000000240)="829d9e26237632531133742760d9a676c94f6894c331f96e198579ff06107d6f1925ee00bef782da4951b681b94780a1d4b0b70ab47b982e993d22772925870ebc4b42619c2872cebcb534b25e9ae2d82bcab1df94d82d58223102d528e973077db1e24426ab693fa5fdb9bc6d2f49d95e091006e391f384efb19df0534559aa6faeaa0964348b38557901009ad98fad8991e9cddfcc68abb5b76532299379"}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x100000000004e23, @dev={0xac, 0x14, 0x14, 0xd}}, 0xfffffffffffffdfd) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000140), 0x1) [ 949.147481] FAULT_INJECTION: forcing a failure. [ 949.147481] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 949.160134] syz-executor.2: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 949.175484] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 949.189158] CPU: 0 PID: 16965 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 949.196812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 949.206169] Call Trace: [ 949.208762] dump_stack+0x138/0x197 [ 949.212398] should_fail.cold+0x10f/0x159 [ 949.212412] ? __might_sleep+0x93/0xb0 [ 949.220443] __alloc_pages_nodemask+0x1d6/0x7a0 [ 949.220457] ? __alloc_pages_slowpath+0x2930/0x2930 [ 949.220466] ? rcu_read_lock_sched_held+0x110/0x130 [ 949.220486] copy_process.part.0+0x26a/0x6a00 [ 949.220503] ? save_trace+0x290/0x290 [ 949.220515] ? proc_fail_nth_write+0x7d/0x180 [ 949.220522] ? proc_cwd_link+0x1b0/0x1b0 [ 949.220533] ? __f_unlock_pos+0x19/0x20 [ 949.239676] ? find_held_lock+0x35/0x130 [ 949.239696] ? __cleanup_sighand+0x50/0x50 [ 949.239707] ? lock_downgrade+0x6e0/0x6e0 [ 949.239724] _do_fork+0x19e/0xce0 [ 949.256003] ? fork_idle+0x280/0x280 [ 949.275537] ? fput+0xd4/0x150 [ 949.278730] ? SyS_write+0x15e/0x230 [ 949.282449] SyS_clone+0x37/0x50 [ 949.285815] ? sys_vfork+0x30/0x30 [ 949.289362] do_syscall_64+0x1e8/0x640 [ 949.293247] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 949.298704] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 949.303891] RIP: 0033:0x459879 [ 949.307084] RSP: 002b:00007f5d58de2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 949.315785] RAX: ffffffffffffffda RBX: 00007f5d58de2c90 RCX: 0000000000459879 [ 949.323050] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000029000400 [ 949.323056] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 949.323062] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d58de36d4 [ 949.323068] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 [ 949.327006] CPU: 0 PID: 16956 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 949.337705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 949.337710] Call Trace: [ 949.337729] dump_stack+0x138/0x197 [ 949.337747] warn_alloc.cold+0x96/0x1af [ 949.337757] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 949.368714] ? lock_downgrade+0x6e0/0x6e0 [ 949.368729] ? avc_has_perm+0x2df/0x4b0 [ 949.378883] __vmalloc_node_range+0x3c3/0x6a0 05:42:39 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000680)='/dev/snd/pcmC#D#p\x00', 0x0, 0x80000) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f00000006c0)={@bcast, @null, @bcast, 0x0, 0x27f8, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xfffffffffffffffd, 0xaaaaaaaaaaaac0a, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'U-', 0x100000000}, 0x28, 0x2) umount2(&(0x7f0000000180)='./file0\x00', 0x4) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000080)) [ 949.378906] vmalloc+0x46/0x50 [ 949.378916] ? sel_write_load+0x1a0/0x1050 [ 949.378924] sel_write_load+0x1a0/0x1050 [ 949.407791] ? save_trace+0x290/0x290 [ 949.411602] ? sel_read_bool+0x240/0x240 [ 949.415673] ? trace_hardirqs_on+0x10/0x10 [ 949.419918] ? save_trace+0x290/0x290 [ 949.423725] __vfs_write+0x105/0x6b0 [ 949.427435] ? __lock_is_held+0xb6/0x140 [ 949.431492] ? sel_read_bool+0x240/0x240 [ 949.435555] ? kernel_read+0x120/0x120 [ 949.439449] ? __lock_is_held+0xb6/0x140 [ 949.443520] ? check_preemption_disabled+0x3c/0x250 [ 949.448546] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 949.454003] ? rcu_read_lock_sched_held+0x110/0x130 [ 949.459025] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 949.463781] ? __sb_start_write+0x153/0x2f0 [ 949.468103] vfs_write+0x198/0x500 [ 949.471641] SyS_write+0xfd/0x230 [ 949.471652] ? SyS_read+0x230/0x230 [ 949.471662] ? do_syscall_64+0x53/0x640 [ 949.471674] ? SyS_read+0x230/0x230 [ 949.478734] do_syscall_64+0x1e8/0x640 [ 949.478744] ? trace_hardirqs_off_thunk+0x1a/0x1c 05:42:39 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16, 0x5}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 05:42:39 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$radio(&(0x7f0000000380)='/dev/radio#\x00', 0x1, 0x2) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000003c0), &(0x7f0000000400)=0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x1d, 0x800) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x80000001}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000200)=ANY=[@ANYRES32=r3, @ANYBLOB="48000000cbb5239094b31a88652dece29b1369b03ad776756c4a337728015cac1ba2d95e35668efe29214cfbbcd03ae9646d6c5fec07a9ea8388c1b9fa87a9bb8eee11c9792479dfa56d1d54"], &(0x7f00000002c0)=0x50) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000300)=0x10001, &(0x7f0000000340)=0x2) dup3(r2, r2, 0x80000) [ 949.478762] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 949.478771] RIP: 0033:0x459879 [ 949.478778] RSP: 002b:00007f056162ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 949.511093] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 949.518358] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 949.525625] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 949.532889] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f056162b6d4 [ 949.532895] R13: 00000000004c9b08 R14: 00000000004e1248 R15: 00000000ffffffff 05:42:39 executing program 0 (fault-call:3 fault-nth:2): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x29000400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 949.550828] IPVS: ftp: loaded support on port[0] = 21 [ 949.589685] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 949.613761] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 949.623254] warn_alloc_show_mem: 1 callbacks suppressed [ 949.623257] Mem-Info: [ 949.639894] active_anon:389448 inactive_anon:216 isolated_anon:0 [ 949.639894] active_file:8892 inactive_file:16723 isolated_file:0 [ 949.639894] unevictable:0 dirty:166 writeback:0 unstable:0 [ 949.639894] slab_reclaimable:14632 slab_unreclaimable:115212 [ 949.639894] mapped:59089 shmem:283 pagetables:15452 bounce:0 [ 949.639894] free:966944 free_pcp:292 free_cma:0 [ 949.680477] FAULT_INJECTION: forcing a failure. [ 949.680477] name failslab, interval 1, probability 0, space 0, times 0 [ 949.700794] CPU: 0 PID: 17001 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 949.707922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 949.717275] Call Trace: [ 949.719146] Node 0 active_anon:1557692kB inactive_anon:864kB active_file:35436kB inactive_file:66892kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:236356kB dirty:664kB writeback:0kB shmem:1132kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1056768kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 949.719880] dump_stack+0x138/0x197 [ 949.719901] should_fail.cold+0x10f/0x159 [ 949.719917] should_failslab+0xdb/0x130 [ 949.753010] Node 1 active_anon:0kB inactive_anon:0kB active_file:132kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 949.756240] kmem_cache_alloc+0x2d7/0x780 [ 949.756252] ? creds_are_invalid+0x48/0x110 [ 949.756262] ? __validate_process_creds+0x14c/0x200 [ 949.756274] prepare_creds+0x3e/0x380 [ 949.761068] Node 0 [ 949.785977] copy_creds+0x7b/0x4f0 [ 949.785989] ? lockdep_init_map+0x9/0x10 [ 949.786004] copy_process.part.0+0x868/0x6a00 [ 949.786018] ? save_trace+0x290/0x290 [ 949.786028] ? proc_fail_nth_write+0x7d/0x180 [ 949.786036] ? proc_cwd_link+0x1b0/0x1b0 [ 949.786045] ? __f_unlock_pos+0x19/0x20 [ 949.786064] ? __cleanup_sighand+0x50/0x50 [ 949.786073] ? lock_downgrade+0x6e0/0x6e0 [ 949.786089] _do_fork+0x19e/0xce0 [ 949.786101] ? fork_idle+0x280/0x280 [ 949.794206] DMA free:11812kB min:216kB low:268kB high:320kB active_anon:4096kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 949.794541] ? fput+0xd4/0x150 [ 949.799653] lowmem_reserve[]: [ 949.803309] ? SyS_write+0x15e/0x230 [ 949.803324] SyS_clone+0x37/0x50 [ 949.803333] ? sys_vfork+0x30/0x30 [ 949.803347] do_syscall_64+0x1e8/0x640 [ 949.803355] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 949.803372] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 949.803380] RIP: 0033:0x459879 [ 949.803384] RSP: 002b:00007f5d58dc1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 949.805696] 0 [ 949.809127] RAX: ffffffffffffffda RBX: 00007f5d58dc1c90 RCX: 0000000000459879 [ 949.809133] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000029000400 [ 949.809139] RBP: 000000000075bfc8 R08: ffffffffffffffff R09: 0000000000000000 [ 949.809145] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d58dc26d4 [ 949.809151] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 [ 949.838946] 2580 [ 949.850260] 2580 2580 [ 949.962041] Node 0 DMA32 free:70424kB min:36468kB low:45584kB high:54700kB active_anon:1553424kB inactive_anon:876kB active_file:35436kB inactive_file:66908kB unevictable:0kB writepending:692kB present:3129332kB managed:2644888kB mlocked:0kB kernel_stack:25536kB pagetables:61596kB bounce:0kB free_pcp:1044kB local_pcp:408kB free_cma:0kB [ 949.992141] lowmem_reserve[]: 0 0 0 0 [ 949.996098] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 950.026598] lowmem_reserve[]: 0 0 0 0 [ 950.031209] Node 1 Normal free:3785808kB min:53420kB low:66772kB high:80124kB active_anon:0kB inactive_anon:0kB active_file:132kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 950.063879] lowmem_reserve[]: 0 0 0 0 [ 950.069003] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 2*4096kB (M) = 11812kB [ 950.091023] Node 0 DMA32: 285*4kB (UME) 206*8kB (UME) 202*16kB (UME) 51*32kB (UME) [ 950.091075] 27*64kB (UME) 19*128kB (UME) 18*256kB (UME) 63*512kB (UME) 22*1024kB (UM) 0*2048kB 0*4096kB = 71204kB [ 950.114390] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 950.125187] Node 1 Normal: 52*4kB (UE) 330*8kB (UE) 273*16kB (U) 59*32kB (UE) 13*64kB (UE) 9*128kB (UME) 5*256kB (UM) 4*512kB (UE) 3*1024kB (UME) 4*2048kB (ME) 918*4096kB (M) = 3785808kB [ 950.146065] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 950.154949] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 950.154955] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 950.154962] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 950.154966] 25914 total pagecache pages [ 950.154978] 0 pages in swap cache [ 950.154983] Swap cache stats: add 0, delete 0, find 0/0 [ 950.154986] Free swap = 0kB [ 950.154989] Total swap = 0kB [ 950.154994] 1965979 pages RAM [ 950.154998] 0 pages HighMem/MovableOnly [ 950.155002] 333228 pages reserved [ 950.155005] 0 pages cma reserved [ 950.157210] SELinux: policydb string length -103 does not match expected length 8 [ 950.180684] syz-executor.2: [ 950.185179] vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 950.185196] syz-executor.2 cpuset=syz2 [ 950.198179] mems_allowed=0-1 05:42:40 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x9, @mcast1, 0x795}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={r2, 0x2}, 0x8) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) 05:42:40 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0xdf}], 0x100000000, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 05:42:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x100, 0x80) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000180)={0x2, 0x81}, 0x2) 05:42:40 executing program 0 (fault-call:3 fault-nth:3): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x29000400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 950.203357] CPU: 0 PID: 17004 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 950.210798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 950.210803] Call Trace: [ 950.210824] dump_stack+0x138/0x197 [ 950.210838] warn_alloc.cold+0x96/0x1af [ 950.210847] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 950.210859] ? lock_downgrade+0x6e0/0x6e0 [ 950.210874] ? avc_has_perm+0x2df/0x4b0 [ 950.221918] __vmalloc_node_range+0x3c3/0x6a0 [ 950.221934] vmalloc+0x46/0x50 [ 950.221942] ? sel_write_load+0x1a0/0x1050 [ 950.221950] sel_write_load+0x1a0/0x1050 05:42:40 executing program 3: syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7, 0x10041) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x8001, 0xc00) r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x401, 0x40000) syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xfffffffffffeffff, 0x40000) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x8000, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x0, 0x0) syz_open_dev$vivid(&(0x7f00000001c0)='/dev/video#\x00', 0x2, 0x2) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_stats\x00', 0x0, 0x0) fallocate(r0, 0x41, 0x6, 0x5) syz_open_dev$midi(&(0x7f0000000240)='/dev/midi#\x00', 0x2, 0x200) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm_plock\x00', 0x10040, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x400, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm_plock\x00', 0x1c1000, 0x0) ioctl$VIDIOC_G_FBUF(r2, 0x8030560a, 0x0) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000300)=0x7, 0x4) 05:42:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvfrom$rxrpc(r0, &(0x7f0000000140)=""/198, 0xc6, 0x2, &(0x7f0000000240)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x7, @remote, 0x8001}}, 0x24) sched_yield() r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x1, 0x0) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x7fffffff) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="c40000001900250a0000000000000000070000000000000000000000000001aafe800000000000000000000000db226bc822d38a360000000a00008000000000", @ANYRES32=0x0, @ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRES64=r0, @ANYRES64=r0, @ANYRES16=r0, @ANYRESHEX=0x0, @ANYRES16=r0, @ANYRES16=r0, @ANYRES32=0x0], @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0x4}}, 0x0) [ 950.233587] ? save_trace+0x290/0x290 [ 950.233601] ? sel_read_bool+0x240/0x240 [ 950.233612] ? trace_hardirqs_on+0x10/0x10 [ 950.233623] ? save_trace+0x290/0x290 [ 950.240577] __vfs_write+0x105/0x6b0 [ 950.240586] ? __lock_is_held+0xb6/0x140 [ 950.240593] ? sel_read_bool+0x240/0x240 [ 950.240601] ? kernel_read+0x120/0x120 [ 950.240608] ? __lock_is_held+0xb6/0x140 [ 950.240618] ? check_preemption_disabled+0x3c/0x250 [ 950.240631] ? rcu_lockdep_current_cpu_online+0xf2/0x140 05:42:40 executing program 5: lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) fcntl$dupfd(0xffffffffffffffff, 0x1, 0xffffffffffffffff) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x200, 0x0) [ 950.240642] ? rcu_read_lock_sched_held+0x110/0x130 [ 950.240651] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 950.240658] ? __sb_start_write+0x153/0x2f0 [ 950.240668] vfs_write+0x198/0x500 [ 950.240678] SyS_write+0xfd/0x230 [ 950.240687] ? SyS_read+0x230/0x230 [ 950.240695] ? do_syscall_64+0x53/0x640 [ 950.240703] ? SyS_read+0x230/0x230 [ 950.240712] do_syscall_64+0x1e8/0x640 [ 950.240719] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 950.240734] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 950.240741] RIP: 0033:0x459879 [ 950.240746] RSP: 002b:00007f0561609c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 950.240756] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 950.240761] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 950.240766] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 950.240772] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f056160a6d4 [ 950.240777] R13: 00000000004c9b08 R14: 00000000004e1248 R15: 00000000ffffffff [ 950.261403] SELinux: policydb string length -103 does not match expected length 8 [ 950.410194] SELinux: security policydb version 18 (MLS) not backwards compatible [ 950.424004] FAULT_INJECTION: forcing a failure. [ 950.424004] name failslab, interval 1, probability 0, space 0, times 0 [ 950.466268] CPU: 0 PID: 17028 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 950.473392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 950.482743] Call Trace: [ 950.485335] dump_stack+0x138/0x197 [ 950.488969] should_fail.cold+0x10f/0x159 [ 950.493127] should_failslab+0xdb/0x130 [ 950.497105] __kmalloc_track_caller+0x2ec/0x790 [ 950.501776] ? check_preemption_disabled+0x3c/0x250 [ 950.503474] SELinux: security policydb version 18 (MLS) not backwards compatible [ 950.506804] ? prepare_creds+0x3e/0x380 [ 950.518267] ? selinux_cred_prepare+0x49/0xb0 [ 950.518282] kmemdup+0x27/0x60 [ 950.518297] selinux_cred_prepare+0x49/0xb0 [ 950.525953] security_prepare_creds+0x7d/0xb0 [ 950.525967] prepare_creds+0x2cf/0x380 [ 950.525977] copy_creds+0x7b/0x4f0 [ 950.534773] ? lockdep_init_map+0x9/0x10 [ 950.534795] copy_process.part.0+0x868/0x6a00 [ 950.534809] ? save_trace+0x290/0x290 [ 950.534820] ? proc_fail_nth_write+0x7d/0x180 [ 950.542290] ? proc_cwd_link+0x1b0/0x1b0 [ 950.542301] ? __f_unlock_pos+0x19/0x20 [ 950.542319] ? __cleanup_sighand+0x50/0x50 [ 950.542330] ? lock_downgrade+0x6e0/0x6e0 [ 950.542345] _do_fork+0x19e/0xce0 [ 950.542359] ? fork_idle+0x280/0x280 [ 950.542372] ? fput+0xd4/0x150 [ 950.542381] ? SyS_write+0x15e/0x230 [ 950.542395] SyS_clone+0x37/0x50 [ 950.550990] ? sys_vfork+0x30/0x30 05:42:40 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="8cff7cf9ddffffff670006000400070000003c9f03000300e431289a1bdcc77a51f82cf673f54325e52bdcc8d21942de919ded74be2155fd37d276db2007397900a168f5145c42bb68fe2f249d155a40bfa5829ff464ab90a019e7fd1826b75530b8130af18102353c7b98fd797e0bfe04c342f126608357df7d44bb95a8e3d01004ba18757b8cabd69fc2b7d3d42a00501464035f377b454ecd729ece8dd8cb1f07e20c179d53fa4bb483dc707c7b153a0c4492413ca42e697e014b2b9fb8cbab104fbcd7e00ebf25bbcb3f62485e5c9e1f7e526b53df000000"], 0x28) 05:42:40 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x6de23930, 0x2, 0xfffffffffffffffc, 0xffff, 0x1b, 0x9bbf, 0x70, 0x1000, 0xfffffffffffffffd, 0x9}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000000c0)=0xffff, 0x4) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000080)={0x5, 0x9, 0x8, 0xdb, 0x6}) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000100)=0x1) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000000)={0x8, 0x2, 0x100000000}) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f00000009c0)) 05:42:40 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f00000000c0)={0x1, 0x5}) setreuid(0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x2, 0x400) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000180)=0xff) fchdir(r1) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 05:42:40 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) [ 950.551003] do_syscall_64+0x1e8/0x640 [ 950.551012] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 950.551028] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 950.551036] RIP: 0033:0x459879 [ 950.551041] RSP: 002b:00007f5d58dc1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 950.551053] RAX: ffffffffffffffda RBX: 00007f5d58dc1c90 RCX: 0000000000459879 [ 950.559411] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000029000400 [ 950.559418] RBP: 000000000075bfc8 R08: ffffffffffffffff R09: 0000000000000000 [ 950.559423] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d58dc26d4 [ 950.559429] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 05:42:40 executing program 0 (fault-call:3 fault-nth:4): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x29000400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 05:42:40 executing program 5: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@ipv4, @in6=@mcast1}}, {{}, 0x0, @in=@empty}}, &(0x7f0000000080)=0xe8) geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast2, @in6=@mcast2}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f00000000c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8) setreuid(r0, r1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000940)={{0x7f, 0x45, 0x4c, 0x46, 0x81, 0xc9, 0x80, 0x8, 0x6, 0x3, 0x6, 0xef, 0x1b3, 0x40, 0x129, 0x0, 0x7fffffff, 0x38, 0x1, 0x9, 0x3}, [{0x3, 0xbea, 0x1, 0x3, 0x80, 0x0, 0x4, 0xffffffffffffff8c}, {0x70000000, 0x2, 0x0, 0x7, 0x6, 0x7fff, 0x5, 0x835}], "18283d4907d541a16d9f44816fcd89ee907b55db49c6caab0631c9e37992af4616513ca9627311305188c1d1bbbb9e53fd65fa99d18e01840e6ecc0331734b2fc8f1f225aa29274c295ecc045fcf11f19c6f18c35ddc4a40ece48d131f18c6de2b9df85ffd0778a81c33c84f310429d5b18c8106e3ebc1cf57d1bf07e400c42b3dec9a2a8c821bd83c87fb15a5f5fd1c7ec8aae26e1a91ab2e1a3ce251ac2d7467523a892d20df8d4ffd157f8ce6c5126cbbdfb22da6dcc2a91eeef5be9bcb425ca6c1a957699b41b7ebdc94c6a07d56bbdf702abb6d56acb16ff601290dc622", [[]]}, 0x290) write$UHID_CREATE2(r3, &(0x7f0000000780)={0xb, 'syz0\x00', 'syz0\x00', 'syz0\x00', 0x98, 0xfff, 0x455a, 0x8, 0x200, 0xfffffffffffffbff, "08dcf0a3ca7bee0e28c2857569c5bc5793506192ac3187e9905e8601aa663b979365b36c01eb175238b182a228d37eb6184667d25af469b1ad6ba67dd874810ccd13caf0feb0edd075f1b39109eef821c17c19146542471df812885020d19e3df422f5e3e910753acb2d028bb1ffdcb1ffd8a375d565fed6911fb97ebd4403e68a92ee4905e020aea2a5d063f470eb39db2413137b2d7bb7"}, 0x1b0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x25}, 0x9, 0x2, 0x2, 0x3, 0x8fc7, 0xaec}, &(0x7f0000000c00)=0x20) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r4 = shmget(0x1, 0x2000, 0x54000000, &(0x7f0000ffe000/0x2000)=nil) shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0x7000) accept4$rose(r3, &(0x7f0000000440)=@full={0xb, @dev, @remote, 0x0, [@netrom, @bcast, @null, @bcast, @default]}, &(0x7f0000000480)=0x40, 0x800) 05:42:40 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000000)={0xf97cff8c, 0x8, 'SE Linux', "4e8d09740f71cd046b54ce7fc921d5a023e1b5235942bed89fa73709734767452648d2a6a57606fd2d86fe0248b74119e20087"}, 0x43) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) 05:42:40 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000440)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000100)={0x2, 0x964}, 0x2) write$selinux_load(r2, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) 05:42:40 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80, 0x100) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000040)) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, 0x0) [ 950.724679] SELinux: policydb string length -35 does not match expected length 8 [ 950.760476] SELinux: security policydb version 18 (MLS) not backwards compatible [ 950.817559] FAULT_INJECTION: forcing a failure. [ 950.817559] name failslab, interval 1, probability 0, space 0, times 0 [ 950.861347] SELinux: policydb version 1946783054 does not match my version range 15-31 [ 950.881355] CPU: 0 PID: 17062 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 950.888608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 950.897966] Call Trace: [ 950.900556] dump_stack+0x138/0x197 [ 950.904192] should_fail.cold+0x10f/0x159 05:42:41 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x3ff, 0x8000) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) r1 = shmget(0x0, 0x2000, 0x800, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_LOCK(r1, 0xb) [ 950.908348] should_failslab+0xdb/0x130 [ 950.912330] kmem_cache_alloc+0x2d7/0x780 [ 950.916482] ? creds_are_invalid+0x48/0x110 [ 950.920806] ? selinux_is_enabled+0x9/0x50 [ 950.925059] ? creds_are_invalid+0x48/0x110 [ 950.929385] __delayacct_tsk_init+0x20/0x80 [ 950.933713] copy_process.part.0+0x1a6c/0x6a00 [ 950.938304] ? save_trace+0x290/0x290 [ 950.942106] ? proc_fail_nth_write+0x7d/0x180 [ 950.946602] ? proc_cwd_link+0x1b0/0x1b0 [ 950.950664] ? __f_unlock_pos+0x19/0x20 [ 950.954649] ? __cleanup_sighand+0x50/0x50 [ 950.958883] ? lock_downgrade+0x6e0/0x6e0 [ 950.963039] _do_fork+0x19e/0xce0 [ 950.966499] ? fork_idle+0x280/0x280 [ 950.969424] SELinux: security policydb version 18 (MLS) not backwards compatible [ 950.970214] ? fput+0xd4/0x150 [ 950.970225] ? SyS_write+0x15e/0x230 [ 950.970239] SyS_clone+0x37/0x50 [ 950.970247] ? sys_vfork+0x30/0x30 [ 950.970260] do_syscall_64+0x1e8/0x640 [ 950.970269] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 950.978836] SELinux: policydb string length -103 does not match expected length 8 [ 950.980976] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 950.980984] RIP: 0033:0x459879 [ 950.980989] RSP: 002b:00007f5d58de2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 950.980999] RAX: ffffffffffffffda RBX: 00007f5d58de2c90 RCX: 0000000000459879 [ 950.981004] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000029000400 [ 950.981009] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 950.981014] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d58de36d4 [ 950.981020] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 05:42:41 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000140)="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") 05:42:41 executing program 3: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x21) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f00000000c0)={0x7, 0xb49}) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f0000000180)={0x61, 0x9, 0x34, "d64028d72f1d9dc06351a2bc522e04ff94b4ce8bd699089ae9e99a2ec29406e97ab582700d3971b90689a8df6cb945321f139b6bece0ee713f60eef4", 0x11, "9ea639882388c4159b77a7c66f1b2f0c1c92f501baafc8d30554a96d04d03db57347ae4f4a6f04da38b4fe0489d8918580ee4ffc393cd06cce320ae6", 0x20}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x80, 0x0) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000040)) 05:42:41 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f00000000c0)={0x0, 0x853, 0x0, &(0x7f0000000040)=0x8001}) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="8c3c9f03005c562e566b54f82ce369316809a90300"/39], 0x28) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) 05:42:41 executing program 2: clone(0x200000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) 05:42:41 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x102, 0x0) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000140)) setreuid(0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002000270f7f8", 0x2}], 0x4, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x311a01, 0x0) ioctl$KDADDIO(r2, 0x4b34, 0xffffffffffffffff) umount2(&(0x7f0000000540)='./file0\x00', 0x4) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000180)=0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f00000001c0)=r4) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2, 0x0) 05:42:41 executing program 0 (fault-call:3 fault-nth:5): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x29000400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 951.243521] QAT: Invalid ioctl [ 951.254976] FAULT_INJECTION: forcing a failure. [ 951.254976] name failslab, interval 1, probability 0, space 0, times 0 [ 951.265214] SELinux: policydb magic number 0x39f3c8c does not match expected magic number 0xf97cff8c [ 951.268995] QAT: Invalid ioctl [ 951.287574] QAT: Invalid ioctl 05:42:41 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000000)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) [ 951.297915] CPU: 0 PID: 17099 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 951.300524] SELinux: security policydb version 18 (MLS) not backwards compatible [ 951.305040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 951.323417] Call Trace: [ 951.326009] dump_stack+0x138/0x197 [ 951.329644] should_fail.cold+0x10f/0x159 [ 951.333804] should_failslab+0xdb/0x130 [ 951.337780] kmem_cache_alloc+0x2d7/0x780 [ 951.337799] copy_fs_struct+0x43/0x2d0 [ 951.337821] copy_process.part.0+0x3924/0x6a00 [ 951.345833] ? save_trace+0x290/0x290 [ 951.354181] ? proc_fail_nth_write+0x7d/0x180 [ 951.358677] ? proc_cwd_link+0x1b0/0x1b0 [ 951.360520] SELinux: security policydb version 18 (MLS) not backwards compatible [ 951.362750] ? __cleanup_sighand+0x50/0x50 [ 951.362764] ? lock_downgrade+0x6e0/0x6e0 [ 951.362780] _do_fork+0x19e/0xce0 [ 951.382097] ? fork_idle+0x280/0x280 [ 951.385818] ? fput+0xd4/0x150 [ 951.389017] ? SyS_write+0x15e/0x230 [ 951.392739] SyS_clone+0x37/0x50 [ 951.396104] ? sys_vfork+0x30/0x30 [ 951.399645] do_syscall_64+0x1e8/0x640 [ 951.403533] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 951.405096] SELinux: security policydb version 18 (MLS) not backwards compatible [ 951.408378] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 951.408387] RIP: 0033:0x459879 [ 951.408392] RSP: 002b:00007f5d58de2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 951.408404] RAX: ffffffffffffffda RBX: 00007f5d58de2c90 RCX: 0000000000459879 [ 951.408410] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000029000400 05:42:41 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0xfffffffffffffe33) 05:42:41 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000140)=ANY=[]}}, 0x4000000) 05:42:41 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000040)={0x3}) write$selinux_load(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="8cff7cf999ffffff5345204c696e7578120000000106000400070000003c9f030003000000000000fd58d72569b4ea36207a96a0f2478e1e7706689c7ed4df474fb4bf62eac4192ad435d7e71f3d95d5f0a0983036e422a8ae55a13799ebf5b349dec0665e6baee560948135d821463a7d1725df8d79be58cfba573540244e7e47f139a180ea61c834366f98a28e7eb7fd63806709fa798f5505e83d9a3e17c8e30dab60cd65154c1b9f175c2a1f42e7a11cf6770c8b5dbfe7272feb28360e9e1b76393c239602200c5d5e0dfcabcbb7900470ec81f4c6dd121aa7deaf78d97f102ba8ee74f988"], 0x28) 05:42:41 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x6d6a6b79a58cac71, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000080)=""/117) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000040)={0x0, 0x2, 0xfffffffffffffff9}) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) [ 951.408415] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 951.408424] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d58de36d4 [ 951.446502] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 [ 951.472802] QAT: Invalid ioctl 05:42:41 executing program 4: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000040)={@dev, @multicast1, @broadcast}, &(0x7f0000000080)=0xc) socket$nl_xfrm(0x10, 0x3, 0x6) 05:42:41 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x10) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 05:42:41 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x2, @rand_addr="003fcdb24398c810b5af5966ff32ae6f"}}, [0x1, 0x1, 0x9, 0x4, 0xc1d, 0x101, 0x9, 0x6, 0x26, 0x800, 0x4, 0x80000000, 0x2, 0x567d, 0x259]}, &(0x7f0000000040)=0x100) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000200)={r2, 0x9}, &(0x7f0000000240)=0x8) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00000002c0)={r3, r4/1000+10000}, 0x10) write$selinux_load(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="8c00000001d867000600040056ba452700"/35], 0x20) 05:42:41 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="8cff7cf999fffbff5345204c690000000000000000d8670006000400070000003c9f030003000000"], 0x28) lsetxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'U+', 0x9a0}, 0x28, 0x2) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x111}}, 0x20) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f00000002c0)={0x18, 0x0, {0x4, @broadcast, 'bpq0\x00'}}) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000280)={0xf, 0x8, 0xfa00, {r2, 0x5}}, 0x10) getsockopt$inet6_dccp_int(r0, 0x21, 0x10, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 951.587831] SELinux: policydb string length -103 does not match expected length 8 05:42:41 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x77ff, 0x64832b1bea589bc3) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000040)={0x3, 0x4ae3bc4825b3e91f, [0x7, 0x8, 0x7c00000, 0x1ff, 0x10000, 0x7fffffff, 0x1, 0x1000]}) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) 05:42:41 executing program 5: r0 = geteuid() setreuid(r0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000480)=0xe8) r3 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x26) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000880)='/dev/vcs\x00', 0x200, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000008c0)={r3, r4, 0x13, 0x2}, 0x10) syz_mount_image$vfat(&(0x7f0000000a40)='vfat\x00', &(0x7f00000001c0)='./file0\x00', 0xb, 0x0, &(0x7f0000000400), 0x1080001, &(0x7f0000000940)=ANY=[@ANYBLOB='nnonumtail=1,shortname=lower,shortname=winnt,shortname=winnt,shortname=win95,euid=', @ANYRESDEC=r1, @ANYBLOB=',dont_hash,obj_type=proc,smackfsroot=nodev%,fowner=', @ANYRESDEC=r1, @ANYBLOB="c0d2cc24b521699e776e65723d", @ANYRESDEC=r2, @ANYBLOB=',seclabel,\x00']) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/mls\x00', 0x0, 0x0) getsockopt$MISDN_TIME_STAMP(r6, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x4) ioctl$KVM_NMI(r6, 0xae9a) fchdir(r5) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000200)={0xa, @raw_data="c914461d3b5f173d861958e07235c89c8e25aaeba64510f83461cc7b5f8906f2777a411dab5e7622ede90503b6ea1bb8dd1503b36a8902429d95a33d6c612ce0b3331538552c27909c31a93e2b7d03f52d3b68a7dd50f467ed78034d785f7d56983be92b8992146c768a856daa024b62c853f9149dce20a636b583710fdb0dfdab7c6ab5a361323a67530e36124489c50c85b833bf2adc9639aead287239177fb794387aa6ab240abfeab3b7798d25d06649865ad103c410018a99e038339f4ba4add0cc22ed3e7c"}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) stat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_GET_VRING_ENDIAN(r3, 0x4008af14, &(0x7f0000000d00)={0x3, 0x93e}) getgroups(0x3, &(0x7f0000000840)=[0xee01, 0x0, 0xffffffffffffffff]) getresgid(&(0x7f0000000900), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) getgroups(0x8, &(0x7f0000000b00)=[0x0, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0xee01, 0xee01, 0x0, 0x0]) r12 = getegid() r13 = getegid() getgroups(0x3, &(0x7f0000000b40)=[0xffffffffffffffff, 0x0, 0xee01]) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {0x1, 0x1}, [{0x2, 0x1, r2}, {0x2, 0x2, r0}, {0x2, 0x7, r0}, {0x2, 0x1, r0}, {0x2, 0x2, r1}, {0x2, 0x2, r1}, {0x2, 0x4, r0}, {0x2, 0x2, r2}], {0x4, 0x4}, [{0x8, 0x7, r7}, {0x8, 0x1, r8}, {0x8, 0x6, r9}, {0x8, 0x4, r10}, {0x8, 0x0, r11}, {0x8, 0x6, r12}, {0x8, 0x5, r13}, {0x8, 0x2, r14}, {0x8, 0x2, r15}], {0x10, 0x1}, {0x20, 0x4}}, 0xac, 0x1) [ 951.685662] SELinux: policydb magic number 0x8c does not match expected magic number 0xf97cff8c [ 951.722946] SELinux: policydb string length -262247 does not match expected length 8 05:42:41 executing program 0 (fault-call:3 fault-nth:6): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x29000400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 05:42:41 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x1, 0x2) getsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000180)={@loopback, @empty, @initdev}, &(0x7f00000001c0)=0xc) 05:42:41 executing program 2: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000001780)='/selinux/load\x00', 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000480), &(0x7f00000004c0)=0x6) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x80}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000540)=@assoc_id=r2, 0x4) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000280)='fou\x00') ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="6540aa6d58a591a07ab3ed80003283feaa414085169d556a110c14", @ANYRES16=r3, @ANYBLOB="21422abd7000fddbdf25010000000800040002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x84) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000380)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000440)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000003c0)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f070002000000"}, 0x28) r4 = getpid() perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x80, 0x5, 0x8, 0x1, 0x0, 0x8, 0x100, 0x8, 0x3f, 0x0, 0xfffffffffffffffd, 0x7, 0x1000, 0x4, 0xcb88, 0x2, 0x3, 0x1, 0x5, 0x7, 0xcb6, 0xfffffffffffffdcf, 0x1, 0x8000000000, 0xef, 0x7, 0x3, 0xc5a, 0x8, 0xfffffffffffffff9, 0x400, 0x8, 0x81, 0x1a5c, 0x3, 0x9, 0x0, 0xffffffffffffff01, 0x1, @perf_bp={&(0x7f00000002c0), 0x6}, 0x20000, 0x0, 0x6, 0x0, 0x6, 0x800, 0x4}, r4, 0x5, r0, 0x2) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9040000005345204c696e75681200000001d8670006000400070000004d0f2f8d1d3094d19363dfe11fc0942a152b81885374c019e89688860dd7e88ae58868084d9b62f85c302abfa445d5b86f7a370175b5fd60ca6abe53f9d4c4195140e07cde0996497735be2ed8afa6625a4a26ae659c88dff7a5e42c8d0cf4ae9967ea48a27f253bbbca642e3017973e8732375dbd41d5987434f46bb926368b80c8d99d83b9c9c07a0e51cb0fcffc4ae6816f61e10054deb3454bfb62d1665cd77ba0dcc10b51a8e2"], 0x20) 05:42:41 executing program 1: clone(0x8e000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="8cff7cf999ffffff53457e593e0727bb0651000001d8670006000400070000003c9f030003000000"], 0x28) 05:42:41 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) 05:42:41 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='\x00\xc59\xef\xe1r\xae\x99\x15rg. 5\xc4\x15]\xdc\xf7/\xf6Sm\xd7\xccF\f\x1b\x03(3\x10\xb7\xdc7\xf1>\x88\n3\xab\\L\x19>\xb9>\xb8\xd9\x14\x11;\xea/\x10~ p\xfa7\xa3*\x83C/\x81(\\]\xf2ELD\xec(\x9c$P\xd0aeeK\x93\x95\xfd^S\xe3\xf7\xff\x18 O+\xc8\x9d\xd1`\to\xe5\x8czXo\xe4\xf3\x8e\xb2\x12v', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 951.924465] SELinux: policydb string length 4 does not match expected length 8 [ 951.946276] FAULT_INJECTION: forcing a failure. [ 951.946276] name failslab, interval 1, probability 0, space 0, times 0 05:42:42 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="8cff7cf90800d100005345204c696e757812000000f7d7670006000400070000"], 0x20) 05:42:42 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000), 0x10) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) [ 951.968070] SELinux: policydb string length 4 does not match expected length 8 05:42:42 executing program 4: r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) sendmsg$sock(r0, &(0x7f00000003c0)={&(0x7f00000001c0)=@caif=@dbg={0x25, 0x1ff, 0x53}, 0x80, &(0x7f0000000240)=[{&(0x7f00000002c0)="f8435f4ab7e51866cdbab2789185052e61b2b5eed29c4612ea02a51175d7fa266070b89d19e95724f5d0e9c31b413f64d3e1f52e2078f5809497ead4cdfd31db008980f2ef4e029eb4727387a26bab2b9e8b52dc5d4b8730c1b6cb17913f873de07513ab4a348a5ef4a077d1f92269a403f79911612950c50008ccf05103806acdeeba620940d2b7ba6d1f7f6d9296aba3cd702302fc786922e67715a63ccdd9d1139c4d442468320b63745c451245bc76259b0caac9a617050756", 0xbb}], 0x1, &(0x7f0000000380)=[@mark={{0x14, 0x1, 0x24, 0x400}}], 0x18}, 0x20000000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) [ 952.005258] SELinux: policydb string length -103 does not match expected length 8 [ 952.014456] CPU: 0 PID: 17191 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 952.021565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 952.021570] Call Trace: [ 952.021587] dump_stack+0x138/0x197 [ 952.021607] should_fail.cold+0x10f/0x159 [ 952.021624] should_failslab+0xdb/0x130 [ 952.021635] kmem_cache_alloc+0x2d7/0x780 [ 952.021646] ? _raw_spin_unlock+0x2d/0x50 [ 952.053545] copy_process.part.0+0x3987/0x6a00 [ 952.058138] ? save_trace+0x290/0x290 [ 952.061936] ? proc_fail_nth_write+0x7d/0x180 [ 952.066428] ? proc_cwd_link+0x1b0/0x1b0 [ 952.070497] ? __cleanup_sighand+0x50/0x50 [ 952.074730] ? lock_downgrade+0x6e0/0x6e0 [ 952.078882] _do_fork+0x19e/0xce0 [ 952.082330] ? fork_idle+0x280/0x280 [ 952.082344] ? fput+0xd4/0x150 [ 952.082355] ? SyS_write+0x15e/0x230 [ 952.082370] SyS_clone+0x37/0x50 [ 952.082377] ? sys_vfork+0x30/0x30 [ 952.082389] do_syscall_64+0x1e8/0x640 [ 952.082397] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 952.082414] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 952.082421] RIP: 0033:0x459879 [ 952.082426] RSP: 002b:00007f5d58de2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 952.082440] RAX: ffffffffffffffda RBX: 00007f5d58de2c90 RCX: 0000000000459879 [ 952.103753] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000029000400 [ 952.103760] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 952.121430] SELinux: policydb string length 13697032 does not match expected length 8 05:42:42 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x48000, 0x0) sendto$unix(r1, &(0x7f0000000140)="fc924cff9b398b45912093d7cedf2a3be3fcc1b1f6bbeaf6494dd05604943dc350220d4703fb420f27a78aec1f958d746648fa8b9fd178a8c87e68b08aa6fcb61b3a9bcf1d819af527f994dfc8e3a0af087def28ef7013f0868f465ef45685e3b361d2a02218a955c3b617e92fac205fa7c34e9ecdb58c50ccc7599902b486849c52ff760c08765fc204bec15db21d29", 0x90, 0x10, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fchdir(r2) 05:42:42 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x10, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x9]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x40090) 05:42:42 executing program 4: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000180)={0x9, 0xffff}) write$eventfd(r0, &(0x7f00000001c0)=0x7, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) [ 952.124619] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d58de36d4 [ 952.124625] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 05:42:42 executing program 0 (fault-call:3 fault-nth:7): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x29000400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 05:42:42 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) 05:42:42 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x0) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x8, 0x10800) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x4000, 0x0) r4 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000180)="0ec5e6c5ad1a9dcb90d8ea0d3433c47143ec29c5e88c01378da35f6f25c19dd48df6f564a2a5d17a615ee545cc9741673859d7e5d84f648fe69fff7af6bf398bbb931f5834e0566a97b2015c1049fa75334330136e472808aa9443d5d3656936be705eeaf78c70857bd65bc37cf081743f8312928db21fb343d56d767a3c2f17dd6b327d58d32d877bce34678443f9efb9141eea05a918407edd2d53f82e3a22d6e39ed4242c17aaee579684d68c360bae9eb86c16331b05ef9a4e8274a2a536", 0xc0, 0xfffffffffffffffa) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000240), &(0x7f0000000280)=0x4) keyctl$set_timeout(0xf, r4, 0x100) ioctl$TIOCNOTTY(r2, 0x5422) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, 0x0) [ 952.289020] FAULT_INJECTION: forcing a failure. [ 952.289020] name failslab, interval 1, probability 0, space 0, times 0 [ 952.311893] CPU: 0 PID: 17221 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 952.319132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 952.328480] Call Trace: [ 952.328502] dump_stack+0x138/0x197 [ 952.334692] should_fail.cold+0x10f/0x159 [ 952.338853] should_failslab+0xdb/0x130 [ 952.342833] kmem_cache_alloc+0x2d7/0x780 [ 952.346986] ? _raw_spin_unlock_irq+0x28/0x90 [ 952.351487] ? trace_hardirqs_on_caller+0x400/0x590 [ 952.356512] copy_process.part.0+0x1cd5/0x6a00 [ 952.361097] ? save_trace+0x290/0x290 [ 952.364895] ? proc_fail_nth_write+0x7d/0x180 [ 952.369388] ? proc_cwd_link+0x1b0/0x1b0 [ 952.373461] ? __cleanup_sighand+0x50/0x50 [ 952.377695] ? lock_downgrade+0x6e0/0x6e0 [ 952.381846] _do_fork+0x19e/0xce0 [ 952.385302] ? fork_idle+0x280/0x280 [ 952.389017] ? fput+0xd4/0x150 [ 952.392204] ? SyS_write+0x15e/0x230 [ 952.392219] SyS_clone+0x37/0x50 [ 952.392228] ? sys_vfork+0x30/0x30 [ 952.399290] do_syscall_64+0x1e8/0x640 [ 952.406676] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 952.411526] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 952.416712] RIP: 0033:0x459879 [ 952.419895] RSP: 002b:00007f5d58de2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 952.425357] SELinux: policydb string length -103 does not match expected length 8 05:42:42 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$VT_RELDISP(r1, 0x5605) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000040)=0x5) 05:42:42 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00\xb7\x8d\xc2\x1f\xe6\x1ay\'nw\xb4\r\x14\xb3\x91\xa7\xd4\xe51@\x98IB*\x84\xd3\xef\x16\xe4\xe8\xb3t\x93h\x9d`_\xfa\xd2\x85\r@\x9f\xcc^\x80\xe7-\x84\xa8\x91\xdd\xa1&\xe2\x0f\xec\xa6\xcd\x0e', 0x200002, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000300)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x810005}, 0x51, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2d42dfa5b541e302a6601224000000", @ANYRES16=r2, @ANYBLOB="200029bd7000ffdbdf2501000000080001004e20000008000b00", @ANYRES32=r3], 0xe}, 0x1, 0x0, 0x0, 0x800}, 0x40) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 05:42:42 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="395f4768055c8eb4b456c1b015125f38f6cc399ab31a6a14bd89e5811844bb90f85c0d62d67739a7f43a48895f344e7aed8ba09a3b1727bebacb416edb86d905f02b312186e13467a5dfaa5c838b5d229a7a5a0afb36cc4551e9e98cf4219bc979cc9ba3ab4345a6580f5ce2894a23d40347f1822d99747bc1c9ae5371e1e1d7fced94080af773b4712d395e6ee1201c25f5afd9e89f6c808cef476210e565de8dd571c5011e1d9758c967993c3c50236992a3b316b11aadf45566e2e6f8a2d4c61b92d67978bec7a70b5a9a248e992b70a7ec32e3fb80ebf87e90ef9658c4cd4672764b57db5bd036191368b46daa58d6", @ANYRESOCT=r0], 0x2}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) syslog(0x9, 0x0, 0x0) write$FUSE_STATFS(r1, &(0x7f0000000040)={0x60, 0x0, 0x2, {{0x8547, 0x3, 0x100, 0x0, 0x4, 0x7, 0x3, 0x3}}}, 0x60) [ 952.427594] RAX: ffffffffffffffda RBX: 00007f5d58de2c90 RCX: 0000000000459879 [ 952.427601] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000029000400 [ 952.427607] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 952.427619] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d58de36d4 [ 952.464421] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 05:42:42 executing program 1: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000000)=@generic={0x3, 0x3cdfff31, 0x5}) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) 05:42:42 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x57f0, 0xdee039f507b56c5) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x2, 0x3ff, [], &(0x7f0000000040)=0x8}) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, 0x0) 05:42:42 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000001d85a000600040007000000"], 0x20) [ 952.511334] SELinux: security policydb version 18 (MLS) not backwards compatible 05:42:42 executing program 5: setreuid(0x0, 0x0) r0 = msgget(0x2, 0x500) msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000140)=""/176) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 05:42:42 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) [ 952.595449] SELinux: policydb string length -103 does not match expected length 8 05:42:42 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0xfffffffffffffffc, 0x1) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbff, 0x4000001}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c40000001900250a0020000000000000fe8000000000000000000000000001bdfe80000000040000800000000000000000000000000000000a000080000000009ba2077b929ade5f9dcbc5b04a3f6ba455b666a5ff30ab07cad0bd75bc2f9a69eb4a12", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) [ 952.649302] SELinux: security policydb version 18 (MLS) not backwards compatible [ 952.747662] SELinux: policydb string length -103 does not match expected length 8 05:42:42 executing program 0 (fault-call:3 fault-nth:8): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x29000400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 05:42:42 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000080)={0x0, @speck128, 0x1, "1ed0510ea0b949ec"}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6, @in6=@empty}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000000c0)=0xe8) setsockopt$inet6_dccp_int(r1, 0x21, 0x11, &(0x7f0000000040)=0x4a4, 0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) r3 = gettid() tgkill(r2, r3, 0x25) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) 05:42:42 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) 05:42:42 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x8) getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f00000000c0)=""/32, &(0x7f0000000140)=0x20) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x80, 0x0) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000001c0), 0x4) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x11, 0x8001, 0xc1, 0xfff, 0x10, 0x1, 0x8, [], 0x0, r3, 0x5, 0x2}, 0x3c) 05:42:42 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d00000000000000010000000000000000200000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10b5cfaee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce0000f643000000000000bfb3216d15f3903804c11773ffed5e1f56abc36154c1641fc0a09e77c3e7a497bf9f6014c4162d7bf77a289f6630c67e0ad613dd82aaa0c8a1614960c8a0ed1fda7467ccea812035d041bb096011ae61c67480f6cb0962e726e18a64b114b274d3ee6d3d5ca7bc435ef017771e65beff4862b328102f83556e71a954c6a34819781b21e42d25f9629e"], 0xc4}}, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000040)={0xfffffffffffffffd, 0x0, 0x6, 0x7, [], [], [], 0x7ff, 0x1, 0xffffffffffff0000, 0x1, "8278704f5ddf56bc5522a2c165b2c144"}) 05:42:42 executing program 1: clone(0x20002000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) [ 952.869385] SELinux: security policydb version 18 (MLS) not backwards compatible [ 952.889443] FAULT_INJECTION: forcing a failure. [ 952.889443] name failslab, interval 1, probability 0, space 0, times 0 [ 952.913016] CPU: 0 PID: 17302 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 952.920152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 952.929514] Call Trace: [ 952.929533] dump_stack+0x138/0x197 [ 952.929551] should_fail.cold+0x10f/0x159 [ 952.929570] should_failslab+0xdb/0x130 [ 952.943851] kmem_cache_alloc+0x2d7/0x780 [ 952.948000] ? _raw_spin_unlock_irq+0x28/0x90 [ 952.952504] ? trace_hardirqs_on_caller+0x400/0x590 [ 952.957524] copy_process.part.0+0x1cd5/0x6a00 [ 952.962115] ? save_trace+0x290/0x290 [ 952.965913] ? proc_fail_nth_write+0x7d/0x180 [ 952.970405] ? proc_cwd_link+0x1b0/0x1b0 [ 952.974477] ? __cleanup_sighand+0x50/0x50 [ 952.978711] ? lock_downgrade+0x6e0/0x6e0 [ 952.982858] _do_fork+0x19e/0xce0 [ 952.982873] ? fork_idle+0x280/0x280 [ 952.982886] ? fput+0xd4/0x150 [ 952.982896] ? SyS_write+0x15e/0x230 [ 952.996923] SyS_clone+0x37/0x50 [ 953.000282] ? sys_vfork+0x30/0x30 [ 953.003818] do_syscall_64+0x1e8/0x640 [ 953.007697] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 953.012544] entry_SYSCALL_64_after_hwframe+0x42/0xb7 05:42:43 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f00000000c0)={0x48, &(0x7f0000000140)=""/72}) 05:42:43 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x8d, 0xc9cc, 0x4, {0x1, @pix={0x8, 0x2, 0x4745504d, 0x0, 0x7f, 0xba6, 0xa, 0x1, 0x1, 0x5d4396240823ed10, 0x1, 0x5}}}) 05:42:43 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x5, 0x12000) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) [ 953.017730] RIP: 0033:0x459879 [ 953.020908] RSP: 002b:00007f5d58de2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 953.020918] RAX: ffffffffffffffda RBX: 00007f5d58de2c90 RCX: 0000000000459879 [ 953.020923] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000029000400 [ 953.020927] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 953.020932] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d58de36d4 [ 953.020937] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 05:42:43 executing program 4: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[]}, 0x1, 0x0, 0x0, 0x1}, 0x0) 05:42:43 executing program 0 (fault-call:3 fault-nth:9): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x29000400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 953.024789] SELinux: policydb string length -103 does not match expected length 8 [ 953.083822] SELinux: security policydb version 18 (MLS) not backwards compatible 05:42:43 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) 05:42:43 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="8cff7cf9080000008a6b43403f0e08995fb81aebb0fbc3da5345204c0004000700"/48], 0x20) 05:42:43 executing program 5: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000280)=@v3={0x3000000, [{0x40, 0xffffffff00000000}, {0x3, 0xffffffffffffcec5}], r0}, 0x18, 0x2) setreuid(0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 953.126804] SELinux: policydb string length -103 does not match expected length 8 05:42:43 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) 05:42:43 executing program 1: clone(0x1002300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000000)={0xf97cff8c, 0x8, 'SE Linux', "056e500bf13f862d211d3efb4fea8efd"}, 0x20) write$selinux_load(r0, &(0x7f0000000100)={0xf97cff8c, 0x8, 'SE Linux', "120020200000070413d42352306bc3c5b4449a8482a9b835000000"}, 0x2b) [ 953.187138] FAULT_INJECTION: forcing a failure. [ 953.187138] name failslab, interval 1, probability 0, space 0, times 0 [ 953.234634] SELinux: policydb string ŠkC@?™ does not match my string SE Linux [ 953.261676] CPU: 0 PID: 17326 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 953.268821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 953.278178] Call Trace: [ 953.280775] dump_stack+0x138/0x197 [ 953.284414] should_fail.cold+0x10f/0x159 [ 953.288577] should_failslab+0xdb/0x130 [ 953.292568] kmem_cache_alloc+0x2d7/0x780 [ 953.296723] ? lockdep_init_map+0x9/0x10 [ 953.300791] ? debug_mutex_init+0x2d/0x5a [ 953.304948] copy_process.part.0+0x3c75/0x6a00 [ 953.310585] ? proc_fail_nth_write+0x7d/0x180 [ 953.315093] ? proc_cwd_link+0x1b0/0x1b0 [ 953.319167] ? __cleanup_sighand+0x50/0x50 [ 953.323405] ? lock_downgrade+0x6e0/0x6e0 [ 953.327572] _do_fork+0x19e/0xce0 [ 953.331031] ? fork_idle+0x280/0x280 [ 953.334746] ? fput+0xd4/0x150 [ 953.337935] ? SyS_write+0x15e/0x230 [ 953.341649] SyS_clone+0x37/0x50 [ 953.345008] ? sys_vfork+0x30/0x30 [ 953.348552] do_syscall_64+0x1e8/0x640 [ 953.352431] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 953.357281] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 953.362462] RIP: 0033:0x459879 [ 953.365642] RSP: 002b:00007f5d58de2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 953.373348] RAX: ffffffffffffffda RBX: 00007f5d58de2c90 RCX: 0000000000459879 05:42:43 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x30, &(0x7f0000000040)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x27}}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e24, 0x4, @ipv4={[], [], @broadcast}, 0x9}}, [0x0, 0xfffffffffffff391, 0x0, 0x2, 0x100000000, 0x6, 0x0, 0x4, 0xfac, 0x3f, 0x7, 0x8b, 0x1, 0x2b1, 0x80000000]}, &(0x7f0000000100)=0x100) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) pipe2(&(0x7f0000000280), 0x3ae35f1cfbf03213) [ 953.380616] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000029000400 [ 953.387879] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 953.395154] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d58de36d4 [ 953.402425] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 05:42:43 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x0, 0x0) ioctl$KDENABIO(r1, 0x4b36) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) 05:42:43 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x682, 0x20400) ioctl$CAPI_NCCI_GETUNIT(r1, 0x80044327, &(0x7f00000000c0)=0x7ff) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 05:42:43 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x101000, 0x0) write$selinux_create(r0, &(0x7f0000000080)=@access={'system_u:object_r:getty_var_run_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20, 0x7f}, 0x68) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="8cff7ce9080000005345204c696e75781200000001d867000600040007000000"], 0x20) [ 953.436746] sel_write_load: 31 callbacks suppressed [ 953.436751] SELinux: failed to load policy [ 953.471316] SELinux: policydb version 189820421 does not match my version range 15-31 [ 953.479603] SELinux: failed to load policy 05:42:43 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 05:42:43 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x5, 0x20000) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 953.546232] SELinux: policydb version 538968082 does not match my version range 15-31 [ 953.568756] SELinux: failed to load policy [ 953.574134] Unknown ioctl 19254 [ 953.592098] nla_parse: 12 callbacks suppressed [ 953.592104] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 953.609468] SELinux: policydb magic number 0xe97cff8c does not match expected magic number 0xf97cff8c [ 953.656259] SELinux: failed to load policy 05:42:43 executing program 0 (fault-call:3 fault-nth:10): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x29000400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 05:42:43 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) r1 = accept4(0xffffffffffffffff, &(0x7f0000000280)=@x25, &(0x7f0000000300)=0x80, 0x80000) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000340)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x210400, 0x0) setns(r2, 0x40000000) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000400)={{0x3, 0x1, 0xa54, 0x2, 0x40}, 0xb751, 0x1000}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000240)=r2) setsockopt$inet6_buf(r2, 0x29, 0x14, &(0x7f0000000140)="8b474750844edcd26fe61a65095e45b03cda1a93afe851962a0f7449dd46e47f951743cf8795c943fd3b68d28ee17fb4c153d0a0f4bff4590bb758c8abe65c0881b55aef566afdb9313c575e7a1a92f2623d281cbce3dbacae1f268fccf0b97797b5d2e6cd310b78d402d07bcfa918916fbc837079790c73a507604a707fa81d631b23e0ae9053a34edbaba18f6be7e189c6030edbc0a0770a4824e45e6f5c5b30334396e1501a6dce726424253eeb764527582a16526129838f3f80f381d36a300c09b82bb0e0512c2220e1b4d1fb0ee4c025d27df2ec5a83ac227356be8564636402fa106902ada38b29d09e272708167a9261a74bdf", 0xf7) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f00000000c0)={0x1, {0x77359400}, 0x3, 0x6}) 05:42:43 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) 05:42:43 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) write$P9_RREADDIR(r0, &(0x7f0000000080)={0x87, 0x29, 0x2, {0xfffffffffffffffd, [{{0x5, 0x4, 0x2}, 0x10000, 0x1000, 0x7, './file0'}, {{0x8, 0x1, 0x7}, 0x7ff, 0x0, 0x7, './file0'}, {{0x4, 0x0, 0x7}, 0x2, 0xfe000000000, 0x7, './file0'}, {{0x2, 0x2, 0x7}, 0xffffffffffffffff, 0x2, 0x7, './file0'}]}}, 0x87) [ 953.677010] Unknown ioctl 19254 [ 953.695286] SELinux: policydb string length -103 does not match expected length 8 [ 953.712229] SELinux: failed to load policy 05:42:43 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) [ 953.741587] SELinux: policydb magic number 0xe97cff8c does not match expected magic number 0xf97cff8c 05:42:43 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x77fd, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x44000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f00000000c0)={{0x2, 0xffffffffffffff01}, 'port0\x00', 0x40, 0x10000, 0x2, 0x7, 0x6, 0x80000000, 0x7, 0x0, 0x2, 0x100000000}) syslog(0xe, &(0x7f0000000080)=""/35, 0xfffffffffffffdb6) 05:42:43 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x2}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 953.788872] FAULT_INJECTION: forcing a failure. [ 953.788872] name failslab, interval 1, probability 0, space 0, times 0 [ 953.814630] SELinux: failed to load policy [ 953.865823] CPU: 0 PID: 17394 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 953.872959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 953.882304] Call Trace: [ 953.884981] dump_stack+0x138/0x197 [ 953.888627] should_fail.cold+0x10f/0x159 [ 953.892787] should_failslab+0xdb/0x130 [ 953.894578] SELinux: security policydb version 18 (MLS) not backwards compatible [ 953.896760] kmem_cache_alloc+0x2d7/0x780 [ 953.896773] ? lock_downgrade+0x6e0/0x6e0 [ 953.896785] __khugepaged_enter+0x37/0x340 [ 953.916804] copy_process.part.0+0x5557/0x6a00 [ 953.921401] ? proc_fail_nth_write+0x7d/0x180 [ 953.925939] ? __cleanup_sighand+0x50/0x50 [ 953.930168] ? lock_downgrade+0x6e0/0x6e0 [ 953.934317] _do_fork+0x19e/0xce0 [ 953.937778] ? fork_idle+0x280/0x280 [ 953.941505] ? fput+0xd4/0x150 [ 953.941516] ? SyS_write+0x15e/0x230 [ 953.941529] SyS_clone+0x37/0x50 [ 953.941537] ? sys_vfork+0x30/0x30 [ 953.941549] do_syscall_64+0x1e8/0x640 [ 953.941557] ? trace_hardirqs_off_thunk+0x1a/0x1c 05:42:43 executing program 2: clone(0x2000000003844100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000001d86700b3d498837db69499"], 0x20) ioctl$void(r0, 0x5451) 05:42:43 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x7, 0x800) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000180)=[0x3, 0x100000001]) [ 953.941573] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 953.955310] RIP: 0033:0x459879 [ 953.955316] RSP: 002b:00007f5d58de2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 953.955327] RAX: ffffffffffffffda RBX: 00007f5d58de2c90 RCX: 0000000000459879 [ 953.955333] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000029000400 [ 953.955338] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 953.955345] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d58de36d4 [ 953.968231] SELinux: failed to load policy 05:42:44 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$selinux_load(0xffffffffffffffff, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) 05:42:44 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7, 0xc000) 05:42:44 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="a3077cf90873eb61c04f9b80e76e751200000001d867000600040007000000"], 0x20) [ 953.969212] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 [ 954.029996] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 05:42:44 executing program 0 (fault-call:3 fault-nth:11): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x29000400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 05:42:44 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$selinux_load(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x28) 05:42:44 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000880)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000000480)=0xe8) setreuid(r1, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x80000, 0x0) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000340)=0x6) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, &(0x7f0000000400)={0x101, 0x101, @name="4f99a86f7d527b46df37bb339afd82810b0113cdadd0872d43b5dd15320ca81b"}) fchdir(r3) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x48, 0xaaaaaaaaaaaae00, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x9, 0x7, 0x1, 0xfbe9, 0x0, 0x9, 0x1, 0x8, 0x3c3b, 0x7, 0x5, 0x8, 0x9, 0x8, 0x5eec77ba, 0xef, 0xffff, 0x3, 0x3, 0x81, 0x2, 0x9b9, 0x101, 0x525ecf02, 0x7f, 0x9, 0x1bc1, 0x4, 0x1, 0xfff, 0x7, 0x0, 0x0, 0xfffffffffffffffa, 0xffff, 0xdfec, 0x0, 0x2, 0x3, @perf_bp={&(0x7f0000000080), 0x1}, 0x4000, 0x7ff, 0x3, 0x3, 0x7, 0x9}, 0x0, 0x3, r4, 0x1) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='cubic\x00', 0x6) 05:42:44 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000140)=0x3, 0x4) 05:42:44 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x800, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TCSETXW(r0, 0x5435, &(0x7f0000000140)={0x1, 0x100, [0x9, 0xffffffff, 0x79, 0x81, 0x4], 0x906}) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000080)) [ 954.123901] SELinux: policydb magic number 0xf97c07a3 does not match expected magic number 0xf97cff8c [ 954.150952] SELinux: failed to load policy 05:42:44 executing program 1: utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xfdd, 0x100}) clone(0x8002a000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) 05:42:44 executing program 3: mq_unlink(&(0x7f0000000000)='\\\x00') r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) [ 954.245155] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 05:42:44 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757812a8dc45f0246d554bdedfe310e8000001d867000600040007000000081b64008000008b60589dd1d7f72d57d3ec582136904e95ad85de3368412001f8c864f9e5fd2d33f6e8051ac3a51c6efb204142de05a3bd330000000000000000"], 0x20) [ 954.290548] FAULT_INJECTION: forcing a failure. [ 954.290548] name failslab, interval 1, probability 0, space 0, times 0 [ 954.294729] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 954.363106] CPU: 0 PID: 17449 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 954.370252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 954.370257] Call Trace: [ 954.370275] dump_stack+0x138/0x197 [ 954.370293] should_fail.cold+0x10f/0x159 [ 954.370310] should_failslab+0xdb/0x130 [ 954.370328] kmem_cache_alloc+0x2d7/0x780 [ 954.382447] ? _raw_spin_unlock+0x2d/0x50 [ 954.382458] ? __khugepaged_enter+0x26c/0x340 [ 954.406951] copy_process.part.0+0x444f/0x6a00 05:42:44 executing program 4: modify_ldt$read_default(0x2, &(0x7f0000000180)=""/145, 0x91) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0x4}}, 0x0) [ 954.411565] ? __cleanup_sighand+0x50/0x50 [ 954.415809] ? lock_downgrade+0x6e0/0x6e0 [ 954.419971] _do_fork+0x19e/0xce0 [ 954.423438] ? fork_idle+0x280/0x280 [ 954.427164] ? fput+0xd4/0x150 [ 954.430360] ? SyS_write+0x15e/0x230 [ 954.434206] SyS_clone+0x37/0x50 [ 954.437665] ? sys_vfork+0x30/0x30 [ 954.441212] do_syscall_64+0x1e8/0x640 [ 954.445102] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 954.449954] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 954.455148] RIP: 0033:0x459879 05:42:44 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x6, 0xe96e323445ff03fd) getsockopt$ax25_int(r0, 0x101, 0x6, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) 05:42:44 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x48fcc1b62326bec6, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000040)={@loopback, 0x0}, &(0x7f0000000080)=0x14) r2 = geteuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in=@rand_addr=0x7, @in6=@remote, 0x4e24, 0x8, 0x4e23, 0x1, 0x2, 0x20, 0x20, 0x32, r1, r2}, {0x3d, 0x7988a55e, 0xe63ef99, 0x20, 0x2f, 0x801, 0x0, 0x7}, {0x7fffffff, 0x7, 0xa52, 0x401}, 0x7, 0x6e6bb5, 0x1, 0x1, 0x3, 0x3}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4d6, 0x33}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3504, 0x0, 0x1, 0x80000001, 0x2f42, 0x2000000000, 0x30}}, 0xe8) r3 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_G_FBUF(r3, 0x8030560a, 0x0) [ 954.458339] RSP: 002b:00007f5d58de2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 954.466052] RAX: ffffffffffffffda RBX: 00007f5d58de2c90 RCX: 0000000000459879 [ 954.473325] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000029000400 [ 954.480596] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 954.487867] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d58de36d4 [ 954.495140] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 [ 954.543970] SELinux: policydb version 1172088850 does not match my version range 15-31 05:42:44 executing program 2: clone(0x264200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1f, 0x400000) sendto$llc(r1, &(0x7f00000000c0)="e61542c018880e46ece98665b1752e9eddfc911b8814e81510a94286ffddd77d1f3497686bf55062575ba742db6112f544d5c86c7345078bf36134842170b7dbc5f0bfa71fbdc506d1a19ad27c1359ec5335ce763699329cd184af0cefb4a6c4dd6ef24084c0d2ee9a0a", 0x6a, 0x4000000, &(0x7f0000000040)={0x1a, 0xd0e429d41541db5c, 0x4, 0xffffffff, 0xff, 0xc1f, @dev={[], 0x13}}, 0x10) [ 954.586365] SELinux: failed to load policy [ 954.595314] SELinux: policydb string length -103 does not match expected length 8 [ 954.603889] SELinux: failed to load policy [ 954.604437] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 05:42:44 executing program 0 (fault-call:3 fault-nth:12): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x29000400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 05:42:44 executing program 5: setreuid(0x0, 0x0) fchdir(0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000980)={{{@in6=@local, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000480)=0xe8) syz_mount_image$minix(&(0x7f0000000080)='minix\x00', &(0x7f00000000c0)='./file0\x00', 0x4, 0x8, &(0x7f00000008c0)=[{&(0x7f0000000140)="da6124d11f25e9fde6f6591024afbec6eeb64136c471c1274c53334036b2981408a5543287b2129df1224f2e9bb8f60933a3cf535a8b5b8c782f25c4f3a99ee1b9784c40542adf2c6158355dc096af4cd479e8eee80113ebbfadeefe26bb59eecf841496e7619881983a83ebc90b2fa713e6c1697b1a74e524edfa740783c81764ffa03c3798a3e231c6fda503e3166fa449abe529e5195b920e5bc8598f15b4824cb83dc9e88e247384d98d565b29e671ec49e532242049f0ef62460c0eacdd525e59176a495fa27a1234297fccf4dbf777ae23fb9d33e2fc54b4c6", 0xdc, 0x80000000}, {&(0x7f0000000240)="1e1c217cd2879d5893e4d94be9a5e06132e42910643b42525c6c9a736a70581501e68d72a7adf0551e45261de717fb2ea399d15d8de20301edfc3783416d5fa56b91c1e775cdfa03d1c8456da43d81a6f7ccfa7f8d20516c3ba58a9ae3368d0acea7328c5ca1bf8f4d0dfc87003b9391fe7a7e0935761bc14474e6ae0b94b989838290c1a0922dce1f5d2bb9000585d03cc99f3ab08028a55242b94d33628afc0aa5bdb766d7c3041fc8ed046e0f84dcccd61b0b449664054016a0956ce009c224427521030afce54870159446b340b0111d43567564a1f24ca89f96a1", 0xdd, 0x8}, {&(0x7f0000000340)="2fcef7533521cdd6485e2e5eb65ab775e8f5a199a3565547253503d04a36dc527aa62f0c32dcd139a1e10c08e9202f", 0x2f, 0xfff}, {&(0x7f0000000380)="7df64efb6d0158116d28e45e8a5d19fbee2a39c9cbef9f1a2e12cb4364600ac7b9777af5fe7ecc3d219632afecc7b2b1ec38b0a6e4b0d8e9b0b5c35428142ad172799374ba159e98af5fa7c287857c55a124fe8c0594c9824f76fd32002ae75eabd15bb97bfc617562459bcb800b639def41582a4aabcee3f4e0c9e0663366d10d338c37e3d9bbc18adf1ce19b5c755d1c87bc1658971decdd2acb6ca301816651af64afbbf9387440a257fbb48dea197e5bc80ad61001230f0131b83e364099a9dc9ba24893b67ed9612ead21f4bb85580a1c9f6e89369229a4d67a1c4d86cd768595c602988c7e728df884b013", 0xee, 0x972d}, {&(0x7f0000000580)="4200be21e65f1ef2deaaf4960d93b4c8b8f86af582baae376328731cb6f14873b335f30b68af7755069483286d69b14e589298373f588276dd721729e17b20f2e8e9d8c5f1ce963b7216cec2062daa714e0d5639015f147753dac659e32503d3f2b1042f21f8e6c6f93a0072920771303fcc1b782648cf75a7ffff534c5aee57654688c8b78ea40a4fe6c4bc0c9244b1eee49aa8aba10b0e8fda8304dd5948e2db4b578626f65993aa918abd8a", 0xad, 0x5}, {&(0x7f0000000640)="9f8881a2e441632939026dea5c639b709a3bf5ad37e44b8c66d1a2b63dcf51166aef419e2fadd76ce7cd67fe010681efda42eee7e30727442b409c6aeda9f5430a52f4dcfa61629d1da3d114d792399b50a96880fbce822c5fc7cdf5a927482f377ba6d1328fbc12da6409196aaa451394195b4fbc5dcb84c1e6", 0x7a, 0x3}, {&(0x7f00000006c0)="3ff8d684644adde0e352a7f0f136ef8d877eb779adbd4e0533f5c621f41bb5972a6f77487bffeff2f5574d811aa99ffbf0dd0ac54e48c7b1f4922cb8513c61481de711ffc205ef12ac3683fb82307c82ed0246ef9dfe7d1f8a7c858914334f7a697adcbaf5cb7594f643f974430dafd37d1485a1039499a27609a7899dd2dc027b977d9237961e860d73f08bcfba4462fd3453fd9ebc5f8bae65b38628e4a6d3382b3706622ff65b49c5837f1d36857c3bfd752a6790b127a957461ae3a2dd65385f76a4f960be61171dc7355a4cf7c470a3a441aa1c5cd5", 0xd8, 0x7}, {&(0x7f00000007c0)="856a27c34806a4922e82d7cf2662657f70d125826dd5d84fc9583d6a4717cb3ace1971666c5bcb54ba5310c5ede623b89ba5b57d6b4a66e36a5e55dfa075a249eb2d79891562966317f0e137c6df160214b61d4e223d110d82a6be0f45eb0f2c5aaa284132386afeb9fa684661ab5ca410c073eda682eb7359c4fb8e1594ba70d40464dfb907c6dff93f7c646e61da251d11a5edf289b8d1a33f679107cb7c0f0ee7f4675f685c78bea64afb588dccf4d5e94191b892aa2826f73db2bca748e08c3173db52fd", 0xc6}], 0x3, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000500)=[@in6={0xa, 0x4e22, 0x7, @empty, 0x4}, @in={0x2, 0x4e20, @loopback}], 0x2c) 05:42:44 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000040)={0xea12c9bbb641b14, 0x60, &(0x7f0000000000)="fcfd21607ec26720b44b1d4c2688e1f1", {0x3f, 0x6, 0x38414762, 0x3, 0x1, 0x4, 0xbcf8e32e3deeef6c, 0x4d9}}) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) 05:42:44 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="8cff7cf999ffffff5345204c696e75781200000001d867000600041b070000003c9f030003000000"], 0x28) 05:42:44 executing program 4: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7d648be54e3fb08cb8c74740f239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d"], 0xc4}}, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x5, 0x80000) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendfile(0xffffffffffffffff, r0, 0x0, 0x1) [ 954.702248] SELinux: security policydb version 18 (MLS) not backwards compatible 05:42:44 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xffffffffffffffe0, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) [ 954.759778] FAULT_INJECTION: forcing a failure. [ 954.759778] name failslab, interval 1, probability 0, space 0, times 0 [ 954.780470] SELinux: security policydb version 18 (MLS) not backwards compatible [ 954.800611] CPU: 0 PID: 17497 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 954.807758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 954.817116] Call Trace: [ 954.819715] dump_stack+0x138/0x197 [ 954.819733] should_fail.cold+0x10f/0x159 [ 954.827501] should_failslab+0xdb/0x130 [ 954.831486] kmem_cache_alloc+0x2d7/0x780 [ 954.835651] copy_process.part.0+0x444f/0x6a00 [ 954.840259] ? __cleanup_sighand+0x50/0x50 [ 954.844500] ? lock_downgrade+0x6e0/0x6e0 [ 954.848661] _do_fork+0x19e/0xce0 [ 954.852137] ? fork_idle+0x280/0x280 [ 954.855862] ? fput+0xd4/0x150 [ 954.859057] ? SyS_write+0x15e/0x230 [ 954.862781] SyS_clone+0x37/0x50 [ 954.866150] ? sys_vfork+0x30/0x30 [ 954.869699] do_syscall_64+0x1e8/0x640 [ 954.873585] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 954.873604] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 954.873612] RIP: 0033:0x459879 [ 954.873618] RSP: 002b:00007f5d58de2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 954.873629] RAX: ffffffffffffffda RBX: 00007f5d58de2c90 RCX: 0000000000459879 [ 954.883641] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000029000400 05:42:44 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) 05:42:45 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400040, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000100000000000000000000000000000000000000000000000000084cd85206b5ad23362c80c06559b2bb20000000000000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e8623b4bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce0000"], 0xc4}}, 0x0) 05:42:45 executing program 5: setxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000140)=@md5={0x1, "1d30573f71c807a67cbd00546e939ff7"}, 0x11, 0x1) setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 954.883647] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 954.883653] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d58de36d4 [ 954.883659] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 [ 954.949466] SELinux: policydb string length -103 does not match expected length 8 05:42:45 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) 05:42:45 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) syncfs(r0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000040)={0x3, 0xd8f}) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0x2a7, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) 05:42:45 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400000, 0x0) utimensat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x7530}, {0x77359400}}, 0x100) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000140)={0x15, 0x45, &(0x7f00000000c0)="b6f9e59efebd2ce5da11d34eccc035e30996f752f060cb56ab6beb804b8447f752bbdd8c7656cc13ee069e598a1672508d88ed69f178abc6fb8ce9abb16b78ffecf1b9b6a7"}) 05:42:45 executing program 0 (fault-call:3 fault-nth:13): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x29000400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 05:42:45 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x1ff, 0x2100) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000140)={0x7fff, 0x0, 0x7fffffff, {}, 0x7, 0x1}) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="8cff7cf999ffff0006000400070000003c9f03000300"/40], 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f00000000c0)="dcc400d089a1c326f246ab4c7a2e044256aef9b28eb5ec070b6f0a44c9aed35ad3082ac57b9e55c2cd7cdca8305b4d94e8dea2fdeb377af7bd5591268dd90eb73bf76f9ba22ec43e6e1b95315256bc8071779d05f312fbda42553d4ecbb1918e039bf0a1c0a5a4819cb15f79b25f50b21028b89e7c07e606461a4a8a2b", 0x7d) [ 954.991498] SELinux: security policydb version 18 (MLS) not backwards compatible [ 955.000636] SELinux: policydb string length -103 does not match expected length 8 [ 955.005333] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 05:42:45 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) 05:42:45 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) r1 = dup(r0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000000)) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000040)=0x2c, &(0x7f00000000c0)=0x4) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) 05:42:45 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x3, 0x2000) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0xc00fb555721af37d, @host}, 0x10) [ 955.076414] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 955.082021] SELinux: policydb string length 679 does not match expected length 8 [ 955.102561] FAULT_INJECTION: forcing a failure. [ 955.102561] name failslab, interval 1, probability 0, space 0, times 0 [ 955.156397] CPU: 0 PID: 17530 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 955.163649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 955.163654] Call Trace: [ 955.163671] dump_stack+0x138/0x197 [ 955.163689] should_fail.cold+0x10f/0x159 [ 955.163705] should_failslab+0xdb/0x130 [ 955.163722] kmem_cache_alloc+0x2d7/0x780 [ 955.192306] copy_process.part.0+0x444f/0x6a00 [ 955.196917] ? __cleanup_sighand+0x50/0x50 [ 955.201166] ? lock_downgrade+0x6e0/0x6e0 05:42:45 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) shmget(0x3, 0x1000, 0x4, &(0x7f0000ffe000/0x1000)=nil) umount2(&(0x7f0000000540)='./file0\x00', 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 955.205333] _do_fork+0x19e/0xce0 [ 955.208794] ? fork_idle+0x280/0x280 [ 955.212514] ? fput+0xd4/0x150 [ 955.215710] ? SyS_write+0x15e/0x230 [ 955.219436] SyS_clone+0x37/0x50 [ 955.219445] ? sys_vfork+0x30/0x30 [ 955.219458] do_syscall_64+0x1e8/0x640 [ 955.230227] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 955.235081] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 955.240269] RIP: 0033:0x459879 [ 955.240275] RSP: 002b:00007f5d58de2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 955.240286] RAX: ffffffffffffffda RBX: 00007f5d58de2c90 RCX: 0000000000459879 [ 955.240291] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000029000400 [ 955.240296] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 955.240301] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d58de36d4 [ 955.240307] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 [ 955.278161] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 955.282096] SELinux: policydb string length 16777113 does not match expected length 8 05:42:45 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000040)=0x9fc7) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000080)={0x2, 0x0, [{0x2, 0x4, 0xff, 0x3, 0xfffffffffffffffd}, {0x0, 0x2, 0x7, 0x8, 0x6}]}) [ 955.307371] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 05:42:45 executing program 4: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000200)={0xf, 0x8, 0xfa00, {r2, 0x2}}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getresuid(&(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000300)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) write$FUSE_CREATE_OPEN(r0, &(0x7f00000003c0)={0xa0, 0x0, 0x1, {{0x4, 0x2, 0x9, 0x3124, 0x8, 0x7, {0x6, 0x7ff, 0xffffffffffffffc9, 0x1, 0x8, 0x2, 0x9eca, 0x5, 0x2, 0xa1, 0x0, r4, r5, 0x2, 0x4}}, {0x0, 0x1}}}, 0xa0) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) 05:42:45 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x802, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000300), &(0x7f0000000340)=0x4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000140)={0x9, 0x0, [{0x2fe3, 0x1, 0x0, 0x0, @irqchip={0x4}}, {0x594, 0x4, 0x0, 0x0, @sint={0x6f, 0x9}}, {0x6, 0x1, 0x0, 0x0, @msi={0x4, 0x3, 0x80}}, {0x8001, 0x3, 0x0, 0x0, @sint={0xfffffffffffff801, 0x80000000}}, {0x40, 0x2, 0x0, 0x0, @adapter={0x2, 0x23ee, 0x6, 0x7f, 0xbd89}}, {0x80, 0x2, 0x0, 0x0, @irqchip={0x1, 0x8}}, {0x6, 0x2, 0x0, 0x0, @adapter={0x7, 0x6, 0x101, 0x4, 0x6}}, {0x910, 0x4, 0x0, 0x0, @sint={0x8, 0x8}}, {0x8, 0x2, 0x0, 0x0, @irqchip={0x400000, 0x6}}]}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 05:42:45 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781201000001d867000600040007000000"], 0x20) [ 955.359421] SELinux: security policydb version 18 (MLS) not backwards compatible [ 955.398073] SELinux: security policydb version 18 (MLS) not backwards compatible 05:42:45 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x4000, 0x0) read$FUSE(r1, &(0x7f0000001180), 0xb86) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000080)={0xf000000, 0xbca8, 0x1, [], &(0x7f0000000040)={0x9e0001, 0x2, [], @ptr=0xd5e00000000}}) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x19) syncfs(r0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2a35c859b8a8492b}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xc0, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, [{0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, [{0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r0}, {0x8, 0x1, r1}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, [{0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7e20}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x5146b95d07a052f0}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8004}, 0x40880) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) 05:42:45 executing program 1: clone(0x10000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = msgget(0x0, 0x20) msgctl$IPC_RMID(r0, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4000, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) write$selinux_load(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="8c00000001d8580006000400070000003c9f030003004254"], 0x28) [ 955.432616] SELinux: policydb string length 16777113 does not match expected length 8 [ 955.507815] SELinux: policydb version 274 does not match my version range 15-31 [ 955.521199] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 05:42:45 executing program 0 (fault-call:3 fault-nth:14): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x29000400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 05:42:45 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x1, 0x0) fchdir(r0) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x4, 0x600) ioctl$TIOCCBRK(r2, 0x5428) write$cgroup_int(r2, &(0x7f0000000380), 0x12) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000240)) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f00000000c0)=""/35) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) r3 = getuid() r4 = getgid() mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='fuse\x00', 0x40, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=r3, @ANYBLOB="0500000000000000643d21e6336ace921c68e98084db8dbe0ce6afbcb98a7a66718712aec55dd35e237b1c0dcc23af4d8cc319a8e6006fde1d096d7dfd9123238786ecbd6adc5237544a8b10faa9c10c446257aff3f8082ba2090597073800d481de80820a53a5ec84c4e6690826d92142b188730e591583fac95886315c0392b36be150c651b272a89ccfaf6e3d76fc9deaaee1c1083d892a41f3d89b6d1c6ec45d93e05a19ba2a9444e228bed5309a92175f8a41", @ANYRESDEC=r4, @ANYBLOB=',blksize=0x0000000000001400,blksize=0x0000000000000400,dont_measure,dont_measure,smackfshat=vfat\x00,\x00']) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 05:42:45 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) 05:42:45 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = dup3(r0, r0, 0x80000) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x20001, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r3, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x0, 0xba26, 0x1}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x1) getsockname$ax25(r2, &(0x7f0000000340)={{0x3, @netrom}, [@netrom, @bcast, @netrom, @remote, @bcast, @netrom, @bcast, @default]}, &(0x7f00000003c0)=0x48) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r3, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz0\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x4080) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000001900250a0000000000001300fe800000e3ffffffffffffff000600000080000000000000000000000000000022000000000000000a00008000000080055ff3567f753be49b45713bba2bfca20afe9685c11f20a4902fdeb3dc5ec011d5", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) r4 = getuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x19}, 0x4e21, 0x0, 0x4e24, 0x400, 0xa, 0x20, 0x80, 0xff, 0x0, r4}, {0x1, 0x8, 0x3, 0x8, 0x8, 0x3, 0x3, 0x6}, {0x3b, 0x4, 0x8001, 0x20}, 0x81, 0x6e6bbd, 0x2, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2}, 0xa, @in=@local, 0x3504, 0x4, 0x1, 0x6, 0x100000001, 0x0, 0xe978}}, 0xe8) syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0xff, 0x10000) prctl$PR_GET_KEEPCAPS(0x7) 05:42:45 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000100)) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000000)={0xa, {0x5, 0x10001, 0x100, 0x2ae8}, {0x9, 0xffffffffffffffdd, 0xa7b5, 0x5}, {0x7b6, 0x4}}) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000040)={0x820000000000009, 0x0, [], {0x0, @reserved}}) [ 955.677772] SELinux: policydb magic number 0x8c does not match expected magic number 0xf97cff8c [ 955.717666] FAULT_INJECTION: forcing a failure. 05:42:45 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000180)={r0, 0x3}) 05:42:45 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="8cff7cf90820000053452046696f75781200000001d867000600000000000000"], 0x20) [ 955.717666] name failslab, interval 1, probability 0, space 0, times 0 [ 955.738423] SELinux: security policydb version 18 (MLS) not backwards compatible [ 955.752432] SELinux: security policydb version 18 (MLS) not backwards compatible [ 955.774292] CPU: 0 PID: 17609 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 955.781437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 955.790796] Call Trace: [ 955.793393] dump_stack+0x138/0x197 [ 955.797039] should_fail.cold+0x10f/0x159 [ 955.801218] should_failslab+0xdb/0x130 [ 955.805346] kmem_cache_alloc+0x47/0x780 [ 955.809434] ? anon_vma_chain_link+0x142/0x1a0 [ 955.814050] anon_vma_clone+0xde/0x470 [ 955.817954] anon_vma_fork+0x87/0x4d0 [ 955.821857] copy_process.part.0+0x45e2/0x6a00 05:42:45 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001f40)=ANY=[@ANYBLOB="08010803160000005601000008000000d801000002008c70c1abc5265d501d832fc93a89242d648634530fe5b0c28237fb2707e95257c5306b0facf197007bbc6c039ef0bae0053d928af18cf18a91e34d286dba3f3c2dd3f46d1d1c132c486efd7b528e458d276fea40083226e142750e88dd41caf849b572136c02f79574b698e944245ead16c8584da6e35df8119f9576e69033becbf7f7cbf09db8d277682a6762dbe5a66d9a77e41277957f1ba92c8ba9969d3b42e0a4d7f761cd74d95f31a6d368ccf29d57f0e2b401fa365f127fc0250a8b7675721603f1763a8ad3b183e6e6723c611b532617e9199aa370352419431f5a31d3de663d6ea792de47e404de460fe5e93776622cd9e7237c2e975ef60c7472f944f816b71700f340e8f3c1f4d20e0fdd8fa2f884cdac59c71f3688816aba0effba22921a03cc9e3b3ce8a88339b5aeb02b2354e72bb9bdbbb0c8482f1d47d6bb4fe35a9bf76e8983ad9c6bd4152a241b8e64283ef92d16bced54b360d201823e965311f346a0395ee117f7ec08604b1d9e363936867a5b0c186f80f0707680623fca343a9e6d35106ab93b652655cea9bb69e1a6acb1a5f55ba1a91e40fe49021532f80bc56d9050a9b0ed0fb4676bced5d4f8036139e928050e744696dde13b269578d64bbc27d358a1c3086a0c02664dd80423cfb4d5f6f66208d0dc7b867ff57309f5db7e5431ba6d8fdcfbac6982b12e80d094985ac10e16c3c5a05420615fed7f7fec3c427dc71108fae23fbe3db5143755d83aa4533bcf4787aa4de7c7619616985fe50e885cabc8908818285769c600423fa8ae0df4d094c90152a4f9d1cc3f2f7fad07f431d896ca9335a82f411b9d102a672d3fe99bd19fe50d48b18c4f10ed64567d343f1c1dede9f62fe6c4caa720d8f662bb96dd3ffed65bb7104d0a45e5281e7bd6c985721ee02b56869fd15426c690f7c6f3b8e2a91f6691fb7dafd6ffc2c0deed64591cfcac858c71710072003dec4ed3c5b838cb517e60b58348e7640559ce5ddf9ef8b86bf58af8047ee31ebaa8b53973ee18aa999ecbce5d45a4f4c187864d5f20ca6bacc122f4196d581c6c70fd70dae6f9387398e7ac6355057731620d34203fbd972d6c46beb94fcf3380e773a28f46d12e046eb633afcc1728cc12c47805beb62df9e6af031a87ad00b2f9897fbd80c40cb0e34afc36d0036ee9d187f6f1f9aedbd8e73cdb6f34f91817a329368c8fcfa33e062eed2857d3b5101ea81633aa8fa4adf5ead85485d4de9abe1d9c6ac89e88a7f7f6e90857e5abed77329fa43f6178b4850be234a2f1719ee5d92c9f11b58f65b7e6a66af96c4c954f14a4635f8cf7d34382205fa5edcf2cd97ccb4217b9effe2ec423c482f3b8a1774b30ebbda5412b9c9bffecbc7e6ede6066e7cd5f8e692eec57cac338b9818bf0b920f2af533eff674786373feb50a6667de2ee083e0a6af6c3372612781d89fdc0a721c8f6ada0de66bd815c5867b01b8a1343948653750fa76c5331251af0a8bacb44534f3b3b07d4030cb4efe6dda209bada0e8f92a98065a477247d887e072a43ec4d5dbfb81a65fb2ab6a098074493950cb5be4e2ff8489bc9efb4e5555a20f1479489b1e2fd43e4015fadabefb572e3e67a323af295bc4c6e6a1e33c4a8467947335927a1d04f5faf099925539b842770380862cb587eddaf73d2711fa6da0a0436dc48c40ee627c1080a97b3c38efe4035fe72051cf50f6f70935225a90dbce85f04a3e52d1489ed6ca3ccaf0333e10e2abb7b9de3ade90931a2a78d59372f6c3f7e6f948572f79b175f7f1283b7acd8d55872a59062c5350e3ead118454e23b0b04ea90f76834379913b60ad8d0865f5a93472b0194ea0569c05dc17f7969b13c4df2480008abeb3650e0c3a5e12eb95dfee8d906d53248b0a8b16e64ef68dba47a3c53cb747f12cf40e9f97c77052ae686d058a0c6c951302ed2fa1479b3d5ca4decbb76b602ea982335ccc8fdb03818c38e1f9930f3b018887abeb42d77a19ca82b20a199d7d41b6ad02d4d2704fa0c3f0a0aebcc8530b37883f6db9175201e13e04a0734ee12a88ce91548dc669ad3da1b4ff3fb0e7f95bd1ab55cd9c1a9d0d9ac68f0f44994444e2d104346788587e8ac9adb161de0d3179043e2a2d7216fa26f01a9c5e28bfba3418c6686d74122cfe3267a2bddf10864f4ce27271a0b65cd2cb627b0c26b22de6a878d5096f9f5fa0219541a2db72b52b42e5508bc43049bbee4c60180a784d79fbe276746c83fa57bdea0cacbe4a4b8dcd07cc5d4dd0d9bfd4f218c0d7133014f17ec46de711aafe53217039b928aedcae7b92399cd209326afbe5e4825aa98dfee8427bd485c1dc2fc62e20a3310b313dd879441048754fe95f49c3ca7a0ff651dc76e0885312e51ac864610fb51a4e9d75890145158ccf82470e6f73cd14b80c789719e2bde6d43d993a2fdddc68ee144353a23fb2485bd1893d8fd6e2c41add0273fc03cdb0acb42243c63b4b27812d657bd8eacdeaf897dea3bc6277af96a2cc809121029d26dc8808775565d6dc2e767718a0d1d6a93f20da2ede5fb9f18b75c2568500ad7d248ab362032ff750414944a39f6fe98e0302dde08995af802b8613717e6ff8039a192af0bb2492b64f9f657d38546ae3900519765e34323cb5f87299da93580408eb1e7c21cafe112d46bce82ea76053fdc9a4c3a35a541f7a2b84083f36067bf2843a964b1e608595e67eed9f9954e66c2040ece4183f077b8bfb64e9e026f2e056b26e5ed50516dca0c304aac006d821d200658df3c3b9d654f5dbafad8292499eb3a38276aa34595413d466878cb28b990958c9601fb5ba941e6723cbeb2a55648878915f6a7ff61fd9fe15ce4072b6ddbfc107e1e82a55ffd5bb89aebe9b9744a706b7a9ffdef45bd3e293124091c74fc6e9a1ee247820bc4cd0b5ee838ba87ee1c2282a2165574911ece3829b73fc23df5ca65802d85475a0dd0c0deab33bc464bbedcb0eb3ce45b385886896f82e367743b06558ab8cb7fcd98f6552ad5b42c2e896d4738f2f287a23502776136683f7352e5fa1a68a02502c777e4791e93f6c70466885a6f4dab7483888e1f4c8529c350e98885c681c5aeb7189e112d078dcff372f95fc1f47e94935b3a00be5092789819eea0695a11eba1645be59f9a20bc98e3cd06225789e82adb8efed9e2f7335fe2bf4a91cabdfe86a3863bc78b9c9ac89d4a14d9e33e83eaf991bd479af3852e2a155cc4c7d00525128b36b3b1b3ebf86223085afdf012ad1066e40d2a5b41ac3cc520c479b65c69089f67e3af17fa4c60acc38cb845e8c82fe4a5504e5feb8b4fc450e67cb3515aa942f5f964ffa0a97cdd9203dc04e8b9af6f68281df70d7238d51b1804ee6d498258f737026adcca997417721f3c0adbb661e81ce2571913840d5fef4e17eff240da4aaae29e60a5525afe2efdea5ef8c610c5a94c71fe615f5e8a12d085c25b8309c8c1de3534769a14ed7fbcd89934fec7d8117f9ff2b23796c5be491e1c3ec9db7b8e7037549547fb0174d52893d517699bc13ae75bf13d25c4a9da970ddb8b434d271d8c5ce445ea19a8f9b896f71bf2ecfdcc9a6adc4c8ec1cd99998c21ec68bfc2b3c0d8737f7c8327d1f71bb2257f0e53d3b70ccb349dc06daa5aab0c853a8a7df964946917e00bb505b7fdc4e1d4c8217345a4914e5c086dcd9eb72487e289fb99d5e80182f6c3b2e41b94ae3eb06e63d561101fc8ff82f20138bc83a59829dd728d63871235c561d642189f6d8b746c347104fbade0f62236ed4869c3ee1b6f0bff799cb69b62d3806de5271cf71a0ce8d868c5267fe046890bbb1fd7714381ef9730da114a9a6f6d09dd49e4f28bab2852713bcb25cdb8fe8a718f89289c8c3ead2860fa6f88b746eb531fb52a12e3cde38a3a8f6164a199d8f00bba90882eb802ebc179979512554f1b956aaa8fd250e0dc456dcbb19a6da76fae962c1ff38a9b8dddd5ac4fb64c2d2ce85cec2710552c58f2611fe5dd38bc99800e0a1fa8739050f0983bc018f79385869a84136d752cc376286172d572043da14a1d9c53bd0e0e41db6236ebac5088b1b5442a23ee1e031316debb8b83e941a73974631f17c0597243d05a80e213e6cdea89a55339b43a9f4c32fa3e1832ab203fd56f24832ebe65a7716cae681eb5774d683f69cff68ac8610782df87d2c78f6a12f17f0c8881e5a2b983bd4a71c46a8f3f9a6078fd0a69af2d639e5edb525fa1dc298d16051d0aafe297edf4096527f071457fe458c1ad6e595ed7ce35de94f9ffd5f5812d89dd948e90628cf8d1b61b7f3ad5a0b6634a2004aa659717aa9e9e336b6d088556775a5a4b6e7307db6d766e3e9e927d4ec4739a6a99d4686bf5c4d77b9747a9c1a0ed6293bb05cb92b0e9a9cc598fcf828e155de59aaf046f11c9e8ac30fad1110961420a6b8d08fb5993371a68ee28ea5acf9d30cf84387275197507dde4c792828f99058d839e9c662647c837d7238c8e10043e04da8e206b0775079fb8cd1d528058e700f616f68df507f6e36a27c00cc2afdf3a4d1f433c59d763d83eb8f70cbf24b966fb1c80063fd875c6e01ca849e425ab84f507f56902b81d0ceedb841c9f748e39e0767abfeb16485eff1a00caeba505ceda3c7228160ce1507f5df47748d02cdf44b45dfb8c140cbdcdeaf3af5c74d4196d4717a8285e012a6cd1917595ba74176f75608f902ade94c079c0229c27124af8e496649613fb7d4cbbde4833fc52b18528872020d7bb497ad2e3500252042d93f6d74c4172d8845b7b91fc26aa6f3aeaca99dabb58bbfc11d6167ed512dc7713fdb79186b32ba5037b05c0061f547cfcb021ce6241855c093db9f3a175763d4a1c1eaa7045f03cc8271324c9d01c35986014bbf01be27dcb7c4446b3f22d590434b741aa915bb4f278699c6ff89a8b8bd5d1f88184fa52f742cb0eeb7ab03c503cc3b97ba3f88c87398eeb1a3ea58e98dbd5dff3a80c56c0287bd14e9ab3a76b8c97ba955b3bcc8dbd80a83c58546dec90b4bf915575b0460a26567fcbafb4b10c43c70d7d9318464fcf9568e0311e8b31b1a6e8c2bf7927773b41a2f859d2f2c1d5026bbab8f49ade836f05331506535d0c87d6db93dfd50d684ca192d420e663bc8020f5cc3d7604b078de92b4902564adf2cb7b47793abfc5b100d01007529469380d27c6c382684e70d82180507fef6a2dffc552bd23523f795b71b828e567a6e5a6ddd8cd06cbdda75635307c09dccd08533d9f800b4ab52981af6bcc390771dda39c4cdc4edd86a588bd5ebb61008d4b78c5f949dcddd23839a0c71fc4fd4bea6d8961df1989c55aa7f10733dbeca2e90143dbd0b013c79ef05843801cb847dc54fa47c424de7afc29369aaabd62198cc18b3ea5f44dca42581b92a18d30cd0e96f42db4693e16e57b3832aad0311383a082447334ef98b3bb14652726809bb35f05cfae55ab93dab631313a486d81c118b418b70f9ba96f150a01f043c5862293b72c123dca85b11dce7119d5445e48952cb39a276ab40dedb3ab21d73d0dd550cca5b44acc345a6c75e77f7db324f962ebbc863d428aea98ea6b793515530041fa429e79019a7375ad223d506c88c7bc6226529fea1cdff95a63c473e0280e7b2cc1fbfb9c46dbd3f1e95597d3e12d365e995db3655b5cb8653572b9199113ffa36afdc4e19dd9578d1dc4cfe5ccad2cf2e66b1cd37d67cf1e2f5250fa97132ff180a3f8c438916e0c8edbe1307438f83778134068242eee578f9fde75a3c41d1c3f301d5d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c02602b7582e693eb8e27990fccacc3dbb3f260a3fd03fb608e5c6b5c90d6d17ce2746ad89dc6df27161d5381a5759043e5c76a78ee81f88517770968731c6320047ccc822325190c6cc62845f9e9f7ff1ced1fd2365289e3f5981046cc2b850e283489c1ab2a2f709cc4"], 0x1920) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200a00, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) execveat(r1, &(0x7f0000000400)='./file0\x00', &(0x7f0000000480)=[&(0x7f0000000440)='/dev/sequencer2\x00'], &(0x7f0000000580)=[&(0x7f0000000500)='vfat\x00'], 0x500) openat$cgroup_ro(r1, &(0x7f0000000700)='cpuacct.upercpu_user\x00\x00\x00\x00\x00\x00', 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="100000005f1222baaf4b079cacde52a5142afdacc9edb1f6c8e24fe8707589be17010007002e2f66696c6530"], 0x10) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000640)={0xa, {0x3f1, 0xffffffffffffffe1, 0x30d5, 0x100000001}}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000001c0)={0x0, 0xf9, "3ce9000cee55fc221bc601d6347d39b5b461244791d851618d4f045af94b10b6022c76cb738b04bfec36fa7bd39c009a392e1d02eb50ce728bedaeedba40d9d8c8e3520e17d44414c7f0c70eacec4d12f1a06bc11c8917661b0ef09623d903126a1bc24996d8f47161aebc8ff4f3685f516f897decd20269bfe07462cb0c35e1bfb64bd8b589a330806e51cda6180f1496ffe06ce9a15bf975f33fd29c00590c061e4e061c0ca5bed1b133499b3daf775355389dacef0b9b7ae881abba315246f8b7ed3d42fb67be9c78bf60c40884008f48c214ce44cdd1f0f20d30c89a1f9f35845d6430e108e617e132936b0b7763a44dff5682d57023c7"}, &(0x7f0000000300)=0x101) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video0\x00', 0x2, 0x0) rt_sigreturn() getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000340)={r2, 0x100000000}, &(0x7f0000000380)=0x8) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 955.826551] ? __cleanup_sighand+0x50/0x50 [ 955.830810] ? lock_downgrade+0x6e0/0x6e0 [ 955.834969] _do_fork+0x19e/0xce0 [ 955.838431] ? fork_idle+0x280/0x280 [ 955.842153] ? fput+0xd4/0x150 [ 955.845364] ? SyS_write+0x15e/0x230 [ 955.849081] SyS_clone+0x37/0x50 [ 955.849091] ? sys_vfork+0x30/0x30 [ 955.849104] do_syscall_64+0x1e8/0x640 [ 955.849113] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 955.849131] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 955.870078] RIP: 0033:0x459879 05:42:46 executing program 0 (fault-call:3 fault-nth:15): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x29000400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 05:42:46 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="8cff7cf999ffffff5345204c696e55781200000001d8670006000400070000003c9f030003000000be132aca805799df8512637732a9d2ce24cf57a0215b67302d4ea4ce13b56c4340dbf5379442b5d4c9ac1ea15b9154e363b344f095e232ab9213efb99cd337cb8bc41af22efe43059d0e4cbb4cfaf5a49849cb73ff330e5a11b108eeab40e8"], 0x28) 05:42:46 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77fb, 0x400000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000001c0)={@loopback, @multicast2, r2}, 0xc) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) syz_open_dev$vivid(&(0x7f0000000100)='/dev/video#\x00', 0x2, 0x2) [ 955.873271] RSP: 002b:00007f5d58de2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 955.880984] RAX: ffffffffffffffda RBX: 00007f5d58de2c90 RCX: 0000000000459879 [ 955.882266] SELinux: policydb string length 8200 does not match expected length 8 [ 955.888248] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000029000400 [ 955.888254] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 955.888259] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d58de36d4 [ 955.888265] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 05:42:46 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') getpeername$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000004c0)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000500)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000600)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000680)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000700)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000740)={{{@in=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@empty}}, &(0x7f0000000840)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000880)={{{@in6=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f0000000980)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000009c0)={@broadcast, @local, 0x0}, &(0x7f0000000a00)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000b40)=0xe8) recvmmsg(r0, &(0x7f0000005300)=[{{&(0x7f0000000c40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000cc0)=""/196, 0xc4}, {&(0x7f0000000dc0)=""/75, 0x4b}, {&(0x7f0000000e40)=""/254, 0xfe}], 0x3, &(0x7f0000000f80)=""/245, 0xf5}, 0x2}, {{&(0x7f0000001080)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001240)=[{&(0x7f0000001100)=""/134, 0x86}, {&(0x7f00000011c0)=""/89, 0x59}], 0x2, &(0x7f0000001280)=""/114, 0x72}}, {{&(0x7f0000001300)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000001440)=[{&(0x7f0000001380)}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/119, 0x77}], 0x3, &(0x7f0000001480)=""/69, 0x45}, 0x1}, {{&(0x7f0000001500)=@tipc=@name, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001580)=""/9, 0x9}], 0x1, &(0x7f0000001600)=""/109, 0x6d}, 0x4}, {{&(0x7f0000001680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000001700)=""/143, 0x8f}, {&(0x7f00000017c0)=""/231, 0xe7}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/51, 0x33}, {&(0x7f0000001900)=""/241, 0xf1}, {&(0x7f0000001a00)=""/35, 0x23}, {&(0x7f0000003a80)=""/206, 0xce}], 0x7, &(0x7f0000003c00)=""/194, 0xc2}, 0x10}, {{0x0, 0x0, &(0x7f0000004e80)=[{&(0x7f0000003d00)=""/62, 0x3e}, {&(0x7f0000003d40)=""/88, 0x58}, {&(0x7f0000003dc0)=""/4096, 0x1000}, {&(0x7f0000004dc0)=""/79, 0x4f}, {&(0x7f0000004e40)=""/13, 0xd}], 0x5, &(0x7f0000004f00)=""/55, 0x37}, 0x77c}, {{0x0, 0x0, &(0x7f0000005240)=[{&(0x7f0000004f40)=""/151, 0x97}, {&(0x7f0000005000)=""/219, 0xdb}, {&(0x7f0000005100)=""/164, 0xa4}, {&(0x7f00000051c0)=""/77, 0x4d}], 0x4, &(0x7f0000005280)=""/65, 0x41}, 0x2}], 0x7, 0x10000, &(0x7f00000054c0)={0x0, 0x989680}) accept4$packet(0xffffffffffffffff, &(0x7f00000055c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000005600)=0x14, 0x800) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005700)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000005800)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000005840)={'vcan0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000006c80)={@initdev, @local, 0x0}, &(0x7f0000006cc0)=0xc) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000083c0)={&(0x7f0000007140)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000008280)=[{&(0x7f00000071c0)}, {&(0x7f0000007200)=""/4096, 0x1000}, {&(0x7f0000008200)=""/84, 0x54}], 0x3, &(0x7f00000082c0)=""/232, 0xe8}, 0xf8167a0efe915d78) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000008500)={'team0\x00', 0x0}) accept$packet(0xffffffffffffffff, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000008580)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000085c0)={{{@in=@empty, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f00000086c0)=0xe8) getpeername$packet(0xffffffffffffffff, &(0x7f000000cb00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f000000cb40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000cb80)={{{@in6=@ipv4={[], [], @remote}, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@remote}}, &(0x7f000000cc80)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f000000cfc0)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@local}}, &(0x7f000000d0c0)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f000000d900)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f000000d8c0)={&(0x7f000000d100)={0x7b0, r2, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x1bc, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r9}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1ff}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffff8}}}]}}, {{0x8, 0x1, r11}, {0x1f8, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r15}, {0x258, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x44, 0x4, [{0xffffffffffffff30, 0x638d3f29, 0x4800000, 0xffffffff}, {0x10001, 0x62ca, 0x4, 0x80}, {0x4, 0x3, 0x101, 0x3f0}, {0x401, 0x9, 0x4}, {0xffff, 0x7fff, 0x8, 0x40}, {0x4, 0x3ff, 0x800, 0x8}, {0x10001, 0x2b7, 0x4, 0x5}, {0x9, 0x1, 0x9}]}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0x6, 0x182, 0x4, 0x1000}, {0x6, 0xc5, 0x4800000, 0x800}, {0x7ff, 0xffffffff, 0x6, 0x8}, {0xfffffffffffffff8, 0xcb, 0x6, 0x3}, {0x7b0, 0xac, 0x2, 0x3}, {0x100, 0x8, 0x1f, 0x1108}, {0x5267, 0x80000001}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r19}}}]}}, {{0x8, 0x1, r20}, {0x124, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xe4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r21}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r22}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}]}}]}, 0x7b0}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) 05:42:46 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgPsyz\x88\xbbh\xe7!\x10\xe1\n\x1e\x11\xa6\x89+g\xdf0\x1c\x00\x00\x00\b\x00\x00\x00\x00', 0x200002, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x200000, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(cast5-generic)\x00'}, 0x58) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x878, @rand_addr="a4661970a8b3d541988968ca0381a000", 0x1}, 0x1c) umount2(&(0x7f0000000200)='./file0\x00', 0x102) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 05:42:46 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) [ 956.042954] FAULT_INJECTION: forcing a failure. [ 956.042954] name failslab, interval 1, probability 0, space 0, times 0 [ 956.093203] CPU: 0 PID: 17640 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 956.100361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 956.109709] Call Trace: [ 956.112294] dump_stack+0x138/0x197 [ 956.115916] should_fail.cold+0x10f/0x159 [ 956.120280] ? anon_vma_clone+0xde/0x470 [ 956.124333] should_failslab+0xdb/0x130 [ 956.128295] kmem_cache_alloc+0x47/0x780 [ 956.132345] ? anon_vma_chain_link+0x142/0x1a0 [ 956.136918] anon_vma_clone+0xde/0x470 [ 956.140796] anon_vma_fork+0x87/0x4d0 [ 956.144589] copy_process.part.0+0x45e2/0x6a00 [ 956.149173] ? __cleanup_sighand+0x50/0x50 [ 956.153395] ? lock_downgrade+0x6e0/0x6e0 [ 956.157536] _do_fork+0x19e/0xce0 [ 956.160980] ? fork_idle+0x280/0x280 [ 956.164683] ? fput+0xd4/0x150 [ 956.167865] ? SyS_write+0x15e/0x230 [ 956.171571] SyS_clone+0x37/0x50 [ 956.175011] ? sys_vfork+0x30/0x30 [ 956.178542] do_syscall_64+0x1e8/0x640 [ 956.183289] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 956.188124] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 956.193300] RIP: 0033:0x459879 [ 956.196477] RSP: 002b:00007f5d58de2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 956.204301] RAX: ffffffffffffffda RBX: 00007f5d58de2c90 RCX: 0000000000459879 [ 956.211563] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000029000400 [ 956.218848] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 956.226104] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d58de36d4 [ 956.233382] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 05:42:46 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e5d781200000001d867000600040007000000"], 0x20) 05:42:46 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x800, 0x0) r1 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000200)={{0x3, @rose}, [@null, @bcast, @bcast, @rose, @remote, @remote, @netrom, @rose]}, &(0x7f0000000280)=0x48, 0x800) r2 = accept4$netrom(r1, &(0x7f0000000080)={{0x3, @null}, [@default, @rose, @rose, @bcast, @netrom, @netrom, @null, @default]}, &(0x7f0000000140)=0x48, 0x80000) ioctl$sock_netdev_private(r2, 0x89f8, &(0x7f0000000180)="2504a1e7632d99c6aebeb8bca08f41d3fc94") umount2(&(0x7f0000000540)='./file0\x00', 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 05:42:46 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='/dev/video#\x00') r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, 0x0) [ 956.258353] SELinux: policydb string length -103 does not match expected length 8 [ 956.296583] SELinux: policydb string length -103 does not match expected length 8 05:42:46 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x9, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}, r2}}, 0x30) 05:42:46 executing program 5: getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) r0 = getuid() r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ubi_ctrl\x00', 0x0, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000480)=0x4, 0x2) setreuid(r0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000100)=0x5, 0x2) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 956.351104] SELinux: policydb string SE Lin]x does not match my string SE Linux 05:42:46 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a000080000000006bf11c5de2fe10c78eac45f1fd4a77134a669ea1663c5168b8ba6c1a40f13a5366b132814810cef517737356e97a623c37b0b463c73bc5e9e8510f33fe7dcdb2651b5ded7473ff9cd5237a0ee7bc62cc6122d629181fb5a59585bc7a58379cb6ee8ebf5c8ab57a88f229b034367ccb3322567fc728b7e70f8892e9dfb226a92b3b4f11", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) fcntl$setlease(r0, 0x400, 0x2) 05:42:46 executing program 0 (fault-call:3 fault-nth:16): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x29000400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 05:42:46 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x200080, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000180)) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) 05:42:46 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x20077ff, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) 05:42:46 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) fcntl$dupfd(r0, 0x406, r0) 05:42:46 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffffb3, 'SE Linux', "1200000001dc679f03000300"/24}, 0x28) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)='SE Linux', 0xffffffffffffffff}, 0x30) ptrace$peekuser(0x3, r1, 0x4) 05:42:46 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)={0xb, 'syz1\x00', 'syz0\x00', 'syz0\x00', 0x1f, 0x9, 0x4, 0x100, 0x7, 0x1, "287ae0a8b47dd5eddea83e5c292ed265ee7b1c7197a74a33c883221c94ec09"}, 0x137) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @in={0x2, 0x4e22, @multicast2}}}, 0x90) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000140)) [ 956.488409] SELinux: policydb string length -103 does not match expected length 8 05:42:46 executing program 3: keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/96, 0x60) r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x101000, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r2, 0x8040ae69, &(0x7f00000000c0)={0x4, 0x4, 0xe8, 0x2, 0xea4}) r3 = accept$alg(r1, 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x2800) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="8b", 0x1) write(r3, &(0x7f0000000000)="fd", 0x1) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) 05:42:46 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0x1, 0xba3, 0x9, 0x326}, 0x10) [ 956.601671] SELinux: security policydb version 18 (MLS) not backwards compatible [ 956.621496] SELinux: policydb string length -77 does not match expected length 8 [ 956.643533] FAULT_INJECTION: forcing a failure. 05:42:46 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='p.cpu/syz0\x00\x00\x80\x00\x00\x00%\x00LY\x00\x8e\xd2\x16\xc3\a\xdd.\xed\xffm$\x8c\"\x99\x7f\xee\x87\x13k\x05\xab\xca\xae\x16G\x03%?\x10\x95\xa9\xef\xa1+\x90\xe8I\v\x8f', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) mount$9p_rdma(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x200000, &(0x7f00000002c0)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@sq={'sq', 0x3d, 0x3}}, {@sq={'sq'}}, {@common=@loose='loose'}, {@sq={'sq', 0x3d, 0x209}}], [{@context={'context', 0x3d, 'user_u'}}, {@subj_role={'subj_role', 0x3d, '+'}}, {@audit='audit'}, {@smackfshat={'smackfshat', 0x3d, 'p.cpu/syz0\x00\x00\x80\x00\x00\x00%\x00LY\x00\x8e\xd2\x16\xc3\a\xdd.\xed\xffm$\x8c\"\x99\x7f\xee\x87\x13k\x05\xab\xca\xae\x16G\x03%?\x10\x95\xa9\xef\xa1+\x90\xe8I\v\x8f'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@context={'context', 0x3d, 'sysadm_u'}}]}}) umount2(&(0x7f0000000540)='./file0\x00', 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 05:42:46 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000040)={0x3}) write$selinux_load(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="8cff7cf999ffffff5345204c696e7578120000000106000400070000003c9f030003000000000000fd58d72569b4ea36207a96a0f2478e1e7706689c7ed4df474fb4bf62eac4192ad435d7e71f3d95d5f0a0983036e422a8ae55a13799ebf5b349dec0665e6baee560948135d821463a7d1725df8d79be58cfba573540244e7e47f139a180ea61c834366f98a28e7eb7fd63806709fa798f5505e83d9a3e17c8e30dab60cd65154c1b9f175c2a1f42e7a11cf6770c8b5dbfe7272feb28360e9e1b76393c239602200c5d5e0dfcabcbb7900470ec81f4c6dd121aa7deaf78d97f102ba8ee74f988"], 0x28) 05:42:46 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x1, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') syncfs(r0) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0xffffffffffffff1f, r2, 0x20, 0x70bd27, 0x25dfdbfe}, 0x2c0}, 0x1, 0x0, 0x0, 0x40}, 0x800) [ 956.643533] name failslab, interval 1, probability 0, space 0, times 0 [ 956.649437] SELinux: security policydb version 18 (MLS) not backwards compatible [ 956.734674] CPU: 0 PID: 17713 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 956.741952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 956.751399] Call Trace: [ 956.754000] dump_stack+0x138/0x197 [ 956.757647] should_fail.cold+0x10f/0x159 [ 956.761812] should_failslab+0xdb/0x130 [ 956.765806] kmem_cache_alloc+0x2d7/0x780 [ 956.769970] ? anon_vma_clone+0x310/0x470 [ 956.774129] anon_vma_fork+0xe9/0x4d0 05:42:46 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f00000001c0)=0x2) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000002c0)={0x0, 0x5}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e21, 0xfffffffffffffff7, @local, 0x5}}, 0x0, 0xf3}, 0x90) r4 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x2, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f00000000c0)='\xa1security\x97*\x00', 0x0}, 0x30) modify_ldt$read(0x0, &(0x7f0000000480)=""/166, 0xa6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r2, r4, 0x0, 0x1, &(0x7f0000000080)='\x00', r5}, 0x30) accept(r4, &(0x7f0000000200)=@nfc, &(0x7f0000000440)=0x80) fcntl$getown(r6, 0x9) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000540)=ANY=[@ANYBLOB="dc000000190096b3dd6c6607dbd021e6958571e7113f250a0000000000000000000000000000000000000001aafe800010dbe424c8270000000000000000000000000000000a0000800000000078609291367bb483bcc7582012fd22588101259c3cfe29ba43dad22c4f458225efa20ef0fbba093acffa04000000310f948869f165c84413a41078257d901ab6df8fd85019c067a13bc26741857133ac5bb0bbd0478fae659a95ce1ff8b819abe787ccca2693fc11", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) [ 956.775423] SELinux: policydb string length -103 does not match expected length 8 [ 956.778084] copy_process.part.0+0x45e2/0x6a00 [ 956.778119] ? __cleanup_sighand+0x50/0x50 [ 956.794707] ? lock_downgrade+0x6e0/0x6e0 [ 956.798868] _do_fork+0x19e/0xce0 [ 956.802337] ? fork_idle+0x280/0x280 [ 956.806064] ? fput+0xd4/0x150 [ 956.809264] ? SyS_write+0x15e/0x230 [ 956.812990] SyS_clone+0x37/0x50 [ 956.812999] ? sys_vfork+0x30/0x30 [ 956.819891] do_syscall_64+0x1e8/0x640 [ 956.823780] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 956.828629] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 956.833817] RIP: 0033:0x459879 [ 956.837009] RSP: 002b:00007f5d58de2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 956.844720] RAX: ffffffffffffffda RBX: 00007f5d58de2c90 RCX: 0000000000459879 [ 956.851991] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000029000400 [ 956.859261] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 956.866624] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d58de36d4 [ 956.873897] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 [ 956.876113] SELinux: policydb string length -103 does not match expected length 8 05:42:47 executing program 0 (fault-call:3 fault-nth:17): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x29000400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 05:42:47 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000000)={0xf97cff8c, 0x8, 'SE Linux', "4e8d09740f71cd046b54ce7fc921d5a023e1b5235942bed89fa73709734767452648d2a6a57606fd2d86fe0248b74119e20087"}, 0x43) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000001d867000600040007000000"}, 0x20) 05:42:47 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) 05:42:47 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x375, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=r0], 0x4}, 0x1, 0x0, 0x0, 0x10801}, 0x80) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000040)={'veth0_to_bond\x00', {0x2, 0x4e22, @local}}) 05:42:47 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) socket$inet_sctp(0x2, 0x1c06662f33336dcf, 0x84) 05:42:47 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000500)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000c00)=0xe8) getresgid(&(0x7f0000000c40)=0x0, &(0x7f0000000c80), &(0x7f0000000cc0)) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001200)={0x0}, &(0x7f0000001240)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001280)={0x0, 0x0}, &(0x7f00000012c0)=0xc) fstat(r0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000001840)=[{&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000580)="9b87ba36d503a9fde29451837a07ca59b5387843537402ab5d0a2c53835bf48ac521b91d9580892c92f62b5e22e6fb17b84a73a504dbdac3f4953af2925f7758546e4f06c08f0d2537efdf7eba9eb0e555287f62dc9b4aa8664ca85adfeecb28b37dbeb27a1f30a280c83325b4b0cee327ce66213bf5adf4cc24b0e275aa37b959bdf84805ae30d1ee14c36da996faf4a9a16bd016ea4ef859256da276207a36b96d0937a819c0ddc027eda03afbe7e356386744301a3b2198330d739694c573e23a37ac7b99e23e2b1bfcbef95049", 0xcf}, {&(0x7f0000000680)="4a6c168474c808c1e1d194a8a29db7686c7a39699f87a977721d07626e5b636a99bed01a776c1df4996ba56fce1bcfc5b9e72178f8383e9268c92b376b85c58fe37a8764cd86a26472df039dbd6053fc09cff49c4e850bd8c14fbcb948a27469b8ae22e14c5e7d3b7a3b690d520b5a890ce50ce1bf994925aed8ac9953c61a4dd648a0232344a9fc3b45dc16b8e2f59829e0c376640e26db59762fb53a794bdee92c15a3103e6ab15053710db05cb63e926dff6ae3ac61f1b0d37cf499bfccc4c2a413b4c478d41454d40352859c1f3a8ab4dca6232c6c8d82d9", 0xda}, {&(0x7f0000000400)="c12fce7369b869a9c7b5df80742988d027dfb61abf3cabd94f498f81c1b8aa7820959072f15db8d1902326e0165d429ff5622f750afec7b3b2a51276f8094c4e4056a6de90bdfc64d90a6c7e03d1ae61edb41e9f4807176388557f7e48786c7b96074c0888bf434eebcae6fed24f7b878b18be05df3b9dcbb95399a8a87fa443d725a4e8ef240ddf1c6187af75ed6d9acbd90e0d1102d38801001bd7ebc5c6d7512b0e2c1402", 0xa6}, {&(0x7f0000000780)="6dce98208c6768ee4ed584ab4b492106d8fa80b64ca66f6d1a6ddc7c54c522c118522fddd22440ff9a04fc7eac9fd0a334950f72396d2569a729e49649da2dd7419be34232f34ced2e1bcb833321dafc67b4920e72b338dbc49e9c674f274f897815e861c83fa9593eee80ee88e80b298fe9053424f76cf8f645d856b5e9a0a674fa71f66bf063d1de8ed8789f8e89bfa4e7948aad57364996", 0x99}, {&(0x7f0000000840)="f54dc00cd712b4ed19838207ae5fde87a97dd92400f80db9ffb891b8261b63cf624239fcbb63f314dc3edf5ed13ff88421a2827a06c6a4f72298c4bf66622b1b63af65d47a356b3d512141fa40911f2258c3958894d4a5b7d85bc8fd3572ccdd2b7a40a5f699877c5b94e1a717e4f54d8cfa5c5f2bd698c358f7ec2e7d314f0b1019d0c36a4ad983540a07c2", 0x8c}], 0x5, 0x0, 0x0, 0x20000000}, {&(0x7f0000000980)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000a00)="fd4ddfafd079808b787ff2b40ef078087376fcf07490dc86ba673a04636ba6576583f9a3fa6f242a952d74ed7f60ddb4357565d28c181602b9f538271a9692992775dbe03c7741d554223688b3d7c09896019725cdeeea05af2f95a133ec2c64065ed4f9bb97dd32f356832182dc3218792c9a5aec296ec044b2d622c896f052458f04806c3642d0e0706e41da9f7b3c92828b3c24acbe545f75ee4430553cf332a5a0e7dd013ac28d27eedb6d2ae216610be6f12d748a9f6298a01f21dc1ebd9da0f513d8766539497d1cd4bbd4f58f02952574e1ffe8d72be9f3206db591dbe6264529a8e73fdf8305ec83108aa8dbd2235d13f3582797e1", 0xf9}], 0x1, &(0x7f0000000d00)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}], 0x20, 0x20000000}, {&(0x7f0000000d40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001180)=[{&(0x7f0000000dc0)="3d7d795947169398b09b5069d42500764dc895af5f3d560254f935a6c736623d5c0bea5275e4663efb4c1a1ffcb2ee70d89d7b6700e137f2dd4a6024670d06606e1366072d4a150db8f51f88d20381a2f24183bbb469181a83a0561151", 0x5d}, {&(0x7f0000000e40)="d4780ab5912daec8d7b6469790891be3067dfd32909c22253d04c7bcd0e3c6b3d78c34718a59700b24f5ee676377a323391d9bde47f80ca711f77ea6cb59f7e19d9802ccd72ef7f26f9880a41e162e8bbdf91888be3ec836fc29eca48f571355ededea21cb7f049ee968189e743a0eaf4d58c951447a699122be8674", 0x7c}, {&(0x7f0000000ec0)="8054825a0228ec222f1b138f548f2e328ef197f032f62a21fff388826c550c71f8cdb7dc5868f7e473f23b8cc9c0c8858bc88857fdad511d5601d4d8208278712e11276b81467a040b6ba7ab5406c033af1c0bdb63d3015de631af5b0b970526646dc8110b44879c9e2de2aecbcbbe728a59110d", 0x74}, {&(0x7f0000000f40)="e04382a6757f668638f708c5ce9cd2b7220d52abbbeda3eba67257b4b481f76781d0ff5f6a1e58281f1d7b2b4beb1d954b51bbdf37b3e934ea2487d047cb4ebd4cc68e4677ca997bf1cfbd930ac44d073dbe7d33c01597", 0x57}, {&(0x7f0000000fc0)="e61e05390ea70f6760b073201f5ba8b016f91ec447139d3d24415942e18289b8f6d5cbec5b8e0d2b8dc4d642818a9c1a963f863edbe3dc013241e0629229c11476675ad06862359f4cf0cf64491f30c8b36579ef1bce550bf313f537fe31f3983ef65fc497487bea60754b17729c9ba9e9db7baf2444324abd54e839ff7a371ee35c77fcdb7861", 0x87}, {&(0x7f0000001080)="0c6046efbb3118d2a671a32cdd017350786c2030a707a902d9120389fba5daec925d81921bb007d36a54ecbfef91dfd2104aa566fd85c09d742dd929b97607885282230628027d410729665ea57d1c1a7f66d04698f7bbf6934ccd5488299c1b049ec1f0955837edd7751664cb05bcaecf49cd1a1ee411414ebe2d6621c05fd4451294939a73fff0d39766bd70e61ea74803a93b3eae2e142caf616939db42ecfe2a26a73561452a475645cb9932207b2b39ba24add537311ecd37e78aedf9b0e8acbc8a0b5fad793331ff5f54a538cc94ed7a77aaeec1ccee372ee3045234dfb884", 0xe2}], 0x6, &(0x7f0000001380)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="00000100"], 0xc8, 0x80}, {&(0x7f0000001480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001780)=[{&(0x7f0000001500)="2c1fbba7de34241eb3dc584357b5440e59a5db2bc344d72c7725176cf6ab06bfcc02d7d369f3b60b4be7cf5c337aef6945c403ccf7a84dab312e35d0051226a9dfdd21765074746c1ac1e9fd3a06f128b472cafee88e704688c5a12cc859b9da79ff4a44acbbf4bb79a0e75f10ccbc318df69614929228789845c5b5acf36b6842f56cd574a60821b9c680c95b11f27db2b242d90fc7b556acecb4482328c1e8df91354acb2129948e21990618", 0xad}, {&(0x7f00000015c0)="521473b951c7742929bb944aee9be22888f108a306900896eaa65b7e208872f3fa0ec6031d9df46d88c280bbc042301242f8206bf1d01fe57f2dbbff6c2a666b1e4af28a85d25c642c7e29efc1af07bfb40ef55cd854d2464ef1f20dfa35786a2528fa34088402072a132347ff89cd16b4ca490708c4b728a5e4454714fe550899df0560cf0ecda39da8686278e382c3d499b0c3bc88871fbb7bd39ccd8bd2c41e0db64a2fc77bfcbe9de5ef263d83332fded829a466", 0xb6}, {&(0x7f0000001680)="ef96e7c5bf14b06dc5cc9fcdd55810bf1861d8f56904aa09020cfadf974fd647e113e0d39105acb70123d2f63505dc67cc5a1364cf11e2504a19ff49f5e55c9eb096f086d256d5148ef29f83a7631592b847413c7a10a7fda85a3f5383e8f0556375b9f8c3d313475628f02ef489b97f9662e68a7f36eb272c0e2558c2d5c102763df865ae03fd007a2604704404fe9e03bccd864db08f844a8e8f72ea26d477eccfab3cabb1b9ec743884332d5e160fa34f660986d6b6c8c610f8dc853e603dc6a29dc5ac53", 0xc6}], 0x3, &(0x7f00000017c0)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @rights={{0x34, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0]}}], 0x58, 0x44}], 0x4, 0x40) r9 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r9, 0xc0286405, &(0x7f0000000200)={0xac8f, 0x0, r10, 0x0, r11, 0x0, 0xd615, 0x6}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 05:42:47 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1000, 0x800) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f00000000c0)=0x9) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, 0x0) mount$9p_virtio(&(0x7f0000000100)='/dev/video#\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0xb1acfb3417b0b3bb, &(0x7f0000000240)=ANY=[@ANYBLOB="7472616e733d76697274696f2c76657273696f6e3d3970323030302c66736e6102653d2d2c736d61636b66737472616e736d7574653d2c7365636c6162656c2c6673757569643d35643436933831382d633561322d363238772d386100002d63313333323662302c6d61736b3d4d41595f524541442c646f6e745f61707072616973652c00"]) [ 957.016510] SELinux: policydb string length -103 does not match expected length 8 [ 957.023165] FAULT_INJECTION: forcing a failure. [ 957.023165] name failslab, interval 1, probability 0, space 0, times 0 05:42:47 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) pwrite64(r0, &(0x7f0000000140)="eff70b1d77cfa1a9fb5e6755ba81405a8aa103b3d9cfa7e38127043451af51fe1d9050062e6e95e63470b8f31500c6b74d218d2e545613aa33", 0x39, 0x9) 05:42:47 executing program 1: clone(0x10001000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_flowlabel\x00') ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) [ 957.056855] SELinux: policydb version 1946783054 does not match my version range 15-31 [ 957.059701] CPU: 0 PID: 17764 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 957.072129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 957.072135] Call Trace: [ 957.072152] dump_stack+0x138/0x197 [ 957.072170] should_fail.cold+0x10f/0x159 [ 957.091908] should_failslab+0xdb/0x130 [ 957.095895] kmem_cache_alloc+0x2d7/0x780 [ 957.100051] ? anon_vma_clone+0x310/0x470 05:42:47 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0xd542671f5a3192c8, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a0000808d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) [ 957.104219] anon_vma_fork+0xe9/0x4d0 [ 957.108029] copy_process.part.0+0x45e2/0x6a00 [ 957.112645] ? __cleanup_sighand+0x50/0x50 [ 957.116893] ? lock_downgrade+0x6e0/0x6e0 [ 957.121050] _do_fork+0x19e/0xce0 [ 957.121063] ? fork_idle+0x280/0x280 [ 957.128306] ? fput+0xd4/0x150 [ 957.131503] ? SyS_write+0x15e/0x230 [ 957.135249] SyS_clone+0x37/0x50 [ 957.138618] ? sys_vfork+0x30/0x30 [ 957.143643] do_syscall_64+0x1e8/0x640 [ 957.143652] ? trace_hardirqs_off_thunk+0x1a/0x1c 05:42:47 executing program 0 (fault-call:3 fault-nth:18): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x29000400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 05:42:47 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000140)=""/128) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) ioctl$TIOCLINUX5(r2, 0x541c, &(0x7f0000000080)={0x5, 0x40, 0x2, 0x100000001, 0x3}) [ 957.143669] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 957.143677] RIP: 0033:0x459879 [ 957.143682] RSP: 002b:00007f5d58de2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 957.143693] RAX: ffffffffffffffda RBX: 00007f5d58de2c90 RCX: 0000000000459879 [ 957.143698] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000029000400 [ 957.143703] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 957.143709] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d58de36d4 [ 957.143714] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 05:42:47 executing program 2 (fault-call:2 fault-nth:0): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='gre0\x00', 0x10) sendto$inet(r0, 0x0, 0x378, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) [ 957.236180] SELinux: policydb string length -103 does not match expected length 8 05:42:47 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x18, 0x0, &(0x7f0000000040)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) 05:42:47 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x100, 0x0) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f0000000180)={"c360211a04f868525d35dcc5c432a4ca1411cdc75a1063efc109d33196cc970556b742c1dd8156406348eabacfdba8a9bc0cdb50ad84ac9673d176c8fc51c9f0c7f111ce84db2f3a30a82fe02a421abbdb8b88c7fc9055c5ec89c10d4a5d40ab10cb4f6a8b892cfdd138ca3e47293384c5e7e9079f37f7e6b684999d96a901a739bc64180c1207220cbf0c40a6105491805a3b35a2d45593599e5e2b131377ed1b371451218cf9977e4d7d5f8f938093bc1e53b7fbcc0768ea12844aeadf43866b54e08b34a88995e65cf50bd00addcd96348d7d0a818003ecca9344062bfc5dfd7aa42d013c540b176e3c28c2db7469be718152a81ecd8f321fe63c0c180b26f38b64a9becedb1eedf4b43db80e79e418d02833c4bf0ffb4900aaf60a2f41c2e49ba8ca520d71e649159a342a0a3c2d83b4b760483a2fbc0fd2e04419da7b86df35c54d8aa593aec7ef68a7bc14dcda843d9e0e258697a07b29e6ffc96e94b5021058d1049b169946cd8b72ef2b843fca012053d5b967dcb41f3994b4f4e0ca15188e698ceffe6e38957dea596681a4c37dae01bba904ca8c05131cbb17be301a04fb4450c39c4788bb028fb8a6420d6d4845114e66780a8e328c529c4f38c42beb37e4accb24409c1fcfb2df82bccd1496c7f2734ab01ffd788c3683384693bfdb5ff8e52e7ca92d2caee93d417f43c21e291cc564105000d9d36536268608d8447d044db964f69a0e4c65cc4eff1e33ee3bebde91efb72b23ba9c7ea38dad57263f80e5d7ec851541dd5c41c5bd0722599dca7ed58399c60f328bd7fcd511a2586162f74ad22f4fe749c4eaf2059dd1eac07790b8636a9961c9cc2e61fe9f3ba657a2078ed9f4d657efab316e39a8c6cfd7b3e1678ad7a21aff213e8631dbf70dc3fed42cfaca259fda096f5c9e9cd6f0683bee38867240ae5e793c23564996d44b33ddebe33572bbe53e5fd6d39abca2cbf7d5a58888d049c94dedf85152d8bcb3d19a7a6449425870d37bd0d3fdac15f3d61ba4b2dbc536bd655ce129f68a79afd3057b6cbcdf09b83347d8c9c7eefa1101cc3bc1d5478c58c2fdb42f9a7ad6704ba9bffb8f9e7d3863f9b6b942272bfb79d055224e091e5937440fd46a73137a70936827d513202e8aa75c7024e2e4a34a0166dbd94fa985e4883d22bb81c7879f06d2e19b070338f4664b65938324ab0a80c4da054e362355dcf619f92936947f456bd7515f4d9f81daa745177064da1b62168a22f5804efada73301d446f9a2ac0534ed4ed3c4f2a2c7ab4b490ae6d0b3904e80a9d05e3f3e3ebe37dd29c3ef3e181e74d61a9561a8e18fedb8635e371b9758b5e5f59baafacf38bd6ab1573d093eb3ecf555cbbb87871381c54f90f888b015619687cec25c85b9ae8163a7f7fc61a13ea70432017cbde86ed73387b6b7c0945f8c2f326744a0609e4"}) [ 957.283671] FAULT_INJECTION: forcing a failure. [ 957.283671] name failslab, interval 1, probability 0, space 0, times 0 [ 957.296153] SELinux: policydb string length -103 does not match expected length 8 05:42:47 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101000, 0x0) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x9, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0='bpq0\x00', 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null, @default, @null, @bcast, @null]}) 05:42:47 executing program 5: geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) setreuid(0x0, r0) r1 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x29fa, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x2, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f0000000180)={0x7b, 0x0, [0x0, 0x4, 0x4, 0x80000001]}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) lsetxattr(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)=@known='trusted.overlay.upper\x00', &(0x7f0000000280)='vfat\x00', 0x5, 0x2) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={r4, 0x80000, r3}) [ 957.354003] FAULT_INJECTION: forcing a failure. [ 957.354003] name failslab, interval 1, probability 0, space 0, times 0 [ 957.382388] CPU: 0 PID: 17790 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 957.385575] QAT: Invalid ioctl [ 957.389613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 05:42:47 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r0}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x74, r2, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffffffffffa}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x85}, 0x20040000) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) [ 957.389618] Call Trace: [ 957.389637] dump_stack+0x138/0x197 [ 957.389655] should_fail.cold+0x10f/0x159 [ 957.413087] should_failslab+0xdb/0x130 [ 957.417075] kmem_cache_alloc+0x2d7/0x780 [ 957.421253] ? anon_vma_clone+0x310/0x470 [ 957.425411] anon_vma_fork+0x1ce/0x4d0 [ 957.429309] copy_process.part.0+0x45e2/0x6a00 [ 957.434004] ? __cleanup_sighand+0x50/0x50 [ 957.438245] ? lock_downgrade+0x6e0/0x6e0 [ 957.442496] _do_fork+0x19e/0xce0 [ 957.446049] ? fork_idle+0x280/0x280 [ 957.449770] ? fput+0xd4/0x150 05:42:47 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x8000, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000480)=0x95) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x40000, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f00000000c0)={0x7, 0xe70d, 0x1, 0x9, 0x18, 0x9}) r3 = open(&(0x7f0000000000)='./file0\x00', 0x8001, 0x40) r4 = gettid() ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000100)={0x0, @aes256}) r5 = getpgrp(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000003c0)={r3, &(0x7f00000002c0)="5d3a22271cc2bf6c5957603eb8b3a831854a1ea0c58697e113084df053935a970908ba929a5996918238166a0ce232fe4ba6852f27fa22352b4cf7d15bf52c3e2e1ae3f76762b10e0b682700672e06d39f8a8db5de2a1143a9c43a5357945ec08f7856a2fbba49f78d0cffa5c15ead3e6125d42f7b69d37af94de534c4926dd1e0fe7846885f62d5b5db380a3623a2a49279968c3781e1fae526cd28eb49eab766cce153fc1aff823febe0e0f4181c142e728c95107bb8fb92293011", &(0x7f0000000380)=""/21}, 0x18) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000180)={{0x7, 0x1, 0xfff, 0x8000, 'syz0\x00', 0xfff}, 0x3, 0x4, 0x2, r5, 0x1, 0x7f, 'syz0\x00', &(0x7f0000000040)=['--vboxnet0posix_acl_access-wlan0]\x00'], 0x22, [], [0xad1, 0xb06, 0x2]}) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/mls\x00', 0x0, 0x0) [ 957.452970] ? SyS_write+0x15e/0x230 [ 957.456701] SyS_clone+0x37/0x50 [ 957.460072] ? sys_vfork+0x30/0x30 [ 957.463708] do_syscall_64+0x1e8/0x640 [ 957.467598] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 957.472454] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 957.477646] RIP: 0033:0x459879 [ 957.480843] RSP: 002b:00007f5d58de2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 957.488556] RAX: ffffffffffffffda RBX: 00007f5d58de2c90 RCX: 0000000000459879 [ 957.495828] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000029000400 05:42:47 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) times(&(0x7f0000000080)) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 957.503098] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 957.510772] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d58de36d4 [ 957.518151] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 [ 957.534973] CPU: 1 PID: 17798 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 957.542104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 957.551458] Call Trace: [ 957.554060] dump_stack+0x138/0x197 [ 957.557697] should_fail.cold+0x10f/0x159 [ 957.561855] should_failslab+0xdb/0x130 [ 957.565841] kmem_cache_alloc_trace+0x2e9/0x790 [ 957.570522] tcp_sendmsg_locked+0x286e/0x3400 [ 957.575092] ? save_trace+0x290/0x290 [ 957.578898] ? trace_hardirqs_on+0x10/0x10 [ 957.583224] ? lock_sock_nested+0x9e/0x110 [ 957.587566] ? find_held_lock+0x35/0x130 [ 957.591630] ? lock_sock_nested+0x9e/0x110 [ 957.595881] ? tcp_sendpage+0x60/0x60 [ 957.599693] ? trace_hardirqs_on_caller+0x400/0x590 05:42:47 executing program 0 (fault-call:3 fault-nth:19): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x29000400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 957.604722] ? lock_sock_nested+0x8c/0x110 [ 957.608966] ? trace_hardirqs_on+0xd/0x10 [ 957.613127] ? __local_bh_enable_ip+0x99/0x1a0 [ 957.617723] tcp_sendmsg+0x30/0x50 [ 957.621275] inet_sendmsg+0x122/0x500 [ 957.625081] ? inet_recvmsg+0x500/0x500 [ 957.629067] sock_sendmsg+0xce/0x110 [ 957.632791] SYSC_sendto+0x206/0x310 [ 957.636515] ? SYSC_connect+0x2d0/0x2d0 [ 957.640507] ? lock_downgrade+0x6e0/0x6e0 [ 957.644677] ? wait_for_completion+0x420/0x420 [ 957.649269] ? __sb_end_write+0xc1/0x100 05:42:47 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) r2 = msgget(0x3, 0x26) msgctl$IPC_INFO(r2, 0x3, &(0x7f0000000040)=""/160) getsockopt$ax25_int(r1, 0x101, 0xa, &(0x7f00000015c0), &(0x7f0000001600)=0x4) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000000)={0x1, 0x0, {0x4, 0x8, 0xb5}}) [ 957.653368] ? fput+0xd4/0x150 [ 957.656568] ? SyS_write+0x15e/0x230 [ 957.660384] SyS_sendto+0x40/0x50 [ 957.663845] ? SyS_getpeername+0x30/0x30 [ 957.667998] do_syscall_64+0x1e8/0x640 [ 957.671891] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 957.676743] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 957.681953] RIP: 0033:0x459879 [ 957.685140] RSP: 002b:00007f056162ac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 957.690841] FAULT_INJECTION: forcing a failure. [ 957.690841] name failslab, interval 1, probability 0, space 0, times 0 [ 957.692848] RAX: ffffffffffffffda RBX: 00007f056162ac90 RCX: 0000000000459879 [ 957.692854] RDX: 0000000000000378 RSI: 0000000000000000 RDI: 0000000000000003 [ 957.692860] RBP: 000000000075bf20 R08: 0000000020e68000 R09: 0000000000000010 [ 957.692866] R10: 00000000200007fd R11: 0000000000000246 R12: 00007f056162b6d4 [ 957.692872] R13: 00000000004c783b R14: 00000000004dd0f0 R15: 0000000000000004 [ 957.706317] CPU: 0 PID: 17825 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 957.733220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 957.733225] Call Trace: [ 957.733242] dump_stack+0x138/0x197 [ 957.733257] should_fail.cold+0x10f/0x159 [ 957.767502] should_failslab+0xdb/0x130 [ 957.771489] kmem_cache_alloc+0x2d7/0x780 [ 957.775648] ? anon_vma_clone+0x310/0x470 [ 957.779822] anon_vma_fork+0xe9/0x4d0 [ 957.783633] copy_process.part.0+0x45e2/0x6a00 [ 957.788243] ? __cleanup_sighand+0x50/0x50 [ 957.788256] ? lock_downgrade+0x6e0/0x6e0 [ 957.796628] _do_fork+0x19e/0xce0 [ 957.800084] ? fork_idle+0x280/0x280 [ 957.800097] ? fput+0xd4/0x150 [ 957.800107] ? SyS_write+0x15e/0x230 [ 957.800127] SyS_clone+0x37/0x50 [ 957.800136] ? sys_vfork+0x30/0x30 [ 957.800149] do_syscall_64+0x1e8/0x640 [ 957.800158] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 957.800174] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 957.800182] RIP: 0033:0x459879 [ 957.834825] RSP: 002b:00007f5d58de2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 957.842553] RAX: ffffffffffffffda RBX: 00007f5d58de2c90 RCX: 0000000000459879 05:42:47 executing program 4: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) close(r0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000180)=0x9196, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) sync_file_range(r0, 0x6, 0x7f4, 0x12) connect$caif(r0, &(0x7f00000001c0)=@dbg={0x25, 0x2, 0x176c}, 0x18) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000200)={{0x0, 0x3, 0x2, 0x0, 0x3f}, 0x5, 0x7}) 05:42:47 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x77ff, 0x4004) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) [ 957.849829] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000029000400 [ 957.857211] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 957.864573] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d58de36d4 [ 957.871850] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 05:42:48 executing program 2 (fault-call:2 fault-nth:1): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='gre0\x00', 0x10) sendto$inet(r0, 0x0, 0x378, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) 05:42:48 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x401, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xff, 0x40000) r2 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f00000000c0)={0x7, "53cf194c5d22e71d9cda214a19737565d82e727e8b2b8f30b8384474ec155b76", 0x4, 0x80, 0x3, 0x401, 0x2, 0x2fa7054dde4d275a, 0x8, 0x2}) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f00000001c0)={0x2, "80769f8b5885fbd120020de3b1034c4233418c9dfea5aca83694eeeb0257c962", 0x3, 0x7fff, 0x4, 0x100000, 0x4000000, 0xe}) ioctl$VIDIOC_G_FBUF(r2, 0x8030560a, 0x0) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000140)=0x4) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000180)={0xa42d, 0xd5c3}) 05:42:48 executing program 0 (fault-call:3 fault-nth:20): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x29000400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 05:42:48 executing program 1: clone(0x24000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000006d873a5b57400"/24}, 0x28) 05:42:48 executing program 5: setreuid(0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x1f, 0x100) write$USERIO_CMD_REGISTER(r0, &(0x7f00000001c0), 0x2) socketpair(0x2, 0x6, 0x5, &(0x7f0000000200)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./\xf12roup.net/syz1\x00', 0x200002, 0x0) fchdir(r1) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) fstat(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 05:42:48 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) getegid() r0 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0) shmdt(r0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1, 0x101000) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 958.037518] FAULT_INJECTION: forcing a failure. [ 958.037518] name failslab, interval 1, probability 0, space 0, times 0 [ 958.037905] FAULT_INJECTION: forcing a failure. [ 958.037905] name failslab, interval 1, probability 0, space 0, times 0 [ 958.073691] CPU: 1 PID: 17856 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 958.076555] SELinux: policydb table sizes (29877,0) do not match mine (6,7) [ 958.080952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 958.080997] Call Trace: [ 958.081014] dump_stack+0x138/0x197 [ 958.081031] should_fail.cold+0x10f/0x159 [ 958.111257] should_failslab+0xdb/0x130 [ 958.115236] kmem_cache_alloc+0x47/0x780 [ 958.119295] ? save_trace+0x290/0x290 [ 958.123280] dst_alloc+0xf3/0x1a0 [ 958.126735] rt_dst_alloc+0x73/0x440 [ 958.130459] ip_route_output_key_hash_rcu+0x731/0x2750 [ 958.135738] ? check_preemption_disabled+0x3c/0x250 [ 958.140761] ip_route_output_key_hash+0x1c0/0x2e0 [ 958.145606] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 958.151152] tcp_v4_connect+0x758/0x1b90 [ 958.155224] ? tcp_v4_parse_md5_keys+0x1d0/0x1d0 [ 958.160072] __inet_stream_connect+0x6df/0xbd0 [ 958.164668] ? inet_bind+0x990/0x990 [ 958.168382] ? rcu_read_lock_sched_held+0x110/0x130 [ 958.173411] ? kmem_cache_alloc_trace+0x623/0x790 [ 958.178264] tcp_sendmsg_locked+0x224f/0x3400 [ 958.182754] ? save_trace+0x290/0x290 [ 958.186549] ? trace_hardirqs_on+0x10/0x10 [ 958.190786] ? lock_sock_nested+0x9e/0x110 [ 958.195022] ? find_held_lock+0x35/0x130 [ 958.199082] ? lock_sock_nested+0x9e/0x110 [ 958.203318] ? tcp_sendpage+0x60/0x60 [ 958.207120] ? trace_hardirqs_on_caller+0x400/0x590 [ 958.212187] ? lock_sock_nested+0x8c/0x110 [ 958.216422] ? trace_hardirqs_on+0xd/0x10 [ 958.220569] ? __local_bh_enable_ip+0x99/0x1a0 [ 958.225157] tcp_sendmsg+0x30/0x50 [ 958.228701] inet_sendmsg+0x122/0x500 [ 958.232504] ? inet_recvmsg+0x500/0x500 [ 958.236479] sock_sendmsg+0xce/0x110 [ 958.240198] SYSC_sendto+0x206/0x310 [ 958.243998] ? SYSC_connect+0x2d0/0x2d0 [ 958.247970] ? lock_downgrade+0x6e0/0x6e0 [ 958.252385] ? wait_for_completion+0x420/0x420 [ 958.256966] ? __sb_end_write+0xc1/0x100 [ 958.261031] ? fput+0xd4/0x150 [ 958.264222] ? SyS_write+0x15e/0x230 [ 958.267936] SyS_sendto+0x40/0x50 [ 958.271391] ? SyS_getpeername+0x30/0x30 [ 958.275452] do_syscall_64+0x1e8/0x640 [ 958.279338] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 958.284190] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 958.289378] RIP: 0033:0x459879 [ 958.292564] RSP: 002b:00007f056162ac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 958.300281] RAX: ffffffffffffffda RBX: 00007f056162ac90 RCX: 0000000000459879 [ 958.307548] RDX: 0000000000000378 RSI: 0000000000000000 RDI: 0000000000000003 [ 958.314828] RBP: 000000000075bf20 R08: 0000000020e68000 R09: 0000000000000010 [ 958.322183] R10: 00000000200007fd R11: 0000000000000246 R12: 00007f056162b6d4 [ 958.329535] R13: 00000000004c783b R14: 00000000004dd0f0 R15: 0000000000000004 [ 958.336998] CPU: 0 PID: 17858 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 958.344106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 958.344111] Call Trace: [ 958.344127] dump_stack+0x138/0x197 [ 958.344142] should_fail.cold+0x10f/0x159 [ 958.344155] should_failslab+0xdb/0x130 [ 958.367950] kmem_cache_alloc+0x2d7/0x780 [ 958.372113] ? alloc_pages_current+0xf4/0x1e0 [ 958.376692] __pmd_alloc+0xbd/0x410 [ 958.376704] copy_page_range+0x12b7/0x1bd0 [ 958.376719] ? find_held_lock+0x35/0x130 [ 958.388630] ? __pmd_alloc+0x410/0x410 [ 958.388642] ? __vma_link_rb+0x247/0x340 [ 958.396616] copy_process.part.0+0x4764/0x6a00 [ 958.396648] ? __cleanup_sighand+0x50/0x50 [ 958.405444] ? trace_hardirqs_on_caller+0x400/0x590 [ 958.410467] ? _raw_spin_unlock_irq+0x5e/0x90 [ 958.414974] _do_fork+0x19e/0xce0 [ 958.418439] ? fork_idle+0x280/0x280 [ 958.422169] ? pci_mmcfg_check_reserved+0x150/0x150 [ 958.427295] ? fput+0xd4/0x150 [ 958.430494] ? exit_to_usermode_loop+0x3d/0x220 [ 958.435178] SyS_clone+0x37/0x50 05:42:48 executing program 3: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0xd9, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="24cb8225a94f9e43978cf2301c368004486f7c22a13225f098c6c3a2277c570fda856690b96d97277834f4bbc5c4f6eadb7b2bf725857345401bd9bd4719a64e9722bc377033ba8c854c77723d1169c060352fd6f9e3c1b16cf9a6e9b62ae10f395a320556a9f17742c368529c309233f17f1e7cc274494a66524935b8bb4967b53a6aa7cff0ec6a3af2b12069e507292d220aeb289a01ddb013e69e614045e3a2165b8566d7bd26ded9c7c07266b60f5912c61975319b2f1cfcd53a60289405227e493a2e0f63", 0xc7, 0x10000}], 0x40, &(0x7f0000000280)={[{@quiet='quiet'}, {@file_umask={'file_umask'}}, {@part={'part', 0x3d, 0x1}}, {@creator={'creator', 0x3d, "b7f16a26"}}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@subj_type={'subj_type', 0x3d, '/dev/video#\x00'}}, {@hash='hash'}, {@obj_user={'obj_user', 0x3d, '/dev/video#\x00'}}, {@fsname={'fsname', 0x3d, 'user'}}]}) r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) [ 958.438548] ? sys_vfork+0x30/0x30 [ 958.442103] do_syscall_64+0x1e8/0x640 [ 958.445991] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 958.450841] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 958.450850] RIP: 0033:0x459879 [ 958.450855] RSP: 002b:00007f5d58de2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 958.450865] RAX: ffffffffffffffda RBX: 00007f5d58de2c90 RCX: 0000000000459879 [ 958.450871] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000029000400 [ 958.450876] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 05:42:48 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40004001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d000000000000000000000000000000000000000000feff000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) openat$cgroup(r0, &(0x7f0000000140), 0x200002, 0x0) 05:42:48 executing program 2 (fault-call:2 fault-nth:2): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='gre0\x00', 0x10) sendto$inet(r0, 0x0, 0x378, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) 05:42:48 executing program 0 (fault-call:3 fault-nth:21): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x29000400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 05:42:48 executing program 5: setreuid(0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x0, 0x2) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) select(0x40, &(0x7f0000000180)={0x4, 0xd, 0x80000000, 0x8, 0x7fff, 0xffffffffffffffe0, 0x26c433b8, 0x4}, &(0x7f00000001c0)={0xa33b, 0x2, 0xfffffffffffffff9, 0x100, 0x5c0, 0x400, 0x0, 0xdb4b}, &(0x7f0000000200)={0x1, 0x4, 0x9a, 0x3ff, 0x0, 0x1, 0x1}, &(0x7f0000000280)={r2, r3/1000+30000}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080)=0x3ff, 0x4) umount2(&(0x7f0000000540)='./file0\x00', 0x4) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000140)=r0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 958.450881] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d58de36d4 [ 958.450886] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 05:42:48 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[]}, 0x1, 0x0, 0x0, 0x10000}, 0x10010) [ 958.600093] FAULT_INJECTION: forcing a failure. [ 958.600093] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 958.605199] FAULT_INJECTION: forcing a failure. [ 958.605199] name failslab, interval 1, probability 0, space 0, times 0 [ 958.623805] CPU: 1 PID: 17888 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 958.631001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 958.640583] Call Trace: [ 958.643180] dump_stack+0x138/0x197 [ 958.646821] should_fail.cold+0x10f/0x159 [ 958.649215] hfs: unable to parse mount options [ 958.650974] should_failslab+0xdb/0x130 [ 958.650988] kmem_cache_alloc+0x47/0x780 [ 958.651000] ? lock_acquire+0x16f/0x430 [ 958.651012] ? __inet_hash_connect+0x4dc/0xb70 [ 958.651026] inet_bind_bucket_create+0x2b/0x250 [ 958.659662] __inet_hash_connect+0x54d/0xb70 [ 958.667683] ? inet_hashinfo_init+0x70/0x70 [ 958.667698] ? inet_hash+0xa0/0xa0 [ 958.667709] ? secure_ipv4_port_ephemeral+0x98/0xf0 [ 958.667721] ? xfrm_lookup_route+0x48/0x1b0 [ 958.698679] inet_hash_connect+0x6e/0x150 [ 958.702834] tcp_v4_connect+0xd29/0x1b90 [ 958.706907] ? tcp_v4_parse_md5_keys+0x1d0/0x1d0 [ 958.711759] __inet_stream_connect+0x6df/0xbd0 [ 958.716380] ? inet_bind+0x990/0x990 [ 958.720093] ? rcu_read_lock_sched_held+0x110/0x130 [ 958.725106] ? kmem_cache_alloc_trace+0x623/0x790 [ 958.729969] tcp_sendmsg_locked+0x224f/0x3400 [ 958.734461] ? save_trace+0x290/0x290 [ 958.738260] ? trace_hardirqs_on+0x10/0x10 [ 958.742493] ? lock_sock_nested+0x9e/0x110 [ 958.746723] ? find_held_lock+0x35/0x130 [ 958.750781] ? lock_sock_nested+0x9e/0x110 [ 958.755036] ? tcp_sendpage+0x60/0x60 [ 958.758834] ? trace_hardirqs_on_caller+0x400/0x590 [ 958.763930] ? lock_sock_nested+0x8c/0x110 [ 958.768162] ? trace_hardirqs_on+0xd/0x10 [ 958.772352] ? __local_bh_enable_ip+0x99/0x1a0 [ 958.776975] tcp_sendmsg+0x30/0x50 [ 958.780513] inet_sendmsg+0x122/0x500 [ 958.784403] ? inet_recvmsg+0x500/0x500 [ 958.788376] sock_sendmsg+0xce/0x110 [ 958.792088] SYSC_sendto+0x206/0x310 [ 958.795800] ? SYSC_connect+0x2d0/0x2d0 [ 958.799770] ? lock_downgrade+0x6e0/0x6e0 [ 958.803923] ? wait_for_completion+0x420/0x420 [ 958.808586] ? __sb_end_write+0xc1/0x100 [ 958.812650] ? fput+0xd4/0x150 [ 958.815849] ? SyS_write+0x15e/0x230 [ 958.819572] SyS_sendto+0x40/0x50 [ 958.823027] ? SyS_getpeername+0x30/0x30 [ 958.827092] do_syscall_64+0x1e8/0x640 [ 958.830981] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 958.835827] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 958.841009] RIP: 0033:0x459879 05:42:48 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000040)={0x1f, 0xbb8, &(0x7f00000000c0)="91eeaf89b491090a6f5dc7cf0946d37439be1c587677546d1b97aaa291774060b947fa031fd1dee39c9b215a45814613b0d2b7798f7d61690b79f9989a2085c0120b551c4d65985fe873cf933e2f05f4dcfc55a393393796b21f142fc25e1bde5d68a7a9be9014ecf100c309a0777640", &(0x7f0000000140)="74da78dbeb2819606c1c9278ffe1cdefd168dfc1e868103e952cf5de2f5c7d9d5b032340ad7ccfd279641df8ed054ab3692b7d23da876cc9a3ffad728004f5125560fb38547513791b52e0c4c02d239c1c721b05eb1836c7275644a917a82250e461420588f3ca602fe6", 0x70, 0x6a}) 05:42:49 executing program 5: setreuid(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgrj_M:\xc2J[\xdd\xc4', 0x200002, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x79, 0x20000) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@empty, @in=@dev}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f00000002c0)=0xe8) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdd, 0x8100) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f0000000140)={0x7, 0x6, 0x1ff}) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f00000000c0)) umount2(&(0x7f0000000540)='./file0\x00', 0x4) syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0xffffffffffff2e90, 0x2000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 958.844197] RSP: 002b:00007f056162ac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 958.851903] RAX: ffffffffffffffda RBX: 00007f056162ac90 RCX: 0000000000459879 [ 958.859168] RDX: 0000000000000378 RSI: 0000000000000000 RDI: 0000000000000003 [ 958.866533] RBP: 000000000075bf20 R08: 0000000020e68000 R09: 0000000000000010 [ 958.873806] R10: 00000000200007fd R11: 0000000000000246 R12: 00007f056162b6d4 [ 958.881077] R13: 00000000004c783b R14: 00000000004dd0f0 R15: 0000000000000004 05:42:49 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a000080000000002d5f4a368d01d83ca7676105f7335c9696795adf9a4caaae9342d17c27c2f9b10c41c7d3dfcad02f3118da381d533ebec1211b53e63f62b841b240b9130ca9825a52f40cc2ad0810826f87c89eaee2e4aec46ee8c70e7dadbd76b5c6e87c733820888e30f39719de596eec0a5bcc6ae71a7ad68e463f41e7e25c02cc53969893e39ac7df9ba0538998dac58b9d45aac8bdfe555b", @ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0x4}}, 0x0) unlink(&(0x7f0000000200)='./file0\x00') [ 958.927717] CPU: 0 PID: 17889 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 958.934861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 958.944217] Call Trace: [ 958.944234] dump_stack+0x138/0x197 [ 958.950502] should_fail.cold+0x10f/0x159 [ 958.950512] ? __might_sleep+0x93/0xb0 [ 958.950524] __alloc_pages_nodemask+0x1d6/0x7a0 [ 958.950536] ? __alloc_pages_slowpath+0x2930/0x2930 [ 958.950556] alloc_pages_current+0xec/0x1e0 [ 958.950567] pte_alloc_one+0x1a/0x100 [ 958.950577] __pte_alloc+0x2a/0x2d0 [ 958.950588] copy_page_range+0x11ba/0x1bd0 [ 958.984304] ? __pmd_alloc+0x410/0x410 [ 958.988207] copy_process.part.0+0x4764/0x6a00 [ 958.992821] ? __cleanup_sighand+0x50/0x50 [ 958.996879] SELinux: policydb string length -103 does not match expected length 8 [ 958.997062] ? lock_downgrade+0x6e0/0x6e0 [ 959.006614] sel_write_load: 29 callbacks suppressed [ 959.006618] SELinux: failed to load policy [ 959.009074] _do_fork+0x19e/0xce0 [ 959.009087] ? fork_idle+0x280/0x280 05:42:49 executing program 1: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() r3 = dup(r0) setsockopt$inet_int(r3, 0x0, 0x21, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2b) fcntl$setstatus(r0, 0x4, 0x80000000002c00) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r4, &(0x7f0000000080)={0xf97cff8c, 0xffffffffffffff99, 'SE Linux', "1200000001d8670006000400070000003c9f030003000000"}, 0x28) [ 959.025817] ? fput+0xd4/0x150 [ 959.029003] ? SyS_write+0x15e/0x230 [ 959.032819] SyS_clone+0x37/0x50 [ 959.036193] ? sys_vfork+0x30/0x30 [ 959.039744] do_syscall_64+0x1e8/0x640 [ 959.043764] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 959.048619] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 959.053809] RIP: 0033:0x459879 [ 959.056999] RSP: 002b:00007f5d58de2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 959.064855] RAX: ffffffffffffffda RBX: 00007f5d58de2c90 RCX: 0000000000459879 05:42:49 executing program 2 (fault-call:2 fault-nth:3): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='gre0\x00', 0x10) sendto$inet(r0, 0x0, 0x378, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) 05:42:49 executing program 1: geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) setreuid(0x0, r0) r1 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x29fa, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x2, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f0000000180)={0x7b, 0x0, [0x0, 0x4, 0x4, 0x80000001]}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) lsetxattr(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)=@known='trusted.overlay.upper\x00', &(0x7f0000000280)='vfat\x00', 0x5, 0x2) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={r4, 0x80000, r3}) [ 959.064861] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000029000400 [ 959.064866] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 959.064874] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d58de36d4 [ 959.079529] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 [ 959.136567] hfs: unable to parse mount options 05:42:49 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x210100, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0xf57c, 0x4) syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) 05:42:49 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) ptrace$getsig(0x4202, r1, 0x7c82, &(0x7f0000000180)) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) 05:42:49 executing program 5: setreuid(0x0, 0x0) r0 = socket$caif_seqpacket(0x25, 0x5, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000140)=0x68) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/policy\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vga_arbiter\x00', 0x1, 0x0) r2 = accept4$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev}, &(0x7f00000001c0)=0x1c, 0x80800) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000200), &(0x7f0000000240)=0x4) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000280)="fbc0d60fa7c681f6d4e768c876767296", 0x10) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 959.236582] FAULT_INJECTION: forcing a failure. [ 959.236582] name failslab, interval 1, probability 0, space 0, times 0 [ 959.267911] nla_parse: 18 callbacks suppressed [ 959.267918] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 959.289130] CPU: 1 PID: 17929 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 959.296263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 959.305622] Call Trace: [ 959.308223] dump_stack+0x138/0x197 [ 959.313489] should_fail.cold+0x10f/0x159 [ 959.317662] should_failslab+0xdb/0x130 [ 959.321741] kmem_cache_alloc_node_trace+0x280/0x770 [ 959.326855] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 959.332317] __kmalloc_node_track_caller+0x3d/0x80 [ 959.337247] __kmalloc_reserve.isra.0+0x40/0xe0 [ 959.341909] __alloc_skb+0xcf/0x500 [ 959.341918] ? skb_scrub_packet+0x4b0/0x4b0 [ 959.341934] sk_stream_alloc_skb+0xb3/0x780 [ 959.341947] tcp_connect+0x13a6/0x4040 [ 959.341966] ? tcp_push_one+0xf0/0xf0 [ 959.361888] ? secure_tcp_ts_off+0xd8/0x140 [ 959.366219] ? sk_setup_caps+0x1ad/0x5a0 [ 959.370287] tcp_v4_connect+0x1340/0x1b90 [ 959.374443] ? tcp_v4_parse_md5_keys+0x1d0/0x1d0 [ 959.379197] __inet_stream_connect+0x6df/0xbd0 [ 959.379212] ? inet_bind+0x990/0x990 [ 959.379224] ? rcu_read_lock_sched_held+0x110/0x130 [ 959.379238] ? kmem_cache_alloc_trace+0x623/0x790 [ 959.397357] tcp_sendmsg_locked+0x224f/0x3400 [ 959.401873] ? save_trace+0x290/0x290 [ 959.405678] ? trace_hardirqs_on+0x10/0x10 [ 959.409923] ? lock_sock_nested+0x9e/0x110 [ 959.414165] ? find_held_lock+0x35/0x130 [ 959.418227] ? lock_sock_nested+0x9e/0x110 [ 959.422485] ? tcp_sendpage+0x60/0x60 [ 959.424167] FAULT_INJECTION: forcing a failure. [ 959.424167] name failslab, interval 1, probability 0, space 0, times 0 [ 959.426289] ? trace_hardirqs_on_caller+0x400/0x590 [ 959.426301] ? lock_sock_nested+0x8c/0x110 [ 959.426311] ? trace_hardirqs_on+0xd/0x10 [ 959.426322] ? __local_bh_enable_ip+0x99/0x1a0 [ 959.426341] tcp_sendmsg+0x30/0x50 [ 959.458961] inet_sendmsg+0x122/0x500 [ 959.462753] ? inet_recvmsg+0x500/0x500 [ 959.466719] sock_sendmsg+0xce/0x110 [ 959.470431] SYSC_sendto+0x206/0x310 [ 959.474143] ? SYSC_connect+0x2d0/0x2d0 [ 959.478114] ? lock_downgrade+0x6e0/0x6e0 [ 959.482269] ? wait_for_completion+0x420/0x420 [ 959.486859] ? __sb_end_write+0xc1/0x100 [ 959.490911] ? fput+0xd4/0x150 [ 959.494095] ? SyS_write+0x15e/0x230 [ 959.497803] SyS_sendto+0x40/0x50 [ 959.501249] ? SyS_getpeername+0x30/0x30 [ 959.505303] do_syscall_64+0x1e8/0x640 [ 959.509183] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 959.514107] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 959.519285] RIP: 0033:0x459879 [ 959.522554] RSP: 002b:00007f056162ac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 959.530254] RAX: ffffffffffffffda RBX: 00007f056162ac90 RCX: 0000000000459879 05:42:49 executing program 0 (fault-call:3 fault-nth:22): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x29000400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 05:42:49 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x20000, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000040)={'\x00', 0x400008}) [ 959.537514] RDX: 0000000000000378 RSI: 0000000000000000 RDI: 0000000000000003 [ 959.544774] RBP: 000000000075bf20 R08: 0000000020e68000 R09: 0000000000000010 [ 959.552030] R10: 00000000200007fd R11: 0000000000000246 R12: 00007f056162b6d4 [ 959.559289] R13: 00000000004c783b R14: 00000000004dd0f0 R15: 0000000000000004 [ 959.566569] CPU: 0 PID: 17947 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 959.573669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 959.583019] Call Trace: [ 959.585612] dump_stack+0x138/0x197 05:42:49 executing program 1 (fault-call:3 fault-nth:0): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') preadv(r1, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/115, 0x73}, {&(0x7f0000000140)=""/123, 0x7b}], 0x2, 0x0) [ 959.589245] should_fail.cold+0x10f/0x159 [ 959.593399] should_failslab+0xdb/0x130 [ 959.597488] kmem_cache_alloc+0x2d7/0x780 [ 959.601655] ptlock_alloc+0x20/0x70 [ 959.605282] pte_alloc_one+0x60/0x100 [ 959.609075] __pte_alloc+0x2a/0x2d0 [ 959.609086] copy_page_range+0x11ba/0x1bd0 [ 959.609111] ? __pmd_alloc+0x410/0x410 [ 959.616937] copy_process.part.0+0x4764/0x6a00 [ 959.616973] ? __cleanup_sighand+0x50/0x50 [ 959.625382] ? lock_downgrade+0x6e0/0x6e0 [ 959.625399] _do_fork+0x19e/0xce0 [ 959.637181] ? fork_idle+0x280/0x280 [ 959.640889] ? fput+0xd4/0x150 [ 959.640900] ? SyS_write+0x15e/0x230 [ 959.640913] SyS_clone+0x37/0x50 [ 959.640921] ? sys_vfork+0x30/0x30 [ 959.640933] do_syscall_64+0x1e8/0x640 [ 959.640943] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 959.647821] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 959.647829] RIP: 0033:0x459879 [ 959.647836] RSP: 002b:00007f5d58de2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 959.679087] FAULT_INJECTION: forcing a failure. [ 959.679087] name failslab, interval 1, probability 0, space 0, times 0 05:42:49 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r0, 0xfc0004) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xb) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r1, &(0x7f0000000180), 0x88f, 0x0, &(0x7f0000000100)={0x77359400}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c40000004500250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000271a1c178c86b2e353ab093075d3ad7fdc85e521a202951972444b193b377121ed0fcc16116d72a02c53ce83d734340e0f846de80b96eab4d7cf94a52f1fde1ab109c1bfeb34ece3525f254a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0x4}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = dup(r1) ioctl$NBD_SET_TIMEOUT(r3, 0xab09, 0xc000) 05:42:49 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xb) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f00000000c0)={{0x100000000, 0x0, 0x8, 0x40, 0x80000000, 0xfff}, 0x1}) [ 959.679451] RAX: ffffffffffffffda RBX: 00007f5d58de2c90 RCX: 0000000000459879 [ 959.679463] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000029000400 [ 959.679469] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 959.679474] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d58de36d4 [ 959.679480] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 [ 959.726206] CPU: 1 PID: 17955 Comm: syz-executor.1 Not tainted 4.14.141 #37 [ 959.734942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 959.744299] Call Trace: [ 959.746891] dump_stack+0x138/0x197 [ 959.750528] should_fail.cold+0x10f/0x159 [ 959.754680] should_failslab+0xdb/0x130 [ 959.758662] kmem_cache_alloc_node_trace+0x280/0x770 [ 959.763768] ? trace_hardirqs_on+0x10/0x10 [ 959.768008] __kmalloc_node+0x3d/0x80 [ 959.768021] kvmalloc_node+0x4e/0xe0 [ 959.768033] seq_read+0x916/0x1280 [ 959.775530] ? __inode_security_revalidate+0xd6/0x130 [ 959.775539] ? seq_lseek+0x3c0/0x3c0 [ 959.775547] ? avc_policy_seqno+0x9/0x20 [ 959.784235] ? selinux_file_permission+0x85/0x480 [ 959.784249] proc_reg_read+0xfa/0x170 [ 959.784256] ? seq_lseek+0x3c0/0x3c0 [ 959.784269] do_iter_read+0x3e2/0x5b0 [ 959.784287] vfs_readv+0xd3/0x130 [ 959.784298] ? compat_rw_copy_check_uvector+0x310/0x310 [ 959.796869] ? __fget+0x237/0x370 [ 959.796883] ? __fget_light+0x172/0x1f0 [ 959.808157] do_preadv+0x15d/0x200 [ 959.808168] ? do_readv+0x2d0/0x2d0 [ 959.808179] ? SyS_writev+0x30/0x30 [ 959.816973] SyS_preadv+0x31/0x40 [ 959.816988] do_syscall_64+0x1e8/0x640 [ 959.816998] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 959.824402] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 959.824411] RIP: 0033:0x459879 [ 959.824417] RSP: 002b:00007f72c8633c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 959.863362] RAX: ffffffffffffffda RBX: 00007f72c8633c90 RCX: 0000000000459879 [ 959.870628] RDX: 0000000000000002 RSI: 00000000200006c0 RDI: 0000000000000005 [ 959.877896] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 05:42:49 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x40, 0x0) ioctl$CAPI_INSTALLED(r1, 0x80024322) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0x78, 0xffffffff80000000, 0x1d5905b2, 0x6, 0x0, 0x5, 0x100000000, 0x7f, 0x1, 0x5}) 05:42:49 executing program 0 (fault-call:3 fault-nth:23): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x29000400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 05:42:49 executing program 2 (fault-call:2 fault-nth:4): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='gre0\x00', 0x10) sendto$inet(r0, 0x0, 0x378, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) 05:42:49 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) write$binfmt_misc(r0, &(0x7f0000000080)={'syz1', "33333dd57f8857db1e218445be28d80c3363ea042acfa341b7ff5a02951cf04dd4a1dfa259267a9b3c3d3294fc3b5c17c59e2edb9308b3a6488ad9df35dd8ff5d479340fc941caa2ac73e0af67222f4d519f431fb0c1"}, 0x5a) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 959.885163] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f72c86346d4 [ 959.892426] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000006 [ 959.925162] FAULT_INJECTION: forcing a failure. [ 959.925162] name failslab, interval 1, probability 0, space 0, times 0 [ 959.936770] CPU: 1 PID: 17967 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 959.936793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 959.936796] Call Trace: [ 959.936814] dump_stack+0x138/0x197 [ 959.936832] should_fail.cold+0x10f/0x159 [ 959.936848] should_failslab+0xdb/0x130 [ 959.936860] __kmalloc+0x71/0x7a0 [ 959.936871] ? ipt_do_table+0xc2a/0x1770 [ 959.936886] ? __neigh_create+0x1d6/0x1a00 [ 959.936898] __neigh_create+0x1d6/0x1a00 [ 959.936910] ? selinux_ip_postroute+0x45b/0xa30 [ 959.972528] FAULT_INJECTION: forcing a failure. [ 959.972528] name failslab, interval 1, probability 0, space 0, times 0 [ 959.975183] ? check_preemption_disabled+0x3c/0x250 [ 959.975205] ip_finish_output2+0x83f/0x14a0 [ 959.975219] ? ip_copy_metadata+0x9b0/0x9b0 [ 959.975233] ip_finish_output+0x56d/0xc60 [ 960.017064] ? ip_finish_output+0x56d/0xc60 [ 960.021392] ip_output+0x1e6/0x590 [ 960.024935] ? ip_mc_output+0xd40/0xd40 [ 960.028909] ? __lock_is_held+0xb6/0x140 [ 960.032970] ? check_preemption_disabled+0x3c/0x250 [ 960.037983] ? ip_fragment.constprop.0+0x200/0x200 [ 960.037996] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 960.038009] ip_local_out+0x97/0x170 [ 960.038022] ip_queue_xmit+0x7d7/0x1b10 [ 960.038031] ? __tcp_v4_send_check+0x1c0/0x360 [ 960.038049] __tcp_transmit_skb+0x172c/0x2fe0 [ 960.065126] ? __tcp_select_window+0x6e0/0x6e0 [ 960.069703] ? tcp_fastopen_cookie_check+0x1c7/0x2b0 [ 960.074805] ? tcp_try_fastopen+0x1700/0x1700 [ 960.079308] tcp_connect+0x208c/0x4040 [ 960.083208] ? tcp_push_one+0xf0/0xf0 [ 960.087015] ? secure_tcp_ts_off+0xd8/0x140 [ 960.091341] ? sk_setup_caps+0x1ad/0x5a0 [ 960.095402] tcp_v4_connect+0x1340/0x1b90 [ 960.099564] ? tcp_v4_parse_md5_keys+0x1d0/0x1d0 [ 960.104340] __inet_stream_connect+0x6df/0xbd0 [ 960.104356] ? inet_bind+0x990/0x990 [ 960.104367] ? rcu_read_lock_sched_held+0x110/0x130 [ 960.104380] ? kmem_cache_alloc_trace+0x623/0x790 [ 960.104399] tcp_sendmsg_locked+0x224f/0x3400 [ 960.127066] ? save_trace+0x290/0x290 [ 960.130869] ? trace_hardirqs_on+0x10/0x10 [ 960.135114] ? lock_sock_nested+0x9e/0x110 [ 960.139344] ? find_held_lock+0x35/0x130 [ 960.143410] ? lock_sock_nested+0x9e/0x110 [ 960.147653] ? tcp_sendpage+0x60/0x60 [ 960.151456] ? trace_hardirqs_on_caller+0x400/0x590 [ 960.156472] ? lock_sock_nested+0x8c/0x110 [ 960.160713] ? trace_hardirqs_on+0xd/0x10 [ 960.164864] ? __local_bh_enable_ip+0x99/0x1a0 [ 960.169453] tcp_sendmsg+0x30/0x50 [ 960.172994] inet_sendmsg+0x122/0x500 [ 960.176794] ? inet_recvmsg+0x500/0x500 [ 960.180767] sock_sendmsg+0xce/0x110 [ 960.184481] SYSC_sendto+0x206/0x310 [ 960.188205] ? SYSC_connect+0x2d0/0x2d0 [ 960.192176] ? lock_downgrade+0x6e0/0x6e0 [ 960.196337] ? wait_for_completion+0x420/0x420 [ 960.200917] ? __sb_end_write+0xc1/0x100 [ 960.204978] ? fput+0xd4/0x150 [ 960.208169] ? SyS_write+0x15e/0x230 [ 960.211884] SyS_sendto+0x40/0x50 [ 960.215328] ? SyS_getpeername+0x30/0x30 [ 960.219385] do_syscall_64+0x1e8/0x640 [ 960.223273] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 960.228139] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 960.233319] RIP: 0033:0x459879 [ 960.236501] RSP: 002b:00007f056162ac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 960.244205] RAX: ffffffffffffffda RBX: 00007f056162ac90 RCX: 0000000000459879 [ 960.251471] RDX: 0000000000000378 RSI: 0000000000000000 RDI: 0000000000000003 [ 960.258731] RBP: 000000000075bf20 R08: 0000000020e68000 R09: 0000000000000010 [ 960.265994] R10: 00000000200007fd R11: 0000000000000246 R12: 00007f056162b6d4 [ 960.273258] R13: 00000000004c783b R14: 00000000004dd0f0 R15: 0000000000000004 [ 960.281577] CPU: 0 PID: 17970 Comm: syz-executor.0 Not tainted 4.14.141 #37 05:42:50 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) [ 960.288690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 960.298037] Call Trace: [ 960.300631] dump_stack+0x138/0x197 [ 960.304270] should_fail.cold+0x10f/0x159 [ 960.308445] should_failslab+0xdb/0x130 [ 960.312419] kmem_cache_alloc+0x2d7/0x780 [ 960.316574] copy_process.part.0+0x444f/0x6a00 [ 960.321187] ? __cleanup_sighand+0x50/0x50 [ 960.325509] ? lock_downgrade+0x6e0/0x6e0 [ 960.329681] _do_fork+0x19e/0xce0 [ 960.333148] ? fork_idle+0x280/0x280 [ 960.336862] ? fput+0xd4/0x150 [ 960.340062] ? SyS_write+0x15e/0x230 [ 960.343774] SyS_clone+0x37/0x50 [ 960.347129] ? sys_vfork+0x30/0x30 [ 960.350666] do_syscall_64+0x1e8/0x640 [ 960.354560] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 960.359405] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 960.364590] RIP: 0033:0x459879 [ 960.367770] RSP: 002b:00007f5d58de2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 960.375472] RAX: ffffffffffffffda RBX: 00007f5d58de2c90 RCX: 0000000000459879 [ 960.382737] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000029000400 05:42:50 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x8) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) 05:42:50 executing program 1 (fault-call:3 fault-nth:1): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') preadv(r1, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/115, 0x73}, {&(0x7f0000000140)=""/123, 0x7b}], 0x2, 0x0) 05:42:50 executing program 2 (fault-call:2 fault-nth:5): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='gre0\x00', 0x10) sendto$inet(r0, 0x0, 0x378, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) 05:42:50 executing program 5: setreuid(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000140)=""/151) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0x20000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16, 0x9}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 05:42:50 executing program 0 (fault-call:3 fault-nth:24): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x29000400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 960.390015] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 960.397365] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d58de36d4 [ 960.397371] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 05:42:50 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000e9ffffff0000000000000000000000000000000000001d000000000000000000000000001198677d00000000000000000000000000000000000000000000000000000000f3000000000000010000000c001500000000000100090000000000000089862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d00d8a7e4b4b41bb036951dce"], 0xc4}}, 0x0) 05:42:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000040)='net/route\x00') getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/181, &(0x7f0000000000)=0xb5) preadv(r3, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/115, 0x73}, {&(0x7f0000000140)=""/123, 0x7b}], 0x2, 0x0) 05:42:50 executing program 5: fstat(0xffffffffffffffff, &(0x7f0000000080)) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in=@empty, @in=@initdev}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000000300)=0xe8) geteuid() stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@loopback, @in6=@initdev}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getuid() setreuid(r0, r1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 960.554819] FAULT_INJECTION: forcing a failure. [ 960.554819] name failslab, interval 1, probability 0, space 0, times 0 [ 960.566120] CPU: 0 PID: 17999 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 960.573249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 960.582602] Call Trace: [ 960.583757] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 960.585188] dump_stack+0x138/0x197 [ 960.585206] should_fail.cold+0x10f/0x159 05:42:50 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e20649aad044cf7c79b01f00966dfea0b8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x100000000, 0xc29fbb97c32cff01) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f0000000180)={0x6, 0x5, 0x8}) [ 960.601523] should_failslab+0xdb/0x130 [ 960.605510] __kmalloc+0x71/0x7a0 [ 960.608982] ? ipt_do_table+0xc2a/0x1770 [ 960.613062] ? __neigh_create+0x1d6/0x1a00 [ 960.617297] __neigh_create+0x1d6/0x1a00 [ 960.617309] ? selinux_ip_postroute+0x45b/0xa30 [ 960.617326] ? check_preemption_disabled+0x3c/0x250 [ 960.617344] ip_finish_output2+0x83f/0x14a0 [ 960.631040] ? ip_copy_metadata+0x9b0/0x9b0 [ 960.631056] ip_finish_output+0x56d/0xc60 [ 960.631065] ? ip_finish_output+0x56d/0xc60 [ 960.631096] ip_output+0x1e6/0x590 05:42:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x3f, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x5) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') preadv(r1, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/115, 0x73}, {&(0x7f0000000140)=""/123, 0x7b}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x45c, 0xb1, 0x100}, 0x8) 05:42:50 executing program 5: syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x43, 0x400c0) setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 960.631106] ? ip_mc_output+0xd40/0xd40 [ 960.631116] ? __lock_is_held+0xb6/0x140 [ 960.631126] ? check_preemption_disabled+0x3c/0x250 [ 960.631138] ? ip_fragment.constprop.0+0x200/0x200 [ 960.631148] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 960.631159] ip_local_out+0x97/0x170 [ 960.659722] ip_queue_xmit+0x7d7/0x1b10 [ 960.659733] ? __tcp_v4_send_check+0x1c0/0x360 [ 960.659749] __tcp_transmit_skb+0x172c/0x2fe0 [ 960.659766] ? __tcp_select_window+0x6e0/0x6e0 [ 960.696376] ? tcp_fastopen_cookie_check+0x1c7/0x2b0 05:42:50 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x6, 0x140) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000040)=0xde) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={r3, @in={{0x2, 0x4e24, @local}}, 0x1c00000000, 0x101, 0x1000, 0x9, 0x40}, &(0x7f0000000080)=0x98) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x2f3, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x2c, 0x119, 0x0, 0x0, {0x2}}, 0x14e}}, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r2) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000200)={'filter\x00'}, &(0x7f00000000c0)=0x44) [ 960.701485] ? tcp_try_fastopen+0x1700/0x1700 [ 960.705987] tcp_connect+0x208c/0x4040 [ 960.709899] ? tcp_push_one+0xf0/0xf0 [ 960.713704] ? secure_tcp_ts_off+0xd8/0x140 [ 960.718034] ? sk_setup_caps+0x1ad/0x5a0 [ 960.722091] tcp_v4_connect+0x1340/0x1b90 [ 960.726248] ? tcp_v4_parse_md5_keys+0x1d0/0x1d0 [ 960.731010] __inet_stream_connect+0x6df/0xbd0 [ 960.735599] ? inet_bind+0x990/0x990 [ 960.739312] ? rcu_read_lock_sched_held+0x110/0x130 [ 960.744331] ? kmem_cache_alloc_trace+0x623/0x790 [ 960.749178] tcp_sendmsg_locked+0x224f/0x3400 [ 960.749190] ? save_trace+0x290/0x290 [ 960.749197] ? trace_hardirqs_on+0x10/0x10 [ 960.749210] ? lock_sock_nested+0x9e/0x110 [ 960.766021] ? find_held_lock+0x35/0x130 [ 960.770085] ? lock_sock_nested+0x9e/0x110 [ 960.770142] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 960.774320] ? tcp_sendpage+0x60/0x60 [ 960.774332] ? trace_hardirqs_on_caller+0x400/0x590 [ 960.774343] ? lock_sock_nested+0x8c/0x110 [ 960.774359] ? trace_hardirqs_on+0xd/0x10 [ 960.795941] ? __local_bh_enable_ip+0x99/0x1a0 05:42:50 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 960.795956] tcp_sendmsg+0x30/0x50 [ 960.795967] inet_sendmsg+0x122/0x500 [ 960.795977] ? inet_recvmsg+0x500/0x500 [ 960.815946] sock_sendmsg+0xce/0x110 [ 960.819659] SYSC_sendto+0x206/0x310 [ 960.823373] ? SYSC_connect+0x2d0/0x2d0 [ 960.827349] ? lock_downgrade+0x6e0/0x6e0 [ 960.831504] ? wait_for_completion+0x420/0x420 [ 960.836090] ? __sb_end_write+0xc1/0x100 [ 960.840186] ? fput+0xd4/0x150 [ 960.843375] ? SyS_write+0x15e/0x230 [ 960.847096] SyS_sendto+0x40/0x50 [ 960.850546] ? SyS_getpeername+0x30/0x30 05:42:50 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = gettid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000000)=r1) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c40000001900250a0008000000000000fe8000000000000000000000000001aafe80000000000000000000000040000000000000000000006fd1a2cd4e46bb440263b085160c4f294bdf1092ddadc59f696e00f57d3fb1bdec67fb53f745490ba92d652219986fa918699cd1410cfb2d6c61b48ba14526919cbef3c2262e6a4abe881b04b4333edad52da11e8e13c46a79087f199ef9c2907290e09d992efbdf93fc7a906b38f07060ef838db1c87c717176b7", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) [ 960.854606] do_syscall_64+0x1e8/0x640 [ 960.858489] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 960.863343] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 960.868528] RIP: 0033:0x459879 [ 960.871715] RSP: 002b:00007f056162ac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 960.879421] RAX: ffffffffffffffda RBX: 00007f056162ac90 RCX: 0000000000459879 [ 960.886687] RDX: 0000000000000378 RSI: 0000000000000000 RDI: 0000000000000003 [ 960.893950] RBP: 000000000075bf20 R08: 0000000020e68000 R09: 0000000000000010 [ 960.901217] R10: 00000000200007fd R11: 0000000000000246 R12: 00007f056162b6d4 [ 960.908486] R13: 00000000004c783b R14: 00000000004dd0f0 R15: 0000000000000004 [ 960.922077] FAULT_INJECTION: forcing a failure. [ 960.922077] name failslab, interval 1, probability 0, space 0, times 0 [ 960.942059] CPU: 0 PID: 18025 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 960.949177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 960.958524] Call Trace: [ 960.961115] dump_stack+0x138/0x197 [ 960.964473] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 960.964747] should_fail.cold+0x10f/0x159 [ 960.977444] should_failslab+0xdb/0x130 [ 960.981417] kmem_cache_alloc+0x47/0x780 [ 960.981431] ? __lock_is_held+0xb6/0x140 [ 960.981442] ? check_preemption_disabled+0x3c/0x250 [ 960.981456] anon_vma_clone+0xde/0x470 [ 960.981472] anon_vma_fork+0x87/0x4d0 [ 960.981486] copy_process.part.0+0x45e2/0x6a00 [ 960.981514] ? __cleanup_sighand+0x50/0x50 [ 960.989585] ? lock_downgrade+0x6e0/0x6e0 [ 961.015162] _do_fork+0x19e/0xce0 [ 961.018615] ? fork_idle+0x280/0x280 [ 961.022336] ? fput+0xd4/0x150 [ 961.025526] ? SyS_write+0x15e/0x230 [ 961.029230] SyS_clone+0x37/0x50 [ 961.032590] ? sys_vfork+0x30/0x30 [ 961.036132] do_syscall_64+0x1e8/0x640 [ 961.040039] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 961.044888] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 961.050075] RIP: 0033:0x459879 [ 961.053257] RSP: 002b:00007f5d58de2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 961.060963] RAX: ffffffffffffffda RBX: 00007f5d58de2c90 RCX: 0000000000459879 [ 961.068231] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000029000400 [ 961.075494] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 961.086110] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d58de36d4 [ 961.093364] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 05:42:51 executing program 2 (fault-call:2 fault-nth:6): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='gre0\x00', 0x10) sendto$inet(r0, 0x0, 0x378, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) 05:42:51 executing program 3: ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, 0x0) 05:42:51 executing program 0 (fault-call:3 fault-nth:25): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x29000400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 05:42:51 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe2(&(0x7f0000000140), 0x4000) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) 05:42:51 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x100) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000200)=""/115, 0x73}, {&(0x7f0000000140)=""/123, 0xfeab}], 0x10000000000001be, 0x0) 05:42:51 executing program 5: setreuid(0x0, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x10180, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x40, 0x84) renameat(r0, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00') flock(r1, 0xa) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 05:42:51 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x1000, 0x100) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000080)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)=0x0) ptrace$setsig(0x4203, r1, 0xa4e4, &(0x7f0000000180)={0x29, 0x81, 0xfe}) r2 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_G_FBUF(r2, 0x8030560a, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000100)) 05:42:51 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1000, 0x2000) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000040)=0x200) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/115, 0x73}, {&(0x7f0000000140)=""/123, 0x7b}], 0x2, 0x0) 05:42:51 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x101000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x102, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) sched_getattr(r2, &(0x7f0000000140)={0x30}, 0x30, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000180)={0x1, 0x7fff}, 0x8) fadvise64(r0, 0x0, 0xd28, 0x2) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f00000001c0)) fcntl$notify(r3, 0x402, 0x120) [ 961.219388] FAULT_INJECTION: forcing a failure. [ 961.219388] name failslab, interval 1, probability 0, space 0, times 0 [ 961.241230] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 961.285031] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 961.307106] CPU: 0 PID: 18051 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 961.315169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 961.324611] Call Trace: [ 961.327208] dump_stack+0x138/0x197 05:42:51 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x1000, 0x40) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000180)={0x2, [0xfffffffffffffffc, 0xa000000000000000]}, 0x8) 05:42:51 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000340)='gre0\x00', 0x10) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) sendto$inet(r1, 0x0, 0xfffffffffffffe3e, 0x200007fd, &(0x7f0000e68000)={0x2, 0xfffffffffffffffc, @local}, 0x10) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000040)={0x200, "383e12bb537fc2fa2410b2f712ece895bdea0f504bdce7666839ad27ff7f12ba", 0x1, 0x1}) [ 961.331275] should_fail.cold+0x10f/0x159 [ 961.331294] should_failslab+0xdb/0x130 [ 961.331309] kmem_cache_alloc+0x47/0x780 [ 961.331326] ? anon_vma_chain_link+0x142/0x1a0 05:42:51 executing program 0 (fault-call:3 fault-nth:26): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x29000400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 961.331340] anon_vma_clone+0xde/0x470 [ 961.331357] anon_vma_fork+0x87/0x4d0 [ 961.331374] copy_process.part.0+0x45e2/0x6a00 [ 961.331408] ? __cleanup_sighand+0x50/0x50 [ 961.331420] ? lock_downgrade+0x6e0/0x6e0 [ 961.331437] _do_fork+0x19e/0xce0 [ 961.331452] ? fork_idle+0x280/0x280 [ 961.331467] ? fput+0xd4/0x150 [ 961.331478] ? SyS_write+0x15e/0x230 [ 961.331494] SyS_clone+0x37/0x50 [ 961.331503] ? sys_vfork+0x30/0x30 [ 961.331517] do_syscall_64+0x1e8/0x640 [ 961.331526] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 961.331544] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 961.331552] RIP: 0033:0x459879 [ 961.331558] RSP: 002b:00007f5d58de2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 961.331570] RAX: ffffffffffffffda RBX: 00007f5d58de2c90 RCX: 0000000000459879 [ 961.331578] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000029000400 05:42:51 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$pppoe(0x18, 0x1, 0x0) [ 961.331587] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 961.331596] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d58de36d4 [ 961.331602] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 [ 961.439310] Unknown ioctl 35076 [ 961.458268] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 961.474117] FAULT_INJECTION: forcing a failure. [ 961.474117] name failslab, interval 1, probability 0, space 0, times 0 [ 961.481779] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 05:42:51 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x9, 0x30}, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="2321212c0f0df81f47442a"], 0x10094) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYRES32], 0x1037b) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xfdef) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) [ 961.492461] CPU: 0 PID: 18079 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 961.503037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 961.503042] Call Trace: [ 961.503060] dump_stack+0x138/0x197 [ 961.503077] should_fail.cold+0x10f/0x159 [ 961.503092] ? anon_vma_clone+0xde/0x470 [ 961.535387] should_failslab+0xdb/0x130 [ 961.535401] kmem_cache_alloc+0x47/0x780 [ 961.535415] ? anon_vma_chain_link+0x142/0x1a0 [ 961.535430] anon_vma_clone+0xde/0x470 [ 961.580159] anon_vma_fork+0x87/0x4d0 [ 961.580177] copy_process.part.0+0x45e2/0x6a00 [ 961.580207] ? __cleanup_sighand+0x50/0x50 [ 961.580220] ? lock_downgrade+0x6e0/0x6e0 [ 961.580233] _do_fork+0x19e/0xce0 [ 961.580246] ? fork_idle+0x280/0x280 [ 961.586452] ? fput+0xd4/0x150 [ 961.586463] ? SyS_write+0x15e/0x230 [ 961.586480] SyS_clone+0x37/0x50 [ 961.586489] ? sys_vfork+0x30/0x30 [ 961.586501] do_syscall_64+0x1e8/0x640 [ 961.586511] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 961.657442] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 961.657452] RIP: 0033:0x459879 05:42:51 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180), &(0x7f0000000240)=0x4) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000140)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000002c0)={0x0, 0x7f14, 0x8, 0x0, 0x8000, 0x0, 0x5, 0x8000, {0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x8, 0x3, 0x6, 0x4f, 0xe94d}}, &(0x7f0000000380)=0xb0) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000003c0)=@assoc_value={r3, 0x1}, 0x8) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r4, 0x800443d3, &(0x7f0000000080)={{0x1, 0x6, 0x401, 0x3f}, 0x7, 0x9, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$FICLONE(r1, 0x40049409, r5) keyctl$session_to_parent(0x12) 05:42:51 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x2000000077fe, 0x420101) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x1) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) 05:42:51 executing program 0 (fault-call:3 fault-nth:27): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x29000400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 961.657458] RSP: 002b:00007f5d58de2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 961.657468] RAX: ffffffffffffffda RBX: 00007f5d58de2c90 RCX: 0000000000459879 [ 961.657473] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000029000400 [ 961.657477] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 961.657486] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d58de36d4 [ 961.695305] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 05:42:51 executing program 5: setreuid(0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x3) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 05:42:51 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='gre0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x200107fd, &(0x7f0000e68000)={0x2, 0x4e22, @multicast2}, 0xffffffffffffffc5) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x204103, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000040)={0x1, 0x5, 0x4, 0x80000000, {0x77359400}, {0x4, 0x8, 0x4, 0x20, 0x8, 0x3, "a8479b9b"}, 0x3, 0x4, @offset=0x7, 0x4}) 05:42:51 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d00000000000000000000000000000000000000000000000000000000000000000000000d0000000c000000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fc9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbacd301908f1fd5ea26181d53d8a7e4b4b41bad36951dce00000000000000"], 0x4}}, 0x0) [ 961.835977] FAULT_INJECTION: forcing a failure. [ 961.835977] name failslab, interval 1, probability 0, space 0, times 0 05:42:51 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000100)=0xe8) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={@loopback, @loopback, @empty, 0x100000001, 0x6, 0x4, 0x4ddb0a8ef83c4549, 0x2, 0x86200080, r2}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='gre0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e25, @multicast2}, 0x10) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x2, 0x5, 0x81, 0xed5, 0x7ff}, &(0x7f0000000240)=0x14) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e21, @broadcast}}}, 0x84) [ 961.902456] CPU: 0 PID: 18103 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 961.909598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 961.918953] Call Trace: [ 961.921554] dump_stack+0x138/0x197 [ 961.925193] should_fail.cold+0x10f/0x159 [ 961.929351] should_failslab+0xdb/0x130 [ 961.933324] kmem_cache_alloc+0x2d7/0x780 [ 961.937470] ? anon_vma_clone+0x310/0x470 [ 961.942070] anon_vma_fork+0xe9/0x4d0 [ 961.942089] copy_process.part.0+0x45e2/0x6a00 [ 961.942116] ? __cleanup_sighand+0x50/0x50 [ 961.954698] ? lock_downgrade+0x6e0/0x6e0 [ 961.958885] _do_fork+0x19e/0xce0 [ 961.958899] ? fork_idle+0x280/0x280 [ 961.966045] ? fput+0xd4/0x150 [ 961.969239] ? SyS_write+0x15e/0x230 [ 961.972956] SyS_clone+0x37/0x50 [ 961.976323] ? sys_vfork+0x30/0x30 [ 961.979865] do_syscall_64+0x1e8/0x640 [ 961.983756] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 961.988600] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 961.993775] RIP: 0033:0x459879 05:42:52 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/arp\x00') ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000180)={0x1, 0x0, 0x3, 0x10000000000}) msync(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f00000001c0)={0x9, r2}) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c40000009900feff0000000000000000fe80000000000000008000000000000000000020000000000000003563e9c0d7cf365a9e9e6d0b53c47c5c03fc404b421d38fda0ada8f0cc7a1f36aa024b909d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 05:42:52 executing program 5: setreuid(0x0, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x705400, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) pipe(&(0x7f0000000140)) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 05:42:52 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8c41, 0xed3fc581c3815bc5) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x80000000, 0x80000) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) 05:42:52 executing program 1: openat$vnet(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-net\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x114, r2, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x4}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x60000000000000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x241d}]}, @TIPC_NLA_BEARER={0x98, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x9, @ipv4={[], [], @multicast2}, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x8001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x369}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1000, @empty, 0x2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x8804}, 0x4841) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') preadv(r3, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/115, 0x73}, {&(0x7f0000000140)=""/123, 0x7b}], 0x2, 0x0) 05:42:52 executing program 2: r0 = socket$inet(0x2, 0x80007, 0x7) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='yam0\x00', 0x10) sendto$inet(r0, 0x0, 0xfffffea9, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0xa) [ 961.993780] RSP: 002b:00007f5d58de2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 961.993790] RAX: ffffffffffffffda RBX: 00007f5d58de2c90 RCX: 0000000000459879 [ 961.993795] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000029000400 [ 961.993800] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 961.993806] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d58de36d4 [ 961.993811] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 05:42:52 executing program 0 (fault-call:3 fault-nth:28): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x29000400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 05:42:52 executing program 3: r0 = dup(0xffffffffffffffff) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000000)={0xa, 0x0, 0xffff, 0x9}, 0xa) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x58, r2, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x200]}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x200}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @multicast2}}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3ff}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, 0x0) [ 962.128570] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=153 sclass=netlink_xfrm_socket pig=18133 comm=syz-executor.4 [ 962.159477] FAULT_INJECTION: forcing a failure. [ 962.159477] name failslab, interval 1, probability 0, space 0, times 0 05:42:52 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x8, 0x8000) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000040)={0x5, 0x6, 0x2800000, 0x3, 0x1d, 0x2}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') preadv(r2, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/115, 0x73}, {&(0x7f0000000140)=""/123, 0x7b}], 0x2, 0x0) 05:42:52 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x3080, 0x400000) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000180)={0x0, 0xffffffffffff8000}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={r2, 0x6}, 0x8) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) 05:42:52 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) r1 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x20000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000880)={0x0, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000840)='#^\x00'}, 0x30) lstat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000980)={0x0}, &(0x7f00000009c0)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000a00)={{{@in=@multicast1, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40)=0x0, &(0x7f0000000b80), &(0x7f0000000bc0)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000c00)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000c40)={{{@in6=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000d40)=0xe8) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0)=0x0, &(0x7f0000000e00)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e40)={0x0}, &(0x7f0000000e80)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000fc0)=0xe8) getresgid(&(0x7f0000001000), &(0x7f0000001040), &(0x7f0000001080)=0x0) sendmsg$unix(r1, &(0x7f0000001180)={&(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000240)="2805a70109134e347475b5b29171e2dae55d5f08d00c581dec6cd923e1192a9819325e535c91d0b174787f5c2b36b04a6f51c28594e881f5292c8bb06d89f205ce39182465e752b1d6b3becea432634becad3b44696fa45fe0993b0bbd6f53a6b9ad206712c271c19bb60d639f9f", 0x6e}, {&(0x7f00000002c0)="07db7a85f07c3830b306e1f4990503525d487ed2a77006124ea89c077daecc7dad6d42838522ec40e0a9753dcd4b1ba521ed79ed963dae89a8e57331b7e3d0a96fe6da", 0x43}, {&(0x7f0000000340)="5e5bb6102902975686c90f89d7258e35498992785d0d469a66b8a9968f8f7bc5b03be73296d9666d9db85d92c679b5c4b6f4b625ecd7b1f2b4fc4c1e57237f9efe749f18ec6c8486dbfc37203ee130862c9b9aacf25d91b9430ef3c3e650e01d6f9f2c49f74b5b2e65f8d4809bae8d82c37a4023", 0x74}, {&(0x7f0000000400)="436e5fedc93cb0dbb3cc8ef2d45d", 0xe}, {&(0x7f0000000580)="46ad2746b4385cdd34497e66310822d5d1083efac31dbc17b1d5bf54e15c7aad6e23b93d8b2933589b9f415ccde3149538f7bad0af6ba7b5f6c916206905c7510236aa3cba54f9222d2c0c366b678aa5aeae4b2770eedee06418965c3d3fa289dbbee850e593d20ee6d72042b4bca12e9c2fff74a4cd6f2d01d1e1fb3f3733b16ad8bcab37e2c8f5db1c5c55defc9700f494d6336174d3242cdbf101da39ca926e8049ccf95a4e136154c11ae70afbffebeab8daf94f9d9496f0d10713180d364a335d63aacb7e1f0589cf5ef294dfa8d833", 0xd2}, {&(0x7f0000000440)="67ed8263de8195199c9e5a7d6255070cfd7feb0521ffb9976ef4f02db3ba6f17b602b21b5d24e57b69b7ec2fff9db93d8f164269abb38e8fb820e9f173f593209810294212c177c22fdf91fed6b040", 0x4f}, {&(0x7f0000000680)="f08c268b71e5523e5592cc83c20e978251450879653de60eacaf6a560d2c403b58296f49724b9fb612c153f82fd1a3d5ef4c59b7bda3f5599073e7c66f8d574090b618d765016fa3ed7589fa2cb9553831ee80122cff241048e749506787673e31c9b8df459ade974ff472", 0x6b}, {&(0x7f0000000500)="285f01268e223d4977029b5251dd540609e4da367a848d0857e796101cee8c4f7e7d3a5441fe3757b55516a40dd831c8", 0x30}, {&(0x7f0000000700)="1e3ed64539cafcdee0ba193726e040dc7bbc99f86089ea6571e7bdd3b1de9d360cf656dfa35f36041227f9e49688c32f27ed549593fddb92a88b4580e9cd7bb9a7d18210bd2c5b6be97c1ef4", 0x4c}], 0x9, &(0x7f00000010c0)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}], 0xb0, 0x580f1c755d861e50}, 0x4010) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 05:42:52 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/222, 0xde}, {&(0x7f0000000100)=""/94, 0x5e}], 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000340)='gre0\x00', 0x10) sendto$inet(r1, 0x0, 0x378, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) [ 962.273045] CPU: 0 PID: 18142 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 962.280291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 962.289650] Call Trace: [ 962.292242] dump_stack+0x138/0x197 [ 962.295868] should_fail.cold+0x10f/0x159 [ 962.300029] should_failslab+0xdb/0x130 [ 962.304021] kmem_cache_alloc+0x2d7/0x780 [ 962.308173] ? anon_vma_clone+0x310/0x470 [ 962.312333] anon_vma_fork+0x1ce/0x4d0 [ 962.316226] copy_process.part.0+0x45e2/0x6a00 [ 962.320833] ? __cleanup_sighand+0x50/0x50 [ 962.323489] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 962.325066] ? lock_downgrade+0x6e0/0x6e0 [ 962.325084] _do_fork+0x19e/0xce0 [ 962.325096] ? fork_idle+0x280/0x280 [ 962.344935] ? fput+0xd4/0x150 [ 962.348127] ? SyS_write+0x15e/0x230 [ 962.351854] SyS_clone+0x37/0x50 [ 962.355221] ? sys_vfork+0x30/0x30 [ 962.358771] do_syscall_64+0x1e8/0x640 [ 962.362658] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 962.367513] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 962.372710] RIP: 0033:0x459879 [ 962.375897] RSP: 002b:00007f5d58de2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 962.383610] RAX: ffffffffffffffda RBX: 00007f5d58de2c90 RCX: 0000000000459879 [ 962.387982] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 962.390878] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000029000400 [ 962.390884] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 962.390890] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d58de36d4 05:42:52 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) [ 962.390896] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 05:42:52 executing program 1: r0 = accept$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000280)=0x1c) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x80, 0x0) r1 = syz_open_dev$admmidi(&(0x7f00000004c0)='/dev/admmidi#\x00', 0xff, 0xfd582c91d4331268) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, r2, 0x0, 0x9, &(0x7f0000000040)='/dev/vcs\x00'}, 0x30) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000340)={'filter\x00'}, &(0x7f00000003c0)=0x78) r4 = syz_open_procfs(r3, &(0x7f0000000240)='net/route\x00') preadv(r4, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/115, 0x73}, {&(0x7f0000000140)=""/123, 0x7b}], 0x2, 0x0) 05:42:52 executing program 2: r0 = socket(0x1, 0x6, 0x2) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000340)='gre0\x00', 0x10) sendto$inet(r1, 0x0, 0x378, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) 05:42:52 executing program 0 (fault-call:3 fault-nth:29): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x29000400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 05:42:52 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 05:42:52 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000000)={0x9, 0x5, 0x4, 0x40000000, {}, {0x4, 0x2, 0x1, 0x100000001, 0x1, 0xffff, "4ca045e5"}, 0x8, 0x4, @userptr=0x7fffffff, 0x4}) 05:42:52 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000004000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x4, 0x161202) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000180)=0x5, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {r2, 0xc3}}, 0x10) 05:42:52 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='gre0\x00', 0x10) readahead(r0, 0x5, 0x100000001) sendto$inet(r0, 0x0, 0x378, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) [ 962.582623] FAULT_INJECTION: forcing a failure. [ 962.582623] name failslab, interval 1, probability 0, space 0, times 0 05:42:52 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000040)={0xa, 0x2, 0x8000, 0xa}, 0xa) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)=0x4) preadv(r1, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/115, 0x73}, {&(0x7f0000000140)=""/123, 0x7b}], 0x2, 0x0) 05:42:52 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x8000000077ff, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) [ 962.654211] CPU: 0 PID: 18185 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 962.661355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 962.670717] Call Trace: [ 962.673308] dump_stack+0x138/0x197 [ 962.676948] should_fail.cold+0x10f/0x159 [ 962.681103] should_failslab+0xdb/0x130 [ 962.681118] kmem_cache_alloc+0x2d7/0x780 [ 962.681128] ? __pmd_alloc+0x410/0x410 [ 962.681144] copy_process.part.0+0x444f/0x6a00 [ 962.693141] ? __cleanup_sighand+0x50/0x50 [ 962.701924] ? lock_downgrade+0x6e0/0x6e0 [ 962.706077] _do_fork+0x19e/0xce0 [ 962.709533] ? fork_idle+0x280/0x280 [ 962.713250] ? fput+0xd4/0x150 [ 962.713262] ? SyS_write+0x15e/0x230 [ 962.720146] SyS_clone+0x37/0x50 [ 962.723497] ? sys_vfork+0x30/0x30 [ 962.727039] do_syscall_64+0x1e8/0x640 [ 962.730931] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 962.735780] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 962.740965] RIP: 0033:0x459879 [ 962.744148] RSP: 002b:00007f5d58de2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 05:42:52 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000002c80)={'vcan0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000003300)={@empty, 0x0}, &(0x7f0000003340)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000061c0)={0x0, @dev, @local}, &(0x7f0000006200)=0xc) r5 = accept$packet(0xffffffffffffffff, &(0x7f0000006240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000006280)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f00000062c0)={@local, 0x0}, &(0x7f0000006300)=0x14) clock_gettime(0x0, &(0x7f000000ad80)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f000000acc0)=[{{&(0x7f0000006b80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000008140)=[{&(0x7f0000006c00)=""/195, 0xc3}, {&(0x7f0000006d00)=""/52, 0x34}, {&(0x7f0000006d40)=""/120, 0x78}, {&(0x7f0000006dc0)=""/243, 0xf3}, {&(0x7f0000006ec0)=""/4096, 0x1000}, {&(0x7f0000007ec0)=""/112, 0x70}, {&(0x7f0000007f40)=""/54, 0x36}, {&(0x7f0000007f80)=""/213, 0xd5}, {&(0x7f0000008080)=""/171, 0xab}], 0x9, &(0x7f0000008200)=""/239, 0xef}, 0x200}, {{&(0x7f0000008300)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000009400)=[{&(0x7f0000008380)=""/4096, 0x1000}, {&(0x7f0000009380)=""/119, 0x77}], 0x2, &(0x7f0000009440)=""/196, 0xc4}, 0x8001}, {{&(0x7f0000009540)=@l2, 0x80, &(0x7f000000abc0)=[{&(0x7f00000095c0)=""/245, 0xf5}, {&(0x7f00000096c0)=""/126, 0x7e}, {&(0x7f0000009740)=""/4096, 0x1000}, {&(0x7f000000a740)=""/182, 0xb6}, {&(0x7f000000a800)=""/81, 0x51}, {&(0x7f000000a880)=""/37, 0x25}, {&(0x7f000000a8c0)=""/200, 0xc8}, {&(0x7f000000a9c0)=""/159, 0x9f}, {&(0x7f000000aa80)=""/176, 0xb0}, {&(0x7f000000ab40)=""/122, 0x7a}], 0xa, &(0x7f000000ac80)=""/31, 0x1f}, 0x6}], 0x3, 0x0, &(0x7f000000adc0)={r8, r9+10000000}) sendmmsg$inet(r1, &(0x7f000000af00)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="349e8667b634dabc162fe1b4e39b62d3821b4772d85073ad6785f5f9a79410d0f9fd8f7207f0b131af5708d663d4724f36a3f06ba7e2f9385a7ca9567222d44a5cb39aaad35eb5866370b57cbb457856c31cf9428218a658c90249f2e660f83afb18f1e7510a00d1afdd94f0d41cd83ef2dc4a951ac61ec069b396af463f0d8646a4445224e80173f1ed7ece7f10611997e7e5f06983fe648f98100d06a48474a061c932d9327098554c4f25262957537ae324a183d70441ca3c960b09e43e698746fd45d3f414bc70d969d495797af0fca91a145beff693dc30d79c", 0xdc}, {&(0x7f0000000240)="5f3945978bff88000403c273e74270bc1ff166822060f0f5a4a1d555922ecf5cd27f4f7fbe126025a94360b8", 0x2c}, {&(0x7f0000000280)="003757f0377fc73f1f402dfeedb566c13999df79712616388777bf8e7ed9902f583ff7e751240504cc43d93a9d88bf314f2bf607260128d33e6521d69a9d342e50e90266773aa6e79db26b8b04e8f10c64b51ba0dbad18d502c8f8bb9ce083cb54d4cab48973a4938ca41f162ab26171371e0a7809c4d866f09bcc06e7296d4d33156c62e9ebe7c05afd33da872a37ad916a5162a7ceb62f4e29fe417a999a4f1375da15ce82f3554f", 0xa9}, {&(0x7f0000000400)="12d57b13d72c25aac004b197914c816c5595dd37017364671f45903524ad411087d75fc0c5071d2f6ea9b9300ba7dc79a925df06127651061c5958aa68c359fb2f470664fd1f3166ea351459d4e7eb4557d291668ceaf07f89953b7edc8c5fdfc50998f57f1b302f02af74bfc9fd3a751a0bfdebc403abdd70a23e842a2cfd1a81711875", 0x84}], 0x4, &(0x7f0000000580)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x60}}, {{&(0x7f0000000380)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000600)="2e6e81a3b4e24d3fe78453e0e7d06213b3fe8b836a4eedb44475939b4ed15926906456c43bfc27ed8e87d3c06dc1fae3b0a7d29e4b17755d594b419890c9060dbc499d47bd6de856426faf0454874ba42ae75d87172c473361fa928a0f8ecbfd208cf426ff603e75e7f25451ca086f40dbcad057fbff171b9bd5eabd4818a9b9432d91a9169abfde07e7c0d95cef0320d82cb8959b3fec87afc9637ab2d71b39f58bc943be0fa92155715eb8770355086d0d189b9e23815060b6cfd01331edc55d894f3a4d65c9b45b8312e57b", 0xcd}, {&(0x7f0000000700)="5e9f6a52a52d12123c342a4bfd4843686f2a3f882def7002c4e2d494bde346014f7eb938a26915cccfabb41912b0552ef31d509c7a45bde5bd0d5ec86275c008956d8e", 0x43}, {&(0x7f0000000780)="cf02a6a9bdecc06042882aeb860342f8cdc74473cdd29335227e2c95319a9e7599afadbfd6ffb675e8fc0c84e638c021b11391889c2b9af64041b3a4e650b24871d1484fd4651ff562f9bdffe9257fd2c928b62c4e6655c3173fa1b3199845158bf0d65829725c4211341841bb6b2302e64188e909002aaa0194a104878fddf021ea15b5792b2abf97d1d6077be293ddba8621ffddd955c8a59d2c4bdb4cec42227e9d69488add22c459b9049f641d0b7917", 0xb2}, {&(0x7f0000000840)="43357b51335692aefd7c5deda1131b491a03aa34f4fd8faa122f1fd737f14246a09c04659cc1199302e2291eb80928dff4c523cd7b16a952a024e8c0e75e36389e099139eb6a72f9dcfc5a0bc67eb28c7af891786f7c54368bfc46cddb00926ec0989dd1e4c7ae15b2005d7a3edfba4049957425b042c097c55ad8167607f35237d52656a42700bbcb3c28d81571229321b323c46eb035479a32008859569c2fbc36820815f7488253746d870d9d49c79c38aeeaa8a4f877", 0xb8}, {&(0x7f0000000900)="031a77a91996335726c2dbeae006829960408cca8299c931b8bede3f4b44fdc547645ac5b9ceb27564c1b8338f920edb101b80b489ed6821c5c62a2071daac2bb70970f1ba12934d629f248a5c9a64352615ec1955005bde349460e83cc4973c3bf489d4f5a60906ca0c21b5", 0x6c}], 0x5, &(0x7f0000000a00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x48}}, {{&(0x7f0000000500)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000002c40)=[{&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000001a80)="afc54959a5104d38c7b618a3d25a13413d10d9d0ee6b41feab3be43eba6e45d15eaab0870204420618784a76e32678278bfd47c8088f783af83b5d9da705130a6f5906713d9da84fd890727dd622dbda3dc81edefb382c80ba838a210427aca59e7c6d03fa2009150d7420d53b54f6289b66e29a65874baf349ca8c59805857d040a9f90b80a3c4d3792fbd8240f265b3f08528625e1c6fe924f9c71684d6a939d5c3905483204dbcc3d902db7b8d1f227e758ba7b5dc08f7f916e8d158a5f796430c307091ed876fa9a41a31e383c32273f858a21926c1ccecc44462203004d3168417e0c6e4ecaabbcc404935ff9ef181155fc6fd0aa4c50c98e09d929a917526952be5e2cd7c5fde8dec06d878dde165a7d7a1781e2043223a09226612a865e3cd477536b10eb82fc4c74f2e0c77776d2797c0d4fc47592fc8339a9d99a14b406837fe348d88420ba29ef0e5256bfe8eddf47b05bad20a4334705ed46840aaca19171268e7191fc64a3d5f68e7771630a3e3f5bdad2b3d0f8f650f6cc81b7f892b44fe009de5f9b36f8541cb77882d350875662dc2bc1651618f0291f8963fa7c4c187a241020932129b44f2cf089eb959e150599e25685432825e8312ded9b5587caceca472cb9cb2758c0c9265a099a738e3a7e367e2850d585a3099747c1655cd870da4329edd4b31ada43e742ee685172c4c712dd10614f391a27a1b4c980dda44792bb050e11d212b30b43ed952a7ffd66099729e076d9266fb8b36044c6d790a56a725fd744608c7f84c3a6d5cc47646e69988892e783785caf5bca96a830c4386476822a20a928f8e75254caf6a58e26d2304d770d3f69f400c2068531468558fe9374d6bdd7195f0088c11a867180dd678c1dcde0a35e433b5fd51c139241449de1ea2b1b6eda766ff40db5405bbcde5944d69bf9d3a0592fc1e7dbd9c1c5f40b2c0351d894ee1305f9c72c185b4851a7a4cba31d432ddcfbd18e06589998360eafefcba5196379df5ac9547ef0ec52197a7bc96290c05d46472b64a92b2b9977cc6d112429fa95ca65d65013eb82ba36d8d67989451b6845d7859e286e99a4c8a2df1aa18e07f2eb1ac89b223b590107213b977d9ee89d1384a71d5932891c3f8091c32119f75eabebdba0c950f9231286402b1b8a828f80d2f50f174a54d2bd33444557eb16d8569e73dbeca4a095e3b0c64bb82a8352a1ffa4bd1db404bbfd972e3656ceacf081dfd96003ac5e063a03c698774ffe7b8a86e6fdeffec5ecee520f191955963e0bb3d6a79590a090081374e7af5418b31183a81438bf3e05b6dd6591c4e8e1f2afefaad4bb217220a12cd13798dd8135970fa668bd8a81d6c238a13047f239bb536d35994598f47308c280e7c1f50f30fb97525b08cdd1f6307915b1c1b6ad77d6c91a7bec008d08c43832832a1452191f2e5f539c2c65a6cb576bf7a23d944758cec31b3d3e7333871f272343c677391fd9b51e22ed09234934db07bfd65fb1c36d8d4291e76c0752bea8e298a7bd01f5f3ad40fda2c1d3663c7414de3565c677c3c15d61890f1be59a44a59590063e790b67f4b991eb3250e9bfd71ecbde8e958e95cf3d1b1b0d522677a40f7c3d65a4e224a0389451c87999da0af804cf833e305cb245546d2e8577e5f69d91b24599d54a7ed85ac804078b3d9490d74c0005654e9eb9c7e61135035572d02edce2b5b675dc1b407970b415038e0fb23d82bd592a2dda3e67e962e00582d4a536751b2989492b87dc9254f3ee9c569c6c7e24094c92b7c5ab2a3b07140e85610fdd38bda5f43db1f49934c88a0a1819285812e65a78aee47e0d4b96fb883bcf199019e7d51cb4d57482e277ebcd3ca7405693e82e340e0e3f239dc4fd3d987f33a6f8eed2376dbc81e3d4c0cfcc0b923d8766cb43c02b7f5cf8ab3cb5fd5afa9daa9dfc62eaccfa2ed8bec5b5e6349d83f25842a68a2f1292f3548c803d760668f1123dacee01c6375a8de4ea99bd06dae9517f82edf131b7644fb9c4f5957b934f55344074fd99262a62c9bd3ce1b36a08e30db1362378efabb5cdd7f5bf1329eeffaa226c53be82e3a86339ab417c1f5ec28f1778887946b3737bad7bdd0d2dc709a456192b9f2b553c71f91fd86ae34229f2d11fd9cb17e5a5c8da9df06f4f7d02cd1d8552f6cb6107a098d9f76654bfcde2926015afd295c506ff23e8994ec067b94f180230ba4145edc7427b758b6dfe4f801bb4a8487c44635fadc24cd83cede5443701e005709cb376bff445f6096f1369bf37fbc5451c0744fae15eab5cb5c51edfed9126274f1634583aee42f67961189f283f2eb6f7e6e8f9acabd6a2cb0e60c9773935db2730944013d6b82b5ea0803dd66ece891836c782417a07cfdcfebf7f8fb2041ea1c3cea32bfa420b121792a1fd0cb50cc5a76f52cde7f2e3144b026ac70eab409474a5f5c19da1bf7d94795f876ecbd50a200748277fe1c340e62f4f0cda41bf4c4d86a67fad906cf865569c6d99cdb0cc216896b18aaf7d187370a979a2cf1e70e25d6a753d6f55e2516bd74c380700655d136807d349097642beaea08e1f87aac8940fd6251b0c1991e6295669191d214b709be7b2eba7968798aca2913b9d7033ffb5492fcbfc453a77fbfcac0a4077b0c1fc2104232fc71507a7702b94fa0da7125c1309b6be420f3dcdc46b9e71be4a9f6f27547f5cdd4e7dcc749dc1102de2b325a0ed02698bfa426fd7b65cd3a0256d2cbf477cb11a31d7edfa5751a24ae802d2157e026d9b20bfebffebaaaf5a56c0299ec8a5e00775015e9c2ce473d17b8da3ef50d94b25bad5327c5a02ffcd15b11cfc298eb3fd29837a26bec859baf4bac54e01683242c2d32080c33e917911431c2113fce6a039d9543594c42f7a895d494a1b93938bc9a99422694d85ec48d81c7d9e2c6e0005bebe95cf1caf649e0854e526310b998dba4627e64193025844721c04ed24b070ab12c982bf558f1a6a4805cbf4149967a77178b977e0664ad0ef2499accdca63c0caf2c70e12e01089b86375c4f0115a751c5643c05a000dcbfaf662ca1e7792273ffd7face45f858d1be4b3c17dab5e693175bd1906738c9076727829f04ed031434fdd27f88617e46272b651ecc484f00ee9bf9c6eaa8fe2e431c1dab833ba00ac7d2513fac68faffb18e0bf1e411f142a9dcae3dc59ba743a4fc5f3a55986834c6bb2362a2f6156c5f3b555ed547d6759e8f448e18f8177fb4056d14531024163d384e1df5448b56e17631e0ffd32dad761eba089d7eadc2b313cffa7de8d3471a2ceaae2f9923d99ba1f5ea9037a64452d61a427cf6ce62fd3c7ea71f2c8dcc72169a68ee189fec31fad71e68a070c18ab97338b77f7b11cd2b5490c870a11211348d8e8c3c4b4462d94ef8e1f353b0c03f9c8736ff479918cac7f3a33d00815ab76ca6a23951ca120116ee3af5dbc7ea9179dcd30cf2174cdcf5a5705430b0bc3b05a89397342d9a53d756f2ac6cc2df05a1d9fa84813066695e61801cc2b61397eb9aa16bcecf6eee8801dc77087c4181c97d14566ffd64f973c9d6cbeec88c75fdb10bf0ddf1427512f7fa09cf55b03c885d64f9d8d160c6f666f1e2b6b61b13a9793ca92548d7942c36d65f0ed414f7e343c3615715337bc432685ff907704455e7205648ecb7b0b872561b3bfb1cca4ce77f8abaf3ac348d25bd386f48b04f6bb5e1b893135313cf92c34c6e95c8a5ffa1fa024a51fd61c93111f645b42ad6fc7ad15d541fc376548d4d5319e338a61cdc5309be132e45903ef93ddf4d1dc1fa82d1178485eb8beb818c7ee1730fced09cdc3670739a60d361f545b708501686c2ce89b172640c1e4f4bfadb583c53a90c1d40a626772510b3fd3eb91bef5fe6cfeaf3201767b2a86f87376e881a4f9d9bab8e1b6e258b806f7b0efb08544c400f656d281e48a1115e8fbd6ef6146e1654f9d4f83518d51417d4fd1df45382ac00cee3400ffcc5d5c2bf30e3a54214ea94123ac77854e54faf628659d6a666279fbcce5108933f6da844699292e41e722b82c799edd916fb1e1abe5002b6302cefed84e70a2ef183527d83ae0dd7f4dd74be09385728b03812b2f7629bde16c3f4f675593bc83f52c9144fa3cbc2d4ef99e97f1007339370c26610aa341023444c6586d359b5243030669f822223281467899f8a81c25a230aae1a4b53899a27bea56c12a27e617f3c12660731b1c34f4e4249ab7e9dc89cd6bfed0cec8cb9e225385895190fb62e02a750ef794b7be71dcf228c48e23fb65bac87b8c93f86e64fc4fd483d6f4c79cb5556c6e5a9ce19231c577464fb4e4691b2b07e2b312a06a9fc2df28298f03c16c441cffd09f56c96954023a6695b2765df71f6f73d3dbf8bffd0fa3656dce72c267b029b587fe33be61cbbc6021709447423222f18d1df8e1c50c8ec62fc0ef517da14003f3e8d91e9b65647d1255875452449c911816e1a1dd3420ffb54f71e61b1cb7783c15a97664d8a9ca79c61bb191d57141028cc0fe0226bd7c7fc15c6eda21bb6fe5d0ab3c7207a7f8e3259ed68d5e832718eedf6202cb2eda581fcf6570cb01409894c11c0ffbe101447a29132682a3218be3e109b96596ef4f245da39d9c04582a986452ef66bb36eafe5174076adfd3b360eb83543b877c4ddb142da8dfab8880023b2763570e29e42ae6f011c5f16fc2090d7bccdd9e871098d828c8e08aa8eda3613faa25469b7b9a429457d5daf5ce0c54799c5579b6911caae9d4e0a1146dac95b1a1b4f1fc1e73c622b218356e7a87f48a90e3af46723658901e329468d2f36c9531495e1b18703e3f235de7792eb4f4c7539b6531da6e817b628d98bedfc257044e55ba6f54b046994bb8871edbb511755c7562dcc1534a614bba04b3282544ed77a1034fec30a20853da4d1e71b4ce848be3a99610194c77116d3c0375ef39bff6873eb9ddda4bfedb9a88e2acd8e32972a2b864f6710b6d0d623fd06f848179fbb9d8cf265b4abfae40de068d6e5fbcc025020d79ee05bb6d2a8c1254fad8857cfd58ad1f7d86f5d15d18452bfced92e98e7ef541d8ec0c5085e10ea3b6ed311584c77a10de04d7f896a955470ff7e7c8fbb542fd5bc4b8a34f6992b340e947a260e39cb2f7d6736561739982d2a8e586258be5c3ba291c8e2172d14f0cb9ba01d732632bdb52849700e5a6083d932e755a72ed1ed9dc825b222d87cff81d49c98d02fbe450cc789ad2016b99d8815513f1ba273ec673ad49756d0f1c0e73724119d6834d559b8d936dac92d021060af906673210db821fa994de41074bd36aeaf060bbec986d9fbbaeff5419569116f41687f3084fc0661b9213c4f8564f48011b6d312a11229c437fa3425d2f83849fb836589082ca24e169b0c4d739abd2c4681ee53218c4921af151a400345ddb51aad7b1cdeee2f7c1d29db0d9ed19fc8dca8fc36f6aeb128ff3a66cf185bfa697ac73169e6e82a174fcefd3eeac62e74e8431a0404fcfcb2282231df29fc43e8329dd3078c6247f5311eaf49bbefa0c3c944f6f10a9aa3ae2809134da5c888698a05e42fb04031a6521a9d34a6a7c3e53bcf5ed88616e34583617fc932472b99f424494188f3aa0583ce66f182f89230904eed89b05e925c67ee4e79711980356f06048baa6e6b9c028d57e863cb6385458227fa34e1aa57d910d0df5fc12260650213b296d14d02c546cdf16715ae06cae86dba34ee80c1ea3b1ee7a09ccabbd64f82f8575736d574732cc67a21cfa25a3082288338a1dff2f88", 0x1000}, {&(0x7f0000002a80)="bd37b56dff2fff7f90d60056f4c69439f453638f63b58b18edbe9149b54a89bd168c9f462e86347bd8f875cec415f173ffbb60707c9971e92e30e252037d424d68220c5092ab8e460b3df5ae957818cb24403bdcd6fcaefebcf6dc6b5615f18850e49aba899047fdb6fbc0c38e35ebc88e9d0a5f1a6e2100dbfbb10f77f0e34152443a09fef3494c191183c2c8cb3d7c6c141a83dff68bef029f02ccd56941c0140f4894ea", 0xa5}, {&(0x7f0000002b40)="217747385033f450cc9ada88548b230c2a7dbaa5cfdebb196b2b92c646405980d175c8aa18dd051346dcb4094c068cf6e6afa22dc005b798c76dd226d6c4a216fc32828cb2cdfded7c0dc593e74685200306db04d903ee6eac16018dd518fd0b5334b1dd70906d4c10a7271629ebc76c1e4c85ffab0e1c2550e969ea826c044c7e0851a40eada0d80518a70c77599857181b781910224574f79e7496c80d1c3c0e0f999316dab6ee202c8b2a36c5c353d8252e475396ac75a675eb128da4ea91f67dc9791c", 0xc5}], 0x4, &(0x7f0000002cc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @remote}}}, @ip_retopts={{0xc4, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x4, [@dev={0xac, 0x14, 0x14, 0x25}]}, @generic={0x1, 0xd, "a6e0bb6a02bbef3df7b457"}, @lsrr={0x83, 0x1b, 0x3, [@multicast2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @rr={0x7, 0x1b, 0x9, [@remote, @remote, @multicast1, @dev={0xac, 0x14, 0x14, 0x22}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x23, 0x5a82, [@rand_addr=0x6, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, @rand_addr=0x1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x24, 0x7fffffff, 0x1, 0x100000000, [{[@multicast2], 0x1}, {[], 0x7}, {[], 0x14}, {[@dev={0xac, 0x14, 0x14, 0x16}], 0xffffffff}, {[], 0x5}, {[], 0x7fffffff}]}, @rr={0x7, 0x1f, 0x0, [@broadcast, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @loopback, @multicast1, @remote]}, @noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x595f2407}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8001}}], 0x148}}, {{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002e40)="c77ec3a6ed18962425ddb0b274d32c8414b37b21f3ba66cf96c618e7a30bd384a1fb1e25b4056834f05b1737854e560eea291ef8878f42f6cc14f3625679a64bc10701b2fa7820670b2d274cf81238c0c7860d59f31e1ae1c356a7ec506b22d89f16545c5a9b7c92c8e67bfd1abcd837ec74ace5296d8ce768feee28549865990bc1f2de994951", 0x87}, {&(0x7f0000002f00)}, {&(0x7f0000002f40)="eb0383fb0199699aab30cb5a53b1feae17e89369fe8e3e79abd038c7b56466f8388d7a7bde9cf079d35c261f444fde493f8bdf7861f796", 0x37}], 0x3, &(0x7f0000003380)=[@ip_ttl={{0x14, 0x0, 0x2, 0xff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @rand_addr=0x8, @local}}}, @ip_retopts={{0x80, 0x0, 0x7, {[@rr={0x7, 0x2b, 0x2, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x28}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x14, 0x5, 0x1, 0x1, [{[], 0x4}, {[], 0x5}, {[@local], 0x9}]}, @ssrr={0x89, 0x27, 0x7f000000000, [@rand_addr=0xfffffffffffffffd, @loopback, @broadcast, @remote, @multicast1, @broadcast, @loopback, @rand_addr=0x6, @loopback]}, @ra={0x94, 0x6, 0x2}, @lsrr={0x83, 0x3, 0x2}, @noop]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xffff}}], 0xd0}}, {{&(0x7f0000003480)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000004580)=[{&(0x7f00000034c0)="669af69b6958cdd038eefb5c692d29e6700f6c0426a34025d5a787f7e217d776d16ab8c07b83062ead62395a238a9e6947b87c1ebda8e5a4e07e7668153a2cd816175697e3df7ef3797bd0429ea8af266705796e3206d32cf7964150f79cee788c71e793b790fbce0e65a2cad6163fa34da714963e16cffddfad40a0b7e8b0a112dd2222baad77b9bed88ca4be5ee2d102b6addf6d9a0654cefc524f839c9a2304089a561fb015dc7dc05a8fcd47554939a9cd7db85c642fb437eea76325906d36380a7cd07275b644d4bded8884251d54a47cad423b9af6ab8d6cdba319f9826a31db2c7820b39063775c1697a831f60ab72ca115a9ab0d6d41e397fcc5b8a629da29ded27fad247e0eb01d877e2d923bcea524c3b551df08f9b68169c220480052d3c2ac13f4ab48ad469e4b3f7273f363339f3c799ec206e44eae0608b30cf52e217b0de5fd7d0a7a89375bf3d376291a7db309751769f7fc77d2dc07425a573360cc1f31b4ea158bff40de35159a49c5389df71e89335b88e08067c790130074c658e61c5f0f88be26a2974e43f885eac18fd622ea2fd89903eb744ed5154c4c0c11c62eb7d9666e708efd57820a9c75b3b2ebd60ca9b888ab0b41ef23e665869690f3dafec7cf631015d88e31b1f7682d92389cd7b097e6ff9319ed03184e92d619e48b4526e54f2a90b164aee4db45973900ad4365acd08e14ec6cbb0529fe1653c1f1340981f2962157c833e6ac57e28396b173fa1beed28e548c3badea0b602f4ae6345a373020ad8732c6828d65b20cd131a2e6666326c81c3ce1f5ae3962a4c5fb91d1bb74c31bde1def976abe0d3dd1b9bec06b20ff556a750e3a1020b6e60cd6455058f258e0ff06edb369c338866f605689919d82e257b6ace7050285b420fe4c369595e3030b0530d7cc7c938301cbc1408eff273bdcc426590fdc81a46f541663aaa9dca19323743c1bc5ba3e17995baf6fa8be672becd00e7c83086b42e6a51b0e5a5382228193718d7a1cd4a7c3d7dd751004c7fe8930448e1a8ae740af559589238abef2fcbe06cefb7243b3ebe01323379fae2d4b87b3ed769cb6ea1589c025075f5b5c42b5f4aff67bcfaf2620e9416f99fa46e735691fb7d4b3f50b68b8cfd9dc5b1379a98f5166b8a26be5dce0e7a40bc3c781b531b368922a2c84c2065dc279bd704d32ebacdbda784e7009ff129e0bc0e096c41972939ce0bd7fde3dce1b3d87d498084a08b6447a9c5eb64e4a0e74c2a3204eee053c85e499630c9f36d73ccd21ca29a04b38a1c22ebfc1531be343ea0bbe122506edf7a069ff49ccba1837822fb03a50748d8f8b1a87bd0d60217cb8a9d67dcb707b92da6fcb83703a6fe89d9d41871ad3b4210089cb1901a3eedabb4ab29493e554d303f107d3609b9bb29b164181b62e4fa9600a2bde2e2f8c0fff0cc7120b52da0d38726bc4468193c69d06af562329a028878df7be4149d012a14b7f281b7b45876fa9adedef4d5185728978982dd14c490c4fcdbbff9fce6cf5481791f722277f9d2eb00cc1301235bc28766591774aa292d870ea6ed6ecd766292c535ce9c32e9c69827a8af1a9c06288137d707055173392307af92ba1aa92130f45f25568e58e60d1b8ee7e6abcfcf56aa2dc54b84957163c4a72025da0580902bfd8daaddd67bdbf907cc7deff2107fb567ce4142bc95a27bfb4ecba6da2f73eea4a702b739c615fd71500b9027cbe9789e78fa801023ac655150ebc51405349288d1c596941fed502af9686f2e5c17a8a610f78d7d4ceb347615fc3d78e603c9b9192b0f419b5218e89d80b2da22281042dd00d1924d2ce1a34ef3ffbf18ad6bed2a7310b6a6e3212cc9c9c533422def1b595971a2e33818a63ff511983fbb9bc27475c348abca4634423298d5ff2071d60f3946b33880fc32ff8cfc06208af29520713018ca761300f75354733a8df2102526593dec2896cbbfa8ba40649be7d9d2745080d3ffae949d307fcbe0cbd9f96580e0b50743cb1a092892e837dab9c5544e6e275dcd842a7357c1a11a53cee6bb4b4252bd7c6bea31bd29fdfb8cc14c81081f5e84838648dd02a41423a0089f300b4a510fa18ae2124747ba59c0d868e24148d9b6547658bed4a8a720a7dea73c5be1c9800bf291d93d970fea4d3a0914e061941d3187f01799745063e9a8d101e223b0ea0732eefab55c4d779a04d75a862e789f0563f55a3d7dc983211f09287c83294368733b6bb76589de7b771d70a689a0c3506e126feb1ed2fc47c6feb77f1bd3fb59bd292d0322999260412703a00cdde9e4d5645c3be6cc7115ed353f32f9b8e8366a37ae088d793b3d1fa9c48dad53d8baf79b90d7ffd2d7fe2ec4fea715257dbfafa881840fd45d59eb4c1bed8ab3a0180fde1b2c84656f9e33c13a0e678bbe5c64719930ce2443ef998d72fe2518fae5251b04ddb3527f3363c851d27b48719c332902e7bbd55517ff2de5ce64305e1b3062c8ce170710f3fe9da466d6ba4d8b0ba68e98da29475c955c420a325d957913bf0fc92fb78f9fb4f85a57acf736993cc6cbce7393d4529e5fe3b92be9d6e78882ea8add1826e0288dc1eaa64224f466b4d12f41730e25a9e0debf10a306a3837c93cae5c191872198150e23d69bf7c6741ead5404d6c600d019b6b0b72604424ab9efed54b1b2b31e37d54259facb8814584beaff69dcf317b84fe9909c195333f1733bcfa71a5879034630808be1612780a2603f9e63b0933ab1ffb0efb3e3f1db2a59fef4cf3fea8562a0b3349c5b0f5b1732a4f0623364327a172201d16d5bd4fdb408b245ffbeb3dc2c013191a0d4b3cf1e17ee671d364ca2534f382020d05982b39c912f1164bec6737b741925398b6bb64ee1cab942ec129e3477d1a58efe4049f48d06335097946cffda0163457c39b72b3440ec35f069a6218accd209d97fd29733ece1ce5b2e1a2b9b51c9aada324526e90f590acf0ab45ca69b5d158979c6721adccce64cc07890bf09355caa3adad01ecb9036787692311813f7ee1d930dc7fe7f9702b23d679ace58f33d00062d64eec68a0d94565dd16f6eb0d241c6156e1088e61b943b693cf91f44befb66fd1a4b2e37c91f9cf703d0fa03d112af756c87556278025685eb1aaced1104fdb3fc6f45e6339a82408a9809f0a73b31e3a3caeda762972c330f686c091b545266ff45d1ffc44c513ff4cc392d31bcb3a1e6161d2c0bed61d7d0fee7c8b254595700f67c7b3d52398a238383f740561fd125ed158be35143ae4c90ec433ecfcc748dd41693b64eccad57d4ff2c78132f8c366ea8193e186bb227bdcde5e4f1854537bf330ac78ccf6e6836cbb48268e139562ad7acfd7195c501d7b241dbbe63a30dceb0290ee07f2e1e19c2b84525c9e26a7fc3b3ea8e157dd8ca44eab3ac8126e21a8ccf7abbde273e7246ebedc7dd1e545507444be84aa872d5c61391f183491393ca79c4daa4ee7fd08c8be889d1388e916cb64cc7337382fba76e227e76a44c2288357c2eb30dbbff5cf796f0f25275af22541e18dcec4b46202e58f326314d80cdf55fb270ccdf18cb900a8e90220e199e4af30a8ce1cbe63d60bde41ce33059d6a066cddd12c794e2e993dcbe585bc02666f09ff2fccecfee93425798c4c1881079be6d6875a01e0e38182c73d536d3d3d557827adddee985d3d03731477a9d7bee65e07bbafa47ee9e4f67a521e666c097b99e003ae2816bf54fee2f301b20d42a89101fda3cd38d31402bf8583013f200c0935d7f082f8d18247edce526bb5c09a454344708a5ac5ec4338f186acefc5b2aa8c609c2903bf1c6100d03f763ae120346ac975f1e22ebad1bc80553f050a0c69553359d7915e9261364b1474a31933ec359748ba6f3957bb57c3ea2cbc98af7b9865ddc14f299f7ad2e57314c292ff87466be4baa0702601f188451d676e9899b2badc5ee6d8a8b617baa6d2c41576a900180b2b5fa0e735d59896a95bc4eb2cd53c83d6471f3fe9190aab791b669f182e07d94d8c085ce843b3c8faf3f8300ea9077ee1c27199c6a93632b18c39811a8c26faa0816c78083e9175d87c987cbc7b84cb9e20090f2a8beb61862d1fdf9f32833ce7678ac5b5fcf451d30acc77bdcbe6c6b2916cbf11ca0863c46b7a84f8d40b543f74bf53b53fb1343ced49a1210165bf4c69b81505988c6d7adc9c3e7ea173e308e44ce6aa749632edf00ab93a90bbe7f01500e9a00bed5c414296f9145b3714f50315b0ef005df211afe1c215441323ed091b7420cec5e592f8b4436c5e0c4c012f0d051d4bb72ac48807518332cd98411bda903f3582c281c503bc42e799b8e427a56046c99fa4bc9d29e1eae03848c6a242c8cfa01a5abe2cb386d65db1fb78a5c18f4e0f41659d9e5d472de6f2bc3c4f71988e4b588bd5da48f3571a76f80a9bc21982c8c917cb963c6a29e8a8e55d778c4abad77296124382055a8ea7fd19cdba47da0f11a864ec9d29decefe6f3bd09cb03e41480dd3daa6b34d4526e7a69513ef874e1d75a001c0f3aca6b1faed9db2c3c6c9b65b0cfbd3a8a9dcb1093e364daf9057b6f2da8458361f824f9cf9c8384bc89d7648402f999bba37348820c32a02a8268eee9b614e9f2eeb4bb90cc7865c9ebd52c8a8d14a270559b49d7eb2f55ead125571d558ab5ed0ccfa3550c14b6e05ed8b2d65a6a93cbc4da7bf7b6fd6ab4cbf8bc2c78cd16c127641714942ba079792de1447d6d016178128f3b7fffafe20938a461756db2e1f3c3a724aa2453b6134835528309ee58d98cbac5dac757289179076f24472e1a612f6d5dfe24478303d6f9cdce10ce56a42f4d445fe5fc120526d1bf2d62eaeda96117e45390ca461e4bb8ac3cb8bb557e6a84bfb442c84f3f20a4300cb0ab45c55c307aa172fda98be80ce02da83db7fd3a0527b5a16ba01573e8ed7a57890242da8502a4745783a7bb93d20fa63f769a2bf3604848eee47bcef49530ca65667a0fee61a8c833bcdb089535a16e647733a408b2ecc1a3b9b4ff28fb5f2736b286a19010637c8faf6397fcf4e729629ff44b0031a9ca7f6e39b20781e6f5fe4cd773598d47c5976b73a1bcd045d85e5c8498b36745ef3aa07f485f0c42998e55a2ba516fcd2731acce5781d3ecb9a488d2c883ca258a76287185f47de2f8221175b310cc8373db5a80cd9123bf600b5c940cadbfd84438a42d0e12b3906c2f6c5a38abb7687c62e623bad2b48a55c040b8c928a2307c85bb3a24a59292112b99c4aa2e49a6cdcbbcf4c7edf1d48bf62cfd34ecea26c30b2a262d64c643e45adc428b8fec907a4d19173ee50d15aaad21ecb2bc21de58f1f874c231d29bd2341c66711fb06a034cd308fc9c224f9bff49c8d88a47c2d7b0a89ea262a551a0992ed25342d29e090e00452aaff8b899a1d48da74573754e65852ad2b5953a6a9b5ac4fe1aacb53e76f9359e460a8b70a191c0200555cff7f019d4628b72e53fdb4d0140398fefabb926859bc2dc20e519d3f0ec923c9f231202c22574e75e9296b158761d9fdedc6ad501346c4ed876b3f6fbf1aac7c9ee38a7434cea19e0c63122c0ab1131eb88bda1d21e429020a1cda78ee9741ba7185e7c1ed81c48224d47c4146fedd2c6843298f36f8728ac706a05168f6009010df66d260c27124902a6674c6a92db1e7e561ef12feb22d7123b0efb9fcfdfc29c9c523ff8fe127000985692f4a71fb2989f10443d6e7e8b5727b276eb20c3f332427bf3ad2c98e2fae1c49609532bbac0714c80ab92805d8f58865", 0x1000}, {&(0x7f00000044c0)="873f9b923843e182a40319be4bf12a9e9f7ccc21d30bea4c53b79e12586c85e52e5a412f2b83a3376d4e0e72b91ae91ae2df3a4cb2269982cd159a71ef119f3265183657e15ae97220367a7908580fd05a91ec285aacf2a6c00c1329b0c68a7c76a4e4a949708c65334c6c38b7a457ef28d5149bc49001d3fe24f12c5cb7412672116292cfa212a8539af076061d0493142e8b52cc3a0ac08f1d6c61a8c982a035d3cbca42ee7ed6a20de91dfc8274be", 0xb0}], 0x2}}, {{&(0x7f00000045c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, &(0x7f0000004740)=[{&(0x7f0000004600)="d13d38b9f068e9547a747385c3572c00d12bd78684051511fbb96d78c3843d934e9d0008fb6e0fc5ca524d781beef4733d", 0x31}, {&(0x7f0000004640)="4e917ef0972e389fec5eaa779e571e664a86", 0x12}, {&(0x7f0000004680)="8c42b82c102d062694b3dc4fd6378a76b347832f9b546df628140977f965", 0x1e}, {&(0x7f00000046c0)="8c85622772bef545c7312d42abff41be65485ee9c437d951ef9dd6a88897233ec812f5f83ba98c5a74fbba53c3547cb0462440e93ed68606454c6ac2c079917056cf5e1378022dd1341c3e66883ab7fab3eea7d7b2e1ed482f26fcd8c2405f503f212da3caec8c", 0x67}], 0x4}}, {{&(0x7f0000004780)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000005a40)=[{&(0x7f00000047c0)="248980aab98982e80aa37f8efb801bde89b26b5e0e4c59dc162ff15c1c583abb414e1009cb3772fe5752bf5f3dcf8f4a16fb3f43d5cbe0d8ebbb2ee40baa19198295aefb5a00465b10d8e6d6bbed14738bc127c70e9cc077bccbe35d5881c15436ae3e803cb4064499c4df1f844d4dbc75518490", 0x74}, {&(0x7f0000004840)="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", 0x1000}, {&(0x7f0000005840)="25a9766b3a164da13f74228db6013d8ebc095fdabd5a004b122dd79710256d3984e4de72dd2ee849d25678695b35b936ed3a44ab05ec529abab042ff7821a616aad20d", 0x43}, {&(0x7f00000058c0)="c1546add3afc0c4edb6cbd1293637ca0d331bb78e670962170ec7c27c5fd4f05fba1dd39aabe02ab8cd21daf8f8a5fbb254f8e2b8e25ee12788abe965874e350666702cb9cc1bd2c17aeb9caa621ae62c9995e2e1779899441e81c18f955b916f5e6642b779ece4720a7b80b6e63d5ba104b4c0fff1e5aa696b1ed099f052b8bc53a9a89", 0x84}, {&(0x7f0000005980)="cf8fd0fb96c9a726ea67047d1275694c7c7fe514f023fe7865aec50655c2d3ac99cf33e27aae106a4daa33b6923bf54737393f7812330a3318ac7fab5896ee280c81814ed39838b4d3b2f44be3f525f3745ba9ca857fd75322a061bcdf20830bdf3db23068e1", 0x66}, {&(0x7f0000005a00)='5{', 0x2}], 0x6, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], 0xb8}}, {{&(0x7f0000005b80)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000006100)=[{&(0x7f0000005bc0)}, {&(0x7f0000005c00)="f65dd8", 0x3}, {&(0x7f0000005c40)="25e50e1cf5241840041b5563ba658bde0cbc2998454e9c4a244390c82e632bca3c5ff09c0bb20852b8a46d6792bee7392b064c88a5c136f497bf0b37d70d82836ffe1e3cab0b11a30a6ab308792f8288ae80ab4c1b7eef40278bbe21ae1ae08cfc23f7ae18106cfd958a209a3db0b07b8006b494b4152cab42c5613b23cbd0b0719067be5caddc5d645e6855dcdc0889f5d7ce4055fe72150ebd25589623260601b8245941b818b604b44f1e153a9360d9c8663afd6e2d6ceadb8bd38e30a0d7f0e00d913a8ef4cf13f9c8e0de6f6471ada01aaf4b", 0xd5}, {&(0x7f0000005d40)="a4efd50ccddbdf23aa143cdc10b76b3a32bce2dd661347447516ca6f62cd99fa7e63620a383f26916fa4b4bfb9d7e417a956973746f5796b2bdffb04035a508fdfd262760a7270fa42e27639e4925e9c687ee926791c6ccacf68ebb5d6a63c67411e73fc378e54b1e052f1b48c22d3ab5ee33c8b1decfda581e863cc02b260d376b704833b5ca9309918cd567fd1", 0x8e}, {&(0x7f0000005e00)="6fc3f861262d14962f3ba32ec36803ebbd97a21c8c8448b434da6689fff921d03639bde5ee515087c5b2071f188dfde1703ea6070c45", 0x36}, {&(0x7f0000005e40)="d904bc1b60ad940f8a7c45e9569692e3892792b301c387f3afdb261b4e5ffd20db3cf286233dcce8719a9ae0c873e4aef1a940c05c4312fb9c210489f25e1105ac46cce8bf2e7f424f0bf88f31915bb1bc394484bca767abba719db8764726eebfcdbf93bb6838", 0x67}, {&(0x7f0000005ec0)="987dcc8afe2ead873ca27a47bd18488b74f1a5ca81df883996e73f3eb95fcd21a59e92267af9a2a0798f9e2c6ccc5a3fd7651c9f44d963b6833562e29d34a8f95822dd4a02d7726a6a8c52a0af544114ec8fc1238a8f0459f11af265eecc1abee8c73ab5ecc2b113a51c1c356ec637f25b8cf16a7487cc4656361620a85925296003c5b04f00bd7f27bff490e0dc6e11ca6771c14ea5025e1330bb97679578b7d58a94f46ab1b4f483ac5b873952313897257553b98992a138feb1964da88eed8bd696cf66b1b490521e3266032e2495666a913a034c", 0xd6}, {&(0x7f0000005fc0)="1d1ec1a27a5078fd0d12e836e04602443efdceeca49ae52f1f963349800afdf15c3bc05cb7cad0ab311850108d28bd3bed00a544c44914073954bd6a0cc0e71631718d4186f927fad963526b9c8fd3546376e32d8e6b", 0x56}, {&(0x7f0000006040)="c13d3ab6d5b358e4cad1e84faac0521ea991b50e48c5831c30e045003fe1387eb44deeb7972b424ea3fbf6478c880965fbec02869308b342a9d2375142253159c17d9863fb95a503b884b458edb10ec857c1d25f3da2ec939d573f1c565db8b4b4a50241b54aa1fb6b52741c678cfdc80df2a9b17204107404324e6c19b4137fba2e0d38", 0x84}], 0x9, &(0x7f0000006340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast1, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @rand_addr=0x3, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10001}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7f}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0xa8}}, {{&(0x7f0000006400)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000006540)=[{&(0x7f0000006440)="2bcc8eb55ee3f4cfac396b5bb501a872748489dda7fdb0ed38745817e35bbc1491f5267c99632a2f161deef7f01a38148c317ca3c04779c965d07f75dc08593e846855cbd6d85e0508b27b9b3ed3cdbc9561143ed2017aaf307dcb8bbf2aef", 0x5f}, {&(0x7f00000064c0)="310572e7c3c4803c763b037525443025510e97c4162a679b9a3616c0d74e763b8ce815ae7f95ffb77d74ac1fd6f39b1aa7b631541bbfec9882ae0a631e03d9f3fe692a027b4e35a7f0be4cac50e2ca45592eefa61e512fae944f3b84f67bc2a9f57a", 0x62}], 0x2}}, {{&(0x7f0000006580)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000006900)=[{&(0x7f00000065c0)="b671f57808bf011367bd227b8295aa97f6e21a3762c9040468ae792c24e410afb90545d96fb3a974e19b628a6d6c42f91ec782c9f6c8247c1c3976c52efab34ac54d850aaf85d8a90c1ec63416ff", 0x4e}, {&(0x7f0000006640)="0ac2d56e559e1a2899b9e37e9ac162c882c1625f9ef9f4e27773d4e8e946736c789219765da83218f659e4c82c9edfdd11b3c373bf3c8355043f4ad7e70e65ccdbdd019b195b5f148d65d6adf09ca06f6b8501bbf34cee5c59ef151874fbcfeae2bfbc1caae3fb99dd082ebc3bccc94e2d33e3ed6e14a0ee6d7aef9161333e3bba17acef1e16b6bea6c7d51144418e5c5c3dcbcd0aec54f1b008677e9d46dffd6e7612020d", 0xa5}, {&(0x7f0000006700)="1793d302c64bd7c75f62e5c4b1010b613b68d6503d47984c7e7ee722ba310624dbc155c9eeae5eab", 0x28}, {&(0x7f0000006740)="449bd138cbfd850b24222fa20f7e3f515c64e069d9829dffde52b7ec742fe7cdcd37e0620c677979626be6bcce7d089e0964d96510ef39c666f62032dce802da257e3ba037cd854b", 0x48}, {&(0x7f00000067c0)="a1314e38ea7a324695a6d5973789f47b375f6709a8896227c377772125727e8b82d4adbdec2fcf743d2cc878c4d3b58e0b15b9145259b3fcb61b281f5afd2a8a00cb9e81a2efb2e3672670e52192bc344349b348903c9287ec54d86171848711a4275436e65e89ade76eab03db03d03334b8eaea94787ade40a6b1262a0716b7285221dc7a42080e617936e02eb98d340bf528d611ac382492c9768dce5feadbfa565c5e1a62385d20e255d6827d076e9bb30c6b166ad0c5952427", 0xbb}, {&(0x7f0000006880)="3219b1daf9ab443803e77e88adc8cb655211d6c160aeede5ab9f6460554547f55861629ab3f056198ef6205f904499586eba9c2dc3f5105d0b784022326abb5c118e1615f62064a42a82a44fb0faaa30d2a474a7", 0x54}], 0x6, &(0x7f000000ae00)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x1, [@multicast1]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x101}}, @ip_retopts={{0x90, 0x0, 0x7, {[@ra={0x94, 0x6, 0x8001}, @end, @timestamp={0x44, 0x28, 0x5, 0x1, 0xdee, [{[], 0x5}, {[], 0x15}, {[@dev={0xac, 0x14, 0x14, 0xd}], 0x7}, {[], 0x71f7}, {[@multicast2], 0x1}, {[@initdev={0xac, 0x1e, 0x0, 0x0}], 0xf}]}, @cipso={0x86, 0x1d, 0x13, [{0x0, 0x9, "1aa4b72694d722"}, {0x1, 0xe, "684cf9a2b55d1feeb5e5f3bc"}]}, @end, @lsrr={0x83, 0xb, 0x65, [@local, @loopback]}, @noop, @ssrr={0x89, 0x27, 0xfffffffffffff840, [@multicast2, @dev={0xac, 0x14, 0x14, 0x25}, @dev={0xac, 0x14, 0x14, 0x1a}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @local, @multicast1, @broadcast, @empty]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0xf8}}], 0xa, 0x81) fchdir(r1) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000002f00)=0xffffffff) umount2(&(0x7f0000000540)='./file0\x00', 0x4) close(r0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) [ 962.751858] RAX: ffffffffffffffda RBX: 00007f5d58de2c90 RCX: 0000000000459879 [ 962.759126] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000029000400 [ 962.766391] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 962.773658] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d58de36d4 [ 962.780926] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 05:42:52 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/attr/fscreate\x00', 0x2, 0x0) 05:42:52 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000a40)={0x0, 0x3}, &(0x7f0000000a80)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000ac0)={0x0, @in6={{0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0xd}, 0x1f}}, 0x80000001, 0x1, 0x4, 0x5, 0x8}, &(0x7f0000000b80)=0x98) fsetxattr$security_ima(r1, &(0x7f0000000d40)='security.ima\x00', &(0x7f0000000d80)=@md5={0x1, "5723eb49a89e79db0870e02cdbe234e7"}, 0x11, 0x2) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000bc0)={0x0, @in={{0x2, 0x4e20, @remote}}, 0xa537, 0x100, 0x101, 0xffffffffffffffc1, 0x6bd19b300ac3c950}, &(0x7f0000000c80)=0x98) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000cc0)={0x0}, &(0x7f0000000d00)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)={r2, 0xfff}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000200)={r3, 0x6, 0x20}, 0xc) recvmsg$kcm(r1, &(0x7f0000000a00)={&(0x7f0000000240)=@x25={0x9, @remote}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000002c0)=""/239, 0xef}, {&(0x7f00000003c0)=""/133, 0x85}, {&(0x7f0000000480)=""/214, 0xd6}, {&(0x7f0000000580)=""/214, 0xd6}, {&(0x7f0000000700)=""/147, 0x93}, {&(0x7f0000000680)=""/35, 0x23}, {&(0x7f00000007c0)=""/134, 0x86}, {&(0x7f0000000880)=""/45, 0x2d}], 0x8, &(0x7f0000000940)=""/137, 0x89}, 0x2) preadv(r1, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/115, 0x73}, {&(0x7f0000000140)=""/123, 0x7b}], 0x2, 0x0) 05:42:52 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='gre0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 05:42:52 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0xd, @sliced={0x9d, [0x9, 0x5, 0x3ff, 0x1, 0xee1a, 0x8, 0x6, 0x3f, 0x100000000, 0x100000000, 0x10000, 0x63ce476e, 0x5fa5, 0x2, 0x7f, 0x3, 0x8, 0x5, 0xffffffffffff5dcf, 0xa62d, 0x10000, 0x959, 0x0, 0x310e, 0xfffffffffffffffd, 0x8, 0x8, 0x60, 0x80000000, 0x9, 0x8001, 0xdae, 0xffffffff80000000, 0xfffffffffffffffb, 0x0, 0x6, 0x0, 0x9, 0xfffffffffffffff9, 0x1, 0x3ff, 0x5, 0x6, 0x400000, 0x42cd, 0x596, 0x8, 0x80000001], 0xffff}}) socket$kcm(0x29, 0x0, 0x0) 05:42:52 executing program 0 (fault-call:3 fault-nth:30): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x29000400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 05:42:53 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x9, 0x80001) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, @in6={0xa, 0x4e21, 0x722a, @loopback, 0x7c}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x25}}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x5c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 05:42:53 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x10000, 0x0) r2 = fcntl$getown(r0, 0x9) write$P9_RGETLOCK(r1, &(0x7f0000000200)={0x22, 0x37, 0x2, {0x2, 0xfffffffffffff1e1, 0x1f, r2, 0x4, 'ppp1'}}, 0x22) 05:42:53 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000300)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000340)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000380)='net\xd4rte\x00\x00\x00') getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0x20}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000003c0)={r4, 0x5}, &(0x7f0000000400)=0x8) preadv(r3, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/115, 0x73}, {&(0x7f0000000140)=""/123, 0x7b}], 0x2, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000200)=ANY=[@ANYRES32=r5, @ANYBLOB="5300000025b571c6eefbef7c54ea5e969b68246579e5a0da6988895519a23849eb2894ddb7dfdce06c4492e3bcebfac1515f12b3508c0336f7baac01bf4eab837892f7d1f4431ba4a2de233cffdb0a7e995dc903f274c63a24e9d10316fc63081a2ad99a45477704b5e36b37f350abdbc5dc0edf8abd"], &(0x7f0000000280)=0x2) 05:42:53 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='gre0\x00', 0x10) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x800, 0x0) getpeername(r0, &(0x7f0000000080)=@hci={0x1f, 0x0}, &(0x7f0000000100)=0x80) sendto$inet(r0, &(0x7f0000000240)="f310beb12e391d35b9cd2a9d17cb857d619255f81864813008bc8dc5c73d2dfd667c74d2ebdd5b474283d5ae8d30c34d8a7b92047cc006a5654effaed2cd2e8dcf64e54d1f01fa5f7a5d4c9257f226a42c5c1f9ba7015fc78fa57424a19475f7fedf7ecf7ef43ebe42728fa4962f3bbaf2ebff67239245dccdf3ba2202ead5ea958061cbd73bcf2957a9e8e01b0d7a", 0x8f, 0x8000, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r3 = geteuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@mcast1, @in=@empty, 0x4e22, 0x5, 0x4e24, 0x81, 0x2, 0x20, 0x80, 0xab, r2, r3}, {0x3, 0x101, 0x9, 0x6, 0x4, 0x401, 0x7fff, 0x7fffffff}, {0x80000001, 0x0, 0x7, 0x2}, 0x2, 0x6e6bb4, 0x2, 0x0, 0x1, 0x1}, {{@in6=@mcast2, 0x4d6, 0x32}, 0xa, @in6=@empty, 0x0, 0x3, 0x2, 0xe4a5, 0x100000000, 0xc48, 0x80000000}}, 0xe8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0xfffffffffffffffe, @local}, 0x10) [ 963.002213] FAULT_INJECTION: forcing a failure. [ 963.002213] name failslab, interval 1, probability 0, space 0, times 0 05:42:53 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$TCSETXW(r1, 0x5435, &(0x7f0000000040)={0x20, 0x80000001, [0xfc, 0x3, 0x1f, 0x100000001, 0x3], 0x4}) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000080)) [ 963.079397] CPU: 0 PID: 18232 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 963.092969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 963.102333] Call Trace: [ 963.104928] dump_stack+0x138/0x197 [ 963.108575] should_fail.cold+0x10f/0x159 [ 963.112740] should_failslab+0xdb/0x130 [ 963.116724] kmem_cache_alloc+0x2d7/0x780 [ 963.120886] copy_process.part.0+0x444f/0x6a00 [ 963.125493] ? __cleanup_sighand+0x50/0x50 05:42:53 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000540)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d0000000000000000000000000011b0677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce87629f6e76e5e6740c390f36e8b331e467daf721facbf6c2c2a20da7d756326c39ad1e459c7cac078b4115d10b123a5f2cd6f3e436145b0cd20c5a8bbac63fa366dd0504e0164eae3c0cf1c4b1e9c518584a471f4b421a70ae27e850a784d1d55ad961d45cdec66589f6c2955964eaec9843d5224f853b7f7d8950ff036aefd4d2e5b5da70e6f89c4d7e34ef0ad29b3b3b95cea47892b73e"], 0xc4}}, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x1, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x76f26a555051d8d0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000003c0)={0x0, 0x2e7f}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000440)={r2, @in6={{0xa, 0x434f, 0x8, @ipv4={[], [], @local}, 0x100}}, 0x3, 0x7}, &(0x7f0000000500)=0x90) setxattr$security_ima(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.ima\x00', &(0x7f00000002c0)=@v2={0x246cded9a5fb280, 0x0, 0xd, 0x6, 0xe0, "cb6623d6c9652894ab969ad9aca404501f31d1ef238843b2397b003fe3a467526c5c8d8ffb8f573db1a9930b34ceaaa8f7328c85c0afad682e319abf68e4f8ada12830b5b8c557468373cca5fd5076411c14a056de7c263cbb5e8648b215626892e5bfc7574a1b2ef7996608e3dc4df1658754a26f8dcb0ebee064f96d007c4658e00eecbe36b333c42e90eeb324074a081d6fc713bdf90d35c99b3ed89a96c3720b35634ce58cb060ec14247c9aae65899d9c0bbd0d2fdb8ffd0a3843b279167e8f40aed7145b1c05c8e534c19b8e1eaab9df461c88640f12009fa97721a856"}, 0xea, 0x2) [ 963.129735] ? lock_downgrade+0x6e0/0x6e0 [ 963.133897] _do_fork+0x19e/0xce0 [ 963.137359] ? fork_idle+0x280/0x280 [ 963.141076] ? fput+0xd4/0x150 [ 963.145756] ? SyS_write+0x15e/0x230 [ 963.149465] SyS_clone+0x37/0x50 [ 963.152826] ? sys_vfork+0x30/0x30 [ 963.156379] do_syscall_64+0x1e8/0x640 [ 963.160265] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 963.165118] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 963.170304] RIP: 0033:0x459879 05:42:53 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x0, 0x0) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000300)={0x9, 0x8}) r2 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) openat(r2, &(0x7f0000000240)='./file0\x00', 0xcab97535ae75b071, 0x80) umount2(&(0x7f0000000540)='./file0\x00', 0x4) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x80, 0x0) write$P9_ROPEN(r3, &(0x7f0000000280)={0x18, 0x71, 0x1, {{0x1a, 0x1, 0x3}, 0xfffffffffffffffa}}, 0x18) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f00000000c0)={0x5, 0xa3, &(0x7f0000000140)="207d9f4236d64d179c6865cbc9508d95a4e2c33bbf397dd990dc233e94482ba7758a7b0e22e885c293c3836443d7d10eaa5c113ad3477bdf84cfe4fdb60b579c49c237c773412f3cd0b3f40231a42390d0313ce086a785cb2596b8a63bf1af32b167a588690c7a4d68a068ac5ca91fa234ff83c5202d99d092447e1bc4440a15ac780b1f77bede2d83be9e960a65c02ccc935e957b2ae64a01b9c3ac7a1a741a134a94"}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 05:42:53 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000040)=""/188) readlinkat(r0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=""/46, 0x2e) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='gre0\x00', 0x10) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100)=0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/commit_pending_bools\x00', 0x1, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000140)={0x1, r2}) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000180)={0x5, "de8d6d190386abd41e9a960207af31b1bdcc32d00ee95c19ac7648bec846e195", 0x2, 0x8, 0x80000000, 0x0, 0x4}) sendto$inet(r1, 0x0, 0x378, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) [ 963.173491] RSP: 002b:00007f5d58de2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 963.181196] RAX: ffffffffffffffda RBX: 00007f5d58de2c90 RCX: 0000000000459879 [ 963.188467] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000029000400 [ 963.195735] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 963.203007] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d58de36d4 [ 963.210279] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 05:42:53 executing program 1: r0 = socket$nl_crypto(0x10, 0x3, 0x15) connect(r0, &(0x7f0000000200)=@llc={0x1a, 0x2, 0x8d1, 0x200, 0xdd, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x2, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000100)=0x13, 0x4) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') preadv(r3, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/115, 0x73}, {&(0x7f0000000140)=""/123, 0x7b}], 0x2, 0x0) 05:42:53 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x3) 05:42:53 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r2, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x38, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x94}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe0}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x354e}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) 05:42:53 executing program 0 (fault-call:3 fault-nth:31): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x29000400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 05:42:53 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_netfilter(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, 0x9, 0x8, 0x8, 0x70bd2d, 0x25dfdbfc, {0x5, 0x0, 0x5}, [@nested={0x14, 0x4e, [@generic="e6d506f96870081881278933f399aa6d"]}, @generic="3b9e64b9652ba942a5bd5658cf696a95b9723c4f20de5f2d0e0a1f235be97b269bb25b011d29565f2576b134"]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) 05:42:53 executing program 2: r0 = socket$inet(0x2, 0x400000000008000f, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='gre0\x00', 0x10) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$alg(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000002a40)=[{{&(0x7f0000001700)=@generic, 0x80, &(0x7f0000001900)=[{&(0x7f0000001780)=""/40, 0x28}, {&(0x7f00000017c0)=""/233, 0xe9}, {&(0x7f00000018c0)=""/63, 0x3f}], 0x3, &(0x7f0000001940)=""/86, 0x56}, 0x9}, {{&(0x7f00000019c0)=@alg, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001a40)=""/201, 0xc9}, {&(0x7f0000001b40)=""/231, 0xe7}, {&(0x7f0000001c40)=""/80, 0x50}, {&(0x7f0000001cc0)=""/116, 0x74}, {&(0x7f0000001d40)=""/196, 0xc4}], 0x5, &(0x7f0000001ec0)=""/55, 0x37}, 0x5}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001f00)=""/38, 0x26}], 0x1, &(0x7f0000001f80)=""/109, 0x6d}, 0x4}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000002000)=""/207, 0xcf}, {&(0x7f0000002100)=""/30, 0x1e}], 0x2, &(0x7f0000002180)=""/210, 0xd2}, 0x2}, {{&(0x7f0000002280)=@ipx, 0x80, &(0x7f0000002380)=[{&(0x7f0000002300)=""/118, 0x76}], 0x1, &(0x7f00000023c0)=""/65, 0x41}, 0xff}, {{&(0x7f0000002440)=@alg, 0x80, &(0x7f00000026c0)=[{&(0x7f00000024c0)=""/90, 0x5a}, {&(0x7f0000002540)=""/222, 0xde}, {&(0x7f0000002640)=""/85, 0x55}], 0x3, &(0x7f0000002700)=""/193, 0xc1}, 0x1f}, {{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000002800)=""/73, 0x49}, {&(0x7f0000002880)=""/84, 0x54}], 0x2, &(0x7f0000002940)=""/249, 0x54}, 0x3}], 0x7, 0x0, 0x0) prctl$PR_SET_FPEXC(0xc, 0x10080) r2 = openat$cgroup_ro(r1, &(0x7f00000016c0)='memory.swap.current\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) sendto$inet(r0, 0x0, 0x378, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001640)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r3, 0x40087705, &(0x7f0000001680)={0x8, 0x9}) socketpair(0x11, 0x80000, 0x5, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$kcm(r4, &(0x7f0000001600)={&(0x7f0000000040)=@in, 0x80, &(0x7f0000001540)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/193, 0xc1}, {&(0x7f00000001c0)=""/247, 0xf7}, {&(0x7f0000001380)=""/178, 0xb2}, {&(0x7f00000002c0)=""/108, 0x6c}, {&(0x7f0000001440)=""/40, 0x28}, {&(0x7f0000001480)=""/9, 0x9}, {&(0x7f00000014c0)=""/107, 0x6b}], 0x8, &(0x7f00000015c0)=""/31, 0x1f}, 0x2020) 05:42:53 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)=0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)=0x0) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r0, &(0x7f00000004c0)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000001c0)="0948b5a24337814c13b4803d29e62379d939ffb0694f08a4cc34519ce81d053c8656c1208c3c275b", 0x28}], 0x1, &(0x7f0000000440)=[@rights={{0x20, 0x1, 0x1, [r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r1, r2, r3}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x58, 0x4000}, 0x4000000) 05:42:53 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000000040)) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x4, 0x0, 0x7, 0x68, 0x100, 0x0, 0x3, 0xdf06, 0x3ff, 0x8, 0x5, 0x100, 0x5}, {0x0, 0x6, 0x8, 0x9, 0x1ff, 0x80, 0xfff, 0x80000000, 0x7, 0xffffffffffffffff, 0x8, 0xff, 0x7}, {0x2, 0x2, 0x9, 0x80, 0x2, 0x401, 0x6, 0xd445, 0x6, 0x6a, 0x6, 0xffffffff, 0x8}], 0x9ef}) [ 963.401001] audit: type=1400 audit(1567230173.479:6799): avc: denied { connect } for pid=18269 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 963.419547] FAULT_INJECTION: forcing a failure. [ 963.419547] name failslab, interval 1, probability 0, space 0, times 0 05:42:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$caif_seqpacket(0x25, 0x5, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') preadv(r1, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/115, 0x73}, {&(0x7f0000000140)=""/123, 0x7b}], 0x2, 0x0) [ 963.525994] CPU: 0 PID: 18279 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 963.533142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 963.542500] Call Trace: [ 963.545093] dump_stack+0x138/0x197 [ 963.548725] should_fail.cold+0x10f/0x159 [ 963.552881] should_failslab+0xdb/0x130 [ 963.556850] kmem_cache_alloc+0x47/0x780 [ 963.560912] ? __lock_is_held+0xb6/0x140 [ 963.564968] ? check_preemption_disabled+0x3c/0x250 [ 963.569986] anon_vma_clone+0xde/0x470 [ 963.573884] anon_vma_fork+0x87/0x4d0 [ 963.577687] copy_process.part.0+0x45e2/0x6a00 [ 963.582287] ? __cleanup_sighand+0x50/0x50 [ 963.586518] ? lock_downgrade+0x6e0/0x6e0 [ 963.590669] _do_fork+0x19e/0xce0 [ 963.594121] ? fork_idle+0x280/0x280 [ 963.597837] ? fput+0xd4/0x150 [ 963.601026] ? SyS_write+0x15e/0x230 [ 963.604739] SyS_clone+0x37/0x50 [ 963.608096] ? sys_vfork+0x30/0x30 [ 963.611638] do_syscall_64+0x1e8/0x640 [ 963.615526] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 963.620375] entry_SYSCALL_64_after_hwframe+0x42/0xb7 05:42:53 executing program 5: setreuid(0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/extire_quiescent_template\x00\xada&\xe9\xa0\xf2g%\xee\xebK+hP\xcd\x99\a', 0x2, 0x0) accept4$alg(r2, 0x0, 0x0, 0x80000) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x40080, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000140)=0x7f, 0x4) umount2(&(0x7f0000000540)='./file0\x00', 0x4) r4 = fcntl$dupfd(r1, 0x1, 0xffffffffffffffff) inotify_add_watch(r4, &(0x7f0000000080)='./file0\x00', 0x10000200) epoll_create1(0x80000) read$char_usb(r3, &(0x7f0000000180)=""/220, 0xdc) [ 963.625558] RIP: 0033:0x459879 [ 963.628753] RSP: 002b:00007f5d58de2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 963.636463] RAX: ffffffffffffffda RBX: 00007f5d58de2c90 RCX: 0000000000459879 [ 963.643816] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000029000400 [ 963.651084] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 963.658350] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d58de36d4 [ 963.665620] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 05:42:53 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x101000, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000040)=0x2) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) 05:42:53 executing program 0 (fault-call:3 fault-nth:32): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x29000400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 05:42:53 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='veth0_to_bridge\x00', 0x10) sendto$inet(r0, 0x0, 0x378, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) 05:42:53 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x4, 0x202) r2 = inotify_add_watch(r1, &(0x7f0000000200)='./file0\x00', 0x10) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000180)={0x1, 0x8, 0x3ff, 0x636}, 0x6) inotify_rm_watch(r1, r2) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) 05:42:53 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, [], 0x2a}, 0x6}, {0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1f, [0xfff, 0x6, 0x2, 0x1f, 0xbc2, 0x100000000, 0xf874, 0x7]}, 0x5c) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000080)=""/115, 0x73}, {&(0x7f0000000140)=""/123, 0x7b}], 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x2, {0x515c, 0x3, 0x7ff, 0x9, 0x2, 0x100}, 0x6, 0x9}, 0xe) [ 963.825888] FAULT_INJECTION: forcing a failure. [ 963.825888] name failslab, interval 1, probability 0, space 0, times 0 05:42:53 executing program 5: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@local, @in=@initdev}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xe8) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000240), &(0x7f0000000280)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, r1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 963.879657] CPU: 0 PID: 18307 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 963.886805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 963.896166] Call Trace: [ 963.898762] dump_stack+0x138/0x197 [ 963.902410] should_fail.cold+0x10f/0x159 [ 963.906668] should_failslab+0xdb/0x130 [ 963.910652] kmem_cache_alloc+0x47/0x780 [ 963.914722] ? anon_vma_chain_link+0x142/0x1a0 [ 963.919309] anon_vma_clone+0xde/0x470 [ 963.923204] anon_vma_fork+0x87/0x4d0 05:42:54 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x121000, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f00000000c0), &(0x7f0000000140)=0x4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) membarrier(0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000000300)=0xe8) stat(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000000500)=[0x0, 0xee01, 0xee00, 0xee00, 0x0]) lstat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000980)={{}, {0x1, 0x7}, [{0x2, 0x4, r3}, {0x2, 0x7, r4}, {0x2, 0x2, r5}, {0x2, 0x19d6272e0da85654, r6}, {0x2, 0x5, r7}, {0x2, 0x4, r8}], {0x4, 0x6}, [{0x8, 0x9792019b90a667dd, r9}, {0x8, 0x4, r10}, {0x8, 0x4, r11}, {0x8, 0x0, r12}], {0x10, 0x1}, {0x20, 0x6}}, 0x74, 0x2) [ 963.927017] copy_process.part.0+0x45e2/0x6a00 [ 963.931622] ? __cleanup_sighand+0x50/0x50 [ 963.935857] ? lock_downgrade+0x6e0/0x6e0 [ 963.940005] _do_fork+0x19e/0xce0 [ 963.943456] ? fork_idle+0x280/0x280 [ 963.947166] ? fput+0xd4/0x150 [ 963.950357] ? SyS_write+0x15e/0x230 [ 963.954065] SyS_clone+0x37/0x50 [ 963.954074] ? sys_vfork+0x30/0x30 [ 963.954087] do_syscall_64+0x1e8/0x640 [ 963.954096] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 963.954113] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 963.954122] RIP: 0033:0x459879 05:42:54 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x200) 05:42:54 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='gre0\x00', 0x10) sendto$inet(r0, 0x0, 0x378, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7, 0x400000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="b8000000158ac425f216ec02fcc03b494e94b257b3ed2d7f5bddb1851b7bdf2fac4fd87d382b7b485b24b3e21c84d2597d14a73ae74e35387f026267bc1c458e50a1e7ed5b37727dd4da67beadf690bfdd6c79d530751b100b9278787b83c20726a33379dce8114c13de8070128e0230d8012da4db93e43c40260b185652271ef572e112811913dce8cc46cece3eb24b267b9a759392d01d0b328a8a1b5604dd876ede1f6d7bb35aa7fa632c0305284f0ad0bd9bdbd825d87676da49"], &(0x7f0000000100)=0xc0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x9}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000001c0)={r2, 0x8000, 0x9, 0x100000001, 0x3, 0x2, 0x40, 0x4, {r3, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x9}}, 0xfff, 0x7, 0x4, 0x9, 0x296e05e2}}, &(0x7f0000000280)=0xb0) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000003c0)=r4) 05:42:54 executing program 0 (fault-call:3 fault-nth:33): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x29000400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 05:42:54 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) 05:42:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000000)={0x2, 0x800}, 0x2) preadv(r1, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/115, 0x73}, {&(0x7f0000000140)=""/123, 0x7b}], 0x2, 0x0) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000040)=0x7) [ 963.978056] RSP: 002b:00007f5d58de2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 963.985758] RAX: ffffffffffffffda RBX: 00007f5d58de2c90 RCX: 0000000000459879 [ 963.993014] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000029000400 [ 963.993020] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 963.993026] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d58de36d4 [ 963.993031] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 05:42:54 executing program 5: setreuid(0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x80) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1c}}, r1}}, 0x48) r3 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r3, &(0x7f0000001900)=[{{&(0x7f0000000080)=@l2, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/105, 0x69}], 0x1, &(0x7f0000000200)=""/215, 0xd7}, 0x9}, {{&(0x7f0000000300)=@xdp, 0x80, &(0x7f0000000400)=[{&(0x7f0000000580)=""/247, 0xf7}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000380)=""/1, 0x1}], 0x3}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001680)=""/214, 0xd6}, {&(0x7f0000001780)=""/167, 0xa7}, {&(0x7f0000000440)=""/47, 0x2f}], 0x3, &(0x7f0000001840)=""/171, 0xab}, 0x6}], 0x3, 0x100, &(0x7f0000000500)) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) umount2(&(0x7f0000000540)='./file0\x00', 0x4) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000001b40)={0x0, 0x5, 0xf661, 0x4, 0x3, 0x8, 0x8, 0xab4, {0x0, @in={{0x2, 0x4e24, @loopback}}, 0x7, 0x6, 0x2d8cd1ca, 0x80000001, 0x3}}, &(0x7f00000019c0)=0xb0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000001c00)={r6, 0x110000000}, 0x8) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001a40)='coredump_filter\x00\xd5\x8f\xc2\b}\xa7\xb6\x91m\xb9\x83\xa6\xb5z\x10\xcf\xb2\x94x\xfb\x01s\x8b\xf3\xbc\xb9\x13\\\xb0\xc26c\x8c\x1eZ\x17\xbc\xbc\xc1PL\xc3\xc5\xb7\x81W\xfa\xcaY\xa5\xabQ\x04\xe7\xd6\x82\xe6\xbeJ\xe2\xb7\b\xda\xa4\xef\xd6\xf6\x03\xad\x8f\xd7Ho&\xd6\xefH\xc3S\x1c\xf2W\x16d\xac\xab+\x92\xa6\x8c\xba@\x8b\b\x05\xb3\x8aJ[\x04\x17j\x1c`\xff\xd85\a\x9f\x9a \xc8y\xcfq\x99K\x97\x97\'\x96\x0eL\x99\xc2\x81\x1e\x94m\x8d\xf1A{\x03l~W\xa1x?\xb3(n|8\xc5G\xe9\xee\x94\xfe\xc4`i\x00\xa3\xb3\xcc\xb3\xdbe\xcaR\x18>\xf8-\x1c\xfcUw\x01\xe4\x9d\xac\xc8\xc5\x03\xb7\x1a\xd9\x87D\x93\xae(\x04\xfe\x9f\xbf\xa9\xf5\x8aT\xf5\x99\xd9nu\x03\x1a\x85\a?') ioctl$IOC_PR_PREEMPT_ABORT(r7, 0x401870cc, &(0x7f0000001a00)={0xb4, 0x100000001, 0x4, 0x7}) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) 05:42:54 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x14, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[]}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=@newae={0x2d8, 0x1e, 0x0, 0x70bd29, 0x25dfdbfe, {{@in=@dev={0xac, 0x14, 0x14, 0x1e}, 0x4d4, 0xa, 0x33}, @in6=@mcast2, 0x4, 0x34ff}, [@offload={0xc, 0x1c, {0x0, 0x1}}, @lastused={0xc, 0xf, 0x3}, @ipv6_hthresh={0x8, 0x4, {0x7, 0x3a}}, @replay_thresh={0x8, 0xb, 0x10000}, @replay_esn_val={0x28, 0x17, {0x3, 0x70bd2d, 0x70bd25, 0x70bd26, 0x70bd2b, 0x0, [0x101, 0xfffffffffffffffd, 0x2]}}, @replay_val={0x10, 0xa, {0x70bd2a, 0x5, 0xfffffffffffffeff}}, @algo_aead={0x148, 0x12, {{'morus640\x00'}, 0x7d0, 0x0, "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"}}, @algo_crypt={0xe4, 0x2, {{'pcbc-aes-aesni\x00'}, 0x4e0, "ce5fd4cda4daaedfeaea4b57754efc1447fd6be2a9db94039fdf8e6b1fe55751f880d849c47543f3fb947c1fb69a2dd56a4f34c98da65826a4b87d63b250a4fb854cb20c0bfb0fc64505f6fcd704ea22d5c4a74d9f321f1cacb2c66a97ae80f4bc29edb3302b9fb804faa312b97b01887c3c5613b8699f1f63a21f15f6fdec68247d72c82919c70b748e56f0d272731dae8c681b736d85239925a8bf"}}, @mark={0xc, 0x15, {0x350759, 0xfffffffffffffc88}}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x40040}, 0x4008085) 05:42:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') preadv(r1, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/115, 0x73}, {&(0x7f0000000140)=""/123, 0x7b}], 0x2, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r1, 0x4) 05:42:54 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000000040)={0x4000, 0xf000, 0xc5, 0x1, 0xdf}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000340)='gre0\x00', 0x10) sendto$inet(r1, 0x0, 0x378, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) 05:42:54 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000040)=0x4, 0x4) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000080)=0x7) [ 964.180730] FAULT_INJECTION: forcing a failure. [ 964.180730] name failslab, interval 1, probability 0, space 0, times 0 [ 964.255207] CPU: 0 PID: 18350 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 964.262349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 964.271827] Call Trace: [ 964.274423] dump_stack+0x138/0x197 [ 964.278062] should_fail.cold+0x10f/0x159 [ 964.282222] ? anon_vma_clone+0xde/0x470 [ 964.286292] should_failslab+0xdb/0x130 [ 964.290287] kmem_cache_alloc+0x47/0x780 [ 964.294352] ? anon_vma_chain_link+0x142/0x1a0 [ 964.298935] anon_vma_clone+0xde/0x470 05:42:54 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='gre0\x00', 0x10) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@broadcast, @remote, 0x0}, &(0x7f0000000040)=0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x1ff) bind(r0, &(0x7f0000000080)=@xdp={0x2c, 0x3, r1, 0x3d}, 0x80) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000380)={0x8, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e20, @broadcast}}}, 0x108) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40, 0x100) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xffffffffffffff45, &(0x7f0000000200)={&(0x7f0000000280)={0xffffffa8, r3, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48081}, 0x880) sendto$inet(r0, 0x0, 0x378, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) [ 964.302827] anon_vma_fork+0x87/0x4d0 [ 964.306636] copy_process.part.0+0x45e2/0x6a00 [ 964.311240] ? __cleanup_sighand+0x50/0x50 [ 964.315476] ? lock_downgrade+0x6e0/0x6e0 [ 964.319629] _do_fork+0x19e/0xce0 [ 964.323085] ? fork_idle+0x280/0x280 [ 964.326788] ? fput+0xd4/0x150 [ 964.329981] ? SyS_write+0x15e/0x230 [ 964.333699] SyS_clone+0x37/0x50 [ 964.337061] ? sys_vfork+0x30/0x30 [ 964.340605] do_syscall_64+0x1e8/0x640 [ 964.344492] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 964.349346] entry_SYSCALL_64_after_hwframe+0x42/0xb7 05:42:54 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) accept4$inet(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x800) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='gre0\x00', 0x10) sendto$inet(r0, 0x0, 0x378, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x800, 0x0) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000140)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f00000000c0)=0x67) 05:42:54 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0xd93, 0x100) ioctl$CAPI_INSTALLED(r1, 0x80024322) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) [ 964.354556] RIP: 0033:0x459879 [ 964.357744] RSP: 002b:00007f5d58de2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 964.365542] RAX: ffffffffffffffda RBX: 00007f5d58de2c90 RCX: 0000000000459879 [ 964.372812] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000029000400 [ 964.380080] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 964.387351] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d58de36d4 [ 964.394622] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 05:42:54 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400203) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') preadv(r1, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/115, 0x73}, {&(0x7f0000000140)=""/123, 0x7b}], 0x2, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x4, 0x2, 0x20, 0x5, [{0x72920f6, 0x8c, 0xffffffffffffff8a, 0x0, 0x0, 0x400}, {0x80000001, 0x1, 0x8, 0x0, 0x0, 0x388c}, {0x6, 0x1, 0x0, 0x0, 0x0, 0x2200}, {0xfffffffffffffaba, 0x6, 0xfff, 0x0, 0x0, 0x8}, {0xffffffffffff0000, 0x0, 0x6, 0x0, 0x0, 0x8}]}) [ 964.476983] nla_parse: 13 callbacks suppressed [ 964.476989] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 05:42:54 executing program 0 (fault-call:3 fault-nth:34): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x29000400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 05:42:54 executing program 3: socket$nl_crypto(0x10, 0x3, 0x15) socketpair(0xa, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/enforce\x00', 0x400000, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000400)={0x9b0000, 0x101, 0xff, [], &(0x7f00000003c0)={0x990a68, 0x8000000000000, [], @value=0x7}}) connect$bt_rfcomm(r0, &(0x7f0000000080)={0x1f, {0x100000001, 0x3, 0x2, 0xf42d, 0x2, 0x7}, 0x7}, 0xa) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140)) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)) r3 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x77ff, 0x408000) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) ioctl$VIDIOC_G_FBUF(r3, 0x8030560a, 0x0) rt_sigaction(0x29, &(0x7f00000001c0)={&(0x7f00000000c0)="650fa4b6008000009a8fc800eda608000000f610240a420ff80666430ff616c4a1217cf80f0f161df3460f1ed7c4c2790fa96a000000d9fa", {0x4}, 0x80000004, &(0x7f0000000180)="65f044801900c441a5db8d1500000066420f383f1af26d64f3a5c06f23fd660f50e70fbc4b0cc422f9bce266470f1eed"}, &(0x7f00000002c0)={&(0x7f0000000200)="a665660f380be1450f8f0500000036650fbaaf07000000bc3e64660f7f3967430fe04e0bc4c120124cacf30f05c42243f634320fe86000", {}, 0x0, &(0x7f0000000240)="f042f656a7420fdbedc4c3f96b3e01c4023d8c74dbbec401c1df430164f2446dc44151e2bef7ffff7f3e450f0f9ee00d00009ac4e1fd5bfa36660faeb64101421a"}, 0x8, &(0x7f0000000300)) 05:42:54 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) finit_module(r0, &(0x7f0000000080)='\x00', 0x3) umount2(&(0x7f0000000540)='./file0\x00', 0x4) getpeername(r0, &(0x7f0000000140)=@ipx, &(0x7f00000000c0)=0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 05:42:54 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='gre0\x00', 0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="c03487fefd126e78abf62110ec675a7d36a922b260c6eb8862d9c5faf8950ebc5e082917387aad89bf10817e4df01373b6376547d3d62dad58b9b2fb69c647c9bc0e1dc172c06af7072b7ed361e7ee4ccd1264c6e9d28acce291ff15db47fadeabb90aef8e25f5c2917c729ee9fcc34ea59c14e77b6b75", 0x77}], 0x1) sendto$inet(r0, 0x0, 0x2fc, 0x200007fd, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10) 05:42:54 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000380)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xc4}}, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x2000, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000500)={0x0, {{0x2, 0x4e24, @rand_addr=0x4}}}, 0x88) r2 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x2, 0x420100) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000180)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @broadcast}, 0x2, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'bcsh0\x00'}) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f00000005c0)={{0x7b, @multicast1, 0x4e24, 0x4, 'lc\x00', 0x23, 0x1, 0x1c}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x4e24, 0x2, 0x7, 0x5}}, 0x44) r3 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x8c, r4, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0xd7c39a5d13b6c0c2}, 0x4040050) 05:42:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f0000000000)={0x1, 0x0, {0x2e3, 0x6, 0x100000001, 0x7}}) preadv(r1, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/115, 0x73}, {&(0x7f0000000140)=""/123, 0x7b}], 0x2, 0x0) 05:42:54 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='gre0\x00', 0x10) sendto$inet(r0, 0x0, 0x378, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) fadvise64(r0, 0x0, 0x7, 0x4) 05:42:54 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in=@multicast2, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000240)=0xe8) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f00000000c0)='./file0\x00', r1, r2) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 05:42:54 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000000)={0x8, 0x102, 0x1, {0x871, 0x3, 0x6, 0x3}}) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f00000000c0)) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) eventfd(0x80000001) statx(r2, &(0x7f0000000140)='./file0\x00', 0x0, 0x10, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x801, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000040)=0x1f) [ 964.658025] FAULT_INJECTION: forcing a failure. [ 964.658025] name failslab, interval 1, probability 0, space 0, times 0 [ 964.666224] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 964.726969] CPU: 0 PID: 18412 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 964.734109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 964.743462] Call Trace: [ 964.746065] dump_stack+0x138/0x197 [ 964.749708] should_fail.cold+0x10f/0x159 [ 964.753868] should_failslab+0xdb/0x130 [ 964.757854] kmem_cache_alloc+0x2d7/0x780 [ 964.762004] ? anon_vma_clone+0x310/0x470 [ 964.766157] anon_vma_fork+0xe9/0x4d0 [ 964.769958] copy_process.part.0+0x45e2/0x6a00 05:42:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') socket$can_raw(0x1d, 0x3, 0x1) preadv(r1, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/115, 0x73}, {&(0x7f0000000140)=""/123, 0x7b}], 0x2, 0x0) [ 964.774553] ? __cleanup_sighand+0x50/0x50 [ 964.778798] ? lock_downgrade+0x6e0/0x6e0 [ 964.782950] _do_fork+0x19e/0xce0 [ 964.786409] ? fork_idle+0x280/0x280 [ 964.790124] ? fput+0xd4/0x150 [ 964.793317] ? SyS_write+0x15e/0x230 [ 964.797038] SyS_clone+0x37/0x50 [ 964.800404] ? sys_vfork+0x30/0x30 [ 964.803946] do_syscall_64+0x1e8/0x640 [ 964.807834] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 964.812678] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 964.817868] RIP: 0033:0x459879 05:42:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x200000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x8080, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x52c83b6b56f4e382, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x800, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x7ff) preadv(r1, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/115, 0x73}, {&(0x7f0000000140)=""/123, 0x7b}], 0x2, 0x0) 05:42:54 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_read_part_table(0x5, 0x3, &(0x7f0000000180)=[{&(0x7f0000000240)="c1b1e63aa3b9c2873744cd730c2d87d55cb264235dc61d3a69b8090769aacd6ed4ca83e19f7ca69da6b49303cf1b9262de0243c881b6ca511c60226f89013c8d8d04b9bdbd5ffb147e567e866a5ffad10af219e7a9f25055dfbc706f0cad0d9f69a8bf1d5269fb4e8a15e70e2cb279bbdb9b36ea8b651d0d3fb66b9fb0b79380eeaf169cd0d016e9ed0becdb437e938e3838144319c6972a0a67ac539b773153eacd10a240ef592e813e2ac39e4e2761b2888e45dcdc6d6ff03b07286d6d4e0ec5c777", 0xc3, 0x2}, {&(0x7f00000003c0)="053c4e4af6a6996b288d5ebee203156a0b8aa045c58ad770c2e3f2fcc5f3e65e041c36895f285389a657daa8464203fe3a4665c25822d7fc96d998", 0x3b, 0xfffffffffffffffc}, {&(0x7f00000000c0)="cd5c4fd86b1c93185f44301d8ba185d04884e083061ab25895414d339db45d9e06fc6e35615c4e1a9665ae1ee8598f8962a4f3f8518e0416", 0x38, 0x4}]) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x4}, 0xfffffffffffffe66) listen(r1, 0x8) getgroups(0x0, 0x0) getpgrp(0x0) r2 = fcntl$getown(r1, 0x9) getpgrp(r2) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x0, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000340)) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, &(0x7f0000001d00)=0xffffff05) geteuid() fstat(r0, &(0x7f0000004640)) ioctl$TIOCGPGRP(r3, 0x540f, 0x0) stat(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getpid() getgid() getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000100)={0x6d9, 0x1, 0x5a, 0x1}, 0x8) getgroups(0x5, &(0x7f0000006640)=[0xee00, 0xee01, 0xee01, 0xee00, 0xee01]) gettid() lstat(&(0x7f0000000140)='./file0\x00', &(0x7f00000066c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) getgroups(0x5, &(0x7f0000006d00)=[0x0, r5, 0xee01, r4, 0xee01]) socket$inet6_sctp(0xa, 0x1, 0x84) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ubi_ctrl\x00', 0x2002, 0x0) [ 964.821051] RSP: 002b:00007f5d58de2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 964.828760] RAX: ffffffffffffffda RBX: 00007f5d58de2c90 RCX: 0000000000459879 [ 964.836027] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000029000400 [ 964.843294] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 964.850560] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d58de36d4 [ 964.857828] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 [ 964.868074] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 05:42:55 executing program 0 (fault-call:3 fault-nth:35): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x29000400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 05:42:55 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x2, 0x40}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080)={r1, 0x5, "09585dfb02"}, &(0x7f00000000c0)=0xd) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c40000001900250a00000000000000ff070000000000000000000000000001aafe800000000000000000000000000000000000000000aa31c7d400000a0000800100000038f80c1b006c244d8c09a64812eb9f5ed7d872e9f3424fc9a1034d675c23c987bef329100ba5e88f3ceebb4c81bdb2fa2fb75771", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000d9a800000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14, 0x800) fstat(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=@allocspi={0x168, 0x16, 0x400, 0x70bd27, 0x25dfdbff, {{{@in=@multicast2, @in=@multicast2, 0x4e23, 0x324, 0x4e24, 0x3f, 0x2, 0xa0, 0x20, 0x73, r2, r3}, {@in6=@ipv4={[], [], @broadcast}, 0x4d6, 0x6c}, @in6=@empty, {0x14, 0x6, 0x4, 0x9, 0x1e7, 0x5, 0x100000001, 0x8}, {0x433, 0x9, 0x1f, 0x5}, {0x44, 0x5, 0x8}, 0x70bd2a, 0x0, 0xa, 0x2, 0x1, 0xd33387352c233de7}, 0x1, 0x81}, [@ipv6_hthresh={0x8, 0x4, {0x49, 0x50}}, @srcaddr={0x14, 0xd, @in=@multicast1}, @policy_type={0xc}, @encap={0x1c, 0x4, {0x1, 0x4e21, 0x4e22, @in6=@dev={0xfe, 0x80, [], 0x15}}}, @output_mark={0x8, 0x1d, 0x100000000}, @lifetime_val={0x24, 0x9, {0xfffffffffffffad9, 0x8, 0xd71, 0x4}}]}, 0x168}}, 0xd0) 05:42:55 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)=0x0) sched_rr_get_interval(r2, &(0x7f00000000c0)) [ 965.031672] FAULT_INJECTION: forcing a failure. [ 965.031672] name failslab, interval 1, probability 0, space 0, times 0 [ 965.067499] CPU: 0 PID: 18442 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 965.074636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 965.074642] Call Trace: [ 965.074661] dump_stack+0x138/0x197 [ 965.074679] should_fail.cold+0x10f/0x159 [ 965.074696] should_failslab+0xdb/0x130 [ 965.074708] kmem_cache_alloc+0x2d7/0x780 [ 965.074719] ? anon_vma_clone+0x310/0x470 [ 965.074737] anon_vma_fork+0xe9/0x4d0 [ 965.074753] copy_process.part.0+0x45e2/0x6a00 [ 965.074786] ? __cleanup_sighand+0x50/0x50 [ 965.074796] ? lock_downgrade+0x6e0/0x6e0 [ 965.074813] _do_fork+0x19e/0xce0 [ 965.074827] ? fork_idle+0x280/0x280 [ 965.074842] ? fput+0xd4/0x150 [ 965.074853] ? SyS_write+0x15e/0x230 [ 965.074868] SyS_clone+0x37/0x50 [ 965.074876] ? sys_vfork+0x30/0x30 [ 965.074892] do_syscall_64+0x1e8/0x640 [ 965.149798] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 965.154648] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 965.159834] RIP: 0033:0x459879 [ 965.163014] RSP: 002b:00007f5d58de2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 965.170723] RAX: ffffffffffffffda RBX: 00007f5d58de2c90 RCX: 0000000000459879 05:42:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$alg(0x26, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x5) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCSBRK(r1, 0x5427) preadv(r1, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/115, 0x73}, {&(0x7f0000000140)=""/123, 0x7b}], 0x2, 0x0) r2 = request_key(&(0x7f0000000280)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='\x00', 0xfffffffffffffffb) keyctl$set_timeout(0xf, r2, 0xffffffffffffffff) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000001780)) 05:42:55 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040), 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) r1 = socket$inet6(0xa, 0x800, 0x9) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0xd7b) [ 965.177987] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000029000400 [ 965.177993] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 965.177999] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d58de36d4 [ 965.178004] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 [ 965.187937] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 05:42:55 executing program 0 (fault-call:3 fault-nth:36): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x29000400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 965.295303] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 05:42:55 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req={0x3ff, 0xfffffffffffffffd, 0x7, 0x7fffffff}, 0x10) 05:42:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='\x00\x00\x00\x00\x0e\x00\x00\x00\x00\x00') preadv(r1, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/115, 0x73}, {&(0x7f0000000140)=""/123, 0x7b}], 0x2, 0x0) [ 965.475052] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 965.486570] FAULT_INJECTION: forcing a failure. [ 965.486570] name fail_page_alloc, interval 1, probability 0, space 0, times 0 05:42:55 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) 05:42:55 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='gre0\x00', 0x10) sendto$inet(r0, 0x0, 0x378, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x8}, 0x4) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000080)=""/65) [ 965.565733] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 965.590951] CPU: 0 PID: 18476 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 965.598082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 965.607440] Call Trace: [ 965.610038] dump_stack+0x138/0x197 05:42:55 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fcntl$setstatus(r1, 0x4, 0x0) 05:42:55 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x604000, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xfffffffffffffffc, 0x20, 0x9, 0x100000000, 0x7, 0x7}, 0xb204}, 0xa) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='gre0\x00', 0x10) sendto$inet(r0, 0x0, 0x378, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) [ 965.613677] should_fail.cold+0x10f/0x159 [ 965.617831] ? __might_sleep+0x93/0xb0 [ 965.621747] __alloc_pages_nodemask+0x1d6/0x7a0 [ 965.626447] ? save_stack+0x45/0xd0 [ 965.630159] ? kasan_kmalloc+0xce/0xf0 [ 965.634043] ? kasan_slab_alloc+0xf/0x20 [ 965.638104] ? __alloc_pages_slowpath+0x2930/0x2930 [ 965.643123] alloc_pages_current+0xec/0x1e0 [ 965.647445] pte_alloc_one+0x1a/0x100 [ 965.651243] __pte_alloc+0x2a/0x2d0 [ 965.654874] copy_page_range+0x11ba/0x1bd0 [ 965.659111] ? anon_vma_fork+0x358/0x4d0 05:42:55 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x3}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000280)={r2, 0x6, 0x2, [0x6, 0x2]}, &(0x7f00000002c0)=0xc) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x5, 0x99856a807d364ae0) ioctl$DRM_IOCTL_CONTROL(r3, 0x40086414, &(0x7f00000000c0)={0x1, 0xa28c}) umount2(&(0x7f0000000540)='./file0\x00', 0x4) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000640)={{{@in6=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000500)=0xe8) getresuid(&(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)=0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000340)='./file0\x00', 0x800, 0x2, &(0x7f0000000380)=[{&(0x7f0000000400)="034d7f52770f8bb0ff7e2751d7e322f98c7849d4847b30cc4e80394d2675bc8a6356e88a8eea0a440485398edcf0abccc74f5d5b8457df07285f379ea36dc340b63a97e89c1310e99b68740f9f5ea99646c56bce7190b0d2f3e2ead4f5910365c1fce25313658360622199ac7d1f616f07ada3cc6a4e55f099f0744c524f95847951e207a9b294d189e0", 0x8a, 0x80000000}, {&(0x7f0000000580)="76f488ce2865078151b859037687dd2fc0a258880f2b305f7f434e9531d88202ec2c49425c71884ea7c96aae55d55353274575fa9e694d478b509ceee144894b2fe7a858090713fdf7a211f2570b57eba9b4d0a68c9deca9e7edfeb2a585e639137273ab1e69db613defd57c82cfcc964acdbeefe454901d2cd7b832d2694bf44944280514c39e2b", 0x88, 0x4}], 0x1, &(0x7f0000000800)={[{@uni_xlateno='uni_xlate=0'}], [{@subj_type={'subj_type', 0x3d, '/dev/audio#\x00'}}, {@appraise='appraise'}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fowner_lt={'fowner<', r5}}]}) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x7, 0x4) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x7, 0x9, 0x100000000, 0x3f, 0x0, 0x5, 0x4002, 0x4, 0x9, 0x7fff, 0x9, 0x101, 0x4, 0xffff, 0x0, 0xfff, 0x3, 0x602, 0x0, 0x8001, 0x1, 0x80000000, 0x40, 0xb51, 0x5, 0x101, 0x10000, 0x5a, 0xffff, 0x3, 0xff, 0x2, 0x1, 0x0, 0x3, 0x9, 0x0, 0x8, 0x2, @perf_config_ext={0x169d, 0xfffffffffffffffc}, 0xb630ce7b6a8ebcd9, 0x3, 0x2, 0x0, 0x5, 0xffff, 0x1b4c}, 0x0, 0xc, r6, 0x1) 05:42:55 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@mcast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}}}, &(0x7f0000000140)=0xe8) init_module(&(0x7f0000000240)='/proc/thread-self/attr/current\x00', 0x1f, &(0x7f0000000280)='\x00') stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r2) socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='gre0\x00', 0x10) sendto$inet(r3, 0x0, 0x378, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) [ 965.663187] ? vma_compute_subtree_gap+0x190/0x1f0 [ 965.668128] ? __pmd_alloc+0x410/0x410 [ 965.672020] copy_process.part.0+0x4764/0x6a00 [ 965.676631] ? __cleanup_sighand+0x50/0x50 [ 965.680871] ? lock_downgrade+0x6e0/0x6e0 [ 965.685023] _do_fork+0x19e/0xce0 [ 965.688479] ? fork_idle+0x280/0x280 [ 965.692195] ? fput+0xd4/0x150 [ 965.695385] ? SyS_write+0x15e/0x230 [ 965.699108] SyS_clone+0x37/0x50 [ 965.702474] ? sys_vfork+0x30/0x30 [ 965.706013] do_syscall_64+0x1e8/0x640 [ 965.709899] ? trace_hardirqs_off_thunk+0x1a/0x1c 05:42:55 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_read_part_table(0x5, 0x3, &(0x7f0000000180)=[{&(0x7f0000000240)="c1b1e63aa3b9c2873744cd730c2d87d55cb264235dc61d3a69b8090769aacd6ed4ca83e19f7ca69da6b49303cf1b9262de0243c881b6ca511c60226f89013c8d8d04b9bdbd5ffb147e567e866a5ffad10af219e7a9f25055dfbc706f0cad0d9f69a8bf1d5269fb4e8a15e70e2cb279bbdb9b36ea8b651d0d3fb66b9fb0b79380eeaf169cd0d016e9ed0becdb437e938e3838144319c6972a0a67ac539b773153eacd10a240ef592e813e2ac39e4e2761b2888e45dcdc6d6ff03b07286d6d4e0ec5c777", 0xc3, 0x2}, {&(0x7f00000003c0)="053c4e4af6a6996b288d5ebee203156a0b8aa045c58ad770c2e3f2fcc5f3e65e041c36895f285389a657daa8464203fe3a4665c25822d7fc96d998", 0x3b, 0xfffffffffffffffc}, {&(0x7f00000000c0)="cd5c4fd86b1c93185f44301d8ba185d04884e083061ab25895414d339db45d9e06fc6e35615c4e1a9665ae1ee8598f8962a4f3f8518e0416", 0x38, 0x4}]) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x4}, 0xfffffffffffffe66) listen(r1, 0x8) getgroups(0x0, 0x0) getpgrp(0x0) r2 = fcntl$getown(r1, 0x9) getpgrp(r2) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x0, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000340)) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, &(0x7f0000001d00)=0xffffff05) geteuid() fstat(r0, &(0x7f0000004640)) ioctl$TIOCGPGRP(r3, 0x540f, 0x0) stat(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getpid() getgid() getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000100)={0x6d9, 0x1, 0x5a, 0x1}, 0x8) getgroups(0x5, &(0x7f0000006640)=[0xee00, 0xee01, 0xee01, 0xee00, 0xee01]) gettid() lstat(&(0x7f0000000140)='./file0\x00', &(0x7f00000066c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) getgroups(0x5, &(0x7f0000006d00)=[0x0, r5, 0xee01, r4, 0xee01]) socket$inet6_sctp(0xa, 0x1, 0x84) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ubi_ctrl\x00', 0x2002, 0x0) [ 965.714748] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 965.719930] RIP: 0033:0x459879 [ 965.723113] RSP: 002b:00007f5d58de2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 965.730818] RAX: ffffffffffffffda RBX: 00007f5d58de2c90 RCX: 0000000000459879 [ 965.738085] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000029000400 [ 965.745355] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 965.752624] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d58de36d4 05:42:55 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x81, 0x101000) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r1, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x6, 0x67f1, 0x0, 0x10001}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x48000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/13, 0xd}], 0x1) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000ac0)=0x0) stat(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000bc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xee00]) r6 = getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000c00)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @initdev}}, 0x0, @in=@multicast2}}, &(0x7f0000000d00)=0xe8) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r2, &(0x7f0000000f00)={&(0x7f00000004c0)=@proc={0x10, 0x0, 0x25dfdbfb}, 0xc, &(0x7f0000000a80)=[{&(0x7f0000000500)={0xa8, 0x27, 0x2, 0x70bd29, 0x25dfdbfd, "", [@generic="551f711c65", @nested={0x90, 0x44, [@typed={0x8, 0x5, @ipv4=@remote}, @generic="0defe388eb072560ce362559f6be782558520f08ed9d7bfb01135561aca11cf3bbe5b88492af8a4300bb062d92940486819a5f115b6dfc93eb1d68a8fb54dcad5a161121c50c738a690fee44f2379663d4ef328acdcaee2f702ad0ec78bcbcc27863c73ece87d26338b40363aaffa0d6977dd45f57e73b88660b157437c6e0da7f"]}]}, 0xa8}, {&(0x7f00000005c0)={0x23c, 0x3e, 0x0, 0x70bd25, 0x25dfdbfb, "", [@typed={0x8, 0x21, @fd=r2}, @nested={0x224, 0x47, [@typed={0x10, 0x6b, @str='/dev/audio#\x00'}, @typed={0x8, 0x1d, @ipv4=@remote}, @generic="b7cf77edcba09fd224de0cbde4994d5efd368c3dbbe2d08e2796b46b2678cb13928c8f2fb545e35ea8d448e523fffab18489aba6c59ba88a9060c29c05ec8a1559fab75f691cf1c6b9591e01ed3817d126cb3e483ba995f24184789309dd96b14ae9f55dcca3e4c7f3a47e5871337a1467a3c7c5866fd3786d99c3b214bc7ea0f185750e10dc0a09124a55e15cb6bde890d6692ff5e4b892758c7ecc486da925b55a770511810f1ad9fa961a31de", @typed={0x4, 0x5c}, @typed={0x8, 0x59, @uid}, @generic="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", @generic="1c97faf6bad7e35196f2f16f16fa2dba98ebf3acc2b0f85bb95730082d24dc9373eece6f4725365794058aaa6dddd790a8d4c6f66d5c68bd5938b40e0ba058cd87432b4bd0", @typed={0xc, 0x100000001, @str='TIPC\x00'}]}]}, 0x23c}, {&(0x7f0000000800)={0x1ac, 0x11, 0x501, 0x70bd26, 0x25dfdbfb, "", [@typed={0x14, 0x39, @ipv6=@loopback}, @nested={0x108, 0x5, [@typed={0x8, 0x57, @ipv4=@loopback}, @generic="a86bd966b25662828782a14ba203f839e18102c1a35d6798bc59264ea2b1c76aa8afa48f609c681ed47b9f658657ef419dbf2a23ceb0f2135a023f314a19fa00435714f2ce0dbbbe1ed3b1b35180ec9115758d0ec6fa7a9eb7aab24f1ee06f17adc2b25eea947be12cc5704f17e1a5207530920af922e0ed0b9431029a38ec7c30e6f32ea1fb04ba6cdb8a7156d484822ce0ed3f72e9a694acf125001d1483cabe2b47d8a32063a403f8096e1328c3057598f5c90585424ea362d9b65c39f7bb97822533965e6fcd34187b103e7554e55d8f1f119bfde386714d90a62b3ade17ebee8cf5e9d45395894150c832ff0b05d8c6ffb219bbe5b8", @typed={0x4, 0x84}]}, @generic="9caff7", @generic="b734c720bf89b67aa0996e1eb3c3f36781e1a90686dd9a972726256369dff5e384d685084140e7aa241f56cb4f8f3ca85285ed4eb7176e103877fc5766f0c36d734a780e096a98317289807bd02755ad53d530d9f4485c4ec802699e8d815085fcf9ef05f83ff01e341f105c925116baced3be84fe57b76cacba46"]}, 0x1ac}, {&(0x7f00000009c0)={0x8c, 0x2f, 0x10, 0x70bd2c, 0x25dfdbfb, "", [@generic="54264bcce8af79311460e0ced1a31f94d5ad90d72e110fbe9f3d58cc246be87e71b153f4cf9ee918182405756afbeeb06704ea3804ddb8497741a32b086304c17f749b81034d428292809341316c19ea258e296d686e9620386627c68511c1519dcc1b493b29da714ac4fe5f571bfe1587fc57e97bb9d23fd2"]}, 0x8c}], 0x4, &(0x7f0000000e00)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @rights={{0x38, 0x1, 0x1, [r0, r0, r0, r2, r2, r2, r2, r0, r2, r2]}}, @rights={{0x24, 0x1, 0x1, [r2, r2, r2, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @rights={{0x30, 0x1, 0x1, [r2, r0, r0, r2, r0, r2, r0, r2]}}], 0xe8, 0x40008c1}, 0x44010) fstat(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000fc0)={0x10, 0x30, 0xfa00, {&(0x7f0000000f80)={0xffffffffffffffff}, 0x3, {0xa, 0x4e23, 0x81, @local, 0x7}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000001000)={0x11, 0x10, 0xfa00, {&(0x7f0000000f40), r10}}, 0x18) ioctl$TUNSETOWNER(r0, 0x400454cc, r9) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000480)={0x2, 0xc38, 0x7}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}, &(0x7f00000003c0)=0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000000198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee056b8190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) [ 965.759889] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 05:42:55 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080), 0x2166) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rfcomm\x00') ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000040)=""/62) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='gre0\x00', 0x10) sendto$inet(r0, 0x0, 0x378, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) open(&(0x7f0000000100)='./file0\x00', 0x2802, 0x10) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) syz_open_procfs(r2, &(0x7f00000000c0)='net/if_inet6\x00') [ 965.878965] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 05:42:56 executing program 0 (fault-call:3 fault-nth:37): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x29000400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 05:42:56 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x4) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000180)=r2) dup(r1) 05:42:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xea0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') preadv(r1, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/115, 0x73}, {&(0x7f0000000140)=""/123, 0x7b}], 0x2, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) 05:42:56 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='gre0\x00', 0x10) sendto$inet(r0, 0x0, 0x378, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x1, 0x82400) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0x2, 0xfffffffffffffe00}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) [ 965.942959] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 05:42:56 executing program 4: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x302, &(0x7f0000001a40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000000008000000000", @ANYRESOCT, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYPTR=&(0x7f0000000140)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES64, @ANYRES64, @ANYRESHEX, @ANYRES32, @ANYRES64], @ANYRESOCT, @ANYRESOCT=0x0, @ANYRES16, @ANYBLOB="a8d9d26ee3df9132c3acdd1e441b39a129f3965e28951d325fdf5b177b3929ef139a15b111a6d42b04d16c40ead08549bb905487b470beeea1f35dc86ce840f3942f866872e952f750c8ec1e8de92a2a7b8a11354bb65b86657b646c290ed38dbb6d82f72c78cc49c010fe3dca5bbf9624e73a42f5f6c1714789a575f673de2c2960e015ba60a97c0681b6db64be4b358e248140f2bf029c7e8acce252665c2901cb9275cbd767320d1e9ec88221ff143e35541aff5450257ffb1ecab6fc82", @ANYRES64=0x0, @ANYRES16, @ANYRESHEX], @ANYRES16], 0x4}}, 0x0) 05:42:56 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) dup(r0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 05:42:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x3227, 0x2, 0x64}) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000240)={0x9, "6a1f191f61395d14cb390b134c61d72d8800d4cd3ce58e3b227e2fe335fbc8c4", 0x1, 0x1}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') preadv(r2, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/115, 0x73}, {&(0x7f0000000140)=""/123, 0x7b}], 0x2, 0x0) 05:42:56 executing program 3: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) finit_module(r0, &(0x7f0000000080)='\x00', 0x3) umount2(&(0x7f0000000540)='./file0\x00', 0x4) getpeername(r0, &(0x7f0000000140)=@ipx, &(0x7f00000000c0)=0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 966.125724] FAULT_INJECTION: forcing a failure. [ 966.125724] name failslab, interval 1, probability 0, space 0, times 0 05:42:56 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x100) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000480)={&(0x7f0000000200), 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x154, r2, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x44}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x56}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x29}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x80, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x5, @mcast1, 0x37}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x6, @local, 0x3}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x10000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x58}}}}]}, @TIPC_NLA_BEARER={0x4c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xffff, @mcast1, 0x180000000000000}}}}]}]}, 0x154}}, 0x20000004) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) r3 = fcntl$getown(r0, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000006c0)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f00000007c0)=0xe8) lstat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fcntl$getown(r0, 0x9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000008c0)={0x0, 0x0}, &(0x7f0000000900)=0xc) getgroups(0x1, &(0x7f0000000940)=[0xee01]) sendmsg$unix(r1, &(0x7f0000000a00)={&(0x7f0000000540)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000240)="6c7f4cc00ca6356e8ae6193fdb8696d8b66e5980c8dcc44607b41c1269b505a42d4d8c5bc200945327ea8d6aea232401a03ca3413d0be7", 0x37}, {&(0x7f00000005c0)="bc3f0f856507510de6a1c51478f1af7e0a0e5a5bd1638370a5c239d5f6a558a04349f54d75c98acc1a44e608371afee68d9874bc973f93dc3f1f308b9453c93b7449c71dc0d32c528b5a09cb400d794c23d7ee8f30a768583ab22cca8b32e90476b3ef3ca4bd3e123985b8ad7eb9570f0563d10cbf969334d8a95c65acfd7ba9f45a824b2d4562e31305381b4838e9092114c883050a674d0c02fb65acfc10c04b6b4ccef7ad5c1f4780c62553fd91ca6bda6e6783138c8694b879d8313af1e0e9", 0xc1}], 0x2, &(0x7f0000000980)=[@rights={{0x18, 0x1, 0x1, [r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}], 0x58, 0x24008000}, 0x14) init_module(&(0x7f0000000140)='eth0)]/(\x00', 0x9, &(0x7f0000000180)=')\x00') 05:42:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) gettid() r1 = getpgid(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/rkute\xd0') preadv(r2, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/115, 0x73}, {&(0x7f0000000140)=""/123, 0x7b}], 0x2, 0x0) 05:42:56 executing program 3: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x121000, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f00000000c0), &(0x7f0000000140)=0x4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) membarrier(0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000000300)=0xe8) stat(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000000500)=[0x0, 0xee01, 0xee00, 0xee00, 0x0]) lstat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000980)={{}, {0x1, 0x7}, [{0x2, 0x4, r3}, {0x2, 0x7, r4}, {0x2, 0x2, r5}, {0x2, 0x19d6272e0da85654, r6}, {0x2, 0x5, r7}, {0x2, 0x4, r8}], {0x4, 0x6}, [{0x8, 0x9792019b90a667dd, r9}, {0x8, 0x4, r10}, {0x8, 0x4, r11}, {0x8, 0x0, r12}], {0x10, 0x1}, {0x20, 0x6}}, 0x74, 0x2) [ 966.218593] CPU: 0 PID: 18551 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 966.225846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 966.235291] Call Trace: [ 966.237884] dump_stack+0x138/0x197 [ 966.241518] should_fail.cold+0x10f/0x159 [ 966.245672] should_failslab+0xdb/0x130 [ 966.249652] kmem_cache_alloc+0x2d7/0x780 [ 966.253807] ptlock_alloc+0x20/0x70 [ 966.257427] pte_alloc_one+0x60/0x100 [ 966.257438] __pte_alloc+0x2a/0x2d0 [ 966.257452] copy_page_range+0x11ba/0x1bd0 [ 966.264851] ? anon_vma_fork+0x358/0x4d0 [ 966.264869] ? vma_compute_subtree_gap+0x190/0x1f0 [ 966.264885] ? __pmd_alloc+0x410/0x410 [ 966.281965] copy_process.part.0+0x4764/0x6a00 [ 966.286779] ? __cleanup_sighand+0x50/0x50 [ 966.291020] ? lock_downgrade+0x6e0/0x6e0 [ 966.295177] _do_fork+0x19e/0xce0 [ 966.298637] ? fork_idle+0x280/0x280 [ 966.302364] ? fput+0xd4/0x150 [ 966.305562] ? SyS_write+0x15e/0x230 [ 966.309284] SyS_clone+0x37/0x50 [ 966.312651] ? sys_vfork+0x30/0x30 [ 966.316191] do_syscall_64+0x1e8/0x640 [ 966.320079] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 966.324923] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 966.330103] RIP: 0033:0x459879 [ 966.333283] RSP: 002b:00007f5d58de2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 966.340988] RAX: ffffffffffffffda RBX: 00007f5d58de2c90 RCX: 0000000000459879 [ 966.348426] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000029000400 [ 966.355690] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 05:42:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f0000000040)='stack\x00') preadv(r2, &(0x7f00000006c0), 0x0, 0x0) [ 966.362955] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d58de36d4 [ 966.370223] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 [ 966.376396] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 05:42:56 executing program 0 (fault-call:3 fault-nth:38): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x29000400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 05:42:56 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='gre0\x00', 0x10) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'ip6erspan0\x00', {0x2, 0x4e22, @rand_addr=0xffffffffffff8560}}) sendto$inet(r0, 0x0, 0x378, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) 05:42:56 executing program 5: setreuid(0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0/../file0\x00', 0x4) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x93e10177f1f44284, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 05:42:56 executing program 3: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 05:42:56 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@expire={0x1cc, 0x18, 0x400, 0x70bd2b, 0x25dfdbfe, {{{@in=@broadcast, @in6=@loopback, 0x4e22, 0x6, 0x4e21, 0x0, 0xa, 0x80, 0x20, 0x5c, r1, r2}, {@in=@multicast2, 0x4d2}, @in6=@rand_addr="c7736466c15592bf4cddf8821035507b", {0x41, 0x2, 0xffffffffffffff00, 0x4, 0x8, 0x200, 0x200}, {0x9, 0xff, 0x7f, 0x8000}, {0x3, 0x7, 0x5}, 0x70bd27, 0x3506, 0xf00d409da62d3198, 0x0, 0x28, 0x80}, 0x4}, [@algo_auth={0xd4, 0x1, {{'sha1-ni\x00'}, 0x448, "f5869eb4305aeb2adbc2bd0ac280cf4978c333dbf5ac139a6d29c6c3306c68788c4103625d5b114c19b9e02a9477bd985da34b7d55e36ef62731aaa6820a8b89958b0a541dcf169fb0b43ebeec9fe4e3d82c909999f16e39115d0dab17a583561471b4283ec32dddc1f415feb4c1f81fb11971a61f134dc6ee658f1fab2424d77641a1d2cbb086a0c9"}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x1}, 0x80) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xc4}}, 0x0) 05:42:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x600080, 0x0) getsockopt$inet_buf(r1, 0x0, 0x7af5b2c9663bd643, &(0x7f0000000040)=""/41, &(0x7f0000000100)=0x29) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000240)=0x2) preadv(r2, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/115, 0x73}, {&(0x7f0000000140)=""/123, 0x7b}], 0x2, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000280)={0x8, 0x0, 0x10000, 0x2}) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f00000002c0)={0x3, r3}) syncfs(r0) 05:42:56 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) pread64(r0, &(0x7f0000000180)=""/151, 0x97, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x4, 0x80000) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000140)={0xffffffffffffffe0, 0x42475251, 0x1, @discrete={0x8}}) bind$isdn_base(r1, &(0x7f00000000c0)={0x22, 0x10000, 0x2, 0x5, 0xaf4}, 0x6) umount2(&(0x7f0000000540)='./file0\x00', 0x4) fcntl$dupfd(r0, 0x0, r0) [ 966.572178] FAULT_INJECTION: forcing a failure. [ 966.572178] name fail_page_alloc, interval 1, probability 0, space 0, times 0 05:42:56 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x111040, 0x50) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001900250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0xc4}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80, 0x20) [ 966.642237] CPU: 0 PID: 18593 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 966.649380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 966.658735] Call Trace: [ 966.661338] dump_stack+0x138/0x197 [ 966.664980] should_fail.cold+0x10f/0x159 [ 966.669128] ? __might_sleep+0x93/0xb0 [ 966.673020] __alloc_pages_nodemask+0x1d6/0x7a0 [ 966.677697] ? __alloc_pages_slowpath+0x2930/0x2930 [ 966.682719] alloc_pages_current+0xec/0x1e0 [ 966.687046] pte_alloc_one+0x1a/0x100 05:42:56 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000340)={0x5, 0x1}) r2 = syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x24b53ba, 0x10000) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='gre0\x00', 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0xfd15, 0x2, 0xffff, 0x3, 0x4}, &(0x7f00000000c0)=0x98) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={r3, 0xff}, 0x8) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x400000, 0x0) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @default, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f00000003c0)={0xd000, 0x10000}) sendto$inet(r0, 0x0, 0x378, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0xff11) getpeername$inet6(r4, &(0x7f0000000400)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, &(0x7f0000000440)=0x1c) [ 966.690846] __pte_alloc+0x2a/0x2d0 [ 966.694471] copy_page_range+0x11ba/0x1bd0 [ 966.698722] ? __pmd_alloc+0x410/0x410 [ 966.702614] copy_process.part.0+0x4764/0x6a00 [ 966.707222] ? __cleanup_sighand+0x50/0x50 [ 966.711460] ? lock_downgrade+0x6e0/0x6e0 [ 966.711475] _do_fork+0x19e/0xce0 [ 966.711488] ? fork_idle+0x280/0x280 [ 966.711501] ? fput+0xd4/0x150 [ 966.711510] ? SyS_write+0x15e/0x230 [ 966.711524] SyS_clone+0x37/0x50 [ 966.711533] ? sys_vfork+0x30/0x30 [ 966.719105] do_syscall_64+0x1e8/0x640 05:42:56 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r0, 0xfc0004) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xb) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r1, &(0x7f0000000180), 0x88f, 0x0, &(0x7f0000000100)={0x77359400}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c40000004500250a0000000000000000fe8000000000000000000000000001aafe80000000000000000000000000000000000000000000000a00008000000000271a1c178c86b2e353ab093075d3ad7fdc85e521a202951972444b193b377121ed0fcc16116d72a02c53ce83d734340e0f846de80b96eab4d7cf94a52f1fde1ab109c1bfeb34ece3525f254a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000001198677d0000000000000000000000000000000000000000000000000000000000000000000000010000000c00150000000000010000000000000000008979fe0e862334bd671bb0b1a5d2a308662e567815d10d10cc4faee0e6fc190724f2540fd9e7239ceb560ad4e206494ad044cf7ce5b11c29319dbe7fb8c5c77b4012f1efd24efbac93bfa84b400c5a91181d53d8a7e4b4b41bad36951dce"], 0x4}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = dup(r1) ioctl$NBD_SET_TIMEOUT(r3, 0xab09, 0xc000) [ 966.719115] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 966.719131] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 966.719141] RIP: 0033:0x459879 [ 966.753707] RSP: 002b:00007f5d58de2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 966.761415] RAX: ffffffffffffffda RBX: 00007f5d58de2c90 RCX: 0000000000459879 [ 966.768768] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000029000400 [ 966.776038] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 966.783338] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d58de36d4 05:42:56 executing program 5: setreuid(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000080)={'syz0', "e959163ca5c8893918bfbe509ee79021c19cfc5b6f04d66c6602c3d462f750f6e91ddb5582332d85820c1a06448808c7ee7a532d1c335a5b9052a40c62d9d8437ea50af32446c07c400f67704c6de30e7270ce31"}, 0x58) [ 966.790609] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 [ 966.834401] ------------[ cut here ]------------ [ 966.839524] WARNING: CPU: 1 PID: 18618 at net/xfrm/xfrm_policy.c:752 xfrm_policy_insert+0x679/0x11e0 [ 966.848799] Kernel panic - not syncing: panic_on_warn set ... [ 966.848799] [ 966.856163] CPU: 1 PID: 18618 Comm: syz-executor.4 Not tainted 4.14.141 #37 [ 966.863257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 966.872622] Call Trace: [ 966.875208] dump_stack+0x138/0x197 [ 966.878834] panic+0x1f2/0x426 [ 966.882025] ? add_taint.cold+0x16/0x16 [ 966.885997] ? xfrm_policy_insert+0x679/0x11e0 [ 966.890589] ? __warn.cold+0x14/0x36 [ 966.894307] ? xfrm_policy_insert+0x679/0x11e0 [ 966.898881] __warn.cold+0x2f/0x36 [ 966.902417] ? ist_end_non_atomic+0x10/0x10 [ 966.906735] ? xfrm_policy_insert+0x679/0x11e0 [ 966.911313] report_bug+0x216/0x254 [ 966.914945] do_error_trap+0x1bb/0x310 [ 966.918827] ? math_error+0x360/0x360 [ 966.922624] ? mark_held_locks+0xb1/0x100 [ 966.926766] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 966.931868] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 966.936711] do_invalid_op+0x1b/0x20 [ 966.940416] invalid_op+0x1b/0x40 [ 966.943861] RIP: 0010:xfrm_policy_insert+0x679/0x11e0 [ 966.949034] RSP: 0018:ffff88805828f560 EFLAGS: 00010216 [ 966.954388] RAX: 0000000000040000 RBX: ffff88808d7f04c0 RCX: ffffc90007629000 [ 966.961648] RDX: 000000000000067c RSI: ffffffff8540ffc9 RDI: ffff88808d7f06f0 [ 966.968907] RBP: ffff88805828f5f8 R08: 0000000000003993 R09: ffffffff88c9c118 [ 966.976167] R10: ffff8880a165ee28 R11: ffff8880a165e580 R12: dffffc0000000000 [ 966.983427] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 966.990702] ? xfrm_policy_insert+0x679/0x11e0 [ 966.995296] xfrm_add_policy+0x230/0x4f0 [ 966.999355] ? xfrm_policy_construct+0x590/0x590 [ 967.004107] ? nla_parse+0x186/0x240 [ 967.007809] ? __netlink_ns_capable+0xe2/0x130 [ 967.012383] ? xfrm_policy_construct+0x590/0x590 [ 967.017132] xfrm_user_rcv_msg+0x3c9/0x690 [ 967.021359] ? xfrm_dump_sa_done+0xe0/0xe0 [ 967.025588] ? __dev_queue_xmit+0xd33/0x25e0 [ 967.030014] ? netlink_deliver_tap+0x93/0x8f0 [ 967.034511] ? xfrm_netlink_rcv+0x61/0x90 [ 967.038657] netlink_rcv_skb+0x14f/0x3c0 [ 967.042715] ? xfrm_dump_sa_done+0xe0/0xe0 [ 967.046950] ? netlink_ack+0x9a0/0x9a0 [ 967.050845] xfrm_netlink_rcv+0x70/0x90 [ 967.054825] netlink_unicast+0x45d/0x640 [ 967.058886] ? netlink_attachskb+0x6a0/0x6a0 [ 967.063310] ? security_netlink_send+0x81/0xb0 [ 967.067889] netlink_sendmsg+0x7c4/0xc60 [ 967.071952] ? netlink_unicast+0x640/0x640 [ 967.074906] kobject: 'loop0' (ffff8880a4966160): kobject_uevent_env 05:42:57 executing program 0 (fault-call:3 fault-nth:39): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x29000400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 967.076185] ? security_socket_sendmsg+0x89/0xb0 [ 967.087328] ? netlink_unicast+0x640/0x640 [ 967.090230] kobject: 'loop0' (ffff8880a4966160): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 967.091561] sock_sendmsg+0xce/0x110 [ 967.104694] ___sys_sendmsg+0x70a/0x840 [ 967.108671] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 967.113509] ? __fget+0x210/0x370 [ 967.116962] ? find_held_lock+0x35/0x130 [ 967.121021] ? __fget+0x210/0x370 [ 967.124489] ? lock_downgrade+0x6e0/0x6e0 [ 967.128645] ? __fget+0x237/0x370 [ 967.132101] ? __fget_light+0x172/0x1f0 [ 967.136156] ? __fdget+0x1b/0x20 [ 967.139528] ? sockfd_lookup_light+0xb4/0x160 [ 967.144974] __sys_sendmsg+0xb9/0x140 [ 967.148775] ? SyS_shutdown+0x170/0x170 [ 967.152746] ? put_timespec64+0xb4/0x100 [ 967.153117] FAULT_INJECTION: forcing a failure. [ 967.153117] name failslab, interval 1, probability 0, space 0, times 0 [ 967.156808] ? SyS_clock_gettime+0xf8/0x180 [ 967.156822] SyS_sendmsg+0x2d/0x50 [ 967.156836] ? __sys_sendmsg+0x140/0x140 [ 967.179871] do_syscall_64+0x1e8/0x640 [ 967.183752] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 967.188594] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 967.193775] RIP: 0033:0x459879 [ 967.196957] RSP: 002b:00007f8d7ab1fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 967.204651] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 967.211905] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 967.219160] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 967.226420] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8d7ab206d4 [ 967.233680] R13: 00000000004c77d9 R14: 00000000004dd030 R15: 00000000ffffffff [ 967.240953] CPU: 0 PID: 18630 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 967.248124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 967.257460] Call Trace: [ 967.260034] dump_stack+0x138/0x197 [ 967.263649] should_fail.cold+0x10f/0x159 [ 967.267785] should_failslab+0xdb/0x130 [ 967.271741] kmem_cache_alloc+0x2d7/0x780 [ 967.275878] ptlock_alloc+0x20/0x70 [ 967.279489] pte_alloc_one+0x60/0x100 [ 967.283274] __pte_alloc+0x2a/0x2d0 [ 967.286885] copy_page_range+0x11ba/0x1bd0 [ 967.291120] ? __pmd_alloc+0x410/0x410 [ 967.294995] copy_process.part.0+0x4764/0x6a00 [ 967.299575] ? __cleanup_sighand+0x50/0x50 [ 967.303794] ? lock_downgrade+0x6e0/0x6e0 [ 967.307929] _do_fork+0x19e/0xce0 [ 967.312193] ? fork_idle+0x280/0x280 [ 967.315895] ? fput+0xd4/0x150 [ 967.319074] ? SyS_write+0x15e/0x230 [ 967.322775] SyS_clone+0x37/0x50 [ 967.326126] ? sys_vfork+0x30/0x30 [ 967.329651] do_syscall_64+0x1e8/0x640 [ 967.333519] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 967.338352] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 967.343524] RIP: 0033:0x459879 [ 967.346694] RSP: 002b:00007f5d58de2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 967.354386] RAX: ffffffffffffffda RBX: 00007f5d58de2c90 RCX: 0000000000459879 [ 967.361641] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000029000400 [ 967.368896] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 967.376150] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d58de36d4 [ 967.383402] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 [ 967.391858] Kernel Offset: disabled [ 967.395620] Rebooting in 86400 seconds..