[ 32.638940] kauditd_printk_skb: 9 callbacks suppressed [ 32.638948] audit: type=1800 audit(1555569269.967:33): pid=6901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 32.670404] audit: type=1800 audit(1555569269.977:34): pid=6901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 51.359419] random: sshd: uninitialized urandom read (32 bytes read) [ 51.828549] audit: type=1400 audit(1555569289.157:35): avc: denied { map } for pid=7074 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 51.871399] random: sshd: uninitialized urandom read (32 bytes read) [ 52.389552] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.53' (ECDSA) to the list of known hosts. [ 58.010561] random: sshd: uninitialized urandom read (32 bytes read) 2019/04/18 06:34:55 fuzzer started [ 58.208448] audit: type=1400 audit(1555569295.537:36): avc: denied { map } for pid=7083 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 60.052536] random: cc1: uninitialized urandom read (8 bytes read) 2019/04/18 06:34:58 dialing manager at 10.128.0.105:36703 2019/04/18 06:34:58 syscalls: 2434 2019/04/18 06:34:58 code coverage: enabled 2019/04/18 06:34:58 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/04/18 06:34:58 extra coverage: extra coverage is not supported by the kernel 2019/04/18 06:34:58 setuid sandbox: enabled 2019/04/18 06:34:58 namespace sandbox: enabled 2019/04/18 06:34:58 Android sandbox: /sys/fs/selinux/policy does not exist 2019/04/18 06:34:58 fault injection: enabled 2019/04/18 06:34:58 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/04/18 06:34:58 net packet injection: enabled 2019/04/18 06:34:58 net device setup: enabled [ 62.359778] random: crng init done 06:36:49 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x800000000000157, 0xfffffffffffffffc) 06:36:49 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) dup2(r2, r0) 06:36:49 executing program 3: 06:36:49 executing program 1: 06:36:49 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @dev}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x5, 0x4) sendto$inet(r0, 0x0, 0xffffffffffffff77, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth0_to_bond\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffffb5, 0xc0, 0x0, 0xfeffffff00000000) 06:36:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1800008912, &(0x7f00000001c0)="1098ce66000000007be070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xfffffffffffffffe, 0x0, @dev, 0x5}, 0x1c) [ 171.753092] audit: type=1400 audit(1555569409.087:37): avc: denied { map } for pid=7083 comm="syz-fuzzer" path="/root/syzkaller-shm756424552" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 171.796074] audit: type=1400 audit(1555569409.117:38): avc: denied { map } for pid=7099 comm="syz-executor.5" path="/sys/kernel/debug/kcov" dev="debugfs" ino=13806 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 172.660180] IPVS: ftp: loaded support on port[0] = 21 [ 172.956616] chnl_net:caif_netlink_parms(): no params data found [ 172.965658] IPVS: ftp: loaded support on port[0] = 21 [ 173.017907] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.025073] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.032195] device bridge_slave_0 entered promiscuous mode [ 173.041881] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.048290] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.055194] device bridge_slave_1 entered promiscuous mode [ 173.071191] IPVS: ftp: loaded support on port[0] = 21 [ 173.087902] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 173.097211] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 173.117943] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 173.125383] team0: Port device team_slave_0 added [ 173.133528] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 173.141245] team0: Port device team_slave_1 added [ 173.151887] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 173.190537] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 173.282337] device hsr_slave_0 entered promiscuous mode [ 173.320392] device hsr_slave_1 entered promiscuous mode [ 173.370410] chnl_net:caif_netlink_parms(): no params data found [ 173.379586] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 173.393603] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 173.442675] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.449127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.456044] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.462405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.513009] chnl_net:caif_netlink_parms(): no params data found [ 173.519714] IPVS: ftp: loaded support on port[0] = 21 [ 173.526956] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.533626] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.540899] device bridge_slave_0 entered promiscuous mode [ 173.547788] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.554793] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.561810] device bridge_slave_1 entered promiscuous mode [ 173.599141] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 173.624289] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 173.655947] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 173.664204] team0: Port device team_slave_0 added [ 173.669852] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 173.677095] team0: Port device team_slave_1 added [ 173.696573] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 173.704117] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 173.715745] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.722218] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.729113] device bridge_slave_0 entered promiscuous mode [ 173.753353] IPVS: ftp: loaded support on port[0] = 21 [ 173.803213] device hsr_slave_0 entered promiscuous mode [ 173.860393] device hsr_slave_1 entered promiscuous mode [ 173.901205] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 173.908373] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 173.915458] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.921940] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.928871] device bridge_slave_1 entered promiscuous mode [ 173.960208] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 173.976658] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 174.005736] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.023790] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.041223] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 174.067444] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 174.075114] team0: Port device team_slave_0 added [ 174.080721] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 174.087890] team0: Port device team_slave_1 added [ 174.094170] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 174.105754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.142747] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 174.176075] IPVS: ftp: loaded support on port[0] = 21 [ 174.207297] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 174.282501] device hsr_slave_0 entered promiscuous mode [ 174.320396] device hsr_slave_1 entered promiscuous mode [ 174.361429] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 174.368554] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 174.395890] chnl_net:caif_netlink_parms(): no params data found [ 174.424573] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 174.442507] chnl_net:caif_netlink_parms(): no params data found [ 174.472266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 174.479692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.488981] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 174.522955] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 174.529034] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.537957] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 174.558525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.573310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.582071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.589539] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.595914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.608427] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 174.631333] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.637694] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.644718] device bridge_slave_0 entered promiscuous mode [ 174.654434] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.661258] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.668400] device bridge_slave_1 entered promiscuous mode [ 174.674871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 174.683187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.690997] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.697319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.707410] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 174.715431] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 174.750124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 174.769511] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.776032] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.783946] device bridge_slave_0 entered promiscuous mode [ 174.803903] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 174.813865] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 174.821750] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.828111] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.835721] device bridge_slave_1 entered promiscuous mode [ 174.846316] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 174.864387] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 174.876799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.883710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 174.891845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 174.898674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.922142] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 174.929446] team0: Port device team_slave_0 added [ 174.935492] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 174.944585] team0: Port device team_slave_1 added [ 174.950401] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 174.966464] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 174.977633] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 174.985498] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 175.001854] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 175.011070] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 175.017156] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.024716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 175.032450] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 175.041087] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 175.047584] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 175.075574] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 175.084897] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 175.143879] device hsr_slave_0 entered promiscuous mode [ 175.180518] device hsr_slave_1 entered promiscuous mode [ 175.241608] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 175.248873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 175.256535] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 175.264383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 175.271501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.278286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.286378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.294087] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.300456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.315401] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 175.322791] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 175.329978] team0: Port device team_slave_0 added [ 175.337042] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 175.344460] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 175.352591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.360772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 175.368164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 175.380610] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 175.386679] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.397000] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 175.404957] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 175.414054] team0: Port device team_slave_1 added [ 175.420978] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 175.431459] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 175.475121] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 175.482804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 175.491496] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 175.498922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.506930] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.514742] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.521145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.527977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.535686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.543380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.551105] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.557443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.564437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.572501] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 175.579917] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 175.592244] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 175.608596] chnl_net:caif_netlink_parms(): no params data found [ 175.620181] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 175.627195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.635085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.643525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.651396] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.657730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.724024] device hsr_slave_0 entered promiscuous mode [ 175.780325] device hsr_slave_1 entered promiscuous mode [ 175.845356] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 175.859944] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 175.866334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 175.878054] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 175.896693] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 175.904868] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 175.916667] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 175.930714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.938367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 175.946442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 175.954765] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 175.964923] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 175.975025] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 175.999620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.013784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.020875] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.027288] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.034482] device bridge_slave_0 entered promiscuous mode [ 176.046091] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 176.056971] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 176.065925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 176.078588] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.086400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.094713] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.102592] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 176.109650] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.116797] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.123833] device bridge_slave_1 entered promiscuous mode [ 176.137944] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 176.151272] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 176.161204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.168753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.179155] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 176.188539] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 176.206461] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 176.215967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 176.227242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.235004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.242767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.254176] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 176.264451] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 176.288633] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 176.296691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 176.306205] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.314151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 176.322132] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.333108] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 176.339141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 176.356147] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 176.363954] team0: Port device team_slave_0 added [ 176.371973] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 176.378034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 176.396561] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 176.408775] team0: Port device team_slave_1 added [ 176.445556] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready 06:36:53 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xffffffffffffffff, 0x1) ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f0000000080)={0x9, 0xb, 0x18, "ee43163c737b4b71d6ee5a69bddf72d5a57348009fe2f3ee3e0a358f0469e614cfeb06fe24dd22771e1fa0fd2b78376df43fc8f057ab24873a4ec5c6", 0x1a, "68970bfd800631375eab8e40895f5ff9159a0a285b8b211eeb2da7d439793cf6df114259d869c2677dc7e1dcb032f10c150a133b3034899c7179585a"}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123d319bd070") move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6) [ 176.457375] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 176.469446] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 176.484212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.496817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.507481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.524257] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 176.543188] 8021q: adding VLAN 0 to HW filter on device bond0 06:36:53 executing program 5: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x242, 0x3) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000140)={r2}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000180)={0x4, 0x0, [{0x6, 0x0, 0x0, 0x0, @sint={0x6f6, 0x7fffffff}}, {0x0, 0x3, 0x0, 0x0, @adapter={0x80000000, 0x5, 0x5, 0x6, 0x101}}, {0x0, 0x2, 0x0, 0x0, @irqchip={0x8, 0x1}}, {0x80, 0x4, 0x0, 0x0, @adapter={0x9, 0x6, 0x54, 0x490c, 0x4}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)=ANY=[@ANYBLOB="b9e200000008000009000000000100"/24, @ANYRES32=r1, @ANYBLOB="00000000010400"/28]) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) r3 = socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000300)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f0000000280)) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") tee(r0, r0, 0x0, 0x7) write(r3, &(0x7f0000000340)="8e84387cb43a44a716ce56911189b321a687a2b28ad90277c6be1c1145412c966fc2950ea5906411df4e6bc6dbdb22750cf1d8469be829bdcf9cdc4f459732d0215eeb71b0ed25ad585530fa79d45a25e665f9be994819b37b6600c2142d4c0510752741ec5d7e75ab098493a686813cdd8c009f2bc9d4607b556105bbddbc4d58fcb2eadb5bf36c08619c3ef9178f72ba484d66caf17367e0554001b5630a8ce1e53458041c081b301a94936e9375486072e6fb02280e7191401a9ede9f57334fb878a8719b89a5cf9faf27cf65234ac98bfea57356ba91cecbed45576bba4390bae1777ecf71b5f5f76186bece16c21ee44fa3a98f7ea0edcffc1350500a975dc15c9bca064d44585a4dbc424d2538316cce20e95c5e223c377be3c76c22061d227a8cbd88503b8fef50ba93efe1e697ffcf96115a3ede0b1809cb9cba383f65d20ec1ddb8bfd1020e7c89d025bf9a3f9387e632aba8c97affe7b029547117fc7443f86b2ccbbb111aa343015dc6c8365b8a1014c7d7150460e54feed3281ba901a614adbd009eaf5eac342c4f55aa5a54d75ed24eaefa69f3331423c83c95d055bccd4ff8a0dfc1ff1a12acd1e8a93ecd3a517465b3d67261faa377496ff693fad3f129d36a29e4fd3aab8fb138ea0fc58867af50bf3cdfb149bdca54db555bbcd9a4a70449b56812a1de7a3ed9587748dc0a915bf556ba84fc0de7374382aaf509553bfb011dbd603564fd8f60f91ead87d29e3587282da95ea7060862cea456778ccf7daa23de4a303c0fca727d889b8aaff44a22bc7bf7c2f12981d44bf844c94dd2596fa418b7eb92f55767c7aaf5870afbe5e0e59622de5056aff44e1f780f3b217753bf97d090f83add76179e9e27ced26ea392792e2ce9852df3358bcb6a30a079d8b7646f27c02b1048340d814742fdd67bd03a8caef2cc5e1f770945c5884cf7fc075099eeade87eee22fbca14551669ab1c46c1c12e3ff8d7f81e660e26aef3da5edff7f5a12af9864c83949afebafe33e67f4602f6884cfe90e6c2af64c2a3bdc89e7bf043d55ac6969da823a3961b6c2a0aa813564184cabb3daba0e1269a7725704f186aa15c7fa4f591f10c7d4a6d935dd7fe140455c3afb29655f96e28db57c7dcd02e0c29532b59a2fbebe2890f79eecc9087a7ca0d03376a13087e660017b4dc7d80bf4044f32f48e872dd50fa5d7315cb3be3ffefc4880791521049293940e4de209d7ce826baed98f9987f998ff613b458645de49339182be45722a93381cae9bfd966138b355a627c8adf58e3d06d3bc47b6450ae071b4324fabca87ddeb7167f178cf85f0b902cf834f4c17606374a18015995ea973ec38082e124bd36ea05c38c06c00d53a97623ed8609debfc447e37453142f4e29a847bcbb9ce3452c7b2e45def759e5be2181b3719d26bbd290140b11f097ec5a76729c36fb2d2925bbbf27292d088978fc1546d970ea866bf38fb41052129fc9821adfe873519198838ec53d3fd3753afe054a2d64ba08119a9b82e87eaee73346a3ef2b3e778b8faa0ac58123844b1474a46473bcbb9cb0ea64b703c2efe8399d236edf6eb7bea97ac9cb43f90d7210d92f87987156e29e8be429ff4a8c7c3279677742a278d9274fc422d7da6d2ec4c71f2f79df252a44bb1241adb20cd0fea835d5f984709bbc00301be32bfba38e253f0adba13ea0bc076c2e0cda17d71bcc4e6f87b45946973085f578713489be0d95ee25749eeb62d48af07f3c4cd8bdd9179cc63e6d4de68572f4bd8822b1956ca51e378bd76ff31e488d6556009fab466d79af78edc0aa7f7892f933eb6100b08ddb475341efeb54fbb7fe214c6f979fab08203850e17c0c1d883b5dd5a639c83d1913cef397938e0bdac4cd2695259fc1a808f50236f8546ff5487e1c570ad7dcbf5b5549209fe6eb8e8f3d6030ecf59b3fdb982d0ab41a8bc137a8b880da451b6ddb72cc8fbdbd7f1e8ff3aba4c80a485863ef3933b3cc980d7c2aa42e781d5cf187bc914469aef78e30db12d742cc46852f919301a8c57b5285a0e154b8708586cf57f78667f7e3300aa8b40234e036883415e1227fdda4e816329505701564cd0816ab6dfbef95e2da0baa4db4a364b89858f568d422adf1040b71a63b3963f7f4aa0fdb89aa01d7456b8f3ef4ba6762c7b5698f857236d486c46191cca37b623b257f250bc281d228e4ca2a2480326fff048a2cf4aee001780b75f5e6bb8d3212fef714286081709d6aabff4f8084f9b5f7131f12c2d4ead11eb3e5b6a75232462eb1d4c60c6080e5df6a77ce7c7313ba897f6edb5e0d15bc98c6d92d013b74b0c51f98fd44ce9b1449478203f42503e12c0364124b82bc5d6268e6a2ce5475bc1df84ace4f4e808c2b11d7751b0c882ffe4721ee737479b1b527264ce731b941ea2e43eb0c7d7f1575891bf2dbde64f58715a00030c32729181ac5dc6468cffa8af880ae6307a433a2afc77ed88da77081f0d2bdbf126dbc483a6f15d3d2de97bd833a23e6635aa311db6f4f710f5c7b6546cbdcbac6e402400e1d6334c5430305552696f2a043af9e9c7c5d1a120216946c165590b8f9445c6d8937ba6f58e39ef0ed007e9e603dc4e433cefd575370804cde9a9b553ef8c01c406cf59fbc848d67063e5a503940d2bd5e2c242002ab34ef5b543f9f5ab4d1416a275b58bb67fc786ac2d6160c3709085e78d80a5cad00a79ba41bcc09f8eaf0804b410d39d1d4c497f31e25478a84f78e8563775c6abf54f09f3d4497fea9831caf52da68de781fe707da0204b712e5131be7260c526ef5e25d77ceb427cef663600d48bad7c117d25e7f4e521ad5bde3cf24bdcbbf33beac4c467184ced7d127e4dac9146301c55980b44e4248ce207c3c5b59026f2abf2bff9e39e9fb856693e0d5f7dfb473ebadc3bfead18db74243fd9abcf958e528d5043bdbb67544a30c91c2e71b19c1016705ea739305eeaa222c9b7207b1d906c40fae70a36bae6b206c32f54bfe805bd6899b729aa987fe11fbd3576771ee1cec78752fd6fda2638901a7875c272a59fa1ed612c73e7ffb66eb59ca58c0f1286c19a2d88f18acffee19050b1d5ba415cffb258c6a74a4ea4001cf3ac330e4f4d75ac708f7663d69ae35d896bd8b1c941afdffbe2a7769205199236695f15de7fb4515efbf9d7dec1315575cd6d27207f3262c12e2fe6e50f95886102ae7da26291de13cacb483bb5fb123997ae9b77e8cfb9bc6feb0e0af4743f163f913ab22b4cdf52e00f86ff46c636d159aed9e6dab387c1d4e5f85a0586ebf39ed67c913ebdd86e714eaa87c1ea8666ab7845165d6380ce00e59250c21e41f69579c0994be26175730db3f5ebff6ff7a09c5341329ab730913b4461ebb917c8f70b0444b3790508075dab8a56145c0175a6dc715b2df19b8de749a1ec1a414a99ef09341af8bd6cf5624ac0832205ab1aef6b0de29ebb7021553fde0ceec71597c9da783af6b5164842a91e45635a18cbf5097eb3332aa0049c9239c96d255db41f17a77e9599c5973fcb8d447adf2decd916ac8a9d15c2127c9a5dc64ec20b309d7790eac0ef3360bcdeeee9b3b66bfe1ffab721a484328c631ac1141c3288004393da81eca3f32c5a733fd5e991d5a41713292298ed0f9e513de8310548a796809e280cb220630441d55e90165b77911af7e9b726b2cd901eaa78b4b42653129eb42fdb21daa90aee52b4cf1fcae33cd5962631573745aa0fffbbc9a1b4f01ea34845f12c8e45d05991adafe90895b43e39cf10ff77b210e2c1dfca3fc02ba7040959c1aeebad02e2318a6b0838b2fc260f2fa4799ff69d444cecf35ce92626287fc75eed85c5b6ec4bf1d4c00e1bc57fcf87e0d4bdeeb0d0c28a2e02a8c08fdae6c8464a86181feeb2dad9d3d59b1026c4b7596bf6c6498f2f71ebfa1784a9fbfbad7e14caaeb3ad4c893f66af73d0faeec490ad29a5dabafb72eef6b762aefc6f382cde2513b8e049a5b461a5ae60c20ce58a61d896aaa2fc885968200b24c9f592dd83e7e909663fff19868b0604cda11d5a7f734e92eb36d4f418775e260ecd6a8b953a7d88e85a6063d6fdce01be16acff84de3a8408f95728fe260a746797b16310aa274520ff4681f0730e9ee88a12f978fe533bc8a3a7249beca77c20cf787cf95de900bb6a93ca50966b93ec1a56cd526cec929532f3a8bcfede3ccccf4b1215ff12f4514a38ec534499c27969a262061e1700fb4e37aafc98f526d9b48300e5dcc53c6c6b28ae7a141e775c5c31f637d6040f6980aee51b1e7f7a296adfa016c8ec28845fb2a3e1a5326414f9de4c3994fbf3f37b4967f67c373dab6329cb45b361f883c940e6490f7357a87b226b477e29a05b2a0312e9cf59cd88698b8b24277fc66620310328860cd44b66702ff3460a5593b3f63ddb91cba37c6e8bde49b2e40b61da1098aa84657e10c5ef0f0fc7b6e093b97e7ca66f0e01a588a889a3880a950748cf40cad3ca119790ba5a502048887309204bca98199f3d1096c529ec02a5012733cd80037db2640a869f3fc6ee07ab242f47f0b3b8fa581be588980b77dae559f20373903ba3c2e2f092595b9922e40d03da9143633d0acf6adee05bfe6092a8fe10b3924d235098d57278a7eda80e3c25586ea5bb2270a62dd0e1e4e8e630e3fbb71dde1aa589591f49400d66307571430f9d17cb5ad3dc48cbc1ff4bd84ff55019661241a70d3343fe79346442cb0df7538f098f5e3e70b16cf16f9e18632603d6e884ef80923fc2e771ea610ef5e81c3b2abd3ff8dfe8e484fa9209a7921cf35ced5f62b68240ff38f7ff8d9f06d4c907400d2361ed48f2bd241380a72a496dd02254cfc01e8b130a623a22ad919f923760c5f894072a6e4e424929aeb87222b6c6c0acd7304a7b0648787efddbe61b5c34ee298c7fce861bc9bd4fd6621b980645beb56710f51b6a66d29f80c44c72f0397e04933b8456013c80a0ca122a9ef44d9fe25bb72dc8d3dd4397c70449dd89fd5b0e6de2d915ded061a8a912a20685feca39a73cd773704dde777e29349ca8b5fc0ad764c46b25386301b77aae5da65426ea34c4864e5ee9d8f0472677904ca25b392b6b803439cb3e60c0ade3ac6167ad70ebba7076f943056ef7a9120b1ef5680f18fb61efe9b06e02f56ea88c0dd05d1144f2be351e29e695fd22db74f9d9149d1e29ac0c44ec59e8116847bb0216c364dbdd1fb44a3b5dc3dbd12d6c47af8c1248299a063721e20098ddc292cabd7daa43fa874a61845c9ecd62bebffe4882642945cc18b4b92c73d0c7fc8ec5e0aa6c4a426ecd85e3809de38fd0884e6543c05aefb97ebef2617796c9938d3dc4038f9c23f5deb621850923c34276599c672f2f6c4df2e2bfdfe8a8ee48075d9d7b1d627879685595ce7953dd31e9f739a7c481c312500b8bb5b96cc81b380038e1afddca5556c480d185e5c48e78eee9c753e5042f652ebad84992e0149853eeef8e89b44102bcd1b8e67f0cd34c1b1722cff191d84168de2bfbafeb94d928fd100d88620abb2fe7169e7866a1b819259ba7f5214b79f70d65cee5e272e4eb0c1acb9a517daa8579409cb31f5f9b4a1ba621a35c9e8cb5a9d97626f1d50444dc8f0ca487fc81881192e0f680fa0dcd77fd767a2cdf0c45038df430da561b9d5dbb38f66a450510a446cb7ab590f3ded3141c4983452bf1a96437c83cedb0ba932503dee602b3d0e9251f09366bcafe03cc9796b6923420ff5b23c195e5f94d2a394e6f69d7543b5b3ecdc48f09a43", 0x1000) fsetxattr$security_selinux(r0, &(0x7f0000000040)='security.selinux\x00', &(0x7f00000002c0)='\"ystem_u:object_rIss(K\xe4\xd0A\x80\x18\xf8_epec_t:s0\x00', 0x290, 0x0) [ 176.569336] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 176.588385] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 06:36:53 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) getuid() ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000040)="3665660fe8afe2ed0f01cf640f350f01d10fc75ae066b9800000c00f326635001000000f3066b9800000c00f326635000400000f300f32832600980dba2000ec", 0x40}], 0x1, 0x5, &(0x7f00000005c0), 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 176.623723] device hsr_slave_0 entered promiscuous mode [ 176.642248] device hsr_slave_1 entered promiscuous mode [ 176.661697] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 176.690778] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 176.709482] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 176.718012] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 176.726457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.738958] audit: type=1400 audit(1555569414.077:39): avc: denied { create } for pid=7154 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 176.764681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.781570] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 176.797557] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 176.804137] audit: type=1400 audit(1555569414.077:40): avc: denied { write } for pid=7154 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 176.807980] hrtimer: interrupt took 44957 ns [ 176.828299] audit: type=1400 audit(1555569414.077:41): avc: denied { read } for pid=7154 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 176.842043] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.886272] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 176.904511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.915349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 06:36:54 executing program 3: socket$kcm(0xa, 0x6, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x4000, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x541b, 0x711003) [ 176.942321] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 176.948415] 8021q: adding VLAN 0 to HW filter on device team0 06:36:54 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x90100000000002, &(0x7f00000000c0)=0x200, 0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001380)=ANY=[@ANYBLOB="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"], 0x1) socket$l2tp(0x18, 0x1, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x260) getpeername(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e21, 0x9, @rand_addr="9487916fe1f719ac754ff68578ad6bb9", 0xffffffff}}, 0x0, 0x6, 0x0, "8e5bd96d88607d148af959bdf5a43c95e93a7128c6dc7417b5c3eedf26e59a6b8c6fcd28896512e0bce6b2b75a781c92bc86721eb459f4a2108c6d253048f25d0b72ef276fe6fbfbd63ff3657e000416"}, 0xd8) socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYRES32=r0], 0x100000530) 06:36:54 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x180, 0x0) connect$netlink(r1, &(0x7f00000001c0)=@proc={0x10, 0x0, 0x25dfdbff, 0x40}, 0xc) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x100, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000080)='bridge0\x00') write$selinux_validatetrans(r2, &(0x7f00000000c0)={'system_u:object_r:systemd_logind_sessions_t:s0', 0x20, 'system_u:object_r:update_modules_exec_t:s0', 0x20, 0x9, 0x20, '/usr/sbin/cups-browsed\x00'}, 0x86) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000040)={0x10001}, 0x1) [ 177.015161] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 177.041910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 177.051242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.066866] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.073285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.083547] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready 06:36:54 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000200)={'bond0\x00', {0x2, 0x4e20, @local}}) mknod(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) clone(0x121fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_tcp(&(0x7f00000000c0)='-27.0.0.1b', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030303030303030303030302c04"]) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) setsockopt$llc_int(r1, 0x10c, 0x4, &(0x7f0000000580)=0x91, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x2ac}, 0x1, 0x0, 0x0, 0x40040}, 0x800) [ 177.108453] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 177.116921] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.134046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 177.148936] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.156701] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.157905] 9pnet: p9_fd_create_tcp (7181): problem connecting socket to -27.0.0.1b [ 177.163111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.163725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 177.189655] 9pnet: p9_fd_create_tcp (7182): problem connecting socket to -27.0.0.1b [ 177.190924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 06:36:54 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000040)={@mcast2}, 0x98f) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000140)={@dev, 0x1}, 0x20) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x200, 0x0) write$P9_RLERROR(r2, &(0x7f0000000100)={0x18, 0x7, 0x1, {0xf, '/dev/vhost-net\x00'}}, 0x18) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) preadv(r0, &(0x7f00000017c0), 0x100000000000004b, 0x0) [ 177.210499] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.216924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.228890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.242185] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 177.255682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 177.266528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 177.275412] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.281855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.295352] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready 06:36:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f2cffffff319bc070") mkdir(&(0x7f0000000280)='./file0/file1/file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mkdir(&(0x7f0000000080)='./file1/file0\x00', 0x0) rename(&(0x7f0000000200)='./file0/file1/file0\x00', &(0x7f00000001c0)='./file0/file0\x00') ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0x4000}) [ 177.309036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 177.319656] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 177.332578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 177.359518] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 177.378108] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 177.387964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 177.397694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 177.410296] overlayfs: failed to resolve './file1': -2 [ 177.419632] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 177.430007] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 177.437487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.447797] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.473186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.481700] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.497867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.506578] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 177.514340] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 177.516547] overlayfs: failed to resolve './file1': -2 [ 177.522575] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 177.538405] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 177.550774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.558622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.574060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.582256] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.592618] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 177.603530] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 177.611770] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 177.619275] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 177.629694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 177.637261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.645361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 177.653149] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.660675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 177.668089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.678374] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 177.685219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 177.699015] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 177.707245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 177.714538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 177.725760] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 177.733993] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 177.740614] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.746740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 177.755086] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.765114] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 177.772335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 177.785922] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 177.796031] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 177.806658] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 177.817144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 177.825118] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.833164] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.839504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.847199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 177.856688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 177.868368] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.875920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.889423] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 177.900938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.909580] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 177.925239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.935456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 177.949739] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 177.958185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 177.968958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.982383] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 177.990861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.998560] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.009801] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 178.017135] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 178.024981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.032792] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.043975] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 178.055533] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 178.063776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 178.075173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 178.083733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 178.092345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.109026] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 178.115171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 178.127171] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 178.138161] 8021q: adding VLAN 0 to HW filter on device batadv0 06:36:56 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x220000, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x7, 0x2, 0x8, 0x27b8}, {0x4, 0x5, 0x6, 0x100000000}, {0x6, 0x2, 0x9, 0x81}]}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) read(r0, 0x0, 0x0) 06:36:56 executing program 0: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff, 0xfffffffffffffffd}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r0, &(0x7f000000cfe4), 0x1c) sendmmsg(r0, &(0x7f0000005180)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000016c0)=@in6={0xa, 0x4e21, 0x7fffffff}, 0x80, 0x0}}], 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") creat(&(0x7f0000000700)='./bus\x00', 0x0) setxattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@random={'user.', './cgroup.cpu\x00'}, 0x0, 0x0, 0x0) [ 178.988493] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 178.999407] input: syz1 as /devices/virtual/input/input5 [ 179.005498] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 179.074922] input: syz1 as /devices/virtual/input/input6 06:36:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x10001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000b67000), &(0x7f00000000c0)=0x372) 06:36:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x1) tkill(r1, 0xd) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x20, r1, 0x0, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vcs\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001840)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001800)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000001880)={0x1, 0x10, 0xfa00, {&(0x7f00000017c0), r4}}, 0x18) process_vm_writev(r2, &(0x7f0000000540)=[{&(0x7f0000000040)=""/148, 0x94}, {&(0x7f0000000180)=""/82, 0x52}, {&(0x7f0000000100)=""/21, 0x15}, {&(0x7f0000000200)=""/152, 0x98}, {&(0x7f00000002c0)=""/99, 0x63}, {&(0x7f0000000340)=""/137, 0x89}, {&(0x7f0000000400)=""/19, 0x13}, {&(0x7f0000000440)=""/18, 0x12}, {&(0x7f0000000480)=""/130, 0x82}], 0x9, &(0x7f0000001740)=[{&(0x7f0000000600)=""/160, 0xa0}, {&(0x7f00000006c0)=""/118, 0x76}, {&(0x7f0000000740)=""/4096, 0x1000}], 0x3, 0x0) tkill(r2, 0x38) 06:36:56 executing program 3: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000040)={@rand_addr="95664b7a4296d963a149ec38dd31b72b", r2}, 0x14) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000007000)={0x10000000}) 06:36:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123d319bd070") syz_mount_image$btrfs(&(0x7f0000000180)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000040)={r1, &(0x7f0000000200)="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", &(0x7f0000000000)=""/19}, 0x18) 06:36:56 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f0000000880)="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", 0x1000, 0x800, 0x0, 0x0) 06:36:56 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$vsock_dgram(0x28, 0x2, 0x0) flistxattr(r0, &(0x7f0000000000)=""/55, 0x37) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_vif\x00') ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000080)={0x3, 0x7f, 0x702, 0x60, 0x400, 0xe4a1}) preadv(r1, &(0x7f0000000080), 0x0, 0x4) 06:36:56 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x602, 0x1}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f00000000c0)={0xc, 0x2200, 0x77fffb, 0x0, 0x820000, r0, 0x1}, 0x3c) 06:36:56 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b00001609000c1000000000000000000000000000000000ffffffff000000000000000000000000000000000000d9f5ffff000000ffffff7f000000000000000000000000000000feffffff01000000110000001f000000000040000000106cf4aa4ac99e8d000000006c6f00000000000000000000000000018a5a6dee0000000000000000100000faf2ffffff0000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a0000000415544495400000000000000000000000000000000000000000000000081d5000800000000000d000000000000000000"]}, 0x1a8) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f00000002c0), 0x56, 0x0) r3 = dup(r2) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000002c0)={0x0, 0x96, "446ed9eeac3ad76cea82f7f45d85d4549459e449c48af3ae41da6127f2ee929870332d7971272d72efa07c12dd625b8fcbdcb114855c98251700d634129d9c5e26f50ce8ccb72243c609be41618a3b98431effc0b28b1dad0f9922a058ec542e50bab12986d2a08030fe986f859c903a4152a3199def763feb9286000667d3b08728ec88cea69b1aab597bcc90af1cb8d39f18d59e53"}, &(0x7f0000000080)=0x9e) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000000c0)={r4, 0x7f}, 0x8) clock_getres(0x7, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0x5, 0x0) 06:36:56 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) 06:36:56 executing program 1: r0 = socket(0x10, 0x803, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000002240)=""/167, 0xa7}], 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x10b) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000a00)=""/224, 0xe0}], 0x1, 0x0) process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/186, 0xba}], 0x1, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200) ioctl$TIOCLINUX6(r2, 0x541c, &(0x7f0000000140)={0x6, 0x4}) 06:36:56 executing program 2: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f00000000c0)={'tunl0\x00', @ifru_data=&(0x7f0000000000)="ac8be4abd0f79d6325ae476aab5970a3131f2fb4bbfb3c75500e33d0612f430d"}) accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f0000000080)=0x1c, 0x800) r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) ioctl$NBD_CLEAR_QUE(r1, 0xab05) 06:36:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe8) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x3f, 0x40}, {0x40, 0x9}], r1}, 0x18, 0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000440)=""/246) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000000)) 06:36:56 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="e1cb5236d234687b0535fa5ae8b8f7e07c9c117e07ff9fd93c1f98ce5f8a11ebf1e590024a", 0x25}, {&(0x7f00000000c0)="4f9257d0d361e885b84a54b29727c808475aa45e0cf01248b6740bbdc9acefd023e0e488abd3fffa2d68b6fd37adbbc5", 0x30}], 0x2}, 0x4000880) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000200)=@in={0x2, 0x4e20, @loopback}, 0xffffffffffffffe8, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x1}, 0x20) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x40000, 0x0) ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f0000000300)) r2 = fcntl$dupfd(r0, 0x0, r0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) 06:36:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r1 = dup2(r0, r0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_buf(r0, 0x29, 0x3b, 0x0, 0xd6dc898c6a71f4fe) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2b) fcntl$setstatus(r0, 0x4, 0x42803) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0xb4, @loopback, 0x9}, 0x1c) ptrace$setopts(0x10004206, r2, 0x8, 0x40) 06:36:59 executing program 3: ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2, 0x40a}) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000540)) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x1000001d, 0x10000000000, 0x4000000000000000) lseek(0xffffffffffffffff, 0x10000000000000, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = fcntl$dupfd(r2, 0x406, r1) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000300)={[], 0x2, 0x1000, 0x0, 0x0, 0x400000000000, 0x4000, 0x11d000, [], 0x51}) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x307, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) getpid() connect$netrom(r3, &(0x7f00000004c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001780)='/dev/snapshot\x00', 0xa0000, 0x0) memfd_create(0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000740)={&(0x7f00000000c0), 0xc, &(0x7f0000000700)={&(0x7f00000018c0)=ANY=[@ANYBLOB="00042cbd7000fedbdf250800000008000600010100003000030008000500e00000020800080007000000080004007f000000140006000000000000000000000000000000000108000500ff03000040000300140002006970365f76f4693000000000000000000800080040000000080008000500000008000500ac1e00010800fa641ab87346131e0300020000207bc9f90c1067ae7063bda9ac362d11c61c06bafba7b8fe3e78cb426c300c495df1b2582eed7f89a9b9dade6c95ef1d4f942fc19f791588fa076ac306ca251e9a1a8100bc5d16c86e4d7160757cfb768a9557651d6e3c05c83c668e913975fddc1b6b0798"], 0x1}}, 0x40000) r5 = accept4(r2, &(0x7f0000000240)=@ipx, &(0x7f0000000040)=0x80, 0x800) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) setsockopt$packet_drop_memb(r5, 0x107, 0x2, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000001c0)={0x3, 0x0, 0x100000001, 0x2958}, 0x10) setsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000000200)=0xb529, 0x4) ioctl$CAPI_NCCI_GETUNIT(r3, 0x80044327, &(0x7f0000000100)=0x101) io_setup(0xffff, &(0x7f0000000640)=0x0) connect$tipc(r3, &(0x7f0000002d80)=@name={0x1e, 0x2, 0x3, {{0x43}, 0x3}}, 0x10) io_submit(r6, 0x3, &(0x7f0000002d40)=[&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x3, 0xfffffffffffffff9, r3, &(0x7f00000017c0)="cf0b31014fa7691324a8b6cdbf71a356a06596694eca1f5077eb9435650192bc6f530fa409ca10221731d6215b85db7de6ae2f39c491a05a71e05d8359e9dca196ab24f738103a10938baa2094d18638c422a049ab4f0fca2387a1f41ddd5dba60bd8b7fd0406948f9476f478477554d32ddfec0a40c7c481b59a526c8814545b2800cc841b03ac7cbb9fe9920e9e82e4a8e73e4e9fd00d72a6d0574d3a0154bd654485d561632ee13209e8dc1359c8a733a2be54182", 0xb6, 0x3f, 0x0, 0x1, r4}, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x5bf, r1, 0x0, 0x0, 0x6, 0x0, 0x3, r4}, &(0x7f0000002d00)={0x0, 0x0, 0x0, 0x0, 0xfff, r1, 0x0, 0x0, 0x4, 0x0, 0x1, r3}]) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f0000000780)=""/4096) 06:36:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x800, 0x0) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f00000000c0)) r2 = openat$cgroup_ro(r1, &(0x7f0000000380)='c\b\x00\x00\x00\x00\x00\x00\x00', 0x275a, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x20000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r2, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x8815, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x6, 0x1}, 0x0, 0x0, &(0x7f00000001c0)={0x1, 0x3, 0x8, 0x5}, &(0x7f0000000200)=0x62, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=0x3f}}, 0x10) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x4000000002011, r2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) 06:36:59 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000001000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105511, &(0x7f0000001000)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000080)={0x8000, 0x6, 0x5, 0x0, 0x5, 0x4, 0x5, 0x6, 0x1, 0x5, 0x8, 0x8, 0x0, 0x2, 0x5, 0x20, 0x5, 0x3a, 0x7}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000000c0)=0x2) 06:36:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$selinux_validatetrans(r1, &(0x7f00000000c0)={'system_u:object_r:netlabel_mgmt_exec_t:s0', 0x20, 'system_u:object_r:load_policy_exec_t:s0', 0x20, 0x0, 0x20, '/usr/lib/telepathy/mission-control-5\x00'}, 0x8c) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f000007eff0)=[{&(0x7f0000000080)="3900000011000947018361e1c30500ff070000000a00f1e844efffff08009b0019001a000300000022000107000004e9ff0006000d00050000", 0x39}], 0x1) 06:36:59 executing program 2: r0 = dup(0xffffffffffffffff) write(r0, &(0x7f0000000000)='\v', 0x1) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000040)={0x7fff, 0x101, 0x8, 0xb05}) 06:36:59 executing program 1: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0xc0c8, 0x42001) sendto$llc(r0, &(0x7f0000000280)="6f50a1b707a4c86ba9391dfea68bde68643d3a894e317c2424efbfec86ba4f2d1c1f4ec5f954117f3e2934fdda8c09e7d7216ef84283069b62d914db569a688c132afbda033fd7c0883812de0ffef235836b4c1a7e693183440213414e5f71d532b6d81cdef9705649ccee6ba2e747b7c9c20fa381db6743866bd20a464dcdf3d74b9aa813b65b59da2cd6d600a969324ddf0af3bc030a94191eb99b751ec0807ab207df5c607c6d222438af32be57a3f25c2e6042bfe01e6a4ed86c085161160829c46a1ba8f06815c788b041c293e38e17a3b809622ac287a3073e1d0a19bde4197c54c2b9e966559155e1b6e6", 0xee, 0x800, &(0x7f0000000380)={0x1a, 0x311, 0x4b, 0x837, 0x3ff, 0x9, @dev={[], 0xca}}, 0x10) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000600)={0x0, 0xb, 0x4, 0x0, {}, {}, 0x0, 0x0, @userptr, 0x4}) sendmsg$nl_crypto(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4480}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xe8}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 06:36:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x8000000003, 0x120000000032) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip_vti0\x00', 0xa0) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @initdev}, 0x10) write$FUSE_STATFS(r2, 0x0, 0x0) write$input_event(r2, &(0x7f00000000c0)={{0x77359400}, 0x1f, 0x3, 0x7f}, 0x18) 06:36:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000000c0)={0x7b, 0x600000000000000, [0x0, 0x0, 0xc0000103], [0xc2]}) 06:36:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'teql0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r1 = semget$private(0x0, 0x0, 0x662) semctl$SETVAL(r1, 0x0, 0x10, &(0x7f0000000040)=0x2) listen(r0, 0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) accept$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000180)=0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{0x0, 0x7530}}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) write$UHID_CREATE2(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000008636ff87a69e000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002b000300ffffffffad94ffff09000000000000008c40521f24a58e710081725eaf66042d4f6f11f8dcd9692cc94cefd34c31e87592df49c277bf70fd7db800"], 0x143) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x80000001, 0x0, 0x0, 0x1000000000054}, 0x98) 06:36:59 executing program 4: syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x840) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@nls={'nls', 0x3d, 'cp1250'}}]}) 06:36:59 executing program 1: semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x7ffffffffffffffd, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0xffffeffffffffffd) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xa20b, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x401}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="2e750aaee15d3a2e2c5b3a00"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, 0x0) [ 182.531354] hfsplus: unable to find HFS+ superblock [ 182.562937] 9pnet_virtio: no channels available for device .u [ 182.562937] ®á]:.,[: [ 182.584700] 9pnet_virtio: no channels available for device .u [ 182.584700] ®á]:.,[: 06:37:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) dup2(r0, r0) 06:37:02 executing program 5: 06:37:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000000400)="5f0f4f9686611c1019000300e60100006c000000000000080000000001000000004000000040000000000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000000)='trusted/eth0,mime_type\\}self\'&$vmnet1\x00', 0xffffffffffffffff}, 0x30) ptrace$getsig(0x4202, r1, 0x5, &(0x7f0000000140)) 06:37:02 executing program 1: r0 = socket$inet(0x2, 0x80a, 0x98) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xf}]}, 0x18}}, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x40, 0x0) 06:37:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001380)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='d=\x00', @ANYRESHEX]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='autofs\x00', 0x0, &(0x7f0000000400)) 06:37:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000080)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000180)=0xe8) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000340), &(0x7f0000000380)=0x4) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@remote, @in=@multicast1, 0x4e23, 0x4, 0x4e22, 0x2, 0x2, 0xa0, 0x80, 0xff, r1, r3}, {0x7, 0x4, 0x3, 0x10000, 0x8, 0x0, 0x57f7, 0x4}, {0xaf7, 0x5, 0x0, 0xda}, 0x3, 0x6e6bbb, 0x1, 0x0, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x11}, 0x4d3, 0x6c}, 0x0, @in=@rand_addr=0xb, 0x3507, 0xba205451f5e2405e, 0x3, 0xc2, 0x0, 0x240000000000}}, 0xe8) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000400)={0x3}) epoll_wait(r4, &(0x7f0000000040)=[{}], 0x1, 0x0) 06:37:02 executing program 0: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) r2 = dup(r0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000640)={0x9f0000, 0x3, 0x9, [], &(0x7f0000000600)={0x9b0902, 0x40, [], @value=0x7ff}}) r3 = getuid() r4 = syz_open_dev$mice(&(0x7f0000000480)='/dev/input/mice\x00', 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={0x0}, &(0x7f00000005c0)=0xc) ptrace$setopts(0xffffffffffffffff, r5, 0x80, 0x22) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000140)=0xed, 0x4) r6 = geteuid() setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r4, 0x111, 0x4, 0x0, 0x4) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x40000, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r7, 0x84, 0xf, &(0x7f0000000340)={r1, @in={{0x2, 0x4e20, @rand_addr=0x80}}, 0x1, 0x7, 0x7ff, 0x1, 0x7c}, &(0x7f0000000400)=0x98) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000004c0)={r8, 0x4, 0xd6, "a9e417f1800d76564d2ba6fa571cfb684ac46c3fd7c3d561c08dcbabda456185e55bb79f0316283b1518ac225ccb9cba7ebae29f567ca153e20877f5acc7c2b7ea0895655571370925511086e32def1d261f41406707c9684c28ef8e70427df2928f76a39ee54071fccf738ccfd66a7f42217b0a57c53897d6e4d78cca095a523893563e294403d81024a6b459297ea896e40131f3443fe8beca302643692f1f300b7de03c3f94a08b270790eca26a1c880ff3ae54d066949064b0e6a888f0fe4bb1c8925547600da94b27282c28def90f54c0487465"}, 0xde) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4, 0x1, &(0x7f0000000100)=[{&(0x7f0000000080)="88d44ae11e65092724a453bf27323f1fed1a221adabea2dcbfc2c2b1928d95f5eb7af31aa183b7200ba0259cf2ddbef89b161f91610b4ebbb1c9e648836cae7f20e596c27a2057250ff7c455c691066121447fd187330bfdec64e2ed0b94be118ab656f115f84cac0506942a41083b0371", 0x71, 0x8}], 0x1100020, &(0x7f0000000240)=ANY=[@ANYBLOB='jqfmt=vfsold,grpjquota=./file0,jqfmt=vfsold,max_dir_size_kb=0x00000000000000ad,minixdf,nobarrier,usrjquota=,data=writeback,lazytime,euid=', @ANYRESDEC=r3, @ANYBLOB=',fowner>', @ANYRESDEC=r6, @ANYBLOB=',smackfsroot=keyring-,obj_user=,fs{agic=0x000e000000000005,meacure,\x00']) 06:37:02 executing program 0: 06:37:02 executing program 5: 06:37:02 executing program 3: [ 185.313776] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) [ 185.332007] autofs4:pid:7367:autofs4_fill_super: called with bogus options [ 185.349539] EXT4-fs (loop4): invalid inodes per group: 16384 [ 185.349539] 06:37:02 executing program 0: 06:37:02 executing program 5: 06:37:02 executing program 3: 06:37:02 executing program 2: sched_setaffinity(0x0, 0xffffffffffffff26, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/mcfilter6\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) [ 185.411495] autofs4:pid:7377:autofs4_fill_super: called with bogus options 06:37:02 executing program 4: 06:37:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r2) setsockopt$inet_tcp_int(r2, 0x6, 0x1a, &(0x7f0000000300)=0x1, 0xfffffffffffffff3) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e27, @rand_addr=0xbc0}, 0x10) r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x0, 0x2) ioctl$TIOCLINUX4(r3, 0x541c, &(0x7f0000000180)) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3) sendto$inet(r2, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e) setsockopt$sock_int(r2, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = open(&(0x7f00000002c0)='./bus\x00', 0x800, 0xfffffffffffffffe) close(r4) r5 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r6, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, &(0x7f0000000080)) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f640094000500", 0x2c}], 0x1) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) sendfile(r5, r6, 0x0, 0x80003) 06:37:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000001080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, 0x0) 06:37:02 executing program 3: 06:37:02 executing program 5: 06:37:02 executing program 4: 06:37:03 executing program 3: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0x10, "0a3afd8766ed6f9b40aff3ab91794179"}, 0x0) 06:37:03 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) lgetxattr(&(0x7f0000000340)='./bus\x00', &(0x7f0000000380)=@known='user.syz\x00', 0x0, 0x0) 06:37:03 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x6, 0xa27, 0x0, 0x2, 0x0, 0x70bd25}, 0x10}}, 0x0) 06:37:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000001080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, 0x0) 06:37:03 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2b47e0c02e9620470869cc58b8834f3e61da8a19b6879e99c304a8e0f6b9bbf444fc6f3aa8b1fec875f7df2f2667f67113a0b55fa231fc9b97357c69ed76ea21", "de27ba281457dc77305edf66613e397517d5641bf757e8bc949f49db86e34b5e"}) 06:37:03 executing program 2: sched_setaffinity(0x0, 0xffffffffffffff26, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/mcfilter6\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 06:37:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1800008912, &(0x7f00000000c0)="1098ce66000000007be070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000002c0), 0xffffffffffffff94, 0x0, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0xa8) close(r2) 06:37:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000001080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, 0x0) 06:37:04 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x6, 0xa27, 0x0, 0x2, 0x0, 0x70bd25}, 0x10}}, 0x0) 06:37:04 executing program 4: openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getpgid(0x0) stat(0x0, &(0x7f0000003700)) getuid() getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) unlink(&(0x7f0000000940)='./file0\x00') r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 06:37:04 executing program 1: eventfd(0x4) socket$packet(0x11, 0x3, 0x300) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r1, &(0x7f0000000080), 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:37:04 executing program 2: syz_execute_func(&(0x7f0000000200)="410f01f964ff0941c3c4e2c99758423e46d8731266420fe2e33e0f1110c442019dcc9342d2afde3158b4") clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) clone(0x8000000000201fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0xfdf2) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000000), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, 0x0, &(0x7f0000000180)) 06:37:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/mcfilter6\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 06:37:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000001080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, 0x0) [ 186.807081] audit: type=1400 audit(1555569424.137:42): avc: denied { map } for pid=7445 comm="syz-executor.4" path="/dev/binder0" dev="devtmpfs" ino=535 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 06:37:04 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) write$binfmt_misc(r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) fgetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/4096, 0x1000) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 06:37:04 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semop(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) [ 186.870161] protocol 88fb is buggy, dev hsr_slave_0 [ 186.875417] protocol 88fb is buggy, dev hsr_slave_1 [ 186.920917] binder: release 7445:7447 transaction 2 out, still active [ 186.944346] binder: send failed reply for transaction 2, target dead 06:37:04 executing program 0: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0), 0x0) 06:37:04 executing program 4: openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getpgid(0x0) stat(0x0, &(0x7f0000003700)) getuid() getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) unlink(&(0x7f0000000940)='./file0\x00') r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 186.978630] audit: type=1400 audit(1555569424.217:43): avc: denied { set_context_mgr } for pid=7445 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 06:37:04 executing program 3: openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getpgid(0x0) stat(0x0, &(0x7f0000003700)) getuid() getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) unlink(&(0x7f0000000940)='./file0\x00') r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 06:37:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000319ff0)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000300)="edd008000000000019a65155921e11879a2d3d176c9cc2ad000012ac6a612e2ae6d0e5dafb34c31fa76fa9d500", 0x2d, 0x8000, 0x0, 0x0) sendto$inet(r1, &(0x7f00000000c0)="dde20f100fc1c79a93edf7e95fd2a3ceb954bf7b28df4f7b", 0x18, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) read(r1, &(0x7f0000000140)=""/100, 0x45) [ 187.110123] protocol 88fb is buggy, dev hsr_slave_0 [ 187.112575] binder: release 7473:7474 transaction 7 out, still active [ 187.115270] protocol 88fb is buggy, dev hsr_slave_1 06:37:04 executing program 4: openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getpgid(0x0) stat(0x0, &(0x7f0000003700)) getuid() getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) unlink(&(0x7f0000000940)='./file0\x00') r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 187.180496] audit: type=1400 audit(1555569424.227:44): avc: denied { call } for pid=7445 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 187.190125] protocol 88fb is buggy, dev hsr_slave_0 [ 187.203700] binder: BINDER_SET_CONTEXT_MGR already set [ 187.208124] protocol 88fb is buggy, dev hsr_slave_1 06:37:04 executing program 0: sched_setaffinity(0x0, 0xffffffffffffff26, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/mcfilter6\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) [ 187.254248] binder: send failed reply for transaction 7, target dead [ 187.260006] binder: 7475:7487 transaction failed 29189/-22, size 24-8 line 2802 [ 187.269920] binder: 7475:7480 ioctl 40046207 0 returned -16 [ 187.332773] audit: type=1400 audit(1555569424.237:45): avc: denied { transfer } for pid=7445 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 187.403562] binder: release 7490:7498 transaction 12 out, still active [ 187.429824] binder: send failed reply for transaction 12, target dead 06:37:04 executing program 1: sched_setaffinity(0x0, 0xffffffffffffff26, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/mcfilter6\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) setresuid(0x0, 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, &(0x7f0000000240)) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 06:37:04 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) 06:37:04 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 06:37:04 executing program 3: openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getpgid(0x0) stat(0x0, &(0x7f0000003700)) getuid() getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) unlink(&(0x7f0000000940)='./file0\x00') r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 06:37:04 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000011ff0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) 06:37:04 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000001080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f00000010c0)=""/4096) [ 187.583359] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 06:37:04 executing program 2: ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f00000000c0)=0x2) semop(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x17}) syz_open_dev$vcsn(0x0, 0x0, 0x0) 06:37:04 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 06:37:05 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x10000000003, 0x3) shutdown(r0, 0x0) [ 187.643709] binder: release 7506:7509 transaction 16 out, still active 06:37:05 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xedoJ\x02u\x9b\x94a\xac', 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x4) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 06:37:09 executing program 4: 06:37:09 executing program 2: 06:37:09 executing program 2: r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x4) 06:37:09 executing program 1: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r0, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getpgid(0x0) getuid() getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 06:37:09 executing program 4: getcwd(&(0x7f0000000040)=""/4096, 0x1000) 06:37:09 executing program 3: 06:37:09 executing program 5: 06:37:09 executing program 3: 06:37:09 executing program 4: 06:37:09 executing program 5: 06:37:09 executing program 4: [ 192.199223] binder: release 7684:7688 transaction 32 out, still active [ 192.220754] binder: BINDER_SET_CONTEXT_MGR already set [ 192.226249] binder: 7684:7688 ioctl 40046207 0 returned -16 [ 192.227419] binder_alloc: 7684: binder_alloc_buf, no vma [ 192.239221] binder: send failed reply for transaction 32, target dead [ 192.269371] binder: 7684:7704 transaction failed 29189/-3, size 24-8 line 2917 06:37:09 executing program 0: r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x4) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 06:37:09 executing program 3: 06:37:09 executing program 5: 06:37:09 executing program 2: 06:37:09 executing program 4: 06:37:09 executing program 1: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r0, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getpgid(0x0) getuid() getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 06:37:09 executing program 5: 06:37:09 executing program 3: 06:37:09 executing program 5: 06:37:09 executing program 4: 06:37:09 executing program 3: 06:37:09 executing program 2: [ 192.550618] binder: release 7721:7725 transaction 37 out, still active [ 192.594645] binder: send failed reply for transaction 37, target dead 06:37:10 executing program 0: 06:37:10 executing program 1: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r0, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getpgid(0x0) getuid() getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 06:37:10 executing program 2: 06:37:10 executing program 5: 06:37:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) writev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1) 06:37:10 executing program 4: setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000140), 0xffffff35) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 06:37:10 executing program 3: 06:37:10 executing program 5: 06:37:10 executing program 2: 06:37:10 executing program 3: 06:37:10 executing program 0: 06:37:10 executing program 5: 06:37:10 executing program 2: [ 192.945237] binder: release 7739:7749 transaction 41 out, still active 06:37:10 executing program 1: 06:37:10 executing program 0: 06:37:10 executing program 3: 06:37:10 executing program 5: [ 192.999956] binder: send failed reply for transaction 41, target dead 06:37:10 executing program 4: 06:37:10 executing program 2: 06:37:10 executing program 3: 06:37:10 executing program 0: 06:37:10 executing program 5: 06:37:10 executing program 1: 06:37:10 executing program 1: 06:37:10 executing program 2: 06:37:10 executing program 3: 06:37:10 executing program 5: 06:37:10 executing program 0: 06:37:10 executing program 5: 06:37:10 executing program 4: 06:37:10 executing program 3: 06:37:10 executing program 1: 06:37:10 executing program 2: 06:37:10 executing program 0: 06:37:10 executing program 5: 06:37:10 executing program 1: 06:37:10 executing program 0: 06:37:10 executing program 4: 06:37:10 executing program 3: 06:37:10 executing program 2: 06:37:10 executing program 5: 06:37:11 executing program 0: 06:37:11 executing program 3: 06:37:11 executing program 2: 06:37:11 executing program 4: 06:37:11 executing program 5: 06:37:11 executing program 1: 06:37:11 executing program 3: 06:37:11 executing program 0: 06:37:11 executing program 5: 06:37:11 executing program 1: 06:37:11 executing program 4: 06:37:11 executing program 0: 06:37:11 executing program 2: 06:37:11 executing program 5: 06:37:11 executing program 3: 06:37:11 executing program 1: 06:37:11 executing program 0: 06:37:11 executing program 2: 06:37:11 executing program 4: 06:37:11 executing program 3: 06:37:11 executing program 5: 06:37:11 executing program 1: 06:37:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) 06:37:11 executing program 2: syz_open_procfs(0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x1000000004e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x40010100, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 06:37:11 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, &(0x7f0000000240)='\x00') 06:37:11 executing program 3: r0 = socket$inet(0x2, 0x80a, 0x98) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xf}]}, 0x18}}, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x40, 0x0) 06:37:11 executing program 1: r0 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0xfffffffffffff001}, 0x68) getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000e530e9)=""/16, &(0x7f0000000000)=0x170) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) bind(r0, &(0x7f0000000080)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x80) 06:37:11 executing program 5: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000), 0x4) 06:37:11 executing program 0: getpid() r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, &(0x7f0000000000)=0xfffffffffffffcf0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e20, @multicast2}}}, 0x90) 06:37:11 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, &(0x7f0000000240)='\x00') 06:37:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)={0xffffffff, 0x4, 0x1, 0x0, 0x0, [{r0, 0x0, 0x1}]}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x1000000, 0x0, &(0x7f0000c00000/0x400000)=nil}) [ 194.206019] capability: warning: `syz-executor.5' uses 32-bit capabilities (legacy support in use) 06:37:11 executing program 5: r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) accept$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x3800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@delqdisc={0x2c, 0x25, 0x200, 0x70bd2d, 0x25dfdbfe, {0x0, r1, {0x3, 0x5}, {0x4, 0xf}, {0xfff2, 0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffffffffff3c8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4000) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x9, 0x3, 0x2, 0x1, 0x9}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000000c0)={r3, @in={{0x2, 0x4e21, @local}}}, 0x84) ioctl$KDADDIO(r2, 0x4b34, 0x7ff) ioctl$RTC_PIE_OFF(r2, 0x7006) 06:37:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000100)={0x0, @capture={0x1000, 0x1, {0xfff}, 0xbc, 0x1ffc000000000}}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0xc003, @multicast2}]}}}]}, 0x38}}, 0x0) 06:37:11 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, &(0x7f0000000240)='\x00') 06:37:11 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$unix(0x1, 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x32, 0xffffffffffffffff, 0x0) close(r1) close(r0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000040), 0x3a8, 0x0) faccessat(r2, &(0x7f0000000100)='./file0\x00', 0x1, 0x1e00) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000080)={0x2, r3}) 06:37:12 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x20) listen(r0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x200, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 06:37:12 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380), 0x2e8, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x3000, 0xfffffffffffffffe, &(0x7f0000ffb000/0x3000)=nil) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) open(&(0x7f0000000480)='./file0\x00', 0x400, 0x1) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d30303030301c30303030303030302f30303034243030342c757365725f69643dc3024ab2d89f91a7c4b6cef5f949de4a5927ad2e801db037f4c376c80d6b50af82918683d20b282ffd5188af183bd23e93c8925269a987036ddd815fdea17e927a572c4235e0c99fdf343659f41b756f4e5881293e7536833d5d655532bbef33e0d0c3c7af56506fb94317d7e5e1c9d674acb50adeea72bec65d156501", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000140)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x200000, 0x0) 06:37:12 executing program 3: r0 = add_key$keyring(&(0x7f0000001000)='keyring\x00', &(0x7f0000001040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xff6b04e9b2abb988}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x20}}, 0x20040891) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000001080)='asymmetric\x00', &(0x7f0000001200)=@chain={'key_or_keyring:', 0x0, ':chain\x02'}) 06:37:12 executing program 5: syz_emit_ethernet(0x0, &(0x7f0000000140)=ANY=[], 0x0) r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x7, 0x40000) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x1) ioctl$TIOCNOTTY(r0, 0x5422) 06:37:12 executing program 0: sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000100)={0x0, 0x0}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x100, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x1, 0xc, 0x2, 0x5, 0x0, 0x5, 0x8, 0x5, 0x9, 0x5, 0x7fffffff, 0x3, 0x2, 0x60000000, 0x834, 0x1, 0x10001, 0x3ff, 0x7, 0x7, 0x20, 0x7, 0x2, 0x3, 0x7, 0x3, 0x6, 0x1, 0x1, 0x1, 0x8, 0xee, 0x10001, 0xffffffffffff554e, 0x1000, 0xc4, 0x0, 0x4, 0x0, @perf_config_ext={0x8e, 0xff}, 0x0, 0xff, 0x8000, 0xd, 0x100000001, 0x6, 0x20}, r0, 0x1, r1, 0xa) sched_setattr(0x0, &(0x7f0000000040), 0x0) 06:37:12 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, &(0x7f0000000240)='\x00') 06:37:12 executing program 4: mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, &(0x7f0000000240)='\x00') 06:37:12 executing program 5: fsetxattr$security_evm(0xffffffffffffffff, &(0x7f00000003c0)='security.evm\x00', 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x1cb) r0 = syz_open_procfs(0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000280)=ANY=[@ANYBLOB="f6b2ccbfdbc1fd2479ff893e84f390e5426835894b8ac5c5f92b9045b07f3f4605002af27303daff0cd554df6ddb55a73e49ef56fb08"], 0x0) prctl$PR_GET_FPEMU(0x9, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xfffffffffffffff8, 0x5, 0xfffffffffffffffd, 0x94, 0x0, 0x0, 0x80000, 0xb, 0xfb, 0x7fffffff, 0xb72400000000, 0x5, 0x4, 0x100000000, 0x2, 0x1ff, 0x81, 0x5, 0xfffffffffffffff8, 0x10000, 0x1000, 0x80, 0x6, 0x5, 0x3ff, 0x85, 0xd751, 0x2, 0xffffffffffff0bda, 0x3f, 0x8000, 0x80000001, 0x80000000000, 0xba, 0x9, 0x2, 0x0, 0xffffffffffffffc0, 0x4, @perf_bp={&(0x7f0000000100), 0xd}, 0x20000, 0x2, 0x2, 0xb, 0x4, 0x1f, 0x7f}, r1, 0x1, r0, 0x2) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x719346e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$netrom(r2, &(0x7f0000000000)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) geteuid() listen(r2, 0x0) r4 = accept(r2, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x800, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000000c0)=0x7) sendmsg$rds(r4, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000400)={0x3, 0x70, 0x9, 0x6, 0x1f, 0x100000000, 0x0, 0x100000001, 0x0, 0x1, 0xbcbe, 0x0, 0x7fffffff, 0x0, 0x0, 0xe23, 0x7f, 0x4, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4, 0x80, 0x5, 0x0, 0x0, 0x4, 0xe707, 0x8, 0x1, 0x0, 0x7f, 0x0, 0x40, 0x465, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x2}, 0x40, 0x0, 0x400, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x1) write$P9_RCLUNK(r3, &(0x7f00000001c0)={0x7}, 0x7) [ 194.976885] sched: DL replenish lagged too much 06:37:12 executing program 0: bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socket$inet6_sctp(0xa, 0x5, 0x84) sendto$unix(r0, &(0x7f0000000180), 0xfeed, 0x0, 0x0, 0x0) recvfrom(r0, &(0x7f0000000900)=""/4096, 0xffffffffffffff78, 0x0, 0x0, 0x1c4) 06:37:12 executing program 3: r0 = gettid() r1 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) pread64(r1, &(0x7f00000001c0)=""/18, 0x12, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4040, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000080)={{0x9, 0x2, 0x800, 0x3, 'syz1\x00', 0x9d3b}, 0x1, 0x433, 0x80, r0, 0x3, 0x2000000, 'syz1\x00', &(0x7f0000000040)=['[posix_acl_accesssecurity\x00', ')-\x00', 'md5sumtrusted{\x00'], 0x2c, [], [0x4, 0x3, 0x69293b4f, 0x31d1]}) 06:37:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x0, 0x0, 0x3, 0x41}, 0x20) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/dlm-monitor\x00', 0x2400, 0x0) setsockopt$packet_buf(r3, 0x107, 0x0, &(0x7f0000000d80)="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", 0xfa) r4 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) ioctl$PPPIOCSFLAGS(r4, 0x40047459, &(0x7f00000000c0)=0x9f9d1f27df3c10fb) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x800, 0x2}, 0x20) 06:37:12 executing program 4: mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, &(0x7f0000000240)='\x00') 06:37:12 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x400, 0x0) r2 = geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) getresuid(&(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) r6 = geteuid() fstat(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = geteuid() getresgid(&(0x7f0000000540)=0x0, &(0x7f00000009c0), &(0x7f00000005c0)) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000600)={{}, {0x1, 0x4}, [{0x2, 0x7, r2}, {0x2, 0x0, r3}, {0x2, 0x0, r5}, {0x2, 0x7, r6}, {0x2, 0x1, r7}, {0x2, 0x4, r8}], {0x4, 0x5}, [{0x8, 0x0, r9}], {0x10, 0x2}, {0x20, 0x4}}, 0x5c, 0x3) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000001c0)={0x3, &(0x7f00000000c0)=[{0x1, 0xfff, 0x1ff}, {0x6, 0x5, 0x1}, {0x200, 0x400, 0x3ff, 0x8}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10) mount$bpf(0x0, &(0x7f0000000840)='./file0\x00', &(0x7f0000000880)='bpf\x00', 0x1000, &(0x7f00000008c0)={[{@mode={'mode', 0x3d, 0x45}}, {@mode={'mode', 0x3d, 0x2339}}, {@mode={'mode', 0x3d, 0x6}}], [{@fowner_gt={'fowner>', r2}}, {@euid_lt={'euid<', r4}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]}) epoll_pwait(r1, &(0x7f0000000200)=[{}, {}], 0x2, 0x4, &(0x7f0000000240), 0x8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) r10 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TIPC_NL_BEARER_GET(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x160, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200040000}]}, @TIPC_NLA_MEDIA={0x98, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x64ead86e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_NET={0x4c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7f}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x20040090}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000480)={0x8c, 0x18, 0xfa00, {0x0, &(0x7f0000000440), 0x0, 0x0, [0x9c00]}}, 0xfef5) 06:37:12 executing program 1: r0 = memfd_create(&(0x7f0000000040)='system_u:object_r:wtmp_t:\x00\x10', 0x0) capset(&(0x7f0000000580)={0x2000000019980330}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x5}) fsetxattr(r0, &(0x7f0000000200)=@known='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:wtmp_t:\x00\x10', 0x38c, 0x0) 06:37:12 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x29, 0x3, 0x0, 0x0) 06:37:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f00000000c0)={0x9, 0x8, [{0x81, 0x0, 0x10001}, {0x5, 0x0, 0x3}, {0x100000000, 0x0, 0x9}, {0xd86e, 0x0, 0x4}, {0x0, 0x0, 0x6}, {0x4b, 0x0, 0x101}, {0x9e0, 0x0, 0x4}, {0x2b7, 0x0, 0x7}, {0x7fffffff, 0x0, 0xffffffffffffffff}]}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x200000, 0xfffffffffffffffd, 0x2012, r1, 0x0) 06:37:12 executing program 1: r0 = geteuid() syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6, &(0x7f0000000580)=[{&(0x7f0000000140)="496c75e0f4f3226026904eef87ee05de798070e9e7518ca9e6c75aa128599db5e8141db3171140997c437a40c52da94f88819ee90e1056b9cfa28366a41bd7b7a050058fee7510789f736e45645fe525ac2a0b84478136a252636fa06af520a2b2877240d0931b8fa65fe2702727bbe9326f4ee2b4e8ddb1b85731de5120f58262", 0x81, 0x8}, {&(0x7f0000000200)="caf3e88526245c0a799fbdb77dde1e409743ab1dd9064326e3535ea805cf39aafd6a6615f2f5f79594e63e0be0bed0c907f78625614064b13d570303c1e482f1b2c36a45cfd5429f76b671a8d483b412849eb602a8f5d6ca6d365ed5063926da85e258fba0fe4e799fd06cdb40e68ae71beebdf5bd9044a5e9bfde6a600935dbbaf8acbb704fa349648f5dcbad493b774f1dbb29d190b1808f", 0x99, 0x8001}, {&(0x7f0000000080)="1a14cc49c1398a2ad45b7d70d37697f9707e13914f4144571ef88fc48efcc8612a23ec777b7633cba5b469cf5ee488e742f971c0f0cf81433e60650b8481542b0200482facef98acd0508b29bbc9bd277d92a81bea31b13fda9e92377964358a63590d4e717d317a4afce7288cb3ec339c70889401de6957403c4af7354a", 0x7e, 0xaa46}, {&(0x7f00000002c0)="b79c2145a8f856ec9053672b7bd2f14c943d9bad04aad7ba4dd4b791d46a806fdbe9a2ad58655e788b24ba480066d3cbd6aad0d84c786de5a261802477132433f9edc150e54a1337344df2a524ab46e4a61b1065766f5308506c90f2c8577371035d2add37fc6c78b753ffc49f30383e63e8044ec58ed1f9751b55527e5d6ac17388f31a517047d451e8", 0x8a, 0x7}, {&(0x7f0000000380)="2b9baa4b9272130081c5d17a640bc5c0359c2f1ea615076ee7f7f8c4e3a8ab99a78b308475d6d7cae7779f694ff12d26b2f2b56a48afcc2b5ae6e49403b560e761cbc2370c386843bf526a72b35029e9afe9f04806b9f10774e40611ce36093872f7a02b265a7801d06eb9ae0874dc88be819987adf26d8f6ade5ced2d51085a4bb8b0ec08dac613b80f505eea21d4007c1b4d655bdbb60c6dca3af3e39428059f0a3c784c4ee39fb080c4c29f238b48b5c9107090238bbea9a5a607ca71cc39c9266b4e50b129292945873a0be952c464ecda6d6df5786991d0412f205b7632e7df1b8ffa66b1478d95", 0xea}, {&(0x7f0000000480)="9d16d26344d3a16af120bfb4bc3fc8acafcda033c942745037ed5ebcf92612d0b582c6395067d191c56bba39427525c96b78ea1652d177bd8b415d53417459e2e2037fa231ffa85b99f72f26069c9788f56ca1e863c399741b1f6fbed811dd5834425a317db67bd40e93afcad148b9ae3de6b8aa31dcde7fef5b39dd73ea7308d1dc29136953eac2c03d3af147d541934202eeb2b0f3b5be17cdf499fea1948306816e13856c6f2ea341029ec5bf6637f67f82f0bf34c35bde486b6d2d91102e2bbd28ace9be6c33b25e2e19e05fd640ea13943db4984978e44c85d05429695a0ecf64a53c427c", 0xe7, 0x7}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB='nogrpid,ud=\x00', @ANYRESDEC=r0, @ANYBLOB=',subj_user=,\x00']) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") r2 = syz_open_dev$radio(&(0x7f0000000680)='/dev/radio#\x00', 0x1, 0x2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r3, 0x1, 0x12, &(0x7f0000499000)=""/35, &(0x7f000020a000)=0x23) fsetxattr$security_capability(r1, &(0x7f00000006c0)='security.capability\x00', &(0x7f0000000700)=@v2={0x2000000, [{0x9cc, 0x7}, {0x0, 0x6}]}, 0x14, 0x2) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000740)=@assoc_value={0x0, 0x401}, &(0x7f0000000780)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000007c0)={r4, 0x5, 0x80000001}, 0x8) getsockopt$packet_buf(r2, 0x107, 0x6, &(0x7f0000000800)=""/126, &(0x7f0000000880)=0x7e) 06:37:12 executing program 3: r0 = socket$inet(0x2, 0x3, 0x1c) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000040)={0x4, [0x400, 0x3, 0xffffffffffffff3b, 0x3]}) r2 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="352a471f2435f1d7287392c4ac2a914bdd13d9c135494ef2aec636e5073998af716c24d6097824b87df668bb323324ea9067b09b0b46e8740700ef5158e2de7f62d9f5057ca7253fadc8cd2aec7815ce78c6e24e3cd8506c626fab05865a25af714739dc370123eff7c2b810a5b8373395f3ddf98876964ffd8c315b75af78c94d44f2b4c3eb482dbc319b269c349a8c650388e6"], &(0x7f0000000080)=0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@empty, 0x0, 0x0, 0xff, 0x8, 0x80000000, 0x2000000000000}, 0x20) socket$inet6(0xa, 0x0, 0x0) dup2(r0, r2) 06:37:12 executing program 4: mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, &(0x7f0000000240)='\x00') [ 195.203313] audit: type=1401 audit(1555569432.537:48): op=setxattr invalid_context=73797374656D5F753A6F626A6563745F723A77746D705F743A0010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073656375726974792E73656C696E7578000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [ 195.362916] XFS (loop1): unknown mount option [ud=]. [ 195.428803] audit: type=1401 audit(1555569432.557:49): op=setxattr invalid_context=73797374656D5F753A6F626A6563745F723A77746D705F743A0010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073656375726974792E73656C696E7578000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [ 195.533175] audit: type=1400 audit(1555569432.657:50): avc: denied { map } for pid=7950 comm="syz-executor.0" path="/dev/dsp1" dev="devtmpfs" ino=581 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sound_device_t:s0 tclass=chr_file permissive=1 [ 195.563609] audit: type=1400 audit(1555569432.707:51): avc: denied { write } for pid=7921 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unlabeled_t:s0 tclass=socket permissive=1 06:37:13 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc00, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{}, {0x0}]}) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000140)={r1, 0x2}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x4, 0x4) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000000)={0xa, 0x0, 0x7, {0x0, 0x0, 0x4, 0x20}}) ioctl$TCFLSH(r2, 0x5406, 0x71dff9) 06:37:13 executing program 2: r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x80, 0x200000) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000140)={0xe, 0x8, 0xd83, 0x6, 0x99, "06f00ff4e835dddf6b0b7419915fe6793097598b0881bf26880f1b242dc4d8c06b7fe26a03bfa23045405e87a53d6a32cf31a2c11a31c7024195fdb3bd5e3f6d487203f4c76ad075a912acc75332dfc4f14e4f19a711aa995b6af83258dab3ebb5ce8f5f0a6f499fe0c78be1657b6d61ff45a2b89b9ab5666eac653f41f45b8f07084d48b3e6bff9c6e9afe6edcd5db451ee654f3511d898c2"}, 0xa5) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0xfffffffffffffdff, 0x0, 0x1c}) tkill(r0, 0x27) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 06:37:13 executing program 4: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, &(0x7f0000000240)='\x00') 06:37:13 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x5e0, 0x2) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f0000000140)) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f00000000c0)={{0x3c, @multicast1, 0x4e20, 0x3, 'sed\x00', 0x4, 0x93, 0x4d}, {@local, 0x4e22, 0x3, 0x993, 0x2, 0xb9}}, 0x44) r1 = socket$key(0xf, 0x3, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f00000001c0)={0x6, 0x2, 0x40, 0x3, 'syz1\x00', 0x4}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020b000007000000000021002d54036205001800000c9a0200000000001000e0c99f3d653c00f0ffaba499df000000400000000000000000"], 0x38}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x20, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000200)=0x0) ptrace$pokeuser(0x6, r2, 0x80000001, 0x80000000) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000240)={'mangle\x00'}, &(0x7f00000002c0)=0x54) 06:37:13 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x40, 0x0) 06:37:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000080)={0x4, [0x3, 0x4a8, 0x2, 0x0, 0x1, 0x4, 0x9, 0x6, 0xff, 0x9, 0xff, 0x1, 0x100000000, 0x3d, 0xffff, 0x2, 0x1, 0x100000001, 0x1000, 0x1, 0x3, 0x3, 0x84, 0x6, 0x0, 0x80000000, 0x2, 0x3, 0x1, 0xfff, 0x0, 0x10001, 0x80000000, 0xfff, 0x4, 0x447e, 0x6, 0x9, 0x69a, 0x4000000, 0x6, 0x4, 0x6, 0x8, 0x0, 0x9f, 0x8], 0x8}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000040"]) 06:37:13 executing program 4: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, &(0x7f0000000240)='\x00') [ 195.699304] audit: type=1400 audit(1555569433.027:52): avc: denied { write } for pid=7987 comm="syz-executor.3" name="net" dev="proc" ino=29849 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 06:37:13 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x47ef2db) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x400000, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e20, @local}}}, &(0x7f0000000300)=0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={r2, 0x6c, &(0x7f0000000140)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e23, 0xff80000000000, @remote, 0x101}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e21, @rand_addr=0x52}]}, &(0x7f0000000200)=0x10) 06:37:13 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/14, 0xe}], 0x1) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x80000003, 0x8031, 0xffffffffffffffff, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) 06:37:13 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x400000000, 0x401, 0x4, {0x9, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80, 0x1, 0x4}) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x3}, 0x28, 0x3) 06:37:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, 0x0, 0xffffffbc, 0x42, &(0x7f0000000100)=[@cstype0], 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) io_setup(0x4, &(0x7f0000000040)=0x0) io_submit(r4, 0x9, &(0x7f0000001680)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x1, r3, &(0x7f0000000440)="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", 0x1000, 0x2f6e5414, 0x0, 0x1, r3}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0x7, r1, &(0x7f0000000140)="0f4469a586bf50e03d90f4883da642563b3de7047f8d42d89b9168781232b7b82c7e43b430ae00d3a322d60b24eb4b2376fc8d106b8f8c3746b83fea", 0x3c, 0x3f, 0x0, 0x3, r3}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r2, &(0x7f00000001c0)="5e61c1ee57cb0b3978691e74b15b75665f394ad859e0cf7ba92687", 0x1b, 0x7}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffff764, r1, &(0x7f0000000240)="c94b1eddfaac4f75da00c7f31c335f2c9a0b72128d4a8844721182931ce4c95fb88e589ce8a1409c8adee1fb", 0x2c, 0x7, 0x0, 0x0, r3}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0x100000000, r2, &(0x7f00000002c0), 0x0, 0x2, 0x0, 0x2, r3}, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x5, 0x5, r0, &(0x7f0000000340)="a52d2901de2bd7b08261770e044d3a276dbcc1b1116e58288e845ee7f18dba76ffa5e382bc7c1a8e96800197654861bc69fe8ea67de6521740f79c1025d862c831449ba1929795b6dce330be6bb2525f87a89e7fa19ce9e477672e376951de8bb47a8744a4d04eb5c449299903a6ef791398d64f1bd618ef3aabb8e377cea1cb7802123949a4580dcc603066c1cc2efd19642a1012f77f8706bd750a763e53ecbe7049b6c2bc0aa9aeef9ee31ea5368d877c1d45546d50784bc334c27b57bbc7", 0xc0, 0x401}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x5, 0x9, r1, &(0x7f0000001480)="701a2d754bab075aaedd6ca53c8735d4", 0x10, 0x7ff, 0x0, 0x1, r3}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0xf, 0x200, r0, &(0x7f0000001500)="776094b6d2f97076c7d691efce13e4f4f0534635218b39e0980a7ec15ba699e2bbc835b6a8f59bb2fae43d60d35e927805bc6b15b0c7f1689b8a5e6b38a5699532a27e5fd1ad47bd5a86422d74898819ddef6b6fca739bda8ee5068e6b37b70f74f94666c95bbddd80e2b85235518c0135950e688c454f8f7b9a1acd1fe8ac8b8699a5adf0644e36af453268795ced68ac7a0b19af4f7fc11e7f2f7b49", 0x9d, 0x432f, 0x0, 0x1, r3}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0xff, r1, &(0x7f0000001600)="9de0ef09173c5122c3e10d5035931cba61485d59d544f21974046a534b03696c93b08611551fdb767172b7d206d254b277222d974a0d3bcb1486c71e", 0x3c, 0x8, 0x0, 0x1, r2}]) 06:37:13 executing program 5: openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x20400, 0x0) r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) fallocate(r0, 0x0, 0x7fff, 0x100000000) fallocate(r0, 0x20, 0x0, 0x100008000) 06:37:13 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x28000, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000080)) write$P9_RREMOVE(r1, &(0x7f0000000040)={0x7, 0x7b, 0x1}, 0x7) 06:37:13 executing program 4: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, &(0x7f0000000240)='\x00') 06:37:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) io_cancel(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8ff8fc9d2d7ca9c0, 0x80000000000000, r0, &(0x7f0000000100)="772dc3a3c2e7e04423e7b948acca0fa2847dd998d19b76332b132ecc55a9cc90aa8749d90f4669aaedc81e17a62aefa112be589e642ec79e38b72427f0462dd26dc35dfbba3ff19fb29bae4728bef06677ce18358db6614f95c3030859391a2e82238a40e5bfab5f0fbfff56e36457922e98707c070e12cc155b2e9350b689c55bd8d2dfbaa9c87af203c69362f1f7e4b74e93d42f93b9c9d2df79a6b105", 0x9e, 0x10000, 0x0, 0x1, r3}, &(0x7f0000000280)) ioctl$int_in(r1, 0x40000000af01, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000300)={'bctf0\x00\x00\x00\x00\x00\x00\"\x00', 0x6}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f00000019c0)=""/246, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000000c0)={0x200000000001, r4}) 06:37:13 executing program 5: r0 = getpid() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x7ff, 0x5e21bb72, 0xffffffff, 0x6, 0x0, 0x400, 0x0, 0x3, 0xdb2d, 0x81, 0x8cde, 0x7, 0x3, 0x800, 0x1, 0xe55, 0x100000001, 0x1f, 0x7ff, 0x3, 0x8, 0x9, 0x6, 0x4, 0xd259, 0x8001, 0x9, 0xe4df, 0x200, 0x4, 0x8, 0x200, 0x5, 0x800, 0x20, 0x6, 0x0, 0x81, 0x4, @perf_config_ext={0x671, 0x5}, 0xc500, 0x401, 0x8, 0x5, 0x1ff, 0x9, 0x79}, r0, 0x2, r1, 0x8) [ 195.903571] audit: type=1400 audit(1555569433.067:53): avc: denied { add_name } for pid=7987 comm="syz-executor.3" name="pfkey" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 [ 195.965335] audit: type=1400 audit(1555569433.067:54): avc: denied { create } for pid=7987 comm="syz-executor.3" name="pfkey" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:insmod_t:s0 tclass=file permissive=1 06:37:13 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000080)='cgroup2\x00', 0x0, &(0x7f0000000240)='\x00') 06:37:13 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, &(0x7f0000000200)=""/11, 0x0, 0xb, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) r2 = perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x6609, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 06:37:13 executing program 0: setresuid(0x0, 0xee01, 0x0) setfsuid(0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x20080, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="000228bd7000fedbdf25040000000800060009000000080005000000000054000200020000000800030002000000080009000200000008000b000a00000a080007001f000000080006004e0b000008000600ff03000008000900000800000800070000000000080004000100008008000600660d000008000400b500000008000400018000003800020014000100fe8000000000000000000000000000230800090000000000080004000900000008000900080000000800030001000000"], 0xd0}}, 0x8000) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000000000000ffffffffff0500ff04000000660200000100000000000000f8700000000000000000000000000000ff0100000000000000000000000000000000000000000000010100"/88]) unshare(0x20000) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000300)={0x0, 0x400, 0x6}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000340)={0x8001, 0x0, 0x7fffffff, 0x0, 0x8000, 0x1f}) ioctl$RTC_PIE_OFF(r2, 0x7006) 06:37:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fe4)={&(0x7f0000016000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@ipv6_newrule={0x0, 0x20, 0x0, 0x70bd27, 0x25dfdbfd, {0xa, 0x20, 0x10, 0x100000000, 0xee8, 0x0, 0x0, 0x0, 0x12be0558e32c9146}, [@FRA_SRC={0x0, 0x2, @rand_addr="8ea737e446a7b081f5b3fdca1a62db75"}]}, 0xffffffffffffffd5}, 0x1, 0x0, 0x0, 0x24000014}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) 06:37:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x1e) sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x14, 0x55, 0x3fd, 0x0, 0x0, {0x10000007}}, 0xfffffffffffffd9d}}, 0x0) 06:37:13 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000080)='cgroup2\x00', 0x0, &(0x7f0000000240)='\x00') 06:37:13 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r1) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000000040)={0x12}) r2 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000340)={0x0, 0xffffffff}) 06:37:13 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000080)='cgroup2\x00', 0x0, &(0x7f0000000240)='\x00') 06:37:13 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x28000, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000080)) write$P9_RREMOVE(r1, &(0x7f0000000040)={0x7, 0x7b, 0x1}, 0x7) 06:37:13 executing program 5: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x1, 0x0, 0x0, 0x1, &(0x7f0000000040)) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) 06:37:13 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000240)='\x00') [ 196.468180] audit: type=1804 audit(1555569433.797:55): pid=8060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir420880595/syzkaller.FVTZKt/49/file0/bus" dev="ramfs" ino=28997 res=1 06:37:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x28000, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000080)) write$P9_RREMOVE(r1, &(0x7f0000000040)={0x7, 0x7b, 0x1}, 0x7) 06:37:13 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000000c0)=0x1) r1 = accept(0xffffffffffffff9c, &(0x7f0000000000)=@caif=@util, &(0x7f0000000080)=0x80) setsockopt$inet6_opts(r1, 0x29, 0x3f, &(0x7f0000000100)=@srh={0x6, 0xe, 0x4, 0x7, 0xc839, 0x40, 0x4, [@mcast2, @empty, @loopback, @local, @ipv4={[], [], @empty}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @rand_addr=0x3}]}, 0x78) 06:37:14 executing program 2: prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000440)="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", 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xc, 0x1d}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) r0 = socket$inet_dccp(0x2, 0x6, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f00000000c0)=@xdp, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)=""/64, 0x40}, {&(0x7f0000000200)=""/234, 0xea}], 0x2, &(0x7f0000000340)=""/96, 0x60}, 0x9}], 0x1, 0x21, &(0x7f0000000400)={0x0, 0x1c9c380}) 06:37:14 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, &(0x7f0000000200)=""/11, 0x0, 0xb, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) r2 = perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x6609, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 06:37:14 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000240)='\x00') 06:37:14 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000040}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x400, 0x70bd29, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}}, 0x20000080) r3 = socket$unix(0x1, 0x22, 0x0) connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmmsg(r3, &(0x7f00000026c0)=[{{0x0, 0xfffffffffffffdd6, 0x0}}, {{0x0, 0xfffffeec, 0x0}}], 0x400000000000031, 0x0) connect$unix(r0, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) recvmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 196.697247] XFS (loop5): Invalid superblock magic number 06:37:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup3(r1, r0, 0x80000) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000340)={0x0, 0x4, 0x10, 0x1, 0x81}, &(0x7f0000000380)=0x18) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000003c0)={0x1ff, 0x3, 0x2, 0xda2, 0x100000001, 0x3ff, 0x0, 0x46, r3}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r5 = eventfd2(0x0, 0x0) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x301002, 0x0) ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f00000000c0)={0x6, 0x1}) lsetxattr$security_selinux(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000280)='system_u:object_r:devlog_t:s0\x00', 0x255, 0x2) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x0, r5}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x2, r5, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x2, r5, 0x7}) r7 = semget(0x1, 0x3, 0x2) semget$private(0x0, 0x0, 0x10) semctl$GETALL(r7, 0x0, 0xd, &(0x7f0000000140)=""/34) 06:37:14 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000240)='\x00') 06:37:14 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, 0x0) 06:37:14 executing program 3: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) setxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:init_exec_t:s0\x00', 0x21, 0x1) ioctl$KDENABIO(r1, 0x4b36) ioctl$KDENABIO(r1, 0x4b36) sched_setaffinity(r0, 0x37c, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000001c0)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kexec_load(0x100697, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x9e945000, 0x3e0000}], 0x0) 06:37:14 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x140, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d24000)=[@in6={0xa, 0x0, 0x0, @loopback}, @in={0x2, 0x0, @multicast1}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000040)=[@in6], 0x1c) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x80000, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f00000000c0)={r2}) 06:37:14 executing program 5: mkdir(&(0x7f0000632000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0) getgroups(0x1, &(0x7f0000000240)=[0xee00]) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x10020, &(0x7f0000000700)=ANY=[@ANYBLOB="769746", @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d3030303030303030303030303030daad1da1313030309c59ec9a39efae8a3682302c757365725f69643d", @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r3, @ANYBLOB="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"]) r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r4) quotactl(0x2080000201, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)='7') 06:37:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = msgget$private(0x0, 0x0) msgrcv(r4, &(0x7f0000000040)={0x0, ""/46}, 0x36, 0x2, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000340)={[], 0x0, 0x241}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000400)={0x1, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2}}) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x40000, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:37:14 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000001c0)=0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x7, 0x240000) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r3 = semget(0x2, 0x0, 0x200000000008) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f0000000340)=""/246) perf_event_open(&(0x7f0000000000)={0x7, 0x70, 0x1000, 0x1, 0x7, 0x9, 0x0, 0x6, 0x40, 0x1, 0x8000000000, 0xff, 0x7, 0x160, 0x3f, 0x6, 0x4, 0x0, 0x2, 0x8001, 0xfffffffffffffff7, 0x9, 0x100000000, 0x3aa, 0x60a9, 0x9, 0x7ff, 0x0, 0x3, 0x1e, 0x9, 0x5, 0xdec, 0x205b, 0x101, 0x101097c3, 0x101, 0x977, 0x0, 0x8, 0x1, @perf_config_ext={0x1, 0x8c}, 0x8, 0x2a68, 0x2, 0x7, 0x7, 0x5, 0x263}, r0, 0xffffffffffffffff, r2, 0xa) r4 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) write$P9_RCREATE(r1, &(0x7f0000000200)={0x18, 0x73, 0x1, {{0x0, 0x1, 0x6}, 0x1}}, 0x18) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x9, @raw_data="65959c3418b0a848593130204f9e395ffe7eadc4e5efe4eb08b2818231f0b171d01a6ccab9aa61f9334780ee00617fd51776eba2ff6638152706d334b8c317bd72cb367b00b738a668c1f265769a8b83bdfba7f2a6a533f765362117325765424a42ff769cc614819d4ffe8bb06797edd61780727c8acae9d1114979bc5a6df889dd78b39d1456720c394c7d690a6659812de9ef718772c8b725bccea7fa69346c281c827ab34639f139b818aeb4219bb23f6072e27fa590731d28c92807ba70d895fb32d01fb64a"}) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 06:37:14 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, 0x0) 06:37:14 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x10000261, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) r1 = syz_open_procfs(r0, &(0x7f00000001c0)='ne\x0e\xab\bE%\xa1\x9a\xf7\x82R\xf56!S\xdam\xc8\xa5/\xae8g\x96TA\xec\x12\x90!\xdf\x03!;\xbc\xc3\x95\x93\xa4`[\xdbJ\xc4\xa5\xd3\x81 9>\x9b\x9fX\xd8\xd0\xd1\xfe\x1dS\x9e+\xb6\x15\xff\x98\xda\xfa{\x9a3\xfe\xa6\'y|z\xa5\x98U\xd0\x13\xe1\xa3;\x01Dg\xa9\xa6|\xe7qX6\x05\"\x95\x19_\xd9\xec\x0f\xe7\x02\x93]y\xf2\xe9e\xde\xdbr\xe3\x8c\x01O\xcbm\x94\x04S\xbe\xe9\x8c\xb6\xc9\xfb\x89\x11F2\x0fb\x82\xfc\x94\x19\b\xd3\xac\x91\xb4Y\xac\xd6\xc3\x9f\xa8Q\xbf;\xa02#\xe8\x19\xcc\xff[T@1\xda\xc8\xe7\xd1e.\x12fC\xcb\xda\xab\xf8Dz\xdd3\x01\xea~\x04\b\xa0g\xb8\xfc\xa4\xc3_\x19gx\xae\x13\xd2\x13\x9bfqY@\xfa\x1b\xc2n\x8d=\xdf\xe9\x83\xb8`b\x98G\xa12\xc7\xce7x\xd5(\xd8\xaeHb,\xb6\x1agH\xce\xc2\xda\xa4d\x83\xe2\xeb\xd7\xc1\x1e\x02|\x9f\a\x13\xed\x11\xc2\x85f\xac\x00\x00\x00\x00\x00\x00\x00\x00') preadv(r1, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) 06:37:14 executing program 3: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$TCGETX(r2, 0x5432, &(0x7f0000000500)) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) r4 = dup2(r1, r2) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') ioctl$VIDIOC_LOG_STATUS(r4, 0x5646, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="68001400", @ANYRES16=r5, @ANYBLOB="010329bd7000fbdbdf25010000000000000007410000004c001800007fff65746800"/98], 0x68}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r0, r3}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) unlinkat(r4, &(0x7f0000000480)='./file0/file0\x00', 0x200) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x1ffffc, 0x0) ioctl$RTC_PLL_SET(r6, 0x40207012, &(0x7f00000001c0)={0x8, 0x81, 0x0, 0x8000, 0x1ff, 0xe85, 0x401}) 06:37:15 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x3, 0x42001) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x114, r1, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x926}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x685d}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x11}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x38, 0x8}}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x1c}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x1}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000040)={0x4}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000080)={0x8001, 0x3, 0x4, 'queue0\x00', 0x8}) 06:37:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet_mreqsrc(r2, 0x0, 0x20, 0x0, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000000)={0xa9f, [0x4df, 0x101, 0xfff, 0x100, 0x8, 0x1c, 0x7f, 0x88, 0xfc, 0x21, 0x7f, 0xb6b, 0x3, 0x101, 0x3, 0x1, 0x101, 0x7f, 0x2, 0x7, 0x1, 0x8, 0x9, 0x7f, 0x20, 0x3, 0x1, 0x1c, 0x400, 0x0, 0x10001, 0xffffffff, 0x101, 0x5, 0x1, 0x5, 0x5ac0, 0x4b, 0xffffffffe411fcf8, 0x1f, 0x7ff, 0x100000000, 0x4, 0x0, 0x8, 0x326, 0xe7b, 0x178], 0x9}) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) fcntl$setstatus(r2, 0x4, 0x42803) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000100)=""/250) 06:37:15 executing program 5: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x2103001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$join(0x1, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0x0) 06:37:15 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, 0x0) 06:37:15 executing program 3: r0 = semget$private(0x0, 0x0, 0x407) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xa487, 0x1000}, {0x3, 0x5, 0x1000}, {0x1, 0xed, 0x1000}, {0x1, 0x3, 0x1000}], 0x4, &(0x7f0000000040)={0x77359400}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x5, 0x0, 0x80, &(0x7f0000fff000/0x1000)=nil, 0x2}) 06:37:15 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000540)=0x4, 0x8) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, 0x0, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000580), &(0x7f00000005c0)=0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000040)={{0x5, 0x5, 0x7, 0x800, 'syz0\x00', 0x2}, 0x1, [0x7, 0x9, 0x92d, 0x6, 0x7, 0x2, 0x39, 0x4, 0x7df, 0x443, 0xd07, 0x4, 0xc7, 0x54, 0x2, 0xfffffffffffff789, 0x2a0, 0x0, 0xfffffffffffffffd, 0x929, 0x4, 0x0, 0x0, 0x0, 0x3ff, 0x4, 0xb6, 0x1f, 0x8, 0x6, 0x0, 0x7d, 0x2, 0xff, 0x10000, 0x81, 0x7274, 0x2, 0x81, 0xfffffffffffffff9, 0xf192, 0x10001, 0x1ff, 0x129f, 0x7fffffff, 0xfffffffffffffffd, 0xffffffff, 0xff, 0x4, 0x6, 0x5, 0x9, 0x200, 0x8, 0xd09b, 0x9, 0x7fffffff, 0x7, 0x5, 0x2, 0x5, 0xaece, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffb, 0x3, 0xa984, 0x100000000, 0x7fffffff, 0x0, 0x3, 0x5, 0x1, 0xbc6, 0x5, 0x2, 0x4f, 0x743, 0xffff, 0x3, 0xfffffffffffffffa, 0x4, 0x3, 0x33, 0x1, 0x3f, 0x6, 0x4, 0x4, 0x800, 0x9, 0x4, 0x80000000, 0x40000000000, 0x4, 0xffff, 0x8, 0x476, 0x8, 0x42, 0x7, 0x52, 0xbe45, 0x0, 0x1, 0x4d, 0xfffffffffffffff9, 0x1, 0x6, 0x1, 0x7fffffff, 0x3d, 0x1, 0x7, 0x3f, 0xff, 0x1, 0x4, 0x180000000000, 0x80000000, 0x8, 0x6, 0xccb, 0x1f, 0xa6b, 0x7f, 0x1f, 0x3ff], {0x77359400}}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0xc0385720, &(0x7f0000000600)={0x1, {0x77359400}, 0x1, 0xb78a}) 06:37:15 executing program 3: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) recvmsg(r0, &(0x7f0000000380)={&(0x7f00000001c0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/79, 0x4f}, {&(0x7f00000002c0)=""/170, 0xaa}, {&(0x7f0000000000)=""/13, 0xd}], 0x3}, 0x2002) r1 = open$dir(&(0x7f00000003c0)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file1\x00', 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000180)="10bbe16b2df9084b508bf221830b99cafc5881012b5048b35e6e171f8caeed83a8a2aeb5880c6d4bec52a302b37f01c369ca31b6f2c0ff") linkat(r1, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file1/file0\x00', 0x1000) [ 197.904108] audit: type=1800 audit(1555569435.237:56): pid=8185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.3" name="file0" dev="sda1" ino=16698 res=0 06:37:15 executing program 2: syz_init_net_socket$llc(0x1a, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x100, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f00000000c0), 0x4) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000005480), 0x3007) 06:37:15 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$KDSETMODE(r1, 0x4b3a, 0x6) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getcwd(&(0x7f0000000180)=""/28, 0xfffffffffffffdf9) fcntl$notify(r2, 0x402, 0x7) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1f, 0x4000) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f00000000c0)) 06:37:15 executing program 4 (fault-call:1 fault-nth:0): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, &(0x7f0000000240)='\x00') 06:37:15 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x200000, 0x0) fcntl$setpipe(r0, 0x407, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") rt_sigaction(0x7, 0x0, 0x0, 0x8, &(0x7f0000000000)) 06:37:15 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000380)='cpuset.sched_load_balance\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1fffffd) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/userio\x00', 0x2, 0x0) clock_gettime(0x800000000000000d, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000100)={0x5, 0xb, 0x4, 0x1000, {r3, r4/1000+30000}, {0x2cc74d2639b50c27, 0x8, 0x4, 0x3, 0x7ff, 0x100000000, "baf1e270"}, 0x62, 0x3, @planes=&(0x7f00000000c0)={0x6, 0x401, @userptr=0x9000000000, 0x8001}, 0x4}) [ 198.100188] FAULT_INJECTION: forcing a failure. [ 198.100188] name failslab, interval 1, probability 0, space 0, times 1 [ 198.122497] CPU: 1 PID: 8202 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 198.140920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 198.150289] Call Trace: [ 198.152888] dump_stack+0x138/0x19c [ 198.156606] should_fail.cold+0x10f/0x159 [ 198.160769] should_failslab+0xdb/0x130 [ 198.164765] __kmalloc_track_caller+0x2ef/0x790 [ 198.169451] ? __sb_end_write+0xc1/0x100 [ 198.173515] ? strndup_user+0x62/0xf0 [ 198.177317] memdup_user+0x26/0xa0 [ 198.180858] strndup_user+0x62/0xf0 [ 198.184496] SyS_mount+0x3c/0x120 [ 198.187948] ? copy_mnt_ns+0x8c0/0x8c0 [ 198.191867] do_syscall_64+0x1eb/0x630 [ 198.195766] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 198.200627] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 198.205902] RIP: 0033:0x458c29 [ 198.209089] RSP: 002b:00007f4c19fa4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 198.216804] RAX: ffffffffffffffda RBX: 00007f4c19fa4c90 RCX: 0000000000458c29 [ 198.224082] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 198.231359] RBP: 000000000073bf00 R08: 0000000020000240 R09: 0000000000000000 [ 198.238628] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c19fa56d4 06:37:15 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa7, 0xa37, 0x30, 0x1, 0x100000001}, 0xfdf4) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x40, 0x0) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="186d7a5757dbbb5fdc00000002800000850000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x2c}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x0, 0xe, 0x0, &(0x7f0000000180)="6553b8ba0c66bf99ad0e68afa48d", 0x0, 0x8001}, 0x28) [ 198.245893] R13: 00000000004c4c0e R14: 00000000004d8888 R15: 0000000000000003 06:37:18 executing program 0: r0 = memfd_create(&(0x7f00000001c0)='\vmm?g\xea\x17[DH\xa35\xbeWy\x14\xef\xde\x8aL\x012', 0x3) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="40000000000025000400000005007c00000000000000200000000000"], 0x1c) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000180)=0x6, 0x4) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6b7, 0x0, 0xfffffffffffffffc, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000100)={0x283, 0x3}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x400, 0x2) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, &(0x7f00000000c0)=0x107001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 06:37:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="ba4300b00bee660f3a172e0010000f32652e0f0866b83c4a00000f23c80f21f866350c0030000f23f83e0b450eb804010f00d00f01f60f3800210f01cf", 0x3d}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) msync(&(0x7f0000013000/0x3000)=nil, 0x3000, 0x5) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:37:18 executing program 5: openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000180)={0x3, @default, r1}) 06:37:18 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7ff, 0x0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40001}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r2, 0x404, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}]}, 0x34}}, 0x40) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="a92f040001000000000081b8cce000af0af21ff86b2329174b760000c78156a4bf4fd10077800225cdb8b94b385eac6b0300000000000000c1"], 0x39) waitid(0x3, r0, &(0x7f0000000040), 0x40000007, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 06:37:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x200000000005}, 0x1c) ppoll(&(0x7f0000000000)=[{r0, 0xffffffffffffffff}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) 06:37:18 executing program 4 (fault-call:1 fault-nth:1): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, &(0x7f0000000240)='\x00') [ 200.812735] FAULT_INJECTION: forcing a failure. [ 200.812735] name failslab, interval 1, probability 0, space 0, times 0 [ 200.839099] CPU: 0 PID: 8228 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 200.846057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 200.855432] Call Trace: [ 200.858038] dump_stack+0x138/0x19c [ 200.861670] should_fail.cold+0x10f/0x159 [ 200.865821] should_failslab+0xdb/0x130 [ 200.869797] kmem_cache_alloc_trace+0x2ec/0x790 [ 200.874459] ? kasan_check_write+0x14/0x20 [ 200.878690] ? _copy_from_user+0x99/0x110 [ 200.882836] copy_mount_options+0x5c/0x2f0 [ 200.887069] SyS_mount+0x87/0x120 [ 200.890515] ? copy_mnt_ns+0x8c0/0x8c0 [ 200.894402] do_syscall_64+0x1eb/0x630 [ 200.898287] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 200.903143] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 200.908328] RIP: 0033:0x458c29 06:37:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x100000890f, &(0x7f00000000c0)="457919ff3c12324ff79ed5ed14fda73fab9a8a595bc95538319bd070000000000000") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000180)={0x1, 0x0, {0x0, 0x0, 0x0, 0x1e, 0xb, 0x68}}) lstat(&(0x7f0000000100)='./bus\x00', 0x0) [ 200.911522] RSP: 002b:00007f4c19fa4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 200.919227] RAX: ffffffffffffffda RBX: 00007f4c19fa4c90 RCX: 0000000000458c29 [ 200.926500] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 200.933759] RBP: 000000000073bf00 R08: 0000000020000240 R09: 0000000000000000 [ 200.941040] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c19fa56d4 [ 200.948326] R13: 00000000004c4c0e R14: 00000000004d8888 R15: 0000000000000003 06:37:18 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x9) bind$inet6(r0, &(0x7f0000001600)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) [ 201.004222] audit: type=1400 audit(1555569438.337:57): avc: denied { map } for pid=8229 comm="syz-executor.0" path=2F6D656D66643A0B6D6D3F67EA175B4448A335BE577914EFDE8A4C0132202864656C6574656429 dev="tmpfs" ino=29281 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1 06:37:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040a07041dfffd946fa2830020200a0009000108000000680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18b0400000000000000db2406b208d37ed01cc0", 0x4c}], 0x1}, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x100, 0x0) bind$llc(r2, &(0x7f0000000080)={0x1a, 0x33f, 0xe5, 0x5, 0x5, 0x288, @broadcast}, 0x10) 06:37:18 executing program 4 (fault-call:1 fault-nth:2): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, &(0x7f0000000240)='\x00') 06:37:18 executing program 0: epoll_create(0x6c) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@can={{0x3, 0x5, 0x7, 0x1ff}, 0x5, 0x1, 0x0, 0x0, "e98c274bcc48067d"}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000200)={r0, r0, 0x7, 0x7, &(0x7f00000001c0)="50d541f8fcbe20", 0x6, 0x9, 0x4000000, 0xf1bd, 0x1, 0x2, 0x8, 'syz0\x00'}) r2 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000300)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r2, 0xc0104320, &(0x7f0000000000)={0xa, &(0x7f0000000100)}) syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x0, 0x400000) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/mls\x00', 0x0, 0x0) socket(0xa, 0x1, 0x0) rt_sigtimedwait(&(0x7f00000000c0), 0x0, 0x0, 0x8) [ 201.134901] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 201.163086] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 201.169633] FAULT_INJECTION: forcing a failure. [ 201.169633] name failslab, interval 1, probability 0, space 0, times 0 [ 201.203514] CPU: 0 PID: 8258 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 201.210474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 201.219825] Call Trace: [ 201.219845] dump_stack+0x138/0x19c [ 201.219865] should_fail.cold+0x10f/0x159 [ 201.219879] should_failslab+0xdb/0x130 [ 201.219893] kmem_cache_alloc+0x2d9/0x780 [ 201.219906] ? fs_reclaim_acquire+0x20/0x20 [ 201.219918] ? find_held_lock+0x35/0x130 [ 201.219929] getname_flags+0xcb/0x580 [ 201.219939] user_path_at_empty+0x2f/0x50 [ 201.219951] do_mount+0x12b/0x27d0 [ 201.219960] ? copy_mount_options+0x5c/0x2f0 [ 201.234404] ? rcu_read_lock_sched_held+0x110/0x130 [ 201.234421] ? copy_mount_string+0x40/0x40 [ 201.234434] ? _copy_from_user+0x99/0x110 [ 201.234448] ? copy_mount_options+0x1fe/0x2f0 [ 201.280743] SyS_mount+0xab/0x120 [ 201.284237] ? copy_mnt_ns+0x8c0/0x8c0 [ 201.288321] do_syscall_64+0x1eb/0x630 [ 201.292218] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 201.297084] entry_SYSCALL_64_after_hwframe+0x42/0xb7 06:37:18 executing program 3: fanotify_init(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x646}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040)=0x6, 0x4) ioctl(r1, 0x100000890e, &(0x7f0000000000)="0adc2d123c123f319bd070") preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 06:37:18 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x301000, 0x4) readlinkat(r2, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/4096, 0x1000) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001180)={&(0x7f0000001140)='./file0\x00', 0x0, 0x18}, 0x10) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="240000000b0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e28000000110affffba010000000009b356da5b80d12ce34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 06:37:18 executing program 5: r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x18000408) keyctl$read(0xb, r0, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x84000, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x8001, 0x1000, 0x1000}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e21, @broadcast}}, [0x0, 0x200, 0x80000000, 0xfff, 0xb16, 0x1d4, 0x7, 0x6, 0x4, 0x7, 0x8, 0x8000, 0x9, 0x7fff]}, &(0x7f00000001c0)=0x100) 06:37:18 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x3fc, 0x0) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000000040)={@rand_addr, @loopback, 0x0}, &(0x7f0000000080)=0xc) recvmsg(r0, &(0x7f0000000700)={&(0x7f0000000240)=@caif=@dbg, 0x80, &(0x7f0000000680)=[{&(0x7f00000002c0)=""/11, 0xb}, {&(0x7f0000000300)=""/249, 0xf9}, {&(0x7f0000000780)=""/160, 0xa0}, {&(0x7f00000004c0)=""/191, 0xfffffe3c}, {&(0x7f0000000580)=""/214, 0xd6}], 0x5}, 0x23) sendmsg$can_raw(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x1d, r1}, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=@canfd={{0x2, 0xff, 0x200000000000, 0x7fff}, 0x28, 0x1, 0x0, 0x0, "f0e8f0822cf370eaa6f88b71d6ff1fbbee40828b1330913fa096b1833963d8a0a5b70345bb146286acd38590efdd80c2ba0aa56673625f9a8f534caf0ceb7930"}, 0x48}, 0x1, 0x0, 0x0, 0x4014}, 0x4000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x10000000000004, 0x3, 0xfffffffffffffffe, 0x0, 0x1}, 0x1da) bpf$MAP_DELETE_ELEM(0x4, &(0x7f00000000c0)={r2, &(0x7f0000000080)}, 0xf) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000740)=0x100000000) [ 201.302283] RIP: 0033:0x458c29 [ 201.305471] RSP: 002b:00007f4c19fa4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 201.313179] RAX: ffffffffffffffda RBX: 00007f4c19fa4c90 RCX: 0000000000458c29 [ 201.320465] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 201.320471] RBP: 000000000073bf00 R08: 0000000020000240 R09: 0000000000000000 [ 201.320477] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c19fa56d4 [ 201.320483] R13: 00000000004c4c0e R14: 00000000004d8888 R15: 0000000000000003 [ 201.408706] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 201.644914] syz-executor.1 (8226) used greatest stack depth: 24336 bytes left 06:37:21 executing program 2: mkdir(&(0x7f0000000680)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x100) fchdir(r0) r1 = memfd_create(&(0x7f0000000300)='}}-\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="73797a31d96d5de2361ec735eaefbbc44b0a03a9e45afc4ef1be01fa8dff6aa640797e93fc6bbbc58165ebea25878b8a8da2d63190b8f330d79e28943ebc6e05f442ec8ab4712531e6e3d021fdf638ff2137a52dc71c80e25e20f731587ce34cbe77220c3f5db36901af8b7629eef90f06d348fae6234b600f5f381561299e4a"], 0x80) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') open(&(0x7f0000000380)='./file0/file0\x00', 0x0, 0x0) 06:37:21 executing program 4 (fault-call:1 fault-nth:3): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, &(0x7f0000000240)='\x00') 06:37:21 executing program 5: fcntl$lock(0xffffffffffffffff, 0x0, 0x0) write$FUSE_WRITE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0) ptrace$setregset(0x4205, 0x0, 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000000)={{0x503b, 0x0, 0x9, 0x6, 0x6, 0x40}, 0x3ff}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x280, 0x11) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, &(0x7f0000000500)) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f00000002c0)=""/116) close(r1) openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) 06:37:21 executing program 0: ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000001400)) r0 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x1, 0x80800) ioctl$VT_WAITACTIVE(r0, 0x5607) r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0x53d, 0x8001, 0xda2, 0x4}, 0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={r2, 0xffffffffffffffff}, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000180)=0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000700)='/dev/usbmon#\x00', 0x10000, 0x400040) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000740)={r2, @in6={{0xa, 0x4e23, 0x40, @mcast2, 0x3}}}, &(0x7f0000000800)=0x84) process_vm_writev(r3, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/121, 0x79}, {&(0x7f0000000240)=""/201, 0xc9}, {&(0x7f0000000340)=""/127, 0x7f}], 0x3, &(0x7f00000006c0)=[{&(0x7f0000000400)=""/250, 0xfa}, {&(0x7f0000000500)=""/148, 0x94}, {&(0x7f00000005c0)=""/235, 0xeb}], 0x3, 0x0) 06:37:21 executing program 3: mkdir(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20000000000000) r0 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") fchmodat(r0, &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = dup3(r0, r0, 0x80000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) 06:37:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setpriority(0x2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0xff00000000000000, 0x0, 0x4c}, [@ldst={0x3fd}]}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00'/248}, 0x48) prctl$PR_SET_SECUREBITS(0x1c, 0x20) [ 203.838722] FAULT_INJECTION: forcing a failure. [ 203.838722] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 203.850647] CPU: 1 PID: 8298 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 203.857572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 203.866924] Call Trace: [ 203.869519] dump_stack+0x138/0x19c [ 203.873151] should_fail.cold+0x10f/0x159 [ 203.877303] __alloc_pages_nodemask+0x1d6/0x7a0 [ 203.881976] ? fs_reclaim_acquire+0x20/0x20 [ 203.886305] ? __alloc_pages_slowpath+0x2930/0x2930 [ 203.891338] cache_grow_begin+0x80/0x410 [ 203.895397] kmem_cache_alloc+0x6a8/0x780 [ 203.899545] ? fs_reclaim_acquire+0x20/0x20 [ 203.903868] getname_flags+0xcb/0x580 [ 203.907671] user_path_at_empty+0x2f/0x50 [ 203.911847] do_mount+0x12b/0x27d0 [ 203.915391] ? copy_mount_options+0x5c/0x2f0 [ 203.920930] ? rcu_read_lock_sched_held+0x110/0x130 [ 203.925943] ? copy_mount_string+0x40/0x40 [ 203.930172] ? _copy_from_user+0x99/0x110 [ 203.934320] ? copy_mount_options+0x1fe/0x2f0 [ 203.938816] SyS_mount+0xab/0x120 [ 203.942264] ? copy_mnt_ns+0x8c0/0x8c0 [ 203.946163] do_syscall_64+0x1eb/0x630 [ 203.950045] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 203.954902] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 203.960086] RIP: 0033:0x458c29 [ 203.963264] RSP: 002b:00007f4c19fa4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 203.970966] RAX: ffffffffffffffda RBX: 00007f4c19fa4c90 RCX: 0000000000458c29 [ 203.978232] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 06:37:21 executing program 3: unshare(0x20000) r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x1000, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0xfffffe8b) lsetxattr$security_smack_entry(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.SMACK64\x00', &(0x7f0000000140)='/wlan1\x00', 0x7, 0x1) unlink(&(0x7f0000000040)='./file0\x00') 06:37:21 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x100, 0x0) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000000c0)='pkcs7_test\x00', 0x0) read$alg(r1, &(0x7f00000003c0)=""/238, 0xee) close(r0) r3 = socket(0x100840000000002, 0x3, 0x1f) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x5a) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r3, 0x1, 0x5, &(0x7f0000000100), 0x5) [ 203.985504] RBP: 000000000073bf00 R08: 0000000020000240 R09: 0000000000000000 [ 203.992806] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c19fa56d4 [ 204.000070] R13: 00000000004c4c0e R14: 00000000004d8888 R15: 0000000000000003 06:37:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") mkdir(&(0x7f0000000100)='./file0\x00', 0x0) clone(0x800002502000ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_FPEMU(0xa, 0x2) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="5b7043a5ec3a34353a00699a934ebdb48520fcf0a73b3bc0411925faa044710c03eaa8d4c294fd0c6809573ff5f82b8fdbffa0a56014b1e46c271e923eebb246e93e4700e861d8cd8d89def570fff3a5462e7254d91281fe3f4c1be5ecee816d830814a76b3dbf318f357e1b"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ceph\x00', 0x0, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000000)=@get={0x1, &(0x7f0000000140)=""/152, 0x9}) 06:37:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) readv(r0, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x34) [ 204.131316] libceph: resolve 'pC¥ì' (ret=-3): failed [ 204.141253] libceph: parse_ips bad ip '[pC¥ì:45' [ 204.157839] libceph: resolve 'pC¥ì' (ret=-3): failed [ 204.176648] libceph: parse_ips bad ip '[pC¥ì:45' 06:37:21 executing program 5: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000180)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) r2 = getpgrp(0xffffffffffffffff) syz_open_procfs(r2, &(0x7f0000000200)='net/psched\x00') syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) inotify_init() unshare(0x400) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000080)=0x1) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:37:21 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0xfffffffdfffffff9, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0xfffffffffffffffd, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x9) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'L+', 0x3}, 0x28, 0x2) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000), 0x4) 06:37:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000003c0)="0adc1f123c123f319bd070") r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000000)="360fae08670f01d1b8c80e8ee0f2a566b9af0300000f320fc75ac70f019af5ffba210066ed0fc79e9c5ebaa000b80118ef", 0x31}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$P9_RXATTRCREATE(r1, 0x0, 0x0) 06:37:21 executing program 4 (fault-call:1 fault-nth:4): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, &(0x7f0000000240)='\x00') 06:37:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x0, [0x4b564d02, 0x3]}) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) connect$rds(r3, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 204.446162] FAULT_INJECTION: forcing a failure. [ 204.446162] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 204.458013] CPU: 0 PID: 8343 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 204.466115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 204.475469] Call Trace: [ 204.478077] dump_stack+0x138/0x19c [ 204.481711] should_fail.cold+0x10f/0x159 [ 204.485861] __alloc_pages_nodemask+0x1d6/0x7a0 [ 204.490531] ? fs_reclaim_acquire+0x20/0x20 [ 204.494854] ? __alloc_pages_slowpath+0x2930/0x2930 [ 204.499881] cache_grow_begin+0x80/0x410 [ 204.503941] kmem_cache_alloc+0x6a8/0x780 [ 204.508086] ? __schedule+0x7c6/0x1cf0 [ 204.511970] ? cache_grow_end.part.0+0x92/0x160 [ 204.516639] getname_flags+0xcb/0x580 [ 204.520438] ? trace_hardirqs_on_caller+0x400/0x590 [ 204.525476] user_path_at_empty+0x2f/0x50 [ 204.529634] do_mount+0x12b/0x27d0 [ 204.533181] ? copy_mount_string+0x40/0x40 [ 204.537410] ? copy_mount_options+0x18f/0x2f0 [ 204.541903] ? __sanitizer_cov_trace_pc+0x4e/0x60 [ 204.546743] ? copy_mount_options+0x1fe/0x2f0 [ 204.551250] SyS_mount+0xab/0x120 [ 204.554707] ? copy_mnt_ns+0x8c0/0x8c0 [ 204.558592] do_syscall_64+0x1eb/0x630 [ 204.562473] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 204.567317] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 204.572514] RIP: 0033:0x458c29 [ 204.575692] RSP: 002b:00007f4c19fa4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 204.583392] RAX: ffffffffffffffda RBX: 00007f4c19fa4c90 RCX: 0000000000458c29 [ 204.590666] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 204.597930] RBP: 000000000073bf00 R08: 0000000020000240 R09: 0000000000000000 [ 204.605195] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c19fa56d4 [ 204.612464] R13: 00000000004c4c0e R14: 00000000004d8888 R15: 0000000000000003 06:37:22 executing program 0: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000003000000c4"]) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000140)=[@sack_perm, @sack_perm={0x2}, @timestamp], 0x11cc51) 06:37:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r3, 0x10, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0xf, 0x0, @l2={'eth', 0x3a, 'sit0\x00'}}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x1) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0x0) 06:37:22 executing program 4 (fault-call:1 fault-nth:5): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, &(0x7f0000000240)='\x00') [ 204.855030] FAULT_INJECTION: forcing a failure. [ 204.855030] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 204.905645] CPU: 0 PID: 8356 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 204.912608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 204.922139] Call Trace: [ 204.924746] dump_stack+0x138/0x19c [ 204.924769] should_fail.cold+0x10f/0x159 [ 204.924786] ? __might_sleep+0x93/0xb0 [ 204.932578] __alloc_pages_nodemask+0x1d6/0x7a0 [ 204.932594] ? __alloc_pages_slowpath+0x2930/0x2930 [ 204.932616] alloc_pages_current+0xec/0x1e0 [ 204.932633] __get_free_pages+0xf/0x40 [ 204.932647] get_zeroed_page+0x11/0x20 [ 204.932657] mount_fs+0x1d2/0x2a7 [ 204.932674] vfs_kern_mount.part.0+0x5e/0x3d0 [ 204.932688] do_mount+0x417/0x27d0 [ 204.932702] ? copy_mount_options+0x5c/0x2f0 [ 204.974138] ? rcu_read_lock_sched_held+0x110/0x130 [ 204.979169] ? copy_mount_string+0x40/0x40 [ 204.983407] ? copy_mount_options+0x1fe/0x2f0 [ 204.987903] SyS_mount+0xab/0x120 [ 204.991366] ? copy_mnt_ns+0x8c0/0x8c0 [ 204.995259] do_syscall_64+0x1eb/0x630 [ 204.999146] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 205.003995] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 205.009179] RIP: 0033:0x458c29 [ 205.012372] RSP: 002b:00007f4c19fa4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 205.020080] RAX: ffffffffffffffda RBX: 00007f4c19fa4c90 RCX: 0000000000458c29 [ 205.027371] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 205.034642] RBP: 000000000073bf00 R08: 0000000020000240 R09: 0000000000000000 [ 205.041910] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c19fa56d4 [ 205.049181] R13: 00000000004c4c0e R14: 00000000004d8888 R15: 0000000000000003 06:37:22 executing program 3: r0 = open(&(0x7f0000520ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r0, 0x7fff) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000000)={0x2, 0x0, [0x2, 0x4, 0x401, 0xfe, 0x80000000, 0x0, 0x20, 0xffffffff]}) clock_gettime(0x6, &(0x7f00000018c0)={0x0, 0x0}) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000001800)='/selinux/member\x00', 0x2, 0x0) recvmmsg(r0, &(0x7f0000001680)=[{{&(0x7f0000001840)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)=""/111, 0x6f}, {&(0x7f0000000180)=""/251, 0xfb}], 0x2, &(0x7f00000002c0)=""/115, 0x73}, 0x5}, {{&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000001640)=[{&(0x7f00000003c0)=""/148, 0x94}, {&(0x7f0000000480)=""/189, 0xbd}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/215, 0xd7}], 0x4}, 0x5}], 0x2, 0x0, &(0x7f0000001740)={r1, r2+30000000}) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000001780)={@local, @remote, r3}, 0xc) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x806, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x7) sendfile(r4, r4, 0x0, 0xffffffff) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000d26ffc)) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000080)={{0x3b, @multicast2, 0x4e24, 0x3, 'sh\x00', 0x10, 0x2, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e23, 0x1, 0xffffffffffffffff, 0x6e38}}, 0x44) 06:37:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg(r1, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[{0x10, 0x84}], 0x10}, 0x0) syz_mount_image$nfs4(&(0x7f0000000080)='nfs4\x00', &(0x7f00000000c0)='./file0\x00', 0x400, 0x6, &(0x7f0000000500)=[{&(0x7f0000000100)="ff002d4a0985d19e3c8aa7ec4f728c45c28949c9acda889919b3c42b361e0b57f0423d2fd747ecba29c5f339c14cd8b228b7f05462461cf6596da46ea9dcdd30d8f44c342b692a87c8284ac1aeb1720ca2261749a02beca384d9e5215b23576c01", 0x61, 0x16d}, {&(0x7f0000000180)="7dadd24b8f6308fad48c6915472eb83144c60ead9dcc748c14afd4b195866ab59f5aafafef2646552acbdbfb7cdde5b5725ae7d934e4664f79fec0a177d1959dcf7be6692a0b6694023ded32fa17fb3ca005250d0332837838450af3b5c85b0b25181c339853f69794fb9c13b1e9fe583d0c18a9b7b602f157a28065e213f44cd79944f56a36af45b1eabdbb40fb6569d2167e97d789e3f1a9dc1362993c53f8c7a0520fe440", 0xa6, 0x7ff}, {&(0x7f0000000240)="3f011dc73de565c9d034a9b84a6308b27ecf4a2cd9e198c0618c9971db3a", 0x1e, 0xffffffffffffff81}, {&(0x7f00000002c0)="f80a7a5ce7616766708e177d9e722de55d568c6a5f23b258034a62531187bd86933f673369d856cac224695c0cb844ce4e37ae39de2ee257b0d4f001ab5d10614847ef715603c89b3c3a586d7aeb5cfe04c293cbecd3e88c3b1d105ffd6aeb1368199794cd3dcfd48814e0f80e6bf4c0b5a99d9ab79b04717aa8ebd081f1b20894745635106c96ade7a2ac515f806751b3893f8c274ba67f14b05b9385537bb55be797f9bdf95ac8eef03eefa81107fbcf6edd8362a8babc653a458a323510cde492d63aaeb5bd88abc743b5b2a52cfc646a58d2b6439fc2a22f14b91b40d28a6e86ef074447b300", 0xe8, 0xf6a0}, {&(0x7f00000003c0)="16816850c5a78290fa4584c8a18d503d2f77bfe6eb42c047694a2424a867ba22c8346ac7bb7ef1b518df9d725b3066dc5d099bad5a4553bcef98d3100650401af0cd838b1af5f84375b3fdfb82fe257f9af408f3d5907221c9b4d41401b6aa8d0c68b0716d0ae617369d53dfa9322f2cbd53b4fb334ee9ce826ba091035c094483385116b4f6e43737650f2da290f917cc896a06abef287b375fe5faaddc21dd6b7d3e24c8f2adb15aee2cf5f365635ef021aeb55c1e6e5f0a82ab9ad1e027c393759adf0f3a48d717", 0xc9, 0x2}, {&(0x7f00000004c0)="7ffb333d588be021afb43e9ca4d0217f0834c6b1fa29b1ec50b8e528a435a9754b887f9faae7bb4c47516e366a1f", 0x2e}], 0x15004, &(0x7f00000005c0)='[') 06:37:22 executing program 5: mknod$loop(&(0x7f0000000380)='./file0/file0\x00', 0x10020006004, 0x0) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(&(0x7f0000000040)=ANY=[@ANYBLOB="2eb8666902000000"], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='ext4\x00', 0x0, 0x0) mount(&(0x7f00000002c0)=@sg0='/dev/sg0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='cgroup\x00', 0x2000080, &(0x7f0000000440)='ext4\x00') prctl$PR_SET_UNALIGN(0x6, 0x1) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x1c, 0x80000) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000240)={{0xa, 0x4e22, 0x7f, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, [], 0xb}, 0x2}, 0x3, [0x1, 0x7ca57ee0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffa, 0x7fffffff, 0x3f, 0x1]}, 0x5c) syz_execute_func(&(0x7f0000000100)="3e0f8a00000100c402a19ef3460f745932dbc046d9e10f937893660f17befaffffff3626663ea541d2827670759cc401905e17") r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x82, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x8) 06:37:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) readv(r0, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x34) 06:37:22 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$NBD_CLEAR_SOCK(r1, 0xab08) ioctl(r0, 0x20, &(0x7f0000000080)="47e4a6") 06:37:22 executing program 4 (fault-call:1 fault-nth:6): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, &(0x7f0000000240)='\x00') 06:37:22 executing program 3: perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ff4000/0x9000)=nil, 0x9000, 0xa) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) ioprio_get$uid(0x3, r0) clone(0x9c0400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:37:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xffffa}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000100)=ANY=[@ANYBLOB="9cbe8468b23b222bbd890140410b1471d99f7a229343d78d50f283c40475150e9801bb07ea0185c43994bb486bcd9cb8a9629cbde253661ccbb0ed83f3636478e256bfad61a26076b8add34252bd1d75989f1ed8c6324ea2ffe9d17fdf0852b2883ec31a8a64ada98b92b214dcc9176316f5e0a6ce158a1ac50000"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000025000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x713c3a790a72bb52) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 205.357916] FAULT_INJECTION: forcing a failure. [ 205.357916] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 205.370139] CPU: 1 PID: 8387 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 205.377599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 205.387122] Call Trace: [ 205.389941] dump_stack+0x138/0x19c [ 205.393582] should_fail.cold+0x10f/0x159 [ 205.397907] __alloc_pages_nodemask+0x1d6/0x7a0 [ 205.402783] ? fs_reclaim_acquire+0x20/0x20 [ 205.407427] ? __alloc_pages_slowpath+0x2930/0x2930 [ 205.412484] cache_grow_begin+0x80/0x410 [ 205.416558] kmem_cache_alloc+0x6a8/0x780 [ 205.420716] ? lock_downgrade+0x6e0/0x6e0 [ 205.424870] alloc_vfsmnt+0x28/0x7d0 [ 205.428616] vfs_kern_mount.part.0+0x2a/0x3d0 [ 205.433116] do_mount+0x417/0x27d0 [ 205.436654] ? copy_mount_options+0x5c/0x2f0 [ 205.441086] ? rcu_read_lock_sched_held+0x110/0x130 [ 205.446106] ? copy_mount_string+0x40/0x40 [ 205.450353] ? copy_mount_options+0x1fe/0x2f0 [ 205.454850] SyS_mount+0xab/0x120 [ 205.458310] ? copy_mnt_ns+0x8c0/0x8c0 [ 205.462212] do_syscall_64+0x1eb/0x630 [ 205.466610] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 205.471462] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 205.476646] RIP: 0033:0x458c29 [ 205.479845] RSP: 002b:00007f4c19fa4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 205.487552] RAX: ffffffffffffffda RBX: 00007f4c19fa4c90 RCX: 0000000000458c29 [ 205.494822] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 06:37:22 executing program 3: syz_init_net_socket$ax25(0x3, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f0000001080)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000002c0)="80", 0x1, 0xfffffffffffffffe) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x240080, 0x0) write$UHID_CREATE2(r2, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vsock\x00', 0x284000, 0x0) accept4$rose(0xffffffffffffffff, 0x0, &(0x7f00000004c0), 0x800) syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f0000000340)={@remote}, &(0x7f00000003c0)=0x14) getpeername(r2, &(0x7f0000000580)=@hci, 0x0) accept$packet(r2, 0x0, &(0x7f0000000600)) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@remote, @in6=@loopback}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000000680)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000b00)={{{@in6=@ipv4={[], [], @remote}, @in6}}, {{@in=@dev}, 0x0, @in6=@empty}}, &(0x7f0000000700)=0xe8) accept4$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14, 0x80800) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000c40)={{{@in=@remote, @in6=@local}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f0000000d40)=0xe8) getpeername$packet(r3, &(0x7f0000000d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000dc0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000f00)={{{@in=@initdev, @in6=@empty}}, {{}, 0x0, @in6=@initdev}}, &(0x7f0000001000)=0xe8) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000001180)={@local}, &(0x7f00000011c0)=0x14) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001240)) getsockname$packet(r3, &(0x7f0000001340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001380)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000002800)={{{@in=@broadcast, @in6=@initdev}}, {{@in=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000003240)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20810}, 0xc, &(0x7f0000003200)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="54000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000002400040002000301000800000000ff93050000003f0020000180ffff0900096cffffffff64000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000003400040005000006ff0f00001f000406ff030000000002050300000003000102030000000900010307000000040008030008000038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000008000300030000000800040000000000"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x800) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x200, 0x0) add_key$user(&(0x7f0000000640)='user\x00', &(0x7f0000000540)={'syz'}, &(0x7f00000000c0), 0xc6, 0xfffffffffffffffd) sysinfo(&(0x7f00000007c0)=""/154) ioctl$BLKPG(r1, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) 06:37:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008915, &(0x7f0000000140)="0adc1f123c123f719bd070") ppoll(&(0x7f0000000040)=[{r0, 0x70}, {r0, 0x280}, {r0, 0x4000}], 0x3, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000180)={0x1}, 0x8) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000000107031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 205.502095] RBP: 000000000073bf00 R08: 0000000020000240 R09: 0000000000000000 [ 205.509380] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c19fa56d4 [ 205.516650] R13: 00000000004c4c0e R14: 00000000004d8888 R15: 0000000000000003 [ 205.531159] block nbd0: NBD_DISCONNECT 06:37:22 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0xffffff38) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4, @broadcast}, 0x1b87) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x1c) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x6fab}, 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x35b) 06:37:22 executing program 4 (fault-call:1 fault-nth:7): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, &(0x7f0000000240)='\x00') [ 205.694760] FAULT_INJECTION: forcing a failure. [ 205.694760] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 205.734135] CPU: 1 PID: 8405 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 205.741100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 205.741106] Call Trace: [ 205.741128] dump_stack+0x138/0x19c [ 205.741150] should_fail.cold+0x10f/0x159 [ 205.741164] ? __might_sleep+0x93/0xb0 [ 205.741182] __alloc_pages_nodemask+0x1d6/0x7a0 [ 205.741196] ? check_preemption_disabled+0x3c/0x250 [ 205.741211] ? __alloc_pages_slowpath+0x2930/0x2930 [ 205.741224] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 205.741238] ? __alloc_pages_nodemask+0x63b/0x7a0 06:37:23 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) r1 = dup2(r0, r0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="ab903eb7aa7793d4e2eece1d"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x0, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000240)='/dev/midi#\x00', 0x0, 0x80000) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) fanotify_mark(r1, 0x8, 0x0, r1, &(0x7f0000000040)='./file0\x00') recvmmsg(r2, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40, &(0x7f00000009c0)={0x0, 0x989680}) lstat(&(0x7f0000000300)='./file0\x00', 0x0) write(0xffffffffffffffff, 0x0, 0x0) [ 205.741254] alloc_pages_current+0xec/0x1e0 [ 205.741269] __get_free_pages+0xf/0x40 [ 205.741280] get_zeroed_page+0x11/0x20 [ 205.741292] selinux_sb_copy_data+0x2a/0x390 [ 205.741312] security_sb_copy_data+0x7b/0xb0 [ 205.741328] mount_fs+0x1f2/0x2a7 [ 205.741347] vfs_kern_mount.part.0+0x5e/0x3d0 [ 205.741362] do_mount+0x417/0x27d0 [ 205.741374] ? copy_mount_options+0x5c/0x2f0 [ 205.741386] ? rcu_read_lock_sched_held+0x110/0x130 [ 205.741402] ? copy_mount_string+0x40/0x40 [ 205.741420] ? copy_mount_options+0x1fe/0x2f0 06:37:23 executing program 4 (fault-call:1 fault-nth:8): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, &(0x7f0000000240)='\x00') [ 205.741435] SyS_mount+0xab/0x120 [ 205.741446] ? copy_mnt_ns+0x8c0/0x8c0 [ 205.741461] do_syscall_64+0x1eb/0x630 [ 205.741472] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 205.741492] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 205.741502] RIP: 0033:0x458c29 [ 205.741509] RSP: 002b:00007f4c19fa4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 205.741522] RAX: ffffffffffffffda RBX: 00007f4c19fa4c90 RCX: 0000000000458c29 [ 205.741530] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 06:37:23 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppoe(r0, &(0x7f0000000280)={0x18, 0x0, {0x0, @random="b4080cd758ef", 'r\x00\x00\x1b\x00\x00\xff\x03\x00'}}, 0x1e) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x74, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0x3, @local, 0x800}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e22, 0x401, @loopback, 0x3}, @in6={0xa, 0x4e23, 0x3d4, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}]}, &(0x7f00000001c0)=0x10) ioctl$TIOCNXCL(r1, 0x540d) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000200)={r2, 0x535}, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="010000003990a324c30a63c365e561614abbb790a45cdc8d8d9bac0d4d822a929a09da9afb94a902d99aa0334d80daf19da5ddfe5cb1c531b7cabc67ac84010e11759cc5ff19126427b89168ca58abf3cb7045f47ce281c3f55d508af81a5498f1cfd8deaf56efb2b7ac478fe90362986c7e", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010069706970000000000c000200080098bc32f5f192"], 0x3c}}, 0x0) ioctl$TIOCCONS(r1, 0x541d) [ 205.741537] RBP: 000000000073bf00 R08: 0000000020000240 R09: 0000000000000000 [ 205.741545] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c19fa56d4 [ 205.741552] R13: 00000000004c4c0e R14: 00000000004d8888 R15: 0000000000000003 [ 205.782746] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'. [ 205.931362] FAULT_INJECTION: forcing a failure. [ 205.931362] name failslab, interval 1, probability 0, space 0, times 0 [ 206.008410] CPU: 1 PID: 8413 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 206.015390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 206.024751] Call Trace: [ 206.027364] dump_stack+0x138/0x19c [ 206.031023] should_fail.cold+0x10f/0x159 [ 206.035186] should_failslab+0xdb/0x130 [ 206.039171] kmem_cache_alloc_trace+0x2ec/0x790 [ 206.043846] ? lock_downgrade+0x6e0/0x6e0 [ 206.043867] sget_userns+0xfe/0xc30 [ 206.043879] ? kernfs_sop_show_path+0x1b0/0x1b0 [ 206.043894] ? kernfs_sop_show_options+0x190/0x190 [ 206.043906] kernfs_mount_ns+0xe9/0x790 [ 206.056329] cgroup_do_mount+0x9e/0x420 [ 206.069175] ? init_cgroup_root+0x310/0x310 [ 206.069188] ? ns_capable_common+0x12c/0x160 [ 206.069202] cgroup_mount+0x789/0x8b0 [ 206.069218] ? cgroup_attach_task+0x6d0/0x6d0 [ 206.069236] ? security_sb_copy_data+0x87/0xb0 [ 206.081739] mount_fs+0x9d/0x2a7 [ 206.081759] vfs_kern_mount.part.0+0x5e/0x3d0 [ 206.081774] do_mount+0x417/0x27d0 [ 206.090857] ? copy_mount_options+0x5c/0x2f0 [ 206.090872] ? rcu_read_lock_sched_held+0x110/0x130 [ 206.090886] ? copy_mount_string+0x40/0x40 [ 206.090902] ? copy_mount_options+0x1fe/0x2f0 [ 206.090916] SyS_mount+0xab/0x120 [ 206.090926] ? copy_mnt_ns+0x8c0/0x8c0 [ 206.090941] do_syscall_64+0x1eb/0x630 [ 206.131830] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 206.136690] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 206.141885] RIP: 0033:0x458c29 [ 206.145072] RSP: 002b:00007f4c19fa4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 206.153132] RAX: ffffffffffffffda RBX: 00007f4c19fa4c90 RCX: 0000000000458c29 [ 206.160495] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 206.167765] RBP: 000000000073bf00 R08: 0000000020000240 R09: 0000000000000000 [ 206.175048] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c19fa56d4 [ 206.182329] R13: 00000000004c4c0e R14: 00000000004d8888 R15: 0000000000000003 06:37:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x2000, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f00000001c0)={0xe78, 0x9ff, &(0x7f0000000100), &(0x7f0000000140)="3466c3e894b69bcdd9bad5c203eb8fff23d9c25c779f31c31a54d57c8a616e48309d4726d0856419b590627046547bfd52754df769a777e436ff72a15d5b39e904b0eeced26ba02ae6c5", 0x0, 0x4a}) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0x666) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x200000, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000300)={{{@in=@multicast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000400)=0xe8) setsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000440)={@empty, r4}, 0x14) r5 = openat$cgroup_int(r2, &(0x7f0000001780)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2c}]}, 0x1e4) 06:37:23 executing program 2: r0 = socket$kcm(0x11, 0xa, 0x300) sendmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000b80), 0x0, &(0x7f0000000c40)}, 0x20000040) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x25ea2887, 0x800) getpid() getsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x4) 06:37:23 executing program 3: syz_init_net_socket$ax25(0x3, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f0000001080)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000002c0)="80", 0x1, 0xfffffffffffffffe) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x240080, 0x0) write$UHID_CREATE2(r2, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vsock\x00', 0x284000, 0x0) accept4$rose(0xffffffffffffffff, 0x0, &(0x7f00000004c0), 0x800) syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f0000000340)={@remote}, &(0x7f00000003c0)=0x14) getpeername(r2, &(0x7f0000000580)=@hci, 0x0) accept$packet(r2, 0x0, &(0x7f0000000600)) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@remote, @in6=@loopback}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000000680)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000b00)={{{@in6=@ipv4={[], [], @remote}, @in6}}, {{@in=@dev}, 0x0, @in6=@empty}}, &(0x7f0000000700)=0xe8) accept4$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14, 0x80800) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000c40)={{{@in=@remote, @in6=@local}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f0000000d40)=0xe8) getpeername$packet(r3, &(0x7f0000000d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000dc0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000f00)={{{@in=@initdev, @in6=@empty}}, {{}, 0x0, @in6=@initdev}}, &(0x7f0000001000)=0xe8) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000001180)={@local}, &(0x7f00000011c0)=0x14) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001240)) getsockname$packet(r3, &(0x7f0000001340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001380)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000002800)={{{@in=@broadcast, @in6=@initdev}}, {{@in=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000003240)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20810}, 0xc, &(0x7f0000003200)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="54000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000002400040002000301000800000000ff93050000003f0020000180ffff0900096cffffffff64000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000003400040005000006ff0f00001f000406ff030000000002050300000003000102030000000900010307000000040008030008000038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000008000300030000000800040000000000"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x800) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x200, 0x0) add_key$user(&(0x7f0000000640)='user\x00', &(0x7f0000000540)={'syz'}, &(0x7f00000000c0), 0xc6, 0xfffffffffffffffd) sysinfo(&(0x7f00000007c0)=""/154) ioctl$BLKPG(r1, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) 06:37:23 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0xfffffffffffffffe) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) 06:37:23 executing program 4 (fault-call:1 fault-nth:9): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, &(0x7f0000000240)='\x00') 06:37:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x100004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0x8, 0x7ff, 0x8}) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10}, 0x78) [ 206.318760] FAULT_INJECTION: forcing a failure. [ 206.318760] name failslab, interval 1, probability 0, space 0, times 0 [ 206.351432] CPU: 0 PID: 8440 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 206.358399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 06:37:23 executing program 1: gettid() syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x1000000004e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000002c0)=0xda8, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000200)=""/32) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) recvfrom(r1, &(0x7f0000000640)=""/69, 0xffffffffffffffd5, 0x0, 0x0, 0x3b0) flistxattr(r0, &(0x7f00000006c0)=""/4096, 0x1000) futex(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff}, 0x20) [ 206.367763] Call Trace: [ 206.370370] dump_stack+0x138/0x19c [ 206.374025] should_fail.cold+0x10f/0x159 [ 206.378191] should_failslab+0xdb/0x130 [ 206.382176] kmem_cache_alloc_trace+0x2ec/0x790 [ 206.386846] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 206.386857] ? sget_userns+0xfe/0xc30 [ 206.386869] ? rcu_read_lock_sched_held+0x110/0x130 [ 206.386885] selinux_sb_alloc_security+0x46/0x220 [ 206.405969] security_sb_alloc+0x73/0xb0 [ 206.410136] sget_userns+0x196/0xc30 [ 206.413856] ? kernfs_sop_show_path+0x1b0/0x1b0 [ 206.418533] ? kernfs_sop_show_options+0x190/0x190 [ 206.423473] kernfs_mount_ns+0xe9/0x790 [ 206.427461] cgroup_do_mount+0x9e/0x420 [ 206.431441] ? init_cgroup_root+0x310/0x310 [ 206.435760] ? ns_capable_common+0x12c/0x160 [ 206.440171] cgroup_mount+0x789/0x8b0 [ 206.443976] ? cgroup_attach_task+0x6d0/0x6d0 [ 206.448484] ? security_sb_copy_data+0x87/0xb0 [ 206.453092] mount_fs+0x9d/0x2a7 [ 206.456469] vfs_kern_mount.part.0+0x5e/0x3d0 [ 206.460970] do_mount+0x417/0x27d0 [ 206.465473] ? copy_mount_options+0x5c/0x2f0 [ 206.469877] ? rcu_read_lock_sched_held+0x110/0x130 [ 206.474898] ? copy_mount_string+0x40/0x40 [ 206.479137] ? copy_mount_options+0x1fe/0x2f0 [ 206.483631] SyS_mount+0xab/0x120 [ 206.487092] ? copy_mnt_ns+0x8c0/0x8c0 [ 206.490981] do_syscall_64+0x1eb/0x630 [ 206.494864] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 206.499706] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 206.504886] RIP: 0033:0x458c29 [ 206.508065] RSP: 002b:00007f4c19fa4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 06:37:23 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000000)=0x3) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$P9_RLOCK(r2, &(0x7f0000000200)={0x8, 0x35, 0x2, 0x3}, 0x8) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f00000001c0)={0x1, 0xbdd, &(0x7f00000000c0)="29262442c43cad5b8e1b", &(0x7f0000000140)="4044f0aade7bda3e33f6fb6bc1b780df292794704742f4cc93346f45da61034b1a2c454b2af9b6f82f4ac30a3af0792ecd5d756ebe02ea77bb90d0446f68231b41e583174d2d011168e61a00a5b80077b0a3a06747301826578f75cb73989d", 0xa, 0x5f}) r3 = dup2(r0, r1) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000040)) [ 206.515857] RAX: ffffffffffffffda RBX: 00007f4c19fa4c90 RCX: 0000000000458c29 [ 206.523117] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 206.530380] RBP: 000000000073bf00 R08: 0000000020000240 R09: 0000000000000000 [ 206.537644] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c19fa56d4 [ 206.544906] R13: 00000000004c4c0e R14: 00000000004d8888 R15: 0000000000000003 06:37:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getgroups(0x8, &(0x7f0000000040)=[0xee00, 0xee01, 0x0, 0xee01, 0xee00, 0xee00, 0xffffffffffffffff, 0xee01]) setfsgid(r1) ioctl(r0, 0x100000a911, &(0x7f0000000200)="160a8992cde7e825d35f5f00a3c560e2d48d17d9d3d15981acf3691a6ca45e19f25fd51195bc6036412c14c20010622c8f30a38a964f2f46b097c5d6fd3ab23a5ed63b59a5f7608bb986f5ee5efb236e142e61b1f0e4137f13ade951d2420b869c14b693b48d6480cc7727c237f84421537df97d8508a489bb3dbfd1f2fa634bc67eaaf388a7de2e63486e7662251b758649815b761d09f6ca7ad0a655614c55cc112ad11937df471a91d8f5cd0000000000000056eecba7d4ea393f8f5e0374d1293fa05d6a24abc342f38ed10f006aec08e68035f462936a9610e38cd1ca6c0557e062ee783d742995ffafe98b1944128d75b152ddc5cc9b6848c776a7d61274f21586713a72e77f7bd9c032c5c6a0ec5091c6f31a7b2b9730e6b1") socket$inet_udplite(0x2, 0x2, 0x88) 06:37:23 executing program 4 (fault-call:1 fault-nth:10): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, &(0x7f0000000240)='\x00') [ 206.648797] FAULT_INJECTION: forcing a failure. [ 206.648797] name failslab, interval 1, probability 0, space 0, times 0 [ 206.702656] CPU: 0 PID: 8462 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 206.709614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 206.719017] Call Trace: [ 206.721619] dump_stack+0x138/0x19c [ 206.725260] should_fail.cold+0x10f/0x159 [ 206.729425] should_failslab+0xdb/0x130 [ 206.733405] __kmalloc+0x2f3/0x7a0 [ 206.736983] ? __list_lru_init+0x6b/0x630 [ 206.741153] __list_lru_init+0x6b/0x630 [ 206.745136] sget_userns+0x4e3/0xc30 [ 206.748855] ? kernfs_sop_show_path+0x1b0/0x1b0 [ 206.753537] ? kernfs_sop_show_options+0x190/0x190 [ 206.758481] kernfs_mount_ns+0xe9/0x790 [ 206.762471] cgroup_do_mount+0x9e/0x420 [ 206.766463] ? init_cgroup_root+0x310/0x310 [ 206.770801] ? ns_capable_common+0x12c/0x160 [ 206.775221] cgroup_mount+0x789/0x8b0 [ 206.779038] ? cgroup_attach_task+0x6d0/0x6d0 [ 206.783545] ? security_sb_copy_data+0x87/0xb0 [ 206.788129] mount_fs+0x9d/0x2a7 [ 206.791510] vfs_kern_mount.part.0+0x5e/0x3d0 [ 206.796023] do_mount+0x417/0x27d0 06:37:24 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x10, &(0x7f00000002c0)={0x0, 0x0, 0x3f00}, 0xc) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x100) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)={0x1, 0xa, 0x4, 0x1000000, {0x77359400}, {0x5, 0x0, 0xffffffffffffffff, 0x8, 0x3, 0xffffffffffffff7f, "073dfdb9"}, 0xfffffffffffffff8, 0x2, @userptr=0xfffffffffffffffa, 0x4}) 06:37:24 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x400, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x4e, 0x40200) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0xa) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000180)={0x2, r2}) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000001c0)={{0x3b, @dev={0xac, 0x14, 0x14, 0xb}, 0x4e20, 0x2, 'nq\x00', 0x1, 0x70f, 0x6c}, {@loopback, 0x4e20, 0x0, 0xd, 0x400000, 0x5}}, 0x44) write$ppp(r1, &(0x7f0000000280)="655f99157cf64570b8d47a93797d5d509823c93d865bdc521f02ba8c0243b8921057941459741452f3cf0694e2afd7b09e8a4c2441", 0x35) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSCLOCKID(r3, 0x40284504, &(0x7f0000000000)=0x2a2) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x10000, 0x767}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000240)={r4, 0x7, 0x81}, 0x8) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x100013, r1, 0x30) 06:37:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x200, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000301}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x728, 0x70bd2b, 0x25dfdbfe, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000139ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000000)="be", 0x1}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0xb) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0xffffffff) sendmmsg$inet_sctp(r1, &(0x7f000093eee8)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, 0x0, 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x203}}], 0x20}], 0x1, 0x0) 06:37:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x6) fcntl$setstatus(r1, 0x4, 0x42803) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) accept$netrom(r2, 0x0, &(0x7f0000000000)) [ 206.799578] ? copy_mount_string+0x40/0x40 [ 206.803811] ? copy_mount_options+0x151/0x2f0 [ 206.808312] ? __sanitizer_cov_trace_pc+0x38/0x60 [ 206.813166] ? copy_mount_options+0x1fe/0x2f0 [ 206.817668] SyS_mount+0xab/0x120 [ 206.821133] ? copy_mnt_ns+0x8c0/0x8c0 [ 206.825041] do_syscall_64+0x1eb/0x630 [ 206.828936] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 206.833795] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 206.838991] RIP: 0033:0x458c29 [ 206.842195] RSP: 002b:00007f4c19fa4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 206.849921] RAX: ffffffffffffffda RBX: 00007f4c19fa4c90 RCX: 0000000000458c29 [ 206.857195] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 206.864472] RBP: 000000000073bf00 R08: 0000000020000240 R09: 0000000000000000 [ 206.871745] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c19fa56d4 [ 206.879031] R13: 00000000004c4c0e R14: 00000000004d8888 R15: 0000000000000003 [ 206.915344] IPVS: set_ctl: invalid protocol: 59 172.20.20.11:20000 06:37:24 executing program 4 (fault-call:1 fault-nth:11): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, &(0x7f0000000240)='\x00') 06:37:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup(r1) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000001100)={0x2, 0x100000000}, 0x2) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)=""/4096, &(0x7f00000010c0)=0x1000) [ 207.043431] FAULT_INJECTION: forcing a failure. [ 207.043431] name failslab, interval 1, probability 0, space 0, times 0 [ 207.098133] CPU: 1 PID: 8487 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 207.105102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 207.114477] Call Trace: [ 207.117077] dump_stack+0x138/0x19c [ 207.120720] should_fail.cold+0x10f/0x159 [ 207.124961] should_failslab+0xdb/0x130 [ 207.128954] __kmalloc+0x2f3/0x7a0 [ 207.132500] ? __list_lru_init+0x6b/0x630 [ 207.136683] __list_lru_init+0x6b/0x630 [ 207.140678] sget_userns+0x503/0xc30 06:37:24 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000) r1 = semget$private(0x0, 0x4045, 0x563) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x879f) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:textrel_shlib_t:s0\x00', 0x25) semctl$SETVAL(r1, 0x5, 0x10, &(0x7f0000000040)=0x7) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/24) prctl$PR_MCE_KILL_GET(0x22) [ 207.144397] ? kernfs_sop_show_path+0x1b0/0x1b0 [ 207.149159] ? kernfs_sop_show_options+0x190/0x190 [ 207.154109] kernfs_mount_ns+0xe9/0x790 [ 207.158095] cgroup_do_mount+0x9e/0x420 [ 207.162072] ? init_cgroup_root+0x310/0x310 [ 207.166394] ? ns_capable_common+0x12c/0x160 [ 207.170826] cgroup_mount+0x789/0x8b0 [ 207.174641] ? cgroup_attach_task+0x6d0/0x6d0 [ 207.179153] ? security_sb_copy_data+0x87/0xb0 [ 207.183754] mount_fs+0x9d/0x2a7 [ 207.187143] vfs_kern_mount.part.0+0x5e/0x3d0 [ 207.191652] do_mount+0x417/0x27d0 06:37:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000300)='timers\x00') timer_create(0x0, 0x0, &(0x7f0000000240)) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000002e40)=""/147, 0x93}], 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) write$evdev(r1, &(0x7f0000001340)=[{{0x77359400}, 0x17, 0x0, 0xfffffffffffffffa}, {{}, 0x16, 0x0, 0xffff}, {{}, 0x4, 0x3, 0x2}, {{}, 0x1f, 0x3, 0x9}, {{0x0, 0x2710}, 0x17, 0xc16, 0x9}, {{}, 0x1, 0xe3e5, 0x1}, {{r2, r3/1000+30000}, 0x14, 0x8c, 0x1000}, {{r4, r5/1000+30000}, 0x4, 0x46, 0x9}, {{}, 0x1f, 0x4, 0x1f}], 0xd8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @broadcast, @broadcast}, &(0x7f00000001c0)=0xc) io_setup(0x5, &(0x7f0000000040)=0x0) io_cancel(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x20, r0, &(0x7f0000000340)="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", 0x1000, 0x44, 0x0, 0x2, r1}, &(0x7f00000000c0)) preadv(r1, &(0x7f00000017c0), 0x267, 0x800000040000) [ 207.195202] ? copy_mount_options+0x5c/0x2f0 [ 207.199642] ? rcu_read_lock_sched_held+0x110/0x130 [ 207.204677] ? copy_mount_string+0x40/0x40 [ 207.208925] ? copy_mount_options+0x1fe/0x2f0 [ 207.213433] SyS_mount+0xab/0x120 [ 207.216892] ? copy_mnt_ns+0x8c0/0x8c0 [ 207.220796] do_syscall_64+0x1eb/0x630 [ 207.224691] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 207.229555] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 207.234746] RIP: 0033:0x458c29 [ 207.237944] RSP: 002b:00007f4c19fa4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 207.245680] RAX: ffffffffffffffda RBX: 00007f4c19fa4c90 RCX: 0000000000458c29 [ 207.252965] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 207.260333] RBP: 000000000073bf00 R08: 0000000020000240 R09: 0000000000000000 [ 207.267699] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c19fa56d4 [ 207.274986] R13: 00000000004c4c0e R14: 00000000004d8888 R15: 0000000000000003 06:37:24 executing program 1: openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f00000004c0)=0x100040000) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000080)={{0x16, @remote, 0x4e23, 0x1, 'lc\x00', 0x10, 0xf962}, {@multicast2, 0x4e21, 0x0, 0x6154, 0x7, 0x401}}, 0x44) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000340)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @local}, {0x2, 0x4e22, @multicast2}, 0x14, 0x0, 0x0, 0x0, 0x7b, &(0x7f0000000300)='batadv0\x00', 0x7, 0x100, 0x5d10}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x404, 0xffffffffffffffff) r3 = socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f0000000040)={0x0, 0x0, [0x3, 0x0, 0x100000000, 0x0, 0x5, 0x0, 0xb7]}) clone(0x200000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="0e7ed675a61a4426bc49b7b25e10dade8d0f630222a47d58c29dffc4ce1cdf91218a1aef3bb6025d68b982f1e73b5f453930e2e34455d923c7149079650722f777", 0x41, 0xfffffffffffffff9) r4 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) request_key(0x0, 0x0, 0x0, r4) write$FUSE_OPEN(r1, &(0x7f0000000400)={0x20, 0x0, 0x6, {0x0, 0x4}}, 0x20) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000240)=0x5) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/attr/current\x00', 0x2, 0x0) fcntl$setflags(r3, 0x2, 0x1) 06:37:24 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = memfd_create(&(0x7f0000000040)='/dev/autofs\x00', 0x0) io_setup(0xffffffffffff7c7a, &(0x7f0000000080)=0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video0\x00', 0x2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000400)={0x0, @multicast1, @broadcast}, &(0x7f0000000440)=0xc) r2 = syz_open_dev$sndpcmp(&(0x7f0000000340)='/dev/snd/pcmC#D#p\x00', 0xbed9, 0x1) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f00000004c0)={0x100000001, 0x9, 0x5, {r3, r4+30000000}, 0x6, 0x80}) timer_create(0x1, &(0x7f0000000100)={0x0, 0x2, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000580)=0x0) timer_settime(r5, 0x1, &(0x7f0000000600)={{0x77359400}, {0x0, 0x1c9c380}}, &(0x7f0000000680)) io_submit(r1, 0x2, &(0x7f00000003c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0xfff, r0, &(0x7f0000000140)="003164659f8176f411682f7ea4abd451c78ecf3a70146d07e5b1e033f1ef972fa414c3c087d6219b3609ff65ca0b5092ec69cee11bac021252fbea8371957cb563b0b3eb4d3b1d598cb4f7e9dee8aafd0a3853e7dc529aed3dc9e933b5b6cd99a13b365e7d5a881c49c69d9c10527a77ed9685254de18f7f7867fd92c2e1e9483d", 0x81, 0x5ed}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xffff, r0, &(0x7f0000000240)="7672dc170ff1e37440303653385fce8b62fd0db5a0623384486d8e9573e6598ae9270312dc949e7e6e08757221fefce95b2d43003fb997a37cb642eb79ccac9f4503c00a3749049dbc646a64f7bb499e1b9291847a1bc8ddb1256d3262bd225c22efa0c1b80026d9081d1ecd67959f1c1f2df4d9727cfabf7835acf6813029d8fc54421f8c69d2c1a8c767c833e653859a92092ff576b674cdda3042dd58c3266b99207e6f17a9299089fcc0713058db52d0aed27af5907c717279d04e702ca0e40709ed3b312690b40026485b1dbbab0f40139b7f305851abe6645e1251d768f2883cb4533b59e5d20a0299", 0xec, 0x29b66eac, 0x0, 0x0, r2}]) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x12, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f00000000c0)='maps\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) clone(0x40002102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/cuse\x00', 0x2, 0x0) socket$inet(0x2, 0x0, 0x5) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000540)=0x3) syz_open_procfs(0x0, &(0x7f0000000880)='s\"\xc6jw\x19\x91;maps\x00') 06:37:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000040)) ptrace(0x10, r1) r2 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) waitid(0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)) 06:37:24 executing program 4 (fault-call:1 fault-nth:12): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, &(0x7f0000000240)='\x00') 06:37:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="0000001000000100020000") r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) accept(r1, 0x0, 0x0) 06:37:24 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x31f, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f00000000c0)={0x2, 0x8, 0x3, 0x2}) syz_genetlink_get_family_id$tipc2(0x0) 06:37:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000100)={0x2, 0x80000000007, 0x1, 0x1, 0x8, 0x7}) chmod(&(0x7f0000000040)='./file0\x00', 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x77, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x0, @local}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd9c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f260819e24134091ec15ef28188179"}, 0xd8) ioctl$int_in(r1, 0x5452, &(0x7f00000007c0)=0x8) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000000c0), 0x4) recvfrom$inet(r1, &(0x7f00000001c0)=""/80, 0x50, 0x2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x240, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x9400}], 0x1}, 0x0) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 207.450643] FAULT_INJECTION: forcing a failure. [ 207.450643] name failslab, interval 1, probability 0, space 0, times 0 [ 207.499391] CPU: 0 PID: 8516 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 207.506361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 207.515747] Call Trace: [ 207.518378] dump_stack+0x138/0x19c [ 207.522030] should_fail.cold+0x10f/0x159 [ 207.526194] should_failslab+0xdb/0x130 [ 207.530185] __kmalloc+0x2f3/0x7a0 [ 207.533741] ? lock_downgrade+0x6e0/0x6e0 [ 207.537899] ? register_shrinker+0xbd/0x220 [ 207.542231] register_shrinker+0xbd/0x220 [ 207.546389] sget_userns+0x9c5/0xc30 [ 207.550116] ? kernfs_sop_show_path+0x1b0/0x1b0 [ 207.554885] ? kernfs_sop_show_options+0x190/0x190 [ 207.559830] kernfs_mount_ns+0xe9/0x790 [ 207.563820] cgroup_do_mount+0x9e/0x420 [ 207.567799] ? init_cgroup_root+0x310/0x310 [ 207.572129] ? ns_capable_common+0x12c/0x160 [ 207.576558] cgroup_mount+0x789/0x8b0 [ 207.580369] ? cgroup_attach_task+0x6d0/0x6d0 [ 207.584885] ? security_sb_copy_data+0x87/0xb0 [ 207.589574] mount_fs+0x9d/0x2a7 [ 207.592961] vfs_kern_mount.part.0+0x5e/0x3d0 [ 207.597473] do_mount+0x417/0x27d0 [ 207.601027] ? copy_mount_options+0x5c/0x2f0 [ 207.605443] ? rcu_read_lock_sched_held+0x110/0x130 [ 207.610495] ? copy_mount_string+0x40/0x40 [ 207.614746] ? copy_mount_options+0x1fe/0x2f0 [ 207.619258] SyS_mount+0xab/0x120 [ 207.622729] ? copy_mnt_ns+0x8c0/0x8c0 [ 207.626657] do_syscall_64+0x1eb/0x630 [ 207.630554] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 207.635417] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 207.640639] RIP: 0033:0x458c29 06:37:25 executing program 0: socket$packet(0x11, 0x3, 0x300) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=@known='user.syz\x00', &(0x7f0000000180)=""/122, 0x7a) r0 = socket$inet6(0xa, 0x3, 0x84) socket(0x40000000000001e, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) [ 207.643862] RSP: 002b:00007f4c19fa4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 207.651589] RAX: ffffffffffffffda RBX: 00007f4c19fa4c90 RCX: 0000000000458c29 [ 207.658956] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 207.666241] RBP: 000000000073bf00 R08: 0000000020000240 R09: 0000000000000000 [ 207.673534] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c19fa56d4 [ 207.680822] R13: 00000000004c4c0e R14: 00000000004d8888 R15: 0000000000000003 06:37:25 executing program 1: openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f00000004c0)=0x100040000) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000080)={{0x16, @remote, 0x4e23, 0x1, 'lc\x00', 0x10, 0xf962}, {@multicast2, 0x4e21, 0x0, 0x6154, 0x7, 0x401}}, 0x44) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000340)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @local}, {0x2, 0x4e22, @multicast2}, 0x14, 0x0, 0x0, 0x0, 0x7b, &(0x7f0000000300)='batadv0\x00', 0x7, 0x100, 0x5d10}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x404, 0xffffffffffffffff) r3 = socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f0000000040)={0x0, 0x0, [0x3, 0x0, 0x100000000, 0x0, 0x5, 0x0, 0xb7]}) clone(0x200000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="0e7ed675a61a4426bc49b7b25e10dade8d0f630222a47d58c29dffc4ce1cdf91218a1aef3bb6025d68b982f1e73b5f453930e2e34455d923c7149079650722f777", 0x41, 0xfffffffffffffff9) r4 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) request_key(0x0, 0x0, 0x0, r4) write$FUSE_OPEN(r1, &(0x7f0000000400)={0x20, 0x0, 0x6, {0x0, 0x4}}, 0x20) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000240)=0x5) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/attr/current\x00', 0x2, 0x0) fcntl$setflags(r3, 0x2, 0x1) [ 207.741686] kasan: CONFIG_KASAN_INLINE enabled [ 207.756535] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 207.785651] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 207.791917] Modules linked in: [ 207.795146] CPU: 1 PID: 8516 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 207.802077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 207.811442] task: ffff8880a5b7c040 task.stack: ffff888064358000 [ 207.817521] RIP: 0010:cgroup_kill_sb+0x2e/0x330 [ 207.822368] RSP: 0018:ffff88806435fac0 EFLAGS: 00010246 [ 207.827748] RAX: 0000000000000000 RBX: 00000000fffffff4 RCX: 0000000000000000 [ 207.835045] RDX: dffffc0000000000 RSI: ffffffff81a9506c RDI: ffff888063170330 [ 207.842430] RBP: ffff88806435fae0 R08: ffff8880a5b7c040 R09: ffff8880a5b7c8e0 [ 207.849834] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888063170300 [ 207.857120] R13: ffffffff877ad360 R14: ffff888063170300 R15: dffffc0000000000 [ 207.864407] FS: 00007f4c19fa5700(0000) GS:ffff8880aef00000(0000) knlGS:0000000000000000 [ 207.872656] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 207.878645] CR2: 00000000018fbcc0 CR3: 00000000a56c1000 CR4: 00000000001406e0 [ 207.885929] Call Trace: [ 207.888525] deactivate_locked_super+0x79/0xe0 [ 207.893139] sget_userns+0x9df/0xc30 [ 207.896863] ? kernfs_sop_show_path+0x1b0/0x1b0 [ 207.901621] ? kernfs_sop_show_options+0x190/0x190 [ 207.906570] kernfs_mount_ns+0xe9/0x790 [ 207.910558] cgroup_do_mount+0x9e/0x420 [ 207.914539] ? init_cgroup_root+0x310/0x310 [ 207.918870] ? ns_capable_common+0x12c/0x160 [ 207.923290] cgroup_mount+0x789/0x8b0 [ 207.927106] ? cgroup_attach_task+0x6d0/0x6d0 [ 207.931632] ? security_sb_copy_data+0x87/0xb0 [ 207.936222] mount_fs+0x9d/0x2a7 [ 207.939592] vfs_kern_mount.part.0+0x5e/0x3d0 [ 207.944093] do_mount+0x417/0x27d0 [ 207.947633] ? copy_mount_options+0x5c/0x2f0 [ 207.952051] ? rcu_read_lock_sched_held+0x110/0x130 [ 207.957095] ? copy_mount_string+0x40/0x40 [ 207.961340] ? copy_mount_options+0x1fe/0x2f0 [ 207.965844] SyS_mount+0xab/0x120 [ 207.969302] ? copy_mnt_ns+0x8c0/0x8c0 [ 207.973194] do_syscall_64+0x1eb/0x630 [ 207.977091] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 207.981949] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 207.987139] RIP: 0033:0x458c29 [ 207.990349] RSP: 002b:00007f4c19fa4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 207.998071] RAX: ffffffffffffffda RBX: 00007f4c19fa4c90 RCX: 0000000000458c29 [ 208.005374] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 208.012663] RBP: 000000000073bf00 R08: 0000000020000240 R09: 0000000000000000 [ 208.019921] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c19fa56d4 [ 208.027192] R13: 00000000004c4c0e R14: 00000000004d8888 R15: 0000000000000003 [ 208.034458] Code: e5 41 55 41 54 49 89 fc 53 48 83 ec 08 e8 0b 26 06 00 4c 89 e7 e8 33 9f 52 00 48 ba 00 00 00 00 00 fc ff df 48 89 c1 48 c1 e9 03 <80> 3c 11 00 0f 85 ca 02 00 00 48 8b 18 48 b8 00 00 00 00 00 fc [ 208.053573] RIP: cgroup_kill_sb+0x2e/0x330 RSP: ffff88806435fac0 [ 208.062108] protocol 88fb is buggy, dev hsr_slave_0 [ 208.067180] protocol 88fb is buggy, dev hsr_slave_1 [ 208.072344] protocol 88fb is buggy, dev hsr_slave_0 [ 208.077419] protocol 88fb is buggy, dev hsr_slave_1 [ 208.084111] ---[ end trace b71d90d83819430f ]--- [ 208.093256] Kernel panic - not syncing: Fatal exception [ 208.099327] Kernel Offset: disabled [ 208.102949] Rebooting in 86400 seconds..