6ecc60e377263f80dc49085eaddf9aa6e6b2e90ed782721fa5d25ee9f947da4eb7bfb6793ea74a645f594d391835efad61a1cac74b9bf9b6c22da378e86f6f859f4495018c09d69b3", 0x6e}, {&(0x7f0000001140)="235da3cf8d761556a3cbf3390eeceb35ebda21f0780d", 0x16}], 0x2, &(0x7f00000011c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40}], 0x4, 0x81) r2 = syz_open_dev$vcsa(&(0x7f0000000b80)='/dev/vcsa#\x00', 0x8, 0x10000) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000001200)=0x10040, 0x4) recvmmsg(r1, &(0x7f0000001380)=[{{&(0x7f0000000040)=@xdp, 0x80, &(0x7f0000001500), 0x0, &(0x7f0000000600)=""/147, 0x93}}, {{&(0x7f0000000f80)=@ipx, 0x80, &(0x7f00000012c0)=[{&(0x7f0000001280)=""/12, 0xc}], 0x1, &(0x7f0000001340)=""/18, 0x12}}], 0x2, 0x0, 0x0) [ 286.287827] device veth0_to_bridge left promiscuous mode [ 286.810209] hfsplus: unable to find HFS+ superblock [ 286.898530] hfsplus: unable to find HFS+ superblock 13:45:15 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000980)=""/230, 0xe6}], 0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r2, 0x4020940d, &(0x7f0000000040)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1}) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) 13:45:15 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="0401050005000e0000000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:15 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x2, 0x2000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000140)=@assoc_value, &(0x7f0000000180)=0x8) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000080)=""/43) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x8, 0xe0000001}]}, 0x20}, 0x1}, 0x0) 13:45:15 executing program 4: socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000040)={'veth0_to_bridge\x00', {0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fanotify_init(0x2, 0x0) r2 = pkey_alloc(0x0, 0x1) pkey_free(r2) 13:45:15 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="0401054a0500000000000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:15 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="45965a5c4f0f0000000030e12924ad83c980ba3cec5e2d2ad6ef20"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x4bb, &(0x7f0000000300)=""/187, 0x0, 0x0, [], 0x0, 0xb}, 0x48) r0 = socket$inet6(0xa, 0x2, 0x3f) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000400)={{0xa, 0x4e21, 0xbcc4, @loopback={0x0, 0x1}, 0x6090}, {0xa, 0x4e24, 0x162000000, @local={0xfe, 0x80, [], 0xaa}, 0x100000000}, 0x1, [0x7, 0x6, 0xfffffffffffffff7, 0x800, 0x8, 0x800, 0x400, 0x3f]}, 0x5c) 13:45:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCSSOFTCAR(r1, 0x5412, &(0x7f0000000000)) 13:45:15 executing program 2: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000244000)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000080)=0x80000000, 0x8) sendfile(r0, r1, &(0x7f00000000c0), 0x80008001) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_matches\x00') ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x7ff) 13:45:15 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) syz_mount_image$ntfs(&(0x7f00000001c0)='ntfs\x00', &(0x7f0000000200)='./file0\x00', 0x3, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="5f6ca6043f93c381818a6ec9c41028980536a08a8c61b42e5592ac29177d8adb9b322aa1cea9d118c80736ddc5dcbdd4b07a444c81b4e4c0677dd9b59ca97de9962b56ad17438f67f68723e7ecbf717e89c40828ea607313c5f41f9f800b4a8069a626fcebd3d5fd877e405ca91d3b34ccec0bb799d83fa960bd19ee7c499da3d1dbd8278774082d39fc6b98da31", 0x8e, 0x4}], 0xa0, &(0x7f0000000380)=ANY=[@ANYBLOB='errors=cbntinue,uid=4047\x002,\x00']) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000)=0x2, 0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000000c0), 0x4) close(0xffffffffffffffff) close(r1) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x389000, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000180)={0x2, 0x5}) r3 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x20000) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000100)=""/119) 13:45:16 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) syz_mount_image$f2fs(&(0x7f0000000080)='f2fs\x00', &(0x7f00000000c0)='./file0\x00', 0x3, 0x1, &(0x7f0000000100)=[{&(0x7f0000000240)="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", 0x1000, 0x5}], 0x10000, &(0x7f0000000140)={[{@alloc_mode_def='alloc_mode=default', 0x2c}, {@adaptive_mode='mode=adaptive', 0x2c}, {@prjjquota={'prjjquota', 0x3d, 'ppp1$'}, 0x2c}, {@inline_xattr='inline_xattr', 0x2c}, {@four_active_logs='active_logs=4', 0x2c}]}) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x80000000040, 0x4) r1 = dup3(r0, r0, 0x80000) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000000000)=0x3) syz_mount_image$ntfs(&(0x7f00000001c0)='ntfs\x00', &(0x7f0000001240)='./file0\x00', 0x181e7efd, 0x8, &(0x7f0000001640)=[{&(0x7f0000001280)="479f3bec303ef2a075f01eaff3e4466fb808ec75323686c048bee2aec789b8ef5c866ffc4d2e5d9cf3759a771e36f6b53d77b06245d9e32e6a70e8088efeb9009bbdcf1aca85164b49f42d752f24db99a55c73eead98069b0c3aa781ee0ef2f12f50374a", 0x64, 0x7}, {&(0x7f0000001300)="5a7a95f38fb725a5e4969a4ec42a08f3e54be3983f3e0e98be6e1912dc10bfe3def1247fb324", 0x26, 0x7c9d}, {&(0x7f0000001340)="72d0ffb6", 0x4, 0x4}, {&(0x7f0000001380)="0dee4d43c888d071366fa9173db22d0af74fd8a5a3a9f7323a33af7b9162f7a5d20191684753b6a6dab8d816ddc0ceffc3160e65633f435aa45670ca99ec6cefb8204b8e9d4ba6c9916965ffaec64be5d014ffaed3c54423e77ba70c18", 0x5d, 0x2}, {&(0x7f0000001400)="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", 0xfd, 0xe8b}, {&(0x7f0000001500)="6c8ee7396fdebd897bc784243c9ab432c4297712da8b8d2103442577e99840c1ee3a6060a438225ca61697bbd2fd6869597dd1f30dd806c4aca68a3c7662686482836d18585a7616448350fe733ad9ba2a74613d07e299ca77b59d2b8aa1b23f7aa58c200d15fc8b539b6e7d354a8fd64976aacedd8b598bb1b425ffcb1b7dd1f1b17982d7fd933ac4c34a54270507e15bf1d96f90eb1b5943d42a8bb33bf495efed3bd47cf678cf7da6db438be1039d0825dffc", 0xb4, 0x1}, {&(0x7f00000015c0)="8a480985", 0x4, 0x100}, {&(0x7f0000001600)="38d948360084121784b190abd2acbd8bbd89af3397573656494c3787e2b8c378b269e2d4628a202d9bc9", 0x2a, 0x45}], 0x80080, &(0x7f0000001700)={[{@errors_remount='errors=remount-ro', 0x2c}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, [0x36, 0x33, 0x31, 0x7f]}, 0x2c}]}) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000200)=0x4, 0x4) 13:45:16 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="0401050005000000003f0000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:16 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x40000, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000480), &(0x7f00000004c0)=0x4) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x40800, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x6faa) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="03000000837e270842de0c841505a60eb492a4a5471cde68c7990d652005cdc6f64cc897e4e6d29676e93db52425d353257770df07f5cace7701315af7ff0995f37bd0420c6cba327f8569482c2f6a8d0116646264dfe1b19def2c6a2a4687b98a4ce6ab7472b24cd92459627ad82146cb77a3a56f42f78946ac970ccdcf2c4a2abd52275ba30977a07457882fcd27f5f3184234d6d631cbfde230da5753626a6726e303127d876b4b24c00603ed99940000000000000000000000000000000000000000b8394dd87f3f119ab289e282b5bcc2de5484a380fe0f1c0f2a53d08c7d392d0f9ee8559c908e1a5bef3d15ddad408734e03760d45556154d9c8519f696d7308a7c6faa8d3282afd62fbb3a6242b5549422511dc44670754725c7faf77313a4c4d29aef6990d7153dee7d7fb0ab29673288bd4dd88bca0d21095cb52f2a69a71684f233362a70d54a4dd926ddbb7f101617999b6e753c90eadead80a8709a85716e437911270ea586fd6ab170f3ec0f92a20df09818d9b30b832247b950d3a110bd7fc0cabe5857e0cf75355e6383"]}) close(r4) execveat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000040)='proc%\'bdevwlan0\x00', &(0x7f0000000080)='},}}\x00', &(0x7f0000000240)='bdev/keyring(mime_type}&\'\x00'], &(0x7f00000003c0)=[&(0x7f00000002c0)='syz_tun\x00', &(0x7f0000000300)='syz_tun\x00', &(0x7f0000000340)='syz_tun\x00', &(0x7f0000000380)='eth0vmnet1\x00'], 0x100) close(r2) [ 287.316108] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x42dc430a) [ 287.324104] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 13:45:16 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)) getpgrp(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000400)=0x0) r2 = syz_open_procfs(r1, &(0x7f00000002c0)="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") preadv(r2, &(0x7f00000017c0)=[{&(0x7f0000000040)=""/183, 0xb7}, {&(0x7f0000000140)=""/127, 0x7f}, {&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000015c0)=""/224, 0xe0}, {&(0x7f00000016c0)=""/254, 0xfe}], 0x5, 0x0) 13:45:16 executing program 4: r0 = socket(0x2, 0x1001, 0x7ff) ioctl$sock_inet6_SIOCDELRT(r0, 0x8918, &(0x7f00000001c0)={@local={0xfe, 0x80, [], 0xaa}, @mcast1={0xff, 0x1, [], 0x1}}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x5, [0x0, 0xd42, 0x40, 0x2, 0x6]}, &(0x7f0000000040)=0xe) 13:45:16 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000000040000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:16 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="040105020500000000000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 287.407542] F2FS-fs (loop1): Unable to read 2th superblock [ 287.426816] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x42dc430a) [ 287.434747] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 287.498277] F2FS-fs (loop1): Unable to read 2th superblock [ 287.566508] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x42dc430a) [ 287.574283] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 287.613594] F2FS-fs (loop1): Unable to read 2th superblock [ 287.650429] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x42dc430a) [ 288.005789] FAULT_FLAG_ALLOW_RETRY missing 30 [ 288.010373] CPU: 0 PID: 20105 Comm: syz-executor6 Not tainted 4.18.0-rc1+ #111 [ 288.017741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 288.017750] Call Trace: [ 288.029700] dump_stack+0x1c9/0x2b4 [ 288.033331] ? dump_stack_print_info.cold.2+0x52/0x52 [ 288.038527] ? kasan_check_write+0x14/0x20 [ 288.042775] ? do_raw_spin_lock+0xc1/0x200 [ 288.047020] handle_userfault.cold.32+0x47/0x62 [ 288.051712] ? userfaultfd_ioctl+0x4fd0/0x4fd0 [ 288.056302] ? debug_check_no_locks_freed+0x310/0x310 [ 288.061491] ? print_usage_bug+0xc0/0xc0 [ 288.065553] ? print_usage_bug+0xc0/0xc0 [ 288.069599] ? graph_lock+0x170/0x170 [ 288.073388] ? userfaultfd_ctx_put+0x810/0x810 [ 288.077971] ? find_held_lock+0x36/0x1c0 [ 288.082035] ? __lock_acquire+0x7fc/0x5020 [ 288.086272] ? lock_downgrade+0x8f0/0x8f0 [ 288.090406] ? graph_lock+0x170/0x170 [ 288.094199] ? find_held_lock+0x36/0x1c0 [ 288.098263] ? lock_downgrade+0x8f0/0x8f0 [ 288.102402] ? kasan_check_read+0x11/0x20 [ 288.106536] ? do_raw_spin_unlock+0xa7/0x2f0 [ 288.110931] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 288.115503] ? kasan_check_write+0x14/0x20 [ 288.119719] ? do_raw_spin_lock+0xc1/0x200 [ 288.123942] __handle_mm_fault+0x3a0a/0x4460 [ 288.128339] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 288.133175] ? graph_lock+0x170/0x170 [ 288.136976] ? lock_downgrade+0x8f0/0x8f0 [ 288.141112] ? kasan_check_read+0x11/0x20 [ 288.145242] ? rcu_is_watching+0x8c/0x150 [ 288.149373] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 288.153770] ? handle_mm_fault+0x8c4/0xc80 [ 288.157989] handle_mm_fault+0x53e/0xc80 [ 288.162055] ? __handle_mm_fault+0x4460/0x4460 [ 288.166629] ? find_vma+0x34/0x190 [ 288.170158] __do_page_fault+0x620/0xe50 [ 288.174209] ? mm_fault_error+0x380/0x380 [ 288.178342] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 288.183351] ? graph_lock+0x170/0x170 [ 288.187145] do_page_fault+0xf6/0x8c0 [ 288.190928] ? vmalloc_sync_all+0x30/0x30 [ 288.195063] ? find_held_lock+0x36/0x1c0 [ 288.199118] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 288.203963] page_fault+0x1e/0x30 [ 288.207425] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 288.213040] Code: 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f [ 288.232253] RSP: 0018:ffff880186bd77f0 EFLAGS: 00010202 [ 288.237610] RAX: 0000000000000004 RBX: 0000000000000004 RCX: 0000000000000004 [ 288.244867] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff880186bd7890 [ 288.252124] RBP: ffff880186bd7828 R08: ffffed0030d7af13 R09: ffffed0030d7af12 [ 288.259380] R10: ffffed0030d7af12 R11: 0000000000000003 R12: 0000000020013004 [ 288.266633] R13: 0000000020013000 R14: ffff880186bd7890 R15: 00007ffffffff000 [ 288.273911] ? _copy_from_user+0x10d/0x150 [ 288.278155] evdev_do_ioctl+0xb69/0x21a0 [ 288.282218] ? lock_downgrade+0x8f0/0x8f0 [ 288.286370] ? str_to_user+0x90/0x90 [ 288.290092] ? do_futex+0x249/0x27d0 [ 288.293815] ? rcu_is_watching+0x8c/0x150 [ 288.297970] ? graph_lock+0x170/0x170 [ 288.301782] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 288.306205] ? find_held_lock+0x36/0x1c0 [ 288.310287] ? lock_downgrade+0x8f0/0x8f0 [ 288.314439] ? kasan_check_read+0x11/0x20 [ 288.318587] ? rcu_is_watching+0x8c/0x150 [ 288.322743] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 288.327169] ? __fget+0x414/0x670 [ 288.330641] evdev_ioctl_handler+0x144/0x1a0 [ 288.335065] evdev_ioctl+0x27/0x2e [ 288.338613] ? evdev_ioctl_compat+0x30/0x30 [ 288.342932] do_vfs_ioctl+0x1de/0x1720 [ 288.346802] ? rcu_is_watching+0x8c/0x150 [ 288.350933] ? ioctl_preallocate+0x300/0x300 [ 288.355334] ? __fget_light+0x2f7/0x440 [ 288.359292] ? fget_raw+0x20/0x20 [ 288.362730] ? putname+0xf2/0x130 [ 288.366172] ? rcu_read_lock_sched_held+0x108/0x120 [ 288.371171] ? kmem_cache_free+0x25c/0x2d0 [ 288.375403] ? __x64_sys_futex+0x47f/0x6a0 [ 288.379639] ? do_futex+0x27d0/0x27d0 [ 288.383423] ? security_file_ioctl+0x94/0xc0 [ 288.387823] ksys_ioctl+0xa9/0xd0 [ 288.391258] __x64_sys_ioctl+0x73/0xb0 [ 288.395143] do_syscall_64+0x1b9/0x820 [ 288.399035] ? syscall_return_slowpath+0x5e0/0x5e0 [ 288.403959] ? syscall_return_slowpath+0x31d/0x5e0 [ 288.408888] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 288.414238] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 288.419071] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 288.424244] RIP: 0033:0x455b29 [ 288.427412] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 288.446686] RSP: 002b:00007f2451247c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 288.454382] RAX: ffffffffffffffda RBX: 00007f24512486d4 RCX: 0000000000455b29 [ 288.461640] RDX: 0000000020013000 RSI: 00000000400445a0 RDI: 0000000000000015 [ 288.468896] RBP: 000000000072bf50 R08: 0000000000000000 R09: 0000000000000000 [ 288.476159] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 288.483416] R13: 00000000004bd250 R14: 00000000004cb350 R15: 0000000000000001 13:45:17 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x460080, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000100)={0x3, 0xffffffffffff457d, 0x401}, 0x6) syz_emit_ethernet(0x43, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2}, @random="2895bb9b41b2", [], {@canfd={0xd, {{0x3, 0x4, 0x54a2, 0x9}, 0x14, 0x1, 0x0, 0x0, "6f363fdda25a2997305cf414eb9da7f71d5f664c27b3580cade1fad1e23506bfc00c1617ac633cba37529182b22091590c1a50b5997cc07b59f61e7b02dfacc8"}}}}, &(0x7f0000000000)) 13:45:17 executing program 4: r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000037ff8)={0xfffffffffffffffe}, 0x0, 0x8) clock_gettime(0x0, &(0x7f0000000140)={0x0}) r2 = semget(0x3, 0x2, 0x100) semctl$IPC_INFO(r2, 0x2, 0x3, &(0x7f0000000000)=""/50) rt_sigtimedwait(&(0x7f0000000100)={0x7fff}, 0x0, &(0x7f0000000180)={r1}, 0x8) clock_nanosleep(0x7, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000080)) rt_sigqueueinfo(r0, 0xe, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffe}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x84100, 0x0) readlinkat(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=""/189, 0xbd) 13:45:17 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000980)=""/230, 0xe6}], 0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r2, 0x40049409, &(0x7f0000000040)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1}) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) 13:45:17 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000340000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:17 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x400400, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@local}}, &(0x7f0000000080)=0xe8) setsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f00000000c0)={@loopback={0x0, 0x1}, r1}, 0x14) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x40802, 0x0) r4 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) sendfile(r3, r4, &(0x7f0000000300), 0x102000001) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000280)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) 13:45:17 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="0401050a0500000000000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:17 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x1, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000380)='c', 0x1}], 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000040)={0x100, {{0x2, 0x4e23}}}, 0x88) 13:45:17 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295e273b5abcf477671070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0x11, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0x1) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) 13:45:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001440), 0x0, &(0x7f0000000240)={[{@showexec='showexec', 0x2c}]}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0xfffffffffffffffa, 0x100) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x7bc9217b, @dev={0xfe, 0x80, [], 0xb}, 0x401}, @in6={0xa, 0x4e23, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x200}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e23, 0xd8, @mcast1={0xff, 0x1, [], 0x1}, 0x5}], 0x64) 13:45:17 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000000010000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:17 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x6, 0x0) sendmsg$rds(r0, &(0x7f0000001d00)={&(0x7f0000000200)={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10, &(0x7f0000001480)=[{&(0x7f0000000240)=""/83, 0x53}, {&(0x7f0000000300)=""/60, 0x3c}, {&(0x7f0000000340)=""/119, 0x77}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/137, 0x89}], 0x5, &(0x7f0000001b00)=ANY=[@ANYBLOB="58000000000000001401000007000000fdffffff07000000", @ANYPTR=&(0x7f0000001580)=ANY=[@ANYBLOB="0200000000000000"], @ANYPTR=&(0x7f00000015c0)=ANY=[@ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="7e4c00000000000000040000000000000400000000000000040000000000000020000000000000000800000000000000580000000000000014010000090000000700000000040000", @ANYPTR=&(0x7f0000001600)=ANY=[@ANYBLOB="0100000000000000"], @ANYPTR=&(0x7f0000001640)=ANY=[@ANYBLOB="0600000000000000"], @ANYBLOB="060000000000000005000000000000000500000000000000ff0700000000000008000000000000001c00000000000000480000000000000014010000010000001f00000003000000", @ANYPTR=&(0x7f0000001680)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='s\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000001900)=ANY=[@ANYPTR=&(0x7f0000001700)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='f\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000001780)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='{\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000001800)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="f700000000000000"], @ANYBLOB="030000000000000020000000000000003f0000000000000018000000000000001401000002000000070000000400000030000000000000001401000003000000", @ANYPTR=&(0x7f0000001940)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="0800000000000000580000000000000014010000090000000300000006000000", @ANYPTR=&(0x7f0000001a00)=ANY=[@ANYBLOB='\r\a\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000001a40)=ANY=[@ANYBLOB="0004000000000000"], @ANYBLOB="04000000000000000800000000000000b00000000000000009000000000000003800000000000000000800000000000058000000000000001401000006000000fbffffffc0060000", @ANYPTR=&(0x7f0000001a80)=ANY=[@ANYBLOB="0900000000000080"], @ANYPTR=&(0x7f0000001ac0)=ANY=[@ANYBLOB="0500000000000000"], @ANYBLOB="01010000000000008e00000000000000bb6800000000000008000000000000004000000000000000ad04000000000000"], 0x1f0, 0x20004001}, 0x80) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f00000002c0)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) sendmsg$rds(r1, &(0x7f000000dfc8)={&(0x7f0000014000)={0x2, 0x0, @loopback=0x7f000001}, 0x10, &(0x7f0000000000), 0x0, &(0x7f0000001500)=[@mask_cswp={0x58, 0x114, 0xc, {{}, &(0x7f0000000040), &(0x7f0000000080)}}], 0x58}, 0x4000000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f00000000c0)=0xc) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000100)=0x0) r4 = memfd_create(&(0x7f0000000140)='em1\x00', 0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r1, &(0x7f0000000180)={r4, r1, 0x77}) [ 288.672668] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. [ 288.687485] FAT-fs (loop3): bogus number of reserved sectors [ 288.693467] FAT-fs (loop3): Can't find a valid FAT filesystem [ 288.744474] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. [ 288.789828] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 288.797253] CPU: 0 PID: 20147 Comm: syz-executor2 Not tainted 4.18.0-rc1+ #111 [ 288.804620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 288.813978] Call Trace: [ 288.816574] dump_stack+0x1c9/0x2b4 [ 288.820222] ? dump_stack_print_info.cold.2+0x52/0x52 [ 288.825434] ? trace_hardirqs_on+0xd/0x10 [ 288.829606] sysfs_warn_dup.cold.3+0x1c/0x2b [ 288.834039] sysfs_do_create_link_sd.isra.2+0x116/0x130 13:45:17 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f000074fffc)=0x3, 0x348) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x101000, 0x0) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000080)=[@in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0x1344, @mcast1={0xff, 0x1, [], 0x1}, 0x6}], 0x2c) sendto$inet6(r0, &(0x7f0000000000)="661f4aeabff76763e6b0b17d53db87e42f18c6d17f644dcad32985b35085914fc8d5ecace6504098fff24b08c1879b13368d4caa50f50c2e5f3f26c43c6f737144a08d2850d569f647448cb6f253d926ca54bad59f288832313514143375e3c33a10f50d133bd8dfa63221f03e3a26b37b5ddccde228", 0x76, 0x1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 13:45:17 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000010c0)=@nat={'nat\x00', 0x19, 0x5, 0xe10, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200003f8], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0xb, 0x20, 0x809b, 'yam0\x00', 'vlan0\x00', 'veth0_to_team\x00', 'eql\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0xff, 0xba8753104e3dece0, 0x0, 0x0, 0x0, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0xff, 0x0, 0xff, 0x0, 0xff], 0x70, 0xe0, 0x118}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xffffffffffffffff}}}, @snat={'snat\x00', 0x10, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 0xfffffffffffffffd}}}]}, @snat={'snat\x00', 0x10, {{@random="583d66ea72e8", 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{{{0x9, 0x0, 0x80f3, 'nr0\x00', 'lo\x00', 'teql0\x00', 'lo\x00', @random='dW4Mt\'', [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1d}, [0xff, 0xff, 0x0, 0xff, 0xff], 0xa0, 0x108, 0x140, [@vlan={'vlan\x00', 0x8, {{0x1, 0x3, 0x6000, 0x2, 0x2}}}]}, [@common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffc}}, @arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffc}}}]}, @arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}}, {{{0x9, 0x4, 0x0, 'bond_slave_1\x00', 'bond_slave_0\x00', 'nr0\x00', 'bond0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], 0x70, 0xa8, 0xd8}, [@arpreply={'arpreply\x00', 0x10, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 0xffffffffffffffff}}}]}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffc}}}]}, {0x0, '\x00', 0x3, 0x0, 0x2, [{{{0x1d, 0x40, 0xf7, 'ip_vti0\x00', 'vlan0\x00', 'veth0_to_team\x00', 'veth1_to_team\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0xff, 0xff, 0x0, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0xff, 0x0, 0xff, 0xff, 0xff], 0x858, 0x8a8, 0x8e0, [@u32={'u32\x00', 0x7c0, {{[{[{0x7, 0x3}, {0x1000, 0x3}, {0x7fffffff, 0x3}, {0x2, 0x3}, {0x3f}, {0xfff, 0x3}, {0x7, 0x3}, {0x3, 0x1}, {0x6, 0x3}, {0xffffffff00000000, 0x3}, {0x3, 0x3}], [{0x6, 0x7ff}, {0x3, 0x7}, {0x9, 0x6}, {0x6a71, 0xc}, {0x10000000000000}, {0x6, 0x7f}, {0xb5fb}, {0x401, 0x1}, {0x8, 0x5}, {0x6e68, 0x5}, {0x3f, 0x81}], 0x5, 0x8}, {[{0x1, 0x3}, {0x7}, {0x7, 0x3}, {0x5, 0x3}, {0x4}, {0xb2}, {0x6}, {0x1, 0x3}, {0xffffffffffffffff, 0x3}, {0x2, 0x3}, {0x0, 0x1}], [{0x800}, {0xfffffffffffffff7, 0x7d}, {0x2, 0x3}, {0x8, 0x80000001}, {0x2, 0x7fffffff}, {0x5, 0x9}, {0x6, 0x9}, {0x8, 0x5}, {0x0, 0xffffffff}, {0xffffffffffffffff, 0x80000001}, {0xfcdc, 0x4}], 0xb, 0x1}, {[{0x1, 0x3}, {}, {0xbe56, 0x3}, {0x9}, {0x1000}, {0xfffffffffffffffd, 0x3}, {0xffffffff8d86e1cc, 0x2}, {0x3f, 0x1}, {0x0, 0x3}, {0x1000}, {0x8, 0x1}], [{0x8000, 0x80000000}, {0x1, 0x20}, {0x3f, 0x31}, {0xff, 0x1f}, {0xeec}, {0x2, 0x7}, {0x100, 0x1f}, {0x0, 0x8001}, {0x11, 0xe132}, {0x9, 0x80}, {0x2}], 0x3, 0x6}, {[{0x6, 0x3}, {0x8a5}, {0x6, 0x3}, {0x1f, 0x1}, {0x7}, {0x100, 0x2}, {0x3, 0x3}, {0x4, 0x3}, {0x5, 0x2}, {0x7fffffff}, {0x6, 0x3}], [{0xffffffff80000000, 0x80}, {0x100000000, 0x1}, {0x1000, 0x2}, {0xffffffffffffffff, 0x4}, {0x80000001, 0x9}, {0x1, 0x6}, {0x6, 0xfff}, {0x7f, 0xffffffff}, {0x7fffffff, 0x6}, {0x4, 0x40}, {0xef, 0x3}], 0xb, 0x3}, {[{0x8, 0x2}, {0x3}, {0xffff, 0x3}, {0x80000001, 0x2}, {0x2, 0x3}, {0xe0f}, {0x6, 0x2}, {0x80000001, 0x2}, {0x100000001, 0x3}, {0x3, 0x2}, {0x5, 0x1}], [{0x3, 0x6}, {0x2, 0x3}, {0x77cc, 0x3}, {0x200, 0x101}, {0x8, 0x5}, {0x10000, 0x8}, {0x2}, {0xc00000000, 0x1000}, {0x0, 0x8}, {0x10000, 0x5}, {0x8000, 0x4}], 0x0, 0xb}, {[{0x608d, 0x3}, {0x8, 0x2}, {0x4, 0x3}, {0x1227, 0x3}, {0x3, 0x3}, {0x1}, {0x6, 0x2}, {0x4, 0x3}, {0x1}, {0x1000, 0x3}, {0x7fff, 0x3}], [{0x4, 0xb2}, {0x5, 0x800}, {0x800000000, 0x3}, {0x2, 0x6}, {0x8000, 0x7f}, {0x7, 0x3}, {0xffff, 0xffffffff}, {0xfffffffffffffffa, 0x4}, {0x0, 0x1ff}, {0x0, 0x401}, {0x8000, 0x5ee}], 0x8, 0xb}, {[{0x6, 0x3}, {0x1, 0x3}, {0x6}, {0x5, 0x2}, {0x7}, {0x5, 0x2}, {0x3, 0x1}, {0x7ec927d5, 0x3}, {0xb3, 0x3}, {0x4}, {0x401, 0x1}], [{0x3, 0xe567}, {0xc05, 0x4}, {0x60, 0x39eb}, {0x0, 0x1}, {0x538f30d5, 0x2}, {0x7, 0xffffffffffffff80}, {0x7fffffff, 0x80000000}, {0x7, 0x80000001}, {0x0, 0x9}, {0x30}, {0x7fffffff, 0x5}], 0x1, 0x7}, {[{0xb4, 0x3}, {0x200, 0x2}, {0x800, 0x3}, {0x0, 0x1}, {0x6, 0x3}, {0x40}, {0x80000001, 0x3}, {0x9, 0x1}, {0x100000001, 0x3}, {0x8}, {0x7fff, 0x3}], [{0xffffffff, 0x5832}, {0x1f, 0x40}, {0x4, 0x1}, {0x32, 0x80000001}, {0x21f12d5f, 0x7}, {0x4, 0xe4aa}, {0xfff, 0x7}, {0x3ff, 0x20}, {0x0, 0x6}, {0x7ff}, {0x3, 0x1}], 0x7, 0x6}, {[{0x6, 0x3}, {0x5, 0x2}, {0xffffffff, 0x3}, {0x1, 0x3}, {0x5f8, 0x1}, {0x9}, {0x8870, 0x3}, {0x9, 0x1}, {0x4, 0x3}, {0xc2, 0x1}, {0x5}], [{0xd8, 0x7}, {0xffffffffffff0000, 0x2}, {0x9}, {0x3f, 0x8000}, {0x6, 0x800000000000}, {0x8000, 0xffffffff}, {0x69, 0x7ff}, {0xe275, 0x9}, {0xffffffff, 0x8}, {0x2}, {0x9, 0xfffffffffffffff8}], 0x6}, {[{0x0, 0x2}, {0x7}, {0xdda}, {0x3, 0x2}, {0xffffffffffffffff, 0x3}, {0x3, 0x3}, {0x9, 0x3}, {0x10000}, {0xfffffffffffffffe, 0xca186af119fbf745}, {0x2, 0x1}, {0x8}], [{0x4, 0x100000000}, {0x40, 0x5}, {0x2, 0x5132}, {0x9, 0x7}, {0x0, 0x1f}, {0x0, 0x4}, {0x6, 0x61c5}, {0x7f, 0x6}, {0x5, 0x7}, {0x9, 0xfffffffffffffffa}, {0x0, 0x5}], 0x4, 0x7}, {[{0x7, 0x3}, {0x9, 0x1}, {0xd4}, {0x100000001, 0x2}, {0x5, 0x3}, {0xe3, 0x2}, {0x100000000}, {0xfffffffffffffffb, 0x3}, {0x0, 0x3}, {0x5, 0x2}, {0x3ff, 0x3}], [{0x2, 0x1}, {0x30b4ecee, 0x152}, {0x9, 0x5}, {0x9, 0x8001}, {0x7, 0x3}, {0x80000000, 0x5}, {0x8, 0xffffffff}, {0x7, 0x2}, {0x7fff, 0x7fffffff}, {}, {0x3, 0x8}], 0xb, 0xa}], 0xb}}}]}, [@common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0x400, 0x80000000}}}]}, @snat={'snat\x00', 0x10, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 0xffffffffffffffff}}}}, {{{0x15, 0x4, 0x1c, 'vcan0\x00', 'ip_vti0\x00', 'veth0_to_bridge\x00', 'syzkaller1\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x10}, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], @random="ff748be8bca1", [0xff, 0xff, 0xff, 0x0, 0xff], 0xd0, 0x108, 0x140, [@pkttype={'pkttype\x00', 0x8, {{0x7}}}, @connlabel={'connlabel\x00', 0x8, {{0x10000, 0x3}}}]}, [@arpreply={'arpreply\x00', 0x10, {{@random="4df4762c57cc", 0xfffffffffffffffe}}}]}, @snat={'snat\x00', 0x10, {{@random="d7a4c87922bc", 0xffffffffffffffff}}}}]}]}, 0xe88) r1 = socket$inet6(0xa, 0x802000000000001, 0xfffffffffffffffe) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000001c0)=[@enter_looper={0x630c}, @register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000240)}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000180)={r4, 0x1, 0x6, @random="c008c136b986"}, 0x10) [ 288.839416] sysfs_create_link+0x65/0xc0 [ 288.843490] device_add+0x5c9/0x16f0 [ 288.847213] ? ___sys_sendmsg+0x7fd/0x930 [ 288.851367] ? __sys_sendmsg+0x11d/0x290 [ 288.855443] ? device_private_init+0x240/0x240 [ 288.860036] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 288.865591] wiphy_register+0x1858/0x2510 [ 288.869778] ? wiphy_unregister+0x12c0/0x12c0 [ 288.874299] ? rcu_read_lock_sched_held+0x108/0x120 [ 288.879336] ? __kmalloc+0x5f9/0x760 [ 288.883075] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 288.888630] ? ieee80211_cs_list_valid+0x7c/0x440 [ 288.893489] ? ieee80211_register_hw+0xc13/0x35e0 [ 288.897489] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 288.898350] ieee80211_register_hw+0x13d5/0x35e0 [ 288.898369] ? rcu_report_qs_rnp+0x741/0x7a0 [ 288.898388] ? ieee80211_free_ack_frame+0x60/0x60 [ 288.929923] mac80211_hwsim_new_radio+0x1db8/0x33b0 13:45:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x68c}, 0x1}, 0x0) [ 288.934960] ? __rhashtable_insert_fast.constprop.53+0xf90/0xf90 [ 288.941115] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 288.946663] ? vsnprintf+0x20d/0x1b60 [ 288.950578] ? pointer+0x950/0x950 [ 288.954151] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 288.959183] ? kvasprintf+0xea/0x140 [ 288.962905] ? bust_spinlocks+0xe0/0xe0 [ 288.966875] ? kasprintf+0xab/0xe0 [ 288.970412] ? kvasprintf_const+0x190/0x190 [ 288.974751] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 288.980287] hwsim_new_radio_nl+0x7c0/0xa80 [ 288.984608] ? nla_parse+0x32b/0x4b0 [ 288.988330] ? mac80211_hwsim_new_radio+0x33b0/0x33b0 [ 288.993510] ? __netlink_ns_capable+0x100/0x130 [ 288.998173] genl_family_rcv_msg+0x8a3/0x1140 [ 289.002658] ? genl_unregister_family+0x8b0/0x8b0 [ 289.007498] ? lock_downgrade+0x8f0/0x8f0 [ 289.011648] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 289.016663] ? kasan_check_read+0x11/0x20 [ 289.020802] ? lock_acquire+0x1e4/0x540 [ 289.024769] ? genl_rcv+0x19/0x40 [ 289.028235] genl_rcv_msg+0xc6/0x168 [ 289.031953] netlink_rcv_skb+0x172/0x440 [ 289.036021] ? genl_family_rcv_msg+0x1140/0x1140 [ 289.040776] ? netlink_ack+0xbe0/0xbe0 [ 289.044653] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 289.049060] genl_rcv+0x28/0x40 [ 289.052334] netlink_unicast+0x5a0/0x760 [ 289.056398] ? netlink_attachskb+0x9a0/0x9a0 [ 289.060816] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 289.066349] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 289.071367] netlink_sendmsg+0xa18/0xfd0 [ 289.075427] ? netlink_unicast+0x760/0x760 [ 289.079652] ? move_addr_to_kernel.part.20+0x100/0x100 [ 289.084928] ? security_socket_sendmsg+0x94/0xc0 [ 289.089684] ? netlink_unicast+0x760/0x760 [ 289.093921] sock_sendmsg+0xd5/0x120 [ 289.097636] ___sys_sendmsg+0x7fd/0x930 [ 289.101617] ? copy_msghdr_from_user+0x580/0x580 [ 289.106373] ? __sched_text_start+0x8/0x8 [ 289.110509] ? __fget_light+0x2f7/0x440 [ 289.114475] ? fget_raw+0x20/0x20 [ 289.117921] ? __fd_install+0x2db/0x880 [ 289.121899] ? get_unused_fd_flags+0x1a0/0x1a0 [ 289.126474] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 289.131998] ? sockfd_lookup_light+0xc5/0x160 [ 289.136513] __sys_sendmsg+0x11d/0x290 [ 289.140399] ? __ia32_sys_shutdown+0x80/0x80 [ 289.144828] ? __x64_sys_futex+0x47f/0x6a0 [ 289.149061] ? exit_to_usermode_loop+0x8c/0x370 [ 289.153724] ? syscall_slow_exit_work+0x500/0x500 [ 289.158556] ? ksys_ioctl+0x81/0xd0 [ 289.162173] __x64_sys_sendmsg+0x78/0xb0 [ 289.166229] do_syscall_64+0x1b9/0x820 [ 289.170120] ? finish_task_switch+0x1d3/0x890 [ 289.174613] ? syscall_return_slowpath+0x5e0/0x5e0 [ 289.179531] ? syscall_return_slowpath+0x31d/0x5e0 [ 289.184471] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 289.189835] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 289.194677] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 289.199963] RIP: 0033:0x455b29 [ 289.203141] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 289.222434] RSP: 002b:00007f1b9655bc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.230220] RAX: ffffffffffffffda RBX: 00007f1b9655c6d4 RCX: 0000000000455b29 13:45:18 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500260000000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 289.237490] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000017 [ 289.244750] RBP: 000000000072bf50 R08: 0000000000000000 R09: 0000000000000000 [ 289.252009] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 289.259274] R13: 00000000004c0ee7 R14: 00000000004d0d80 R15: 0000000000000001 13:45:18 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="040105110500000000000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 289.286572] netlink: 'syz-executor1': attribute type 9 has an invalid length. [ 289.294076] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 13:45:18 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f761070") r1 = syz_open_dev$mice(&(0x7f0000001a80)='/dev/input/mice\x00', 0x0, 0x0) mmap(&(0x7f0000187000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x9, @local={0xfe, 0x80, [], 0xaa}, 0x100000001}], 0x1c) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000140)={&(0x7f0000867000/0x3000)=nil, 0x3000}) syz_open_dev$dspn(&(0x7f0000000100)='/.ev/dsp#\x00', 0x0, 0x0) [ 289.355125] binder: 20170:20171 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 289.413204] binder: 20170:20171 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 289.476764] FAULT_FLAG_ALLOW_RETRY missing 30 [ 289.481344] CPU: 1 PID: 20181 Comm: syz-executor6 Not tainted 4.18.0-rc1+ #111 [ 289.488726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 289.488733] Call Trace: [ 289.488758] dump_stack+0x1c9/0x2b4 [ 289.504334] ? dump_stack_print_info.cold.2+0x52/0x52 [ 289.509542] ? kasan_check_write+0x14/0x20 [ 289.513797] ? do_raw_spin_lock+0xc1/0x200 [ 289.518056] handle_userfault.cold.32+0x47/0x62 13:45:18 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000000)=@nl=@unspec={0x0, 0x0, 0x4c00000000000000}, 0x80, &(0x7f000002aff0)=[{&(0x7f0000010000)="5500000020007fafb72d13b2a4a28093020225000400fe7f0f00bd2dca8a9848a3c728f1c46b7b31afdc1338d544000000000000f75ae583de448daa7227c43ab8220000bf0cec6bab91d400000000000000000000", 0x55}], 0x1, &(0x7f0000010f80)}, 0x0) recvfrom(r0, &(0x7f0000000080)=""/88, 0x6b, 0x1, &(0x7f0000000200)=@un=@file={0x1, './file0\x00'}, 0x80) [ 289.522747] ? userfaultfd_ioctl+0x4fd0/0x4fd0 [ 289.527351] ? debug_check_no_locks_freed+0x310/0x310 [ 289.532568] ? print_usage_bug+0xc0/0xc0 [ 289.536646] ? print_usage_bug+0xc0/0xc0 [ 289.540725] ? userfaultfd_ctx_put+0x810/0x810 [ 289.545235] netlink: 57 bytes leftover after parsing attributes in process `syz-executor4'. [ 289.553799] ? find_held_lock+0x36/0x1c0 [ 289.553824] ? print_usage_bug+0xc0/0xc0 [ 289.553840] ? __lock_acquire+0x7fc/0x5020 [ 289.553856] ? lock_downgrade+0x8f0/0x8f0 [ 289.553871] ? graph_lock+0x170/0x170 [ 289.553895] ? find_held_lock+0x36/0x1c0 [ 289.553916] ? lock_downgrade+0x8f0/0x8f0 [ 289.567319] netlink: 57 bytes leftover after parsing attributes in process `syz-executor4'. [ 289.570393] ? kasan_check_read+0x11/0x20 [ 289.570411] ? do_raw_spin_unlock+0xa7/0x2f0 [ 289.570424] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 289.570441] ? kasan_check_write+0x14/0x20 [ 289.570453] ? do_raw_spin_lock+0xc1/0x200 [ 289.570472] __handle_mm_fault+0x3a0a/0x4460 [ 289.570491] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 289.621736] ? graph_lock+0x170/0x170 [ 289.625577] ? lock_downgrade+0x8f0/0x8f0 [ 289.629732] ? kasan_check_read+0x11/0x20 [ 289.633969] ? rcu_is_watching+0x8c/0x150 [ 289.638102] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 289.642508] ? handle_mm_fault+0x8c4/0xc80 [ 289.646732] handle_mm_fault+0x53e/0xc80 [ 289.650778] ? __handle_mm_fault+0x4460/0x4460 [ 289.655349] ? find_vma+0x34/0x190 [ 289.658874] __do_page_fault+0x620/0xe50 [ 289.662956] ? mm_fault_error+0x380/0x380 [ 289.667091] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 289.672089] ? graph_lock+0x170/0x170 [ 289.675874] do_page_fault+0xf6/0x8c0 [ 289.679655] ? vmalloc_sync_all+0x30/0x30 [ 289.683787] ? find_held_lock+0x36/0x1c0 [ 289.687838] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 289.692679] page_fault+0x1e/0x30 [ 289.696119] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 289.701733] Code: 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f [ 289.720910] RSP: 0018:ffff8801cad477f0 EFLAGS: 00010202 [ 289.726258] RAX: 0000000000000004 RBX: 0000000000000004 RCX: 0000000000000004 [ 289.733514] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff8801cad47890 [ 289.740794] RBP: ffff8801cad47828 R08: ffffed00395a8f13 R09: ffffed00395a8f12 [ 289.748057] R10: ffffed00395a8f12 R11: 0000000000000003 R12: 0000000020013004 [ 289.755315] R13: 0000000020013000 R14: ffff8801cad47890 R15: 00007ffffffff000 [ 289.762592] ? _copy_from_user+0x10d/0x150 [ 289.766832] evdev_do_ioctl+0xb69/0x21a0 [ 289.770889] ? lock_downgrade+0x8f0/0x8f0 [ 289.775034] ? str_to_user+0x90/0x90 [ 289.778740] ? do_futex+0x249/0x27d0 [ 289.782434] ? rcu_is_watching+0x8c/0x150 [ 289.786570] ? graph_lock+0x170/0x170 [ 289.790351] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 289.794746] ? find_held_lock+0x36/0x1c0 [ 289.798808] ? lock_downgrade+0x8f0/0x8f0 [ 289.802952] ? kasan_check_read+0x11/0x20 [ 289.807079] ? rcu_is_watching+0x8c/0x150 [ 289.811228] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 289.815631] ? __fget+0x414/0x670 [ 289.819090] evdev_ioctl_handler+0x144/0x1a0 [ 289.823494] evdev_ioctl+0x27/0x2e [ 289.827048] ? evdev_ioctl_compat+0x30/0x30 [ 289.831356] do_vfs_ioctl+0x1de/0x1720 [ 289.835229] ? rcu_is_watching+0x8c/0x150 [ 289.839362] ? ioctl_preallocate+0x300/0x300 [ 289.843757] ? __fget_light+0x2f7/0x440 [ 289.847714] ? fget_raw+0x20/0x20 [ 289.851152] ? putname+0xf2/0x130 [ 289.854604] ? rcu_read_lock_sched_held+0x108/0x120 [ 289.859605] ? kmem_cache_free+0x25c/0x2d0 [ 289.863826] ? __x64_sys_futex+0x47f/0x6a0 [ 289.868063] ? do_futex+0x27d0/0x27d0 [ 289.871870] ? security_file_ioctl+0x94/0xc0 [ 289.876307] ksys_ioctl+0xa9/0xd0 [ 289.879748] __x64_sys_ioctl+0x73/0xb0 [ 289.883635] do_syscall_64+0x1b9/0x820 [ 289.887507] ? finish_task_switch+0x1d3/0x890 [ 289.891989] ? syscall_return_slowpath+0x5e0/0x5e0 [ 289.896907] ? syscall_return_slowpath+0x31d/0x5e0 [ 289.901830] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 289.907184] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 289.912039] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 289.917231] RIP: 0033:0x455b29 [ 289.920399] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 289.939576] RSP: 002b:00007f2451247c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 289.947272] RAX: ffffffffffffffda RBX: 00007f24512486d4 RCX: 0000000000455b29 [ 289.954529] RDX: 0000000020013000 RSI: 00000000400445a0 RDI: 0000000000000015 [ 289.961961] RBP: 000000000072bf50 R08: 0000000000000000 R09: 0000000000000000 [ 289.969219] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 289.976474] R13: 00000000004bd250 R14: 00000000004cb350 R15: 0000000000000001 13:45:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) kexec_load(0xcd0, 0x9, &(0x7f0000001700)=[{&(0x7f0000000180)="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", 0x1000, 0x4, 0x9}, {&(0x7f0000001180)="3c1fdda4f8e42cb5994986f92ea14e615cbb0a810db14db744eb2b58f936d3cc427bd3a1b861bd7c14e466b2c8ae419f9f38660bcc33aef29b9c28dbf565134a7eecf947c16a304975c57bf8ca195a48afb34acfef814c86c567b24a8a13fb719c6e8e291e6cbb420546afe0752c3e29626de602967dd2e992485fdad9162a9d2255dc21f9f785b61688a51b7d6bacb33ae7a4262224587d80cb14367625ec2c24ba0d2318a44d1b39a7e200528281b1c5d58da98f1b549feb98c78d820184b77cedf936dc6fbf0f8aa4d4e7625a5e9c788a2fb3e8c1f4a019fb3e9d828974876299220ceba11b2b4b", 0xe9, 0x5, 0x80}, {&(0x7f0000001280)="d5c51efe5f7f1eb2128b9fb0dbff695e6993166a87e760c8d6be62fcee6d047e19db4e4d6d577913776473dfa251b1c8bd5c559d1070c82989b2862adfcf753620419c631800a17c92531a847f7b24c3dc02f3c11c575143bc09f7a492c2af6f103084b3277cb51bb7968deaa884f0404168d66ffddd4d91f2cb0f4bcee417286691caadd21a11cd0128cd80863bd82fd5bb9e22ee94cb0cec726e33292b4759d1f6234997b38f3a1b0c1f2d320f04f6e3fdc540415d6f83701ec2b63f09f2055ff7caaef4f5557b0fef61d08682f70e33bed8ee14b5d64bb3229bb30bf0fd", 0xdf, 0xff, 0xff}, {&(0x7f0000000040)="816f97665490fecc8927703b65385cab78bee6867fd1e0e840c53a7a9c5d254ca335b880b763e096ad590201e3c8d35c5ef0bd44d5d263ddcd796bdf35d0d2fd809c93", 0x43, 0xb56, 0x1}, {&(0x7f0000001380)="2e73ac391fbf4dc3c25267852fc135ce8eb0d6923eaed7557f21a64dd641402b8a1e713db7576ae95ea0a546168237bb949cc6c9cd3a21ab576a18f248f52a91a18ef9adc29b55d68364bf0e8a1f709d79e6e3a5ae1484e2c00ea1c805e692080cddc7563b4ac989301f37f15a2d70edb1891a6be9c4907da99463bbd37701fe86426ac22df38be7837ee1ba304568275fc1a1fc105ed46a82ba3851cfb6891875e01c51214eef8fec765045f08f2ce9f46cd3723cc9ca86c75f875a6e3069a493f0e3d45b1303ff4d5c6789f26ace916334a1b979c2e99347bb2c6232b3f533500c1fa2fca823305a86b860b5cd923a60", 0xf1, 0x80000001, 0x3}, {&(0x7f0000001480)="02b0695e870993f518b5592c8447d085884d7e924a9ff7a1dc64340dd0a0802119d515a453ced4f2bdcd89680ac05629d6ab9f951e34dbc59fb733c01d03a1358486b5d470ea133724b43422bcddf7959aa6f24ffee497bd3364", 0x5a, 0x8, 0x8}, {&(0x7f0000001500)="ba8247beafb6017513292648810a56e50ed18873929c0d453a17db841ddde0fee10dce92657aab353f224e6457674240ef19dac00a401dd94e8d2d89155c918ef08b4fce2b6fa26cab87b9d80b8eb8ed307f3f3fb519fb7b5fe4846e1cd785bbea901d0aef5905a1d37eb48d7e35608791b52415b982866f6b1e1ec9fb5cd4f05afe50ae6e1865a3361dfce9b5ab04670fe50eb7b27e6ee37d226c6ba5ca7957bd30770f7f937703f45108f1dc7147cfb21707607e3f269592bca37cfd47", 0xbe, 0x6f, 0x3}, {&(0x7f00000015c0)="c6cdc44e8d955bb7af6b9f16cf8b4bd393b387c768e36af197b892182313f5eed59eb621191e4f69c42b0ec8c4", 0x2d, 0x4, 0x5}, {&(0x7f0000001600)="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", 0xfb, 0x8, 0x7}], 0x160001) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0xf503}, 0xc, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000002700010400000000000000000a000000"], 0x14}, 0x1}, 0x0) 13:45:18 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000980)=""/230, 0xe6}], 0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r2, 0x8010aa02, &(0x7f0000000040)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1}) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) 13:45:18 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500e80300000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xff69, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000140)="06"}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x200000, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000001540)={0x53, 0xfffffffffffffffb, 0x1000, 0x7, @scatter={0x1, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/235, 0xeb}]}, &(0x7f0000000480)="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", &(0x7f0000001480)=""/150, 0x4, 0x10, 0x1, &(0x7f0000000400)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000180)}) 13:45:18 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f00000004c0)={0x7, 0x7, 0x0, [{0x9, 0x40, 0x0, 0xfff, 0x3, 0x7, 0x552b}, {0xc7ab, 0x7ff, 0x5, 0x1, 0x40, 0x4, 0x6}, {0x3, 0x1402, 0xf1b, 0x6, 0x7fffffff, 0x100000000, 0x2}, {0x8, 0x7f, 0x3ff800000000, 0x3, 0x7, 0x7, 0x8}, {0x40, 0x0, 0x6, 0xfffffffffffff000, 0x4171, 0x81a, 0x3}, {0x7, 0x5, 0x6, 0x7ff, 0x1000, 0x28d, 0x20}, {0x7, 0xfffffffffffffffd, 0x5c, 0xeade, 0x5, 0x100000000}]}) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000000000039a, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='status\x00') rt_sigaction(0x16, &(0x7f0000000140)={0x8}, 0x0, 0x8, &(0x7f0000000180)) preadv(r2, &(0x7f0000000480)=[{&(0x7f0000000280)=""/209}, {&(0x7f0000000380)=""/242}], 0x10000000000002a1, 0x0) 13:45:18 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x1) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x800}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x4, 0xc68a, 0x8009, 0x2, 0x84, 0x0, 0x3, 0x8, r3}, 0x20) sendfile(r1, r1, &(0x7f0000000180), 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x14) dup3(r1, r2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x6, {{0xa, 0x4e20, 0xfffffffffffffffa, @ipv4={[], [0xff, 0xff]}, 0xffffffffffffff86}}, {{0xa, 0x4e24, 0x9555, @mcast2={0xff, 0x2, [], 0x1}, 0x8}}}, 0x108) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000001c0)={r3, 0x7, 0xffffffffffffffff, 0x0, 0x2}, 0x14) 13:45:18 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="040105260500000000000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 290.061844] binder: 20204:20205 unknown command 0 13:45:18 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x3, 0x200000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="000100030000000081000000c9030000f4000204000000000000000000000000002000000020000000010000000000016e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="086b1da3e9df5d46a342bc54f4a993d26c20f19623696d652c646174613d61636b2e00000a00000000"]) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7fff, 0x1, 0x8, 0x12000000000, 0x0, 0x100000000, 0x3, 0x7, 0x0}, &(0x7f0000000080)=0x20) r2 = memfd_create(&(0x7f0000000200)='\'posix_acl_access[\x00', 0x2) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e24, 0x5b3, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x1}}, 0x4, 0x3}, 0x90) 13:45:18 executing program 1: sched_setattr(0x0, &(0x7f0000000280)={0x0, 0x2, 0x0, 0x2, 0x0, 0x3}, 0xfffffffffffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = accept(r0, &(0x7f0000000180)=@rc, &(0x7f0000000100)=0x80) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x1, 0xfffffffffffff818, 0x4, 0x3, 0x1, 0x3, 0xc1, 0x3ff, 0x0}, &(0x7f0000000240)=0x20) r5 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000380)="14558e6cf7cffc29228010125d090bd18036c262695b0fa924eb86c4aaa7a3d772d32fe1ff", 0x25, 0x0) keyctl$assume_authority(0x10, r5) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={r4, 0x71c}, 0x8) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000fd0ffc)=0x2) readv(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/180, 0xb4}], 0x1) dup3(r3, r2, 0x0) 13:45:18 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000000060000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 290.084280] binder: 20204:20205 ioctl c0306201 20000440 returned -22 [ 290.115470] binder: 20204:20205 ERROR: BC_REGISTER_LOOPER called without request [ 290.138242] binder_alloc: 20204: binder_alloc_buf, no vma [ 290.143961] binder: 20204:20205 transaction failed 29189/-3, size 0-0 line 2967 13:45:19 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00005cfff6)='/dev/cuse\x00', 0x8010000080802, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000cd9ff4)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f000084fffc)) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000cba000)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000000)) dup3(r2, r1, 0x0) pread64(r0, &(0x7f0000a4c000)=""/56, 0x38, 0x0) write$fuse(r0, &(0x7f00007df000)={0x1059, 0x0, 0x1, @random="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"}, 0x1059) [ 290.210554] serio: Serial port pts0 13:45:19 executing program 3: r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000000000)=@nl=@unspec={0x2001001000000000}, 0x80, &(0x7f00000013c0), 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="1400000000000000290000003e00000000000000"], 0x14}, 0x0) r1 = dup3(r0, r0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) 13:45:19 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000000020000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:19 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x20, 0x2) ioctl$TIOCCBRK(r2, 0x5428) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r1, 0x0) readv(r3, &(0x7f0000001500)=[{&(0x7f0000001480)=""/99, 0x63}], 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000fd0ffc)) dup3(r3, r1, 0x0) [ 290.241167] binder: release 20204:20205 transaction 29 in, still active [ 290.248521] binder: send failed reply for transaction 29 to 20204:20205 [ 290.255684] binder: undelivered TRANSACTION_ERROR: 29189 [ 290.266564] binder: undelivered TRANSACTION_COMPLETE [ 290.271822] binder: undelivered TRANSACTION_ERROR: 29189 13:45:19 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="040105000600000000000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") listen(r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0x14, 0xc, 0x6, 0x705}, 0x14}, 0x1}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0xfffffffffffffec7, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000001400)=""/169, 0xa9}], 0x1, 0x200000000000) 13:45:19 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x2, 0x0) r1 = socket(0x40000000001e, 0x1, 0x0) setsockopt(r1, 0x10f, 0x7f, &(0x7f0000000000)="76e927ce", 0x4) [ 290.430254] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 290.450971] Trying to set illegal importance in message [ 290.465320] Trying to set illegal importance in message [ 290.896518] FAULT_FLAG_ALLOW_RETRY missing 30 [ 290.901145] CPU: 1 PID: 20266 Comm: syz-executor6 Not tainted 4.18.0-rc1+ #111 [ 290.908519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 290.908526] Call Trace: [ 290.908552] dump_stack+0x1c9/0x2b4 [ 290.924117] ? dump_stack_print_info.cold.2+0x52/0x52 [ 290.929320] ? kasan_check_write+0x14/0x20 [ 290.933549] ? do_raw_spin_lock+0xc1/0x200 [ 290.937777] handle_userfault.cold.32+0x47/0x62 [ 290.942451] ? userfaultfd_ioctl+0x4fd0/0x4fd0 [ 290.947023] ? debug_check_no_locks_freed+0x310/0x310 [ 290.952229] ? perf_event_update_userpage+0xd30/0xd30 [ 290.957417] ? print_usage_bug+0xc0/0xc0 [ 290.961479] ? print_usage_bug+0xc0/0xc0 [ 290.965530] ? __perf_event_task_sched_in+0x24f/0xbb0 [ 290.970722] ? userfaultfd_ctx_put+0x810/0x810 [ 290.975310] ? find_held_lock+0x36/0x1c0 [ 290.979376] ? __lock_acquire+0x7fc/0x5020 [ 290.983599] ? lock_downgrade+0x8f0/0x8f0 [ 290.987737] ? graph_lock+0x170/0x170 [ 290.991532] ? find_held_lock+0x36/0x1c0 [ 290.995597] ? lock_downgrade+0x8f0/0x8f0 [ 290.999745] ? kasan_check_read+0x11/0x20 [ 291.003881] ? do_raw_spin_unlock+0xa7/0x2f0 [ 291.008276] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 291.012858] ? kasan_check_write+0x14/0x20 [ 291.017090] ? do_raw_spin_lock+0xc1/0x200 [ 291.021318] __handle_mm_fault+0x3a0a/0x4460 [ 291.025720] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 291.030549] ? graph_lock+0x170/0x170 [ 291.034355] ? lock_downgrade+0x8f0/0x8f0 [ 291.038497] ? kasan_check_read+0x11/0x20 [ 291.042629] ? rcu_is_watching+0x8c/0x150 [ 291.046785] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 291.051190] ? handle_mm_fault+0x8c4/0xc80 [ 291.055415] handle_mm_fault+0x53e/0xc80 [ 291.059462] ? __handle_mm_fault+0x4460/0x4460 [ 291.064032] ? find_vma+0x34/0x190 [ 291.067576] __do_page_fault+0x620/0xe50 [ 291.071646] ? mm_fault_error+0x380/0x380 [ 291.075792] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 291.080818] ? graph_lock+0x170/0x170 [ 291.084621] do_page_fault+0xf6/0x8c0 [ 291.088418] ? vmalloc_sync_all+0x30/0x30 [ 291.092554] ? find_held_lock+0x36/0x1c0 [ 291.096620] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 291.101456] page_fault+0x1e/0x30 [ 291.104899] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 291.110503] Code: 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f [ 291.129705] RSP: 0018:ffff88017b6df7f0 EFLAGS: 00010202 [ 291.135082] RAX: 0000000000000004 RBX: 0000000000000004 RCX: 0000000000000004 [ 291.142360] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff88017b6df890 [ 291.149641] RBP: ffff88017b6df828 R08: ffffed002f6dbf13 R09: ffffed002f6dbf12 [ 291.156922] R10: ffffed002f6dbf12 R11: 0000000000000003 R12: 0000000020013004 [ 291.164204] R13: 0000000020013000 R14: ffff88017b6df890 R15: 00007ffffffff000 [ 291.171492] ? _copy_from_user+0x10d/0x150 [ 291.175737] evdev_do_ioctl+0xb69/0x21a0 [ 291.179813] ? lock_downgrade+0x8f0/0x8f0 [ 291.183976] ? str_to_user+0x90/0x90 [ 291.187698] ? do_futex+0x249/0x27d0 [ 291.191398] ? rcu_is_watching+0x8c/0x150 [ 291.195536] ? graph_lock+0x170/0x170 [ 291.199334] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 291.203762] ? find_held_lock+0x36/0x1c0 [ 291.207827] ? lock_downgrade+0x8f0/0x8f0 [ 291.211966] ? kasan_check_read+0x11/0x20 [ 291.216110] ? rcu_is_watching+0x8c/0x150 [ 291.220256] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 291.224669] ? __fget+0x414/0x670 [ 291.228126] evdev_ioctl_handler+0x144/0x1a0 [ 291.232522] evdev_ioctl+0x27/0x2e [ 291.236052] ? evdev_ioctl_compat+0x30/0x30 [ 291.240360] do_vfs_ioctl+0x1de/0x1720 [ 291.244237] ? rcu_is_watching+0x8c/0x150 [ 291.248384] ? ioctl_preallocate+0x300/0x300 [ 291.252775] ? __fget_light+0x2f7/0x440 [ 291.256949] ? fget_raw+0x20/0x20 [ 291.260386] ? putname+0xf2/0x130 [ 291.263830] ? rcu_read_lock_sched_held+0x108/0x120 [ 291.268844] ? kmem_cache_free+0x25c/0x2d0 [ 291.273078] ? __x64_sys_futex+0x47f/0x6a0 [ 291.277316] ? do_futex+0x27d0/0x27d0 [ 291.281104] ? security_file_ioctl+0x94/0xc0 [ 291.285498] ksys_ioctl+0xa9/0xd0 [ 291.288941] __x64_sys_ioctl+0x73/0xb0 [ 291.292832] do_syscall_64+0x1b9/0x820 [ 291.296710] ? syscall_return_slowpath+0x5e0/0x5e0 [ 291.301625] ? syscall_return_slowpath+0x31d/0x5e0 [ 291.306546] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 291.311909] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 291.316749] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 291.321922] RIP: 0033:0x455b29 [ 291.325090] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 291.344331] RSP: 002b:00007f2451247c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 291.352055] RAX: ffffffffffffffda RBX: 00007f24512486d4 RCX: 0000000000455b29 [ 291.359329] RDX: 0000000020013000 RSI: 00000000400445a0 RDI: 0000000000000015 [ 291.366602] RBP: 000000000072bf50 R08: 0000000000000000 R09: 0000000000000000 [ 291.373871] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 291.381126] R13: 00000000004bd250 R14: 00000000004cb350 R15: 0000000000000001 13:45:20 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000980)=""/230, 0xe6}], 0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r2, 0xc028aa03, &(0x7f0000000040)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1}) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) 13:45:20 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500fffff0000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:20 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xf6a, 0x40000) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000440), 0x4) clock_nanosleep(0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000e400000004000000000000000000000000000000000000000000000000d800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x68) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/4\x00') semget$private(0x0, 0x1, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000200)=@ethtool_gstrings={0x1b, 0x4, 0x7c, "8e929af1191e7f261d584f130853212d3b1cfea6cdf5ac97cbcb8d90dbcd5c6fe6c9dc4380d40e3d88c0dfe4f153ce7f9f0e01c66a3fbb10742c970180024608a5f0e06154e9e3f74501bf15ddbf0036dfccec46da61928c575ec8da41397be415f3801a6475e4f276928e0bbffe01aabdb48154f83aafcfdccbee46"}}) clock_gettime(0x7, &(0x7f0000000380)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0)={0xffffffff}, 0x113, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000340)={0xf, 0x8, 0xfa00, {r2, 0x11}}, 0x10) 13:45:20 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="040105005800000000000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:20 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') request_key(&(0x7f00000000c0)='pkcs7_test\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, &(0x7f0000000240)='errors=continue', 0xfffffffffffffffe) r1 = getpgrp(0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000001340)={0x0, 0x0}) kcmp(r1, r2, 0x2, r0, r0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000001300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20210}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, r3, 0x0, 0x70bd2d, 0x25dfdbfc, {0x2}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20040010) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x0) 13:45:20 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x400) socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000001480)=""/4096) 13:45:20 executing program 3: r0 = socket$inet(0x10, 0x2, 0xd) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="2f0000001c0003fd6d0000360000000002dd0700064000001f5f32c908000100000073730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) syz_mount_image$nfs4(&(0x7f0000000000)='nfs4\x00', &(0x7f0000000040)='./file0\x00', 0x480000000000, 0x4, &(0x7f00000000c0)=[{&(0x7f0000000300)="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", 0x1000, 0x7}, {&(0x7f0000000080)="9182a0a22a00ae8bfd9c84e6f5", 0xd, 0x100}, {&(0x7f0000001300)="8757e927f2202da6a7b9d54a556c8fb58e38767cd0e55fa2d8f86a2b2e03b5f46fe6a8987f6912e3844a283091e62966d018327efda975d23d9901b72749c5588c780cde7466cce32d3910108a80d0fabb1ef2b871e6ba347fac887d0cab19a0503d9b81d056c727f703cd28013ba2a12a7f96cdbb2858804da7d88ff0abdbb1b5c61593d2a3944b75e7100fbcb9d21c849308a92a26bd44aadf319e8d637cba3979c6d61068293d286fca8149ab5c11572a3867bee0e17636239e017417f2cbef48a01f4c104ed69ad47912fb48c86e4732e63bbf1757fd949581d4646f15c79c119ca86f2bbd", 0xe7, 0x6}, {&(0x7f0000001400)="c150d8a2c6dd5bc139790712f2cba0cd72233c831e1d00293e71ea4534915bb3220770c3fd8e783d59a17393db0f41fbe16c837bfe648b58fd05d79974b1de53e3e742ec41f22b1a3bb6b81ab095a431cfbb54abe1e9cf716ac67aa12e9712be2de9c787460365a45570677552a8d7e5e65d57ca74f772bf7264e7e833223fa202b900519855b719022705d415797c2a7af013f2810cd70bc1bfab1b6ad54d21bc3ea76f3c1c262f667d3524c46a32203ec1fb03ef2672105735a19c7fafacd9116766bae73270046e5ff69bdf41fa3fa402a860071cde50262ebe845bfa602679272996929f8e6db546249f66ad035829", 0xf1, 0x4}], 0x800, &(0x7f0000000140)='selfvmnet1eth0:\x00') 13:45:20 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$netlink(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0xc) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000040)='%--.@cpuset)^&GPL\x00', 0x3) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)=0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000280), &(0x7f0000000300)=0x4) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000240)=r2) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000200)='>', 0x1) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000080)=0x1) listen(0xffffffffffffffff, 0x0) 13:45:20 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000480), 0x10) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x200408d6, &(0x7f00000011c0)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 13:45:20 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500c0ffffff0000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:20 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={"76657468305f746f5fd3326964676500", 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@bridge_dellink={0x28, 0x11, 0x3, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0x1a, [{0x4}]}]}, 0x28}, 0x1}, 0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 13:45:20 executing program 3: r0 = socket$inet6(0xa, 0x1, 0xffffffffffffff01) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x400000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000449fd0)={0x0, 0x0, &(0x7f00004f1f94), 0x1, 0x0, &(0x7f0000901000)="05"}) close(r1) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x6, 0x2000) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x80045700, &(0x7f0000000080)) unlinkat(r2, &(0x7f0000000040)='./file0\x00', 0x200) 13:45:20 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="040105060500000000000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:20 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000040)=0xffffffffffff4081, 0x8) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) 13:45:20 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="0401050005004a0000000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:20 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x74) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x9}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="330002e0000000002c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000002c7d04c74ba93bfcdffa5c37c30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025b92aaacda8ffab00000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a6"], 0x56a) [ 292.410531] FAULT_FLAG_ALLOW_RETRY missing 30 [ 292.415136] CPU: 1 PID: 20367 Comm: syz-executor6 Not tainted 4.18.0-rc1+ #111 [ 292.422525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 292.422532] Call Trace: [ 292.422561] dump_stack+0x1c9/0x2b4 [ 292.438205] ? dump_stack_print_info.cold.2+0x52/0x52 [ 292.443394] ? kasan_check_write+0x14/0x20 [ 292.447623] ? do_raw_spin_lock+0xc1/0x200 [ 292.451861] handle_userfault.cold.32+0x47/0x62 [ 292.456537] ? userfaultfd_ioctl+0x4fd0/0x4fd0 [ 292.461123] ? debug_check_no_locks_freed+0x310/0x310 [ 292.466315] ? graph_lock+0x170/0x170 [ 292.470113] ? graph_lock+0x170/0x170 [ 292.473900] ? find_held_lock+0x36/0x1c0 [ 292.477952] ? print_usage_bug+0xc0/0xc0 [ 292.482000] ? print_usage_bug+0xc0/0xc0 [ 292.486059] ? userfaultfd_ctx_put+0x810/0x810 [ 292.490636] ? find_held_lock+0x36/0x1c0 [ 292.494706] ? __lock_acquire+0x7fc/0x5020 [ 292.498928] ? lock_downgrade+0x8f0/0x8f0 [ 292.503068] ? graph_lock+0x170/0x170 [ 292.506863] ? find_held_lock+0x36/0x1c0 [ 292.510926] ? lock_downgrade+0x8f0/0x8f0 [ 292.515073] ? kasan_check_read+0x11/0x20 [ 292.519218] ? do_raw_spin_unlock+0xa7/0x2f0 [ 292.523614] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 292.528190] ? kasan_check_write+0x14/0x20 [ 292.532428] ? do_raw_spin_lock+0xc1/0x200 [ 292.536665] __handle_mm_fault+0x3a0a/0x4460 [ 292.541076] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 292.545917] ? graph_lock+0x170/0x170 [ 292.549737] ? lock_downgrade+0x8f0/0x8f0 [ 292.553889] ? kasan_check_read+0x11/0x20 [ 292.558026] ? rcu_is_watching+0x8c/0x150 [ 292.562163] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 292.566558] ? handle_mm_fault+0x8c4/0xc80 [ 292.570778] handle_mm_fault+0x53e/0xc80 [ 292.574848] ? __handle_mm_fault+0x4460/0x4460 [ 292.579430] ? find_vma+0x34/0x190 [ 292.582968] __do_page_fault+0x620/0xe50 [ 292.587028] ? mm_fault_error+0x380/0x380 [ 292.591170] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 292.596171] ? graph_lock+0x170/0x170 [ 292.599972] do_page_fault+0xf6/0x8c0 [ 292.603774] ? vmalloc_sync_all+0x30/0x30 [ 292.607907] ? find_held_lock+0x36/0x1c0 [ 292.612066] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 292.616905] page_fault+0x1e/0x30 [ 292.620347] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 292.625950] Code: 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f [ 292.645178] RSP: 0018:ffff880172ba77f0 EFLAGS: 00010202 [ 292.650549] RAX: 0000000000000004 RBX: 0000000000000004 RCX: 0000000000000004 [ 292.657819] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff880172ba7890 [ 292.665087] RBP: ffff880172ba7828 R08: ffffed002e574f13 R09: ffffed002e574f12 [ 292.672349] R10: ffffed002e574f12 R11: 0000000000000003 R12: 0000000020013004 [ 292.679605] R13: 0000000020013000 R14: ffff880172ba7890 R15: 00007ffffffff000 [ 292.686878] ? _copy_from_user+0x10d/0x150 [ 292.691108] evdev_do_ioctl+0xb69/0x21a0 [ 292.695161] ? lock_downgrade+0x8f0/0x8f0 [ 292.699293] ? str_to_user+0x90/0x90 [ 292.703006] ? do_futex+0x249/0x27d0 [ 292.706713] ? rcu_is_watching+0x8c/0x150 [ 292.710847] ? graph_lock+0x170/0x170 [ 292.714657] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 292.719076] ? find_held_lock+0x36/0x1c0 [ 292.723150] ? lock_downgrade+0x8f0/0x8f0 [ 292.727286] ? kasan_check_read+0x11/0x20 [ 292.731427] ? rcu_is_watching+0x8c/0x150 [ 292.735564] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 292.739963] ? __fget+0x414/0x670 [ 292.743418] evdev_ioctl_handler+0x144/0x1a0 [ 292.747818] evdev_ioctl+0x27/0x2e [ 292.751346] ? evdev_ioctl_compat+0x30/0x30 [ 292.755657] do_vfs_ioctl+0x1de/0x1720 [ 292.759530] ? rcu_is_watching+0x8c/0x150 [ 292.763666] ? ioctl_preallocate+0x300/0x300 [ 292.768060] ? __fget_light+0x2f7/0x440 [ 292.772027] ? fget_raw+0x20/0x20 [ 292.775467] ? putname+0xf2/0x130 [ 292.778914] ? rcu_read_lock_sched_held+0x108/0x120 [ 292.783913] ? kmem_cache_free+0x25c/0x2d0 [ 292.788141] ? __x64_sys_futex+0x47f/0x6a0 [ 292.792369] ? do_futex+0x27d0/0x27d0 [ 292.796163] ? security_file_ioctl+0x94/0xc0 [ 292.800555] ksys_ioctl+0xa9/0xd0 [ 292.803993] __x64_sys_ioctl+0x73/0xb0 [ 292.807881] do_syscall_64+0x1b9/0x820 [ 292.811765] ? syscall_return_slowpath+0x5e0/0x5e0 [ 292.816688] ? syscall_return_slowpath+0x31d/0x5e0 [ 292.821607] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 292.826966] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 292.831796] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 292.836970] RIP: 0033:0x455b29 [ 292.840152] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 292.859366] RSP: 002b:00007f2451247c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 292.867060] RAX: ffffffffffffffda RBX: 00007f24512486d4 RCX: 0000000000455b29 [ 292.874329] RDX: 0000000020013000 RSI: 00000000400445a0 RDI: 0000000000000015 [ 292.881589] RBP: 000000000072bf50 R08: 0000000000000000 R09: 0000000000000000 [ 292.888847] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 292.896109] R13: 00000000004bd250 R14: 00000000004cb350 R15: 0000000000000001 13:45:21 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000980)=""/230, 0xe6}], 0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r2, 0x8010aa01, &(0x7f0000000040)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1}) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) 13:45:21 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x80040) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000080)=0x7) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x4011, r2, 0x0) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) munmap(&(0x7f00001c1000/0x1000)=nil, 0x1000) pipe(&(0x7f00000000c0)) 13:45:21 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="04010500050000f000000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:21 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000100)=0x200fff, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = dup(r0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e22}, @in={0x2, 0x4e24, @loopback=0x7f000001}, @in={0x2, 0x4e22}, @in6={0xa, 0x4e22, 0x81, @mcast1={0xff, 0x1, [], 0x1}, 0x7ff}, @in={0x2, 0x4e24, @rand_addr=0x16c4}, @in={0x2, 0x4e24, @multicast1=0xe0000001}, @in6={0xa, 0x4e21, 0x7b5b, @local={0xfe, 0x80, [], 0xaa}, 0x100}], 0x98) sendto$inet(r0, &(0x7f0000a88f88), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000700)=ANY=[@ANYBLOB='_'], 0x1) 13:45:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000040)=0xe8) getresuid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000280)) setreuid(r1, r2) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r3 = dup3(r0, r0, 0x80000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@ipv4={[], [], @rand_addr}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000480)=0xe8) bind$bt_hci(r3, &(0x7f00000004c0)={0x1f, r4, 0x2}, 0xc) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000080)={r6, 0x1, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x10) 13:45:21 executing program 0 (fault-call:5 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCSSOFTCAR(r1, 0x5412, &(0x7f0000000000)=0xec03) 13:45:21 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="040105040500000000000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:21 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x400, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) migrate_pages(r1, 0xff9, &(0x7f0000000080)=0x6, &(0x7f00000000c0)=0x3f5f68db) r2 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r2, 0x0, 0xc8, &(0x7f0000000040), 0x4) setsockopt$inet_int(r2, 0x0, 0x40000000000c9, &(0x7f0000000140), 0xe6178cf508d0511d) 13:45:21 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500f40100000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 293.012269] device veth0_to_bridge entered promiscuous mode 13:45:21 executing program 3: unshare(0x8000000) semget(0x1, 0x3, 0x200) semget(0x3, 0x3, 0x398) semctl$IPC_RMID(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x3, 0x444200) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={r0, 0x3, 0x1, 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x4000000000000101}, 0x170) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000140)={0x606, 0x8, 0x10000, 0x4, 0xffffffff}, 0x14) unshare(0x28020400) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x9, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) 13:45:21 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000040)) close(r1) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)=0x2c) 13:45:21 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x80, 0x0) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=0x0) ioctl$TUNSETOWNER(r2, 0x400454cc, r3) r4 = socket(0x10, 0x4800000000000003, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r4, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl(r1, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000080)=0x40000000800) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000002c0)={0x4, 0x6, 0x3, 0x7, 0x9, 0x9, 0x5, 0x1, 0x25, 0x3f, 0x100000000}) 13:45:21 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="0401050005000000000a0000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 293.151656] device veth0_to_bridge left promiscuous mode 13:45:22 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x5, 0x8000) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000080)=""/144) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000cecffc), 0x4) r2 = syz_open_dev$tun(&(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) 13:45:22 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="0401050e0500000000000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:22 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snapshot\x00', 0x105403, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000100)=""/49) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x100000000000005, &(0x7f0000000080)=0x7, 0x4) open_by_handle_at(r1, &(0x7f00000003c0)={0xc1, 0x8, "7c10e5eb4678647c5f912f55eadc8c5327225631b224251439b5a61679eef711832a5e85c3001e05fb427eb94dd7a4230e41b21abf0b36a149fcb31a613590cc2423ce05b87962d0b1455229baadf416fbd9883a56aac7763bbe5b481f6a181eb72d4ca5e2eca921f215abf680dabe4cc4aa9e96e21bcff27474475188e66f8d385eb962e58dd229144c31d9396008106d712989693897cf46153ef8410d030e9813cffee30cd0d3375a71b54af6bb9314dd6e81bb92d747f9"}, 0x2000) close(r1) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000200)=""/157) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x80000000044000, 0x0) 13:45:22 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000980)=""/230, 0xe6}], 0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r2, 0x5452, &(0x7f0000000040)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1}) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) 13:45:22 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000001f40000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:22 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000100)='erspan0\x00') connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x6}, 0x1c) r1 = socket(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000180)=0x2, 0x1) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000000)={'security\x00', 0xf, "8a69107ddb203707c5c642a65c3eef"}, &(0x7f0000000040)=0x33) 13:45:22 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000010000000000000002800000850000002700000005000000000000009500000000000000"], &(0x7f00000000c0)="0000f5dc56c719041899f95bb96087f78d5bee49276410ce28669b8fc87f6628a03d36", 0x1, 0xce, &(0x7f0000000100)=""/206}, 0x48) 13:45:22 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="040105000600000000000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:22 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = socket$netlink(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x40000, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={&(0x7f0000000380)={0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)=@deltaction={0x28, 0x31, 0x309, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x28}, 0x1}, 0x0) 13:45:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCSSOFTCAR(r1, 0x5412, &(0x7f0000000000)=0xec03) 13:45:22 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x14002) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/loop-control\x00', 0x400000, 0x0) connect$l2tp(r0, &(0x7f00000006c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x2, 0x2, 0x0, {0xa, 0x4e23, 0x13, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0x7}}}, 0x3a) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f00000000c0)='./file0\x00'}, 0x10) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000700)=0x0) syz_open_procfs(r2, &(0x7f0000000740)='pagemap\x00') r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x432002, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f00000001c0)={{0x7, 0x3, 0x7, 0x4, 'syz1\x00', 0x5}, 0x0, [0x1000, 0x0, 0x7, 0x1, 0x2, 0x0, 0xeae7, 0x6, 0x80000001, 0x200, 0x1, 0x3ff, 0x7, 0x100000000, 0x7, 0x8001, 0x800, 0x1, 0x24b5b17f, 0x81, 0x68fa4e70, 0x101, 0x6, 0x1, 0x2, 0x396, 0xffffffff, 0x20, 0x3, 0x80000, 0x3d, 0x3, 0x0, 0x1000000000000000, 0x100000001, 0x8, 0x9, 0x5, 0x4, 0x4, 0x9, 0x4, 0xdd0, 0x10000, 0x200, 0x800, 0xfffffffffffffff8, 0x3, 0x10000, 0x1, 0x0, 0x2, 0x8000, 0x6, 0x0, 0x10000, 0x20, 0x1ff, 0x6, 0x0, 0x101, 0x4, 0xfffffffffffffffd, 0x4, 0x9, 0x4, 0x4, 0xfffffffffffffff7, 0x7, 0x5, 0x9, 0x8000, 0x5, 0x5, 0x400, 0xffffffffffffffff, 0xffffffffffff8000, 0x7, 0xfff, 0xec64, 0x9b7f, 0xffffffff, 0x9, 0x8, 0x81, 0x20, 0x2, 0xb97, 0x36, 0x40b, 0x3, 0x800, 0x6, 0x1, 0x0, 0x19fb, 0x5, 0x2, 0x5, 0x8, 0x3f, 0x8, 0x6e7, 0x6, 0x3e, 0x1ff, 0x9, 0x81, 0x5, 0x85c9, 0x3ff, 0x38, 0xfffffffffffffff7, 0x5, 0x6, 0x7ff, 0x6, 0x8, 0x2, 0x5, 0x6, 0x7, 0x400, 0x7f, 0x8, 0xffffffffffff8119, 0x1, 0x401], {0x77359400}}) [ 294.181203] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. [ 294.241375] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. 13:45:23 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)="472f6302000000702e6e65070000007a3100", 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) r2 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x3, 0x80100) ioctl$KVM_NMI(r2, 0xae9a) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="e8090000000d8304eed16a6b74e53237a74aaa9a190cd256d8af37258076e295a77d2649d3"], 0x10) 13:45:23 executing program 2: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/128, 0x80) lseek(r0, 0x400000, 0x1) getdents64(r0, &(0x7f0000000200)=""/54, 0x36) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @rand_addr}}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000180)=0xc) r3 = fcntl$getown(r0, 0x9) fstat(r0, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getegid() ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000001c00)=0x0) fstat(r0, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000001cc0)='./file0\x00', &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getpid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001d80)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f0000001e80)=0xe8) getresgid(&(0x7f0000001ec0)=0x0, &(0x7f0000001f00), &(0x7f0000001f40)) r12 = getpgrp(0x0) fstat(r0, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000002000)='./file0\x00', &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r0, &(0x7f0000002180)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfe, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000340)={0x1820, 0x29, 0xa, 0x70bd2c, 0x25dfdbfd, "", [@generic="2c856ffeb27d3468f64048d464620f593b5555a6ee5191a1408ea494a2fa76286efb7457a65e51dcf903b7bff71d20327b52855b5f3081612c9b370aee13481a33b20704711cb2c49dbba90a5225afa61e4988d32df33146477dbc17c504e074ee6cbc2ae821121fe2c17a5bacf76febb99b2114ccce2ae356b2125b741cef22196d8f73395945eac3c3a3bc428f04fa1d4b352d0ef5315b52c52adde456f17f9d89f4b78d5111a6254b0fe19cbf210a52f8cd5ad0c84f7f4be5f0f356c270f4710e42d0d85bab873b0ec3673ec34ce478032648289c385466e5d7de674a2e60e3b72fa697558e29a52e08b6d5faa43168796fa25fef29779d", @generic="82d0163cbdbe5cef6f156d431b3fb4f91797a6cc97b7f0413b773686b21f34a5dee1a7740dd6bab397c72bcafc5e116c5e3046432a5616012e62", @typed={0x8, 0xd, @u32=0x1}, @nested={0x5c, 0x2e, [@generic="e6062c64ce8dc82e3a8283db402c153e455d35ced8c699b9193aaaabc4dc4d471aeebd004294df8119d43744f7fa3002c3705de3ca1f4c7351912b025bae55da2d6ac6c73d7c", @typed={0x8, 0xe, @uid=r1}, @typed={0x8, 0x27, @pid=r2}]}, @nested={0x4c0, 0x6d, [@typed={0x8, 0x6, @u32=0xfff}, @typed={0x8, 0x12, @ipv4=@rand_addr}, @typed={0xc, 0x7f, @u64=0x9}, @generic="3cb134771282725dd2354770f449ac381b0cf751d33a5df0d1001a6339ad446d492201a1643732253909aafdd7a9e739f5e76f0dfe4b51933b7497c6fc091dc5ed18aa1c6d04779b688ad37b0c2b5228fad6caa371ad387f68a19887bb0aae92e033b1d3cd3f4563a279c3241491774d9f998a247eb5eb4aba7b384f587f47be435db8749a3b3dd3f6cd3afcb6f14d23f5ecb069267e7df5b3bec639659c6822489e79ce41eeedd818b60cc96f5fc41e030e8313be9d4d2d5af5287a3b3c741082000c31df6df052e68a7ce9f7", @typed={0x60, 0x6c, @binary="00ee3cc84b238e6f5cb942310c46b459018afaeac6c7b38b697e89334b7a33e6d48b516ddd7b01c021185eaab2f2e1c7e412d05511dd16d78eaa01d1e24bc1dd1d1a38634b0c1c2c8c1b3a21ac9508780c0edeca78719151c2"}, @generic="8cd36b79a0ee81dc3ff3169ad89e9fb495a0e0bce0a2a07cd103c1f6559219becdf4a0130647c3b58ffc6865b8952693e0c2a6c283e14d81d2a2555f78eaa11508b67ce95599f7c9f2731fc2ad6f44d7157c1614b7d949bcb7b08d016db3ce76c99d818dd75facee914a960b75bfc88a889304d6d188693eac836f4eac6c06977028705cf4f639dfada52253d2e64aad77b787d706b905c7825763ce8243a0106087c4892b817719faf63509b3624690f9ce5bfb5b5b9c91a2788d5436993513575f5f057a6697995923b7ed1753eee3305f28dfa4f703c19eeb8ca035d59d2dea799a9d3680999e92f6", @generic="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", @typed={0x8, 0x18, @u32=0x3d}, @typed={0x8c, 0x81, @binary="d7c649b2f6ea42523c619107aa21227bfa6e4474d559ca2558de2c94274230fbad281ffe29bcf19ec520ed4198be62757632667e43bb4daa289c8777ce1d2d9e88e7f207e4f093da87197ef4a490972a15f6f949a0b4bcb1936c5791ad9d8903dbacb3a79073142fb095c7c641a6d16f04310965992d4cf9a7579b73f239c548eec78e780c54"}, @generic="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"]}, @generic="450b6a47970e9fbede6279198d64d383903169c2ec1e7c076a5c9de1cc0fa866a1b69f5701ba00f5dc7bdd70ecde5073f4b99229a77defad99b3f723353983a5b3adeb46d243ee9295285b0c7edc22a65c485685f96afe7b11f86b1854b733abe69fc0ad200c14edd219791f175cac841716797ee13ba9ee11bc704cb5bb4516e891f5f6325804e8ad28c4480e738bb3dff99f90afbb03973fd4dd6e273b07a214c0cdba761bb4441f7b3703d2e45b3211e7c2f6a15b8cd68dbe448ac66e06c253ffe8ec1e393adc2366ad9d50f21dd43d21507de5adf4b05450f15f93d3da4fc11f346e271208f669792dffa59f", @nested={0x1098, 0x2b, [@generic="ae600ff02ba1395f1fda0871a52b2d82e0435a38d46d30996da8f2be662ccc5d67496c207255675e174ae8b690ae14328052972a6dc464183522f6e8ae5889f9b72890187c5165a2a44e5aefe824c01c9de40188ce67d09f5b0487bac57db4db84efe9858b3047ae571cffa5f76cfb2822", @generic="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", @typed={0xc, 0x4f, @str='}self+\x00'}, @typed={0x14, 0x5c, @ipv6=@dev={0xfe, 0x80, [], 0x11}}]}, @generic="1434c884897520bd0bf05b7b3beca1727e97046ebe38d4b7bdcc8c35b18e703621cd8c3301d9cca4", @typed={0x8, 0x91, @fd=r0}]}, 0x1820}], 0x1, &(0x7f00000020c0)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @cred={0x20, 0x1, 0x2, r12, r13, r14}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}], 0xb8}, 0x20000000) 13:45:23 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500002600000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:23 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x3}, 0x1c) keyctl$join(0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x19, &(0x7f0000000100), &(0x7f00000000c0)=0x149) 13:45:23 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/mcfilter6\x00') bind$bt_sco(r1, &(0x7f0000000140)={0x1f, {0x9, 0x7ff, 0x6, 0xfffffffffffffffe, 0xfffffffffffffff7, 0x7fffffff}}, 0x8) 13:45:23 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") syz_emit_ethernet(0x42, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004b000034000000c001ee9c40393452bbac1414aa44180703000000000000000000000000000000000000000000009078e0000001af56fcc2e37573ccd44b5f0beb29eaa19ca5db76ceb8cde1d5d046f9631a1263f332eb3efdfed1eccda56cd3ffc37fa1362aabb135047bb25b9a25845f1904bb54c5cdbcfbd73a8e83d9c6db54f4dc2984f72f04383568d1b704266d2819526bd343168c0c2fd96b617f4da88e9fe8c951abef08eb0100ed6bbd39"], &(0x7f0000000000)) 13:45:23 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="040105005800000000000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:23 executing program 2: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") fallocate(r0, 0x0, 0x0, 0x4) fallocate(r0, 0x20, 0x0, 0xfffffeff000) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x8}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r2}, &(0x7f0000000100)=0x8) lseek(r0, 0x0, 0x4) [ 295.092611] FAULT_FLAG_ALLOW_RETRY missing 30 [ 295.097255] CPU: 0 PID: 20511 Comm: syz-executor6 Not tainted 4.18.0-rc1+ #111 [ 295.104634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 295.104641] Call Trace: [ 295.104669] dump_stack+0x1c9/0x2b4 [ 295.120211] ? dump_stack_print_info.cold.2+0x52/0x52 [ 295.125415] ? kasan_check_write+0x14/0x20 [ 295.129648] ? do_raw_spin_lock+0xc1/0x200 [ 295.133889] handle_userfault.cold.32+0x47/0x62 [ 295.138572] ? userfaultfd_ioctl+0x4fd0/0x4fd0 [ 295.143153] ? debug_check_no_locks_freed+0x310/0x310 [ 295.148337] ? perf_event_update_userpage+0xd30/0xd30 [ 295.153516] ? print_usage_bug+0xc0/0xc0 [ 295.157670] ? print_usage_bug+0xc0/0xc0 [ 295.161721] ? __perf_event_task_sched_in+0x24f/0xbb0 [ 295.166904] ? userfaultfd_ctx_put+0x810/0x810 [ 295.171495] ? find_held_lock+0x36/0x1c0 [ 295.175563] ? __lock_acquire+0x7fc/0x5020 [ 295.179804] ? lock_downgrade+0x8f0/0x8f0 [ 295.183942] ? graph_lock+0x170/0x170 [ 295.187740] ? find_held_lock+0x36/0x1c0 [ 295.191804] ? lock_downgrade+0x8f0/0x8f0 [ 295.195942] ? kasan_check_read+0x11/0x20 [ 295.200077] ? do_raw_spin_unlock+0xa7/0x2f0 [ 295.204469] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 295.209047] ? kasan_check_write+0x14/0x20 [ 295.213271] ? do_raw_spin_lock+0xc1/0x200 [ 295.217499] __handle_mm_fault+0x3a0a/0x4460 [ 295.221901] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 295.226739] ? graph_lock+0x170/0x170 [ 295.230538] ? lock_downgrade+0x8f0/0x8f0 [ 295.234682] ? kasan_check_read+0x11/0x20 [ 295.238821] ? rcu_is_watching+0x8c/0x150 [ 295.242957] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 295.247371] ? handle_mm_fault+0x8c4/0xc80 [ 295.251608] handle_mm_fault+0x53e/0xc80 [ 295.255657] ? __handle_mm_fault+0x4460/0x4460 [ 295.260228] ? find_vma+0x34/0x190 [ 295.263771] __do_page_fault+0x620/0xe50 [ 295.267830] ? mm_fault_error+0x380/0x380 [ 295.271961] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 295.276972] ? graph_lock+0x170/0x170 [ 295.280764] do_page_fault+0xf6/0x8c0 [ 295.284553] ? vmalloc_sync_all+0x30/0x30 [ 295.288696] ? find_held_lock+0x36/0x1c0 [ 295.292763] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 295.297613] page_fault+0x1e/0x30 [ 295.301059] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 295.306659] Code: 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f [ 295.325856] RSP: 0018:ffff88017cccf7f0 EFLAGS: 00010202 [ 295.331214] RAX: 0000000000000004 RBX: 0000000000000004 RCX: 0000000000000004 [ 295.338479] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff88017cccf890 [ 295.345735] RBP: ffff88017cccf828 R08: ffffed002f999f13 R09: ffffed002f999f12 [ 295.352990] R10: ffffed002f999f12 R11: 0000000000000003 R12: 0000000020013004 [ 295.360259] R13: 0000000020013000 R14: ffff88017cccf890 R15: 00007ffffffff000 [ 295.367541] ? _copy_from_user+0x10d/0x150 [ 295.371784] evdev_do_ioctl+0xb69/0x21a0 [ 295.375841] ? lock_downgrade+0x8f0/0x8f0 [ 295.379977] ? str_to_user+0x90/0x90 [ 295.383685] ? do_futex+0x249/0x27d0 [ 295.387382] ? rcu_is_watching+0x8c/0x150 [ 295.391518] ? graph_lock+0x170/0x170 [ 295.395309] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 295.399707] ? find_held_lock+0x36/0x1c0 [ 295.403766] ? lock_downgrade+0x8f0/0x8f0 [ 295.407905] ? kasan_check_read+0x11/0x20 [ 295.412045] ? rcu_is_watching+0x8c/0x150 [ 295.416182] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 295.420603] ? __fget+0x414/0x670 [ 295.424062] evdev_ioctl_handler+0x144/0x1a0 [ 295.428457] evdev_ioctl+0x27/0x2e [ 295.431982] ? evdev_ioctl_compat+0x30/0x30 [ 295.436293] do_vfs_ioctl+0x1de/0x1720 [ 295.440175] ? rcu_is_watching+0x8c/0x150 [ 295.444318] ? ioctl_preallocate+0x300/0x300 [ 295.448714] ? __fget_light+0x2f7/0x440 [ 295.452685] ? fget_raw+0x20/0x20 [ 295.456132] ? putname+0xf2/0x130 [ 295.459583] ? rcu_read_lock_sched_held+0x108/0x120 [ 295.464673] ? kmem_cache_free+0x25c/0x2d0 [ 295.468895] ? __x64_sys_futex+0x47f/0x6a0 [ 295.473114] ? do_futex+0x27d0/0x27d0 [ 295.476912] ? security_file_ioctl+0x94/0xc0 [ 295.481317] ksys_ioctl+0xa9/0xd0 [ 295.484760] __x64_sys_ioctl+0x73/0xb0 [ 295.488642] do_syscall_64+0x1b9/0x820 [ 295.492515] ? syscall_return_slowpath+0x5e0/0x5e0 [ 295.497430] ? syscall_return_slowpath+0x31d/0x5e0 [ 295.502350] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 295.507701] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 295.512535] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 295.517709] RIP: 0033:0x455b29 [ 295.520882] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 295.540083] RSP: 002b:00007f2451247c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 295.547778] RAX: ffffffffffffffda RBX: 00007f24512486d4 RCX: 0000000000455b29 [ 295.555039] RDX: 0000000020013000 RSI: 00000000400445a0 RDI: 0000000000000015 [ 295.562303] RBP: 000000000072bf50 R08: 0000000000000000 R09: 0000000000000000 [ 295.570086] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 295.577344] R13: 00000000004bd250 R14: 00000000004cb350 R15: 0000000000000001 13:45:24 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000980)=""/230, 0xe6}], 0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r2, 0xc0045877, &(0x7f0000000040)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1}) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) 13:45:24 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500004a00000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:24 executing program 4: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0xa29e0dcdcdf67d6b, &(0x7f0000000300), &(0x7f0000000040), &(0x7f0000000280), &(0x7f0000000180)) r1 = dup(r0) r2 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x13, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1c, 0x0, &(0x7f0000000080)=[@increfs={0x40046304, 0x4}, @increfs_done={0x40106308, r2, 0x3}], 0xd0, 0x0, &(0x7f00000002c0)="76137b76f736006bfb397fc59b80ea65f11de329088cbd109c3f92bbff402600b30ba8bca4e2d43e371e4f2f8054d8c21855835abe2c7c33fc57319d005a1f5afe78d607c498344404fdb6255018aa6c8f5c64c4c514cf8567fd44a10a9a236fdde008e5a15350d30e482d0fc0fa88a221e4be48c7744365f0c7aa615ccd80f88cd87511785a566b5458cba0eddc1e18d7d3a0305c4e062902bc4047df2d1ebb56603a78c5c0f1145b2f15684bb7dcd11b400bc4eecd9a8c4a06b5dc1846ed3df40787f9cdfbb3d7d7aa61fd39ecb2ce"}) 13:45:24 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee3fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() r3 = dup(r1) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e18ff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r4, 0x8, r2) readv(r5, &(0x7f0000e8f000)=[{&(0x7f0000fb6f9c)=""/25, 0x19}], 0x1) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) fcntl$setsig(r4, 0xa, 0x12) creat(&(0x7f0000000040)='./file0\x00', 0x10) dup2(r4, r5) tkill(r2, 0x16) 13:45:24 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = add_key(&(0x7f0000000440)='big_key\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, &(0x7f00000004c0)="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", 0x4d1, 0xfffffffffffffffb) keyctl$read(0x3, r1, &(0x7f00000014c0)=""/4096, 0x1000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x10000, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='cgroup.clone_children\x00', 0x2, 0x0) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) 13:45:24 executing program 2: r0 = memfd_create(&(0x7f0000000080)="af00", 0x0) write(r0, &(0x7f0000000000)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x4, 0x11, r0, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000040), 0x37c, 0x0) 13:45:24 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="040105000500034000000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCSSOFTCAR(r1, 0x5416, &(0x7f0000000000)=0xec03) 13:45:24 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500110000000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:24 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000080)="2957e1311f16f477671070") r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000000), 0xffffffffffffff24) personality(0x0) socket$packet(0x11, 0x3, 0x300) socketpair(0x1f, 0x7, 0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000200)={0x7fff, 0x3, 0xc5}) sendto$inet6(r1, &(0x7f00000000c0)="af3d4f612cc39ae0083842f2bc15ca16349d6052235aa659556c9586e0fa403f7b948f4c0860215eeb12470c776b6a2dfcf2f80cdbeba4185e3ff8c5bca0f3cb20371295d06507f990c783d1e2aad182f7b72b661bce6fa3a855fa2844b5c29217924a3161ed48796c5efe952234f44cdd4c4e5e0ee5c14620f7ebd6cfde68b1fa1cc09d6c0fadd2a316e145c2176d474959a969d8c36d3fdd0ada7bc7e297f1b3820e44f8cb9a555ed0f15ff2bbfbf3aec20785d2038dbed5b12dfafcea0f10fb0f04cbcca80071f0af87", 0xcb, 0x0, &(0x7f0000000080)={0xa, 0x0, 0xf, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x1ff) 13:45:24 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x28000000000, &(0x7f0000000180)="c19cda399bbfb000000070") r1 = syz_init_net_socket$nfc_llcp(0x27, 0x400000000000003, 0x1) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8811efa9bc921c1e21ccf67e1d7bc5c5be9e068ddb8ce54e999a9d325ebac76283fe7a54cdbd77b300000000000000000000000000000000001000"}, 0x60) bind$nfc_llcp(r1, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "48fb39fe415d8475fe41318cdaa8cb821aaba7ba58c6a4d537711ecd89e537bc02b181f187b19423316480477beec2c29087e9a63a84d101b8f1617ab346e6"}, 0x60) dup2(r2, r1) 13:45:24 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="0401050005000000004a0000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:24 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="04010500050000000e000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:24 executing program 3: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000100)=0xc) ioctl$TUNSETOWNER(r0, 0x400454cc, r2) r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000200)={0x40, 0x2, 0x3, 0x7ff, 0x5, [{0x80000000, 0xfffffffffffffff7, 0x41, 0x0, 0x0, 0x1000}, {0xffffffffffff0000, 0x2, 0x7ff, 0x0, 0x0, 0x1000}, {0x6, 0x4, 0x163, 0x0, 0x0, 0x80}, {0x7, 0xffffffffffffffe0, 0x1, 0x0, 0x0, 0x200}, {0x9, 0x7, 0x20, 0x0, 0x0, 0x1580}]}) write$sndseq(r0, &(0x7f000000a000)=[{0x0, 0x3, 0x0, 0x0, @tick=0xfffffffffffffffd, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x4a48b125e13656b}) 13:45:24 executing program 4: perf_event_open(&(0x7f000025c000)={0x7, 0x70, 0x3e4, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffeffffffff, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x1, 0x3, 0x8, 0x80009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x1}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) init_module(&(0x7f0000000140)="70703085e3", 0xfffffffffffffcf9, &(0x7f0000000180)='selinux{\x00') r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000002c0)=@ioapic={0x1, 0xfdfdffff, 0x0, 0x0, 0x80ffff}) 13:45:24 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000003e80000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:25 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000980)=""/230, 0xe6}], 0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r2, 0xc0045878, &(0x7f0000000040)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1}) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) 13:45:25 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x200000000000000}, 0x131) listen(r0, 0x2) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x800, 0x20000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x60000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, r2, 0x120, 0x70bd29, 0x25dfdbfe, {0xe}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2={0xff, 0x2, [], 0x1}}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x101}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5b8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x840}, 0x44) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) write(r3, &(0x7f0000000840), 0xff98) openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x80000, 0x0) sendmsg$unix(r3, &(0x7f0000000b00)={&(0x7f0000001480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001c80), 0x0, &(0x7f0000001e40)}, 0x0) 13:45:25 executing program 4: modify_ldt$write(0x1, &(0x7f0000000000), 0x10) clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000001000)) read(0xffffffffffffffff, &(0x7f0000000400)=""/100, 0x64) openat$ppp(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ppp\x00', 0x40, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) getsockname(r0, &(0x7f0000000180)=@sco, &(0x7f0000000480)=0x80) clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000804000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) nanosleep(&(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0)) recvmsg(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000000040)=ANY=[], 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000400)=""/17, 0x11}, 0x0) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180), 0xc, 0x0, &(0x7f0000000280)="0e41e97e0000000000000000"}) r2 = socket$packet(0x11, 0x0, 0x300) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000100)=0x68) r3 = fcntl$dupfd(r1, 0x0, r2) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x20, @local={0xfe, 0x80, [], 0xaa}, 0x5}}}, &(0x7f00000003c0)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000400)={r4, 0x4}, &(0x7f0000000440)=0xc) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/protocols\x00') ioctl$KVM_ASSIGN_DEV_IRQ(r5, 0x4040ae70, &(0x7f0000000240)={0x31abfe1d, 0x100, 0x4, 0x100}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr/fscreate\x00') pwritev(r6, &(0x7f0000000580)=[{&(0x7f00000004c0)="a009e798592f3ae397a9b460b2eca3a1854015e7bc70bfe1debd92d6af1467a45a73b1f96e1fb5c671fca35d2e"}, {&(0x7f0000000600)="cf71bce96df22359a831f0"}], 0x14d, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340), &(0x7f0000000540)) creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$random(&(0x7f0000000200)='/dev/random\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000001, 0x32, 0xffffffffffffffff, 0x0) 13:45:25 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="0401050005000000000e0000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:25 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="040105000500f00000000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:25 executing program 2: capset(&(0x7f0000000140)={0x20071026}, &(0x7f0000000180)) r0 = socket(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f00000003c0)={'filter\x00', 0x2, [{}, {}]}, 0x48) socket(0x4, 0xb, 0xc7f) 13:45:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCSSOFTCAR(r1, 0xc0045878, &(0x7f0000000000)=0xec03) 13:45:25 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000840)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000000)=0x100000001, 0x4) close(r1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000800)) 13:45:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x200400, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000100)=0x3f, 0x37f) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000000000001000000decd00000800030055000000"], 0x20}, 0x1}, 0x0) 13:45:25 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000a00000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:25 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1) getpeername$unix(r0, &(0x7f0000000800), &(0x7f0000000880)=0x6e) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000040)) r1 = getpgrp(0xffffffffffffffff) process_vm_writev(r1, &(0x7f0000000400)=[{&(0x7f0000000300)=""/235, 0xeb}], 0x1, &(0x7f0000000480)=[{&(0x7f0000000440)=""/37, 0x25}], 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000100)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2, 0x9}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x223, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}, {[@lsrr={0x83, 0x7, 0x5ef, [@multicast1=0xe0000001]}, @ssrr={0x89, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @broadcast=0xffffffff}}}}}, &(0x7f00000002c0)) sysinfo(&(0x7f00000004c0)=""/196) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)={{}, {0x0, 0x0}}) ioctl$KDENABIO(r0, 0x4b36) tkill(r2, 0x3d) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="e4bed01ec14b7b8f32c9223d8035dfb5f136991d9e1d27e8e293c9f141132305ea1b5beeed299b0656c7960df9ca3241b8ee", @ANYBLOB="dabd4ad7540f7739eae286930ffaf853f5d1881738ec86b80aa005d6df604cc46cfc35b6b9a5a02ea94c53cf3bab5f4aaed492558ac808155acd256118f0bdfe2439594b37a39640b08abfd2a60b9abe9b0b5228bef364658b065b", @ANYRES64=r3], 0x29e) mq_notify(r0, &(0x7f0000000780)={0x0, 0x2f, 0x1, @thr={&(0x7f00000005c0)="ee582fdde77bca52265b658520d652a15335933a82ce5a10cf30c02784827a331249e4df62d3c36e189b3d3b33eba25dac941382b5edea7899863bcba98a8a6acaf590f67beb2e420d188f6076fa7b09788f17e3e47ee9c75fceeef2ddc0e92bc1ef66ce876dae04a06dac122db300693697d77d590f23bccaeb959d7dfca77da2b393946f07877d9284f843a94eb736ff73df3b6a6f9ec0c53e5dd57dd748d5eb0ce830ff1d047c1cc5", &(0x7f0000000680)="36d31864445a4791bd4c46a688c51128802960f167fc1066ba68907f1b9f5bc09e3c16a32625432f00340d2e72cb9c21affc0000311048d7b9a0f2dc7c9c6a10030854eccb8c70a6d06f131fe59108a4686a7ef3a877ca218a580d5bc282c86d48c9f2a6d27e8625c3b8e644e71bc6bdaeab75e7445b15495abed21568cbf5c857f38c34fd7fdec6a556ad45e189b61e73d9a6784ff97e08e393aba25f1014c27bee61b0d757c13a5bf2fc05950a3231e5a325318e5779d4f44992ed964f75e782321ce3080df810648782db16c216"}}) 13:45:25 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)={0x3, 0x8000000000004, 0x4, 0x3}, 0x2c) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x9, 0x200) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000040)) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000100)=""/67, 0x43}, {&(0x7f0000000180)=""/213, 0xd5}, {&(0x7f0000000280)=""/208, 0xd0}, {&(0x7f0000000380)=""/70, 0x46}, {&(0x7f0000000400)=""/72, 0x48}, {&(0x7f0000000480)=""/141, 0x8d}], 0x6) bpf$MAP_CREATE(0x4, &(0x7f0000000880)={0x13, 0x0, 0x0, 0x1}, 0x2c) memfd_create(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x2) 13:45:25 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f00000000c0)=0x2000, 0x4) sendmmsg(r0, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f00000018c0)}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000002a80)=[{{&(0x7f0000002780)=@vsock, 0x80, &(0x7f0000002a00), 0x0, &(0x7f0000002a40)=""/21, 0x15}}], 0x1, 0x0, &(0x7f0000002cc0)) 13:45:25 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000040030000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:26 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0xff) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x46303, 0x0) r2 = pkey_alloc(0x0, 0x3) pkey_free(r2) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000080), &(0x7f0000000140)=0x4) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000400)=0x78) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000200)=0x7) read(r0, &(0x7f0000000240)=""/90, 0x5a) 13:45:26 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="040105000506000000000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 297.822834] FAULT_FLAG_ALLOW_RETRY missing 30 [ 297.827490] CPU: 1 PID: 20657 Comm: syz-executor6 Not tainted 4.18.0-rc1+ #111 [ 297.834877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 297.834887] Call Trace: [ 297.846844] dump_stack+0x1c9/0x2b4 [ 297.850484] ? dump_stack_print_info.cold.2+0x52/0x52 [ 297.855683] ? kasan_check_write+0x14/0x20 [ 297.859932] ? do_raw_spin_lock+0xc1/0x200 [ 297.864183] handle_userfault.cold.32+0x47/0x62 [ 297.868872] ? userfaultfd_ioctl+0x4fd0/0x4fd0 [ 297.873466] ? debug_check_no_locks_freed+0x310/0x310 [ 297.878663] ? perf_event_update_userpage+0xd30/0xd30 [ 297.883865] ? print_usage_bug+0xc0/0xc0 [ 297.887940] ? print_usage_bug+0xc0/0xc0 [ 297.892022] ? __perf_event_task_sched_in+0x24f/0xbb0 [ 297.897250] ? userfaultfd_ctx_put+0x810/0x810 [ 297.901840] ? find_held_lock+0x36/0x1c0 [ 297.905923] ? __lock_acquire+0x7fc/0x5020 [ 297.910163] ? lock_downgrade+0x8f0/0x8f0 [ 297.914309] ? graph_lock+0x170/0x170 [ 297.918128] ? find_held_lock+0x36/0x1c0 [ 297.922202] ? lock_downgrade+0x8f0/0x8f0 [ 297.926341] ? kasan_check_read+0x11/0x20 [ 297.930480] ? do_raw_spin_unlock+0xa7/0x2f0 [ 297.934885] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 297.939464] ? kasan_check_write+0x14/0x20 [ 297.943694] ? do_raw_spin_lock+0xc1/0x200 [ 297.947927] __handle_mm_fault+0x3a0a/0x4460 [ 297.952336] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 297.957174] ? graph_lock+0x170/0x170 [ 297.960991] ? lock_downgrade+0x8f0/0x8f0 [ 297.965142] ? kasan_check_read+0x11/0x20 [ 297.969282] ? rcu_is_watching+0x8c/0x150 [ 297.973416] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 297.977813] ? handle_mm_fault+0x8c4/0xc80 [ 297.982046] handle_mm_fault+0x53e/0xc80 [ 297.986188] ? __handle_mm_fault+0x4460/0x4460 [ 297.990762] ? find_vma+0x34/0x190 [ 297.994298] __do_page_fault+0x620/0xe50 [ 297.998358] ? mm_fault_error+0x380/0x380 [ 298.002493] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 298.007500] ? graph_lock+0x170/0x170 [ 298.011293] do_page_fault+0xf6/0x8c0 [ 298.015082] ? vmalloc_sync_all+0x30/0x30 [ 298.019222] ? find_held_lock+0x36/0x1c0 [ 298.023286] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 298.028127] page_fault+0x1e/0x30 [ 298.031569] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 298.037172] Code: 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f [ 298.056504] RSP: 0018:ffff88017858f7f0 EFLAGS: 00010202 [ 298.061855] RAX: 0000000000000004 RBX: 0000000000000004 RCX: 0000000000000004 [ 298.069117] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff88017858f890 [ 298.076371] RBP: ffff88017858f828 R08: ffffed002f0b1f13 R09: ffffed002f0b1f12 [ 298.083637] R10: ffffed002f0b1f12 R11: 0000000000000003 R12: 0000000020013004 [ 298.090893] R13: 0000000020013000 R14: ffff88017858f890 R15: 00007ffffffff000 [ 298.098169] ? _copy_from_user+0x10d/0x150 [ 298.102399] evdev_do_ioctl+0xb69/0x21a0 [ 298.106450] ? lock_downgrade+0x8f0/0x8f0 [ 298.110597] ? str_to_user+0x90/0x90 [ 298.114306] ? do_futex+0x249/0x27d0 [ 298.118014] ? rcu_is_watching+0x8c/0x150 [ 298.122153] ? graph_lock+0x170/0x170 [ 298.125948] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 298.130355] ? find_held_lock+0x36/0x1c0 [ 298.134412] ? lock_downgrade+0x8f0/0x8f0 [ 298.138555] ? kasan_check_read+0x11/0x20 [ 298.142688] ? rcu_is_watching+0x8c/0x150 [ 298.146834] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 298.151239] ? __fget+0x414/0x670 [ 298.154690] evdev_ioctl_handler+0x144/0x1a0 [ 298.159090] evdev_ioctl+0x27/0x2e [ 298.162704] ? evdev_ioctl_compat+0x30/0x30 [ 298.167023] do_vfs_ioctl+0x1de/0x1720 [ 298.170901] ? rcu_is_watching+0x8c/0x150 [ 298.175039] ? ioctl_preallocate+0x300/0x300 [ 298.179442] ? __fget_light+0x2f7/0x440 [ 298.183406] ? fget_raw+0x20/0x20 [ 298.186858] ? putname+0xf2/0x130 [ 298.190298] ? rcu_read_lock_sched_held+0x108/0x120 [ 298.195310] ? kmem_cache_free+0x25c/0x2d0 [ 298.199543] ? __x64_sys_futex+0x47f/0x6a0 [ 298.203769] ? do_futex+0x27d0/0x27d0 [ 298.207560] ? security_file_ioctl+0x94/0xc0 [ 298.211960] ksys_ioctl+0xa9/0xd0 [ 298.215401] __x64_sys_ioctl+0x73/0xb0 [ 298.219279] do_syscall_64+0x1b9/0x820 [ 298.223156] ? syscall_return_slowpath+0x5e0/0x5e0 [ 298.228076] ? syscall_return_slowpath+0x31d/0x5e0 [ 298.233084] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 298.238437] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 298.243273] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 298.248450] RIP: 0033:0x455b29 [ 298.251620] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 298.270959] RSP: 002b:00007f2451247c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 298.278665] RAX: ffffffffffffffda RBX: 00007f24512486d4 RCX: 0000000000455b29 [ 298.285924] RDX: 0000000020013000 RSI: 00000000400445a0 RDI: 0000000000000015 [ 298.293180] RBP: 000000000072bf50 R08: 0000000000000000 R09: 0000000000000000 [ 298.300437] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 298.307692] R13: 00000000004bd250 R14: 00000000004cb350 R15: 0000000000000001 13:45:27 executing program 3: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0xffffffffffffffff, 0x3, 0x1, 0x7fffffff, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) open_by_handle_at(r0, &(0x7f0000000180)={0xd6, 0x1, "2296bb54b8808bbf3e013d700f2b127313916c4858561ef1f9458ff93b917c5f446619df140ba6a920f026b995e93b0c9f89c688089ba26780609deaad3fed7263898f8583d4b5f55c643ce82a0cdb50b3ed76d6320b26d5089c6c8f185dcd71aee0095f2d5f19459724606e4f24f4aece44ea1bb1048f6feb7c06c2184f25cdaf7ef66a7d7412a08861e2a8ed3d4a1fbd5d0e3e1d80c27c63d64b1b3946bc84bb0c6f5e3408a26b42849aef1a50bea4a08fdaddd42171fd6f97e3a940a42fb20798981fafb3466f613897dda450"}, 0x8000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(r1, 0x0, 0x200000000000043, &(0x7f0000f39000)=""/30, &(0x7f0000001000)=0x1e) pwrite64(r1, &(0x7f0000000000)="84e68ef3b43a8b473a161e398c9d0a116ec1cc7b07b532f1ad49c88d14a2201781c05e8bfb823ddeaa2f8408358cedfe1455968e0100b49ac294c05de174e6f3a6e593a0b8bd5282089216da2a6343cd5d09b225c7d32cfb1f831d4fbf0a4bd1a865a85c89a8e1bf99bf2e1ed56f2dfb48b2d0d922f6dbabef52dbe9e9f038a506e84356ce11e9c8b784f2756f46594e3dc188980aa1a319840380d050ee298a7f93da8fd0a5babd3ceb8e6038c29e780e5baf1105ce6c14d76cb604b935a544698c267086bd6fdefb", 0xc9, 0x0) 13:45:27 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) syz_fuse_mount(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0/file0\x00', 0x0) read(r1, &(0x7f0000003380)=""/4096, 0xf) unshare(0x20003fd) 13:45:27 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="04010500050000fffff00000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:27 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000980)=""/230, 0xe6}], 0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000013000/0x3000)=nil, 0x7fffdffec000}, 0x1}) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) 13:45:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCSSOFTCAR(r1, 0x5425, &(0x7f0000000000)=0xec03) 13:45:27 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="04010500050a000000000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:27 executing program 4: r0 = socket(0x10, 0x7ff, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0001b000400edfc0e1c0b0020e80000001009ffeb0800010010000100", 0x24) 13:45:27 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xffffffffffffffa8, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000005e000102000000030000000000000037af56b500"], 0x18}, 0x1}, 0x0) [ 298.358848] binder: 20595:20655 ioctl c0306201 200002c0 returned -14 [ 298.370123] binder_alloc: binder_alloc_mmap_handler: 20595 2000c000-2000e000 already mapped failed -16 [ 298.379720] binder: BINDER_SET_CONTEXT_MGR already set [ 298.385388] binder: 20595:20655 ioctl 40046207 0 returned -16 [ 298.390110] binder: 20595:20660 ioctl c0306201 200002c0 returned -14 13:45:27 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20, 0x5, @local={0xfe, 0x80, [], 0xaa}}, 0x12) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0xb}, 0x7a) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x800, 0x4, [0x0, 0x6, 0xff, 0x8]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000140)={r2, 0x9}, 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000040)) 13:45:27 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000000000600ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:27 executing program 1: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r2) setresuid(0x0, r1, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) setgid(r2) 13:45:27 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x10000, 0x0) syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x0, 0x40) syz_fuse_mount(&(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 298.581113] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 13:45:27 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000000000400ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:27 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="040105000501f40000000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:27 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0) getpeername(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5) 13:45:27 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x3, 0x40000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x54, &(0x7f00000002c0)=[@in6={0xa, 0x4e22, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x100000000}, @in6={0xa, 0x4e23, 0x1, @mcast2={0xff, 0x2, [], 0x1}, 0x128}, @in6={0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, [], 0x13}, 0x8}]}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000380)={r1, @in6={{0xa, 0x4e21, 0x2e8d, @loopback={0x0, 0x1}, 0x1ff}}, 0x5, 0x101, 0x36, 0x7fff, 0x40}, &(0x7f0000000440)=0x98) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffffffffffffff0800470000300000000000009078ac1414aa80000000070805000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="700000009078c78f03c1ef60d359f96621660a48ec6386b5e00bbd9d"], &(0x7f0000000080)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x800, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0x5, 0x3, 0x0, 0x0, 0xffffffff, 0x7, 0x3f3, 0x21, r3}, 0x20) fadvise64(r0, 0x0, 0x0, 0x7) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000140)={r3, 0x4, 0x9, 0x1}, &(0x7f0000000180)=0x10) 13:45:27 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000000004a00ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 298.761142] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 298.768492] FAT-fs (loop4): Filesystem has been set read-only [ 298.871890] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 298.938197] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 299.296456] FAULT_FLAG_ALLOW_RETRY missing 30 [ 299.301069] CPU: 0 PID: 20741 Comm: syz-executor6 Not tainted 4.18.0-rc1+ #111 [ 299.308421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 299.317762] Call Trace: [ 299.320353] dump_stack+0x1c9/0x2b4 [ 299.323979] ? dump_stack_print_info.cold.2+0x52/0x52 [ 299.329179] ? kasan_check_write+0x14/0x20 [ 299.333417] ? do_raw_spin_lock+0xc1/0x200 [ 299.337643] handle_userfault.cold.32+0x47/0x62 [ 299.342310] ? userfaultfd_ioctl+0x4fd0/0x4fd0 [ 299.346881] ? debug_check_no_locks_freed+0x310/0x310 [ 299.352085] ? perf_event_update_userpage+0xd30/0xd30 [ 299.357295] ? print_usage_bug+0xc0/0xc0 [ 299.361377] ? print_usage_bug+0xc0/0xc0 [ 299.365452] ? __perf_event_task_sched_in+0x24f/0xbb0 [ 299.370667] ? userfaultfd_ctx_put+0x810/0x810 [ 299.375266] ? find_held_lock+0x36/0x1c0 [ 299.379345] ? __lock_acquire+0x7fc/0x5020 [ 299.383587] ? lock_downgrade+0x8f0/0x8f0 [ 299.387742] ? graph_lock+0x170/0x170 [ 299.391571] ? find_held_lock+0x36/0x1c0 [ 299.395645] ? lock_downgrade+0x8f0/0x8f0 [ 299.399808] ? kasan_check_read+0x11/0x20 [ 299.403972] ? do_raw_spin_unlock+0xa7/0x2f0 [ 299.408382] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 299.412972] ? kasan_check_write+0x14/0x20 [ 299.417215] ? do_raw_spin_lock+0xc1/0x200 [ 299.421459] __handle_mm_fault+0x3a0a/0x4460 [ 299.425856] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 299.430684] ? graph_lock+0x170/0x170 [ 299.434493] ? lock_downgrade+0x8f0/0x8f0 [ 299.438627] ? kasan_check_read+0x11/0x20 [ 299.442759] ? rcu_is_watching+0x8c/0x150 [ 299.446892] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 299.451298] ? handle_mm_fault+0x8c4/0xc80 [ 299.455530] handle_mm_fault+0x53e/0xc80 [ 299.459588] ? __handle_mm_fault+0x4460/0x4460 [ 299.464156] ? find_vma+0x34/0x190 [ 299.467688] __do_page_fault+0x620/0xe50 [ 299.471739] ? mm_fault_error+0x380/0x380 [ 299.475883] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 299.480888] ? graph_lock+0x170/0x170 [ 299.484683] do_page_fault+0xf6/0x8c0 [ 299.488473] ? vmalloc_sync_all+0x30/0x30 [ 299.492612] ? find_held_lock+0x36/0x1c0 [ 299.496668] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 299.501514] page_fault+0x1e/0x30 [ 299.504966] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 299.510566] Code: 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f [ 299.529751] RSP: 0018:ffff880176e3f7f0 EFLAGS: 00010202 [ 299.535116] RAX: 0000000000000004 RBX: 0000000000000004 RCX: 0000000000000004 [ 299.542378] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff880176e3f890 [ 299.549634] RBP: ffff880176e3f828 R08: ffffed002edc7f13 R09: ffffed002edc7f12 [ 299.556886] R10: ffffed002edc7f12 R11: 0000000000000003 R12: 0000000020013004 [ 299.564142] R13: 0000000020013000 R14: ffff880176e3f890 R15: 00007ffffffff000 [ 299.571426] ? _copy_from_user+0x10d/0x150 [ 299.576421] evdev_do_ioctl+0xb69/0x21a0 [ 299.580485] ? lock_downgrade+0x8f0/0x8f0 [ 299.584636] ? str_to_user+0x90/0x90 [ 299.588343] ? do_futex+0x249/0x27d0 [ 299.592051] ? rcu_is_watching+0x8c/0x150 [ 299.596187] ? graph_lock+0x170/0x170 [ 299.599973] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 299.604372] ? find_held_lock+0x36/0x1c0 [ 299.608421] ? lock_downgrade+0x8f0/0x8f0 [ 299.612555] ? kasan_check_read+0x11/0x20 [ 299.616686] ? rcu_is_watching+0x8c/0x150 [ 299.620814] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 299.625219] ? __fget+0x414/0x670 [ 299.628678] evdev_ioctl_handler+0x144/0x1a0 [ 299.633098] evdev_ioctl+0x27/0x2e [ 299.636641] ? evdev_ioctl_compat+0x30/0x30 [ 299.640956] do_vfs_ioctl+0x1de/0x1720 [ 299.644830] ? rcu_is_watching+0x8c/0x150 [ 299.648963] ? ioctl_preallocate+0x300/0x300 [ 299.653359] ? __fget_light+0x2f7/0x440 [ 299.657328] ? fget_raw+0x20/0x20 [ 299.660786] ? putname+0xf2/0x130 [ 299.664224] ? rcu_read_lock_sched_held+0x108/0x120 [ 299.669221] ? kmem_cache_free+0x25c/0x2d0 [ 299.673438] ? __x64_sys_futex+0x47f/0x6a0 [ 299.677669] ? do_futex+0x27d0/0x27d0 [ 299.681458] ? security_file_ioctl+0x94/0xc0 [ 299.685852] ksys_ioctl+0xa9/0xd0 [ 299.689294] __x64_sys_ioctl+0x73/0xb0 [ 299.693173] do_syscall_64+0x1b9/0x820 [ 299.697049] ? syscall_return_slowpath+0x5e0/0x5e0 [ 299.701978] ? syscall_return_slowpath+0x31d/0x5e0 [ 299.706910] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 299.712365] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 299.717205] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 299.722374] RIP: 0033:0x455b29 [ 299.725553] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 13:45:28 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="0401050005000000f0000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:28 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[]}, 0x1}, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x18) bind$netlink(r0, &(0x7f0000000080)={0x10}, 0xc) [ 299.744738] RSP: 002b:00007f2451247c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 299.752433] RAX: ffffffffffffffda RBX: 00007f24512486d4 RCX: 0000000000455b29 [ 299.759698] RDX: 0000000020013000 RSI: 00000000400445a0 RDI: 0000000000000015 [ 299.766960] RBP: 000000000072bf50 R08: 0000000000000000 R09: 0000000000000000 [ 299.774227] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 299.781494] R13: 00000000004bd250 R14: 00000000004cb350 R15: 0000000000000001 13:45:28 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000980)=""/230, 0xe6}], 0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x4}) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) 13:45:28 executing program 1: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000200)='/\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0/file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x9) 13:45:28 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001100090469001b00810800000708000000000000000001", 0x1b}], 0x1) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00007a8000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000060f000000000000001000"], 0x12}, 0x1}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x4028700f, &(0x7f0000000040)) 13:45:28 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="0401050005f4010000000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCSSOFTCAR(r1, 0x80045440, &(0x7f0000000000)=0xec03) 13:45:28 executing program 2: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x0, 0x32}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x8464}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r3, 0x20000003) r4 = syz_open_dev$mouse(&(0x7f0000000280)='/dev/input/mouse#\x00', 0xffffffffffffffc0, 0x101000) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000002c0)={0x0, 0x1000}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000340)={r5, 0x1, 0x30}, 0xc) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r7 = accept4(r3, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r7, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)=@dstopts, 0x8) connect(r7, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) listen(r7, 0x0) 13:45:28 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)=0x7) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000240)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 13:45:28 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="04010500050000f000000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:29 executing program 1: r0 = socket$inet6(0xa, 0x9000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, r1, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x1, 0x70}, 0x0, 0x0, r1, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000100)=0xc5) dup2(r3, r2) 13:45:29 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000a00000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 301.135274] FAULT_FLAG_ALLOW_RETRY missing 30 [ 301.139937] CPU: 0 PID: 20824 Comm: syz-executor6 Not tainted 4.18.0-rc1+ #111 [ 301.147312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 301.147323] Call Trace: [ 301.159285] dump_stack+0x1c9/0x2b4 [ 301.162929] ? dump_stack_print_info.cold.2+0x52/0x52 [ 301.168136] ? kasan_check_write+0x14/0x20 [ 301.172381] ? do_raw_spin_lock+0xc1/0x200 [ 301.176641] handle_userfault.cold.32+0x47/0x62 [ 301.181329] ? userfaultfd_ioctl+0x4fd0/0x4fd0 [ 301.185927] ? debug_check_no_locks_freed+0x310/0x310 [ 301.191218] ? perf_event_update_userpage+0xd30/0xd30 [ 301.196427] ? print_usage_bug+0xc0/0xc0 [ 301.200501] ? print_usage_bug+0xc0/0xc0 [ 301.204570] ? __perf_event_task_sched_in+0x24f/0xbb0 [ 301.209770] ? userfaultfd_ctx_put+0x810/0x810 [ 301.214364] ? find_held_lock+0x36/0x1c0 [ 301.218445] ? __lock_acquire+0x7fc/0x5020 [ 301.222687] ? lock_downgrade+0x8f0/0x8f0 [ 301.226861] ? graph_lock+0x170/0x170 [ 301.230682] ? find_held_lock+0x36/0x1c0 [ 301.234870] ? lock_downgrade+0x8f0/0x8f0 [ 301.239026] ? kasan_check_read+0x11/0x20 [ 301.243179] ? do_raw_spin_unlock+0xa7/0x2f0 [ 301.247606] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 301.252192] ? kasan_check_write+0x14/0x20 [ 301.256436] ? do_raw_spin_lock+0xc1/0x200 [ 301.260680] __handle_mm_fault+0x3a0a/0x4460 [ 301.265100] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 301.269950] ? graph_lock+0x170/0x170 [ 301.273770] ? lock_downgrade+0x8f0/0x8f0 [ 301.277996] ? kasan_check_read+0x11/0x20 [ 301.282140] ? rcu_is_watching+0x8c/0x150 [ 301.286288] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 301.290701] ? handle_mm_fault+0x8c4/0xc80 [ 301.294947] handle_mm_fault+0x53e/0xc80 [ 301.299022] ? __handle_mm_fault+0x4460/0x4460 [ 301.303623] ? find_vma+0x34/0x190 [ 301.307175] __do_page_fault+0x620/0xe50 [ 301.311251] ? mm_fault_error+0x380/0x380 [ 301.315425] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 301.320446] ? graph_lock+0x170/0x170 [ 301.324255] do_page_fault+0xf6/0x8c0 [ 301.328069] ? vmalloc_sync_all+0x30/0x30 [ 301.332222] ? find_held_lock+0x36/0x1c0 [ 301.336297] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 301.341151] page_fault+0x1e/0x30 [ 301.344610] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 301.350225] Code: 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f [ 301.369615] RSP: 0018:ffff880184fe77f0 EFLAGS: 00010202 [ 301.374993] RAX: 0000000000000004 RBX: 0000000000000004 RCX: 0000000000000004 [ 301.382271] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff880184fe7890 [ 301.389560] RBP: ffff880184fe7828 R08: ffffed00309fcf13 R09: ffffed00309fcf12 [ 301.396837] R10: ffffed00309fcf12 R11: 0000000000000003 R12: 0000000020013004 [ 301.404115] R13: 0000000020013000 R14: ffff880184fe7890 R15: 00007ffffffff000 [ 301.411411] ? _copy_from_user+0x10d/0x150 [ 301.415637] evdev_do_ioctl+0xb69/0x21a0 [ 301.419773] ? lock_downgrade+0x8f0/0x8f0 [ 301.423905] ? str_to_user+0x90/0x90 [ 301.427624] ? do_futex+0x249/0x27d0 [ 301.431323] ? rcu_is_watching+0x8c/0x150 [ 301.435460] ? graph_lock+0x170/0x170 [ 301.439245] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 301.443647] ? find_held_lock+0x36/0x1c0 [ 301.447699] ? lock_downgrade+0x8f0/0x8f0 [ 301.451837] ? kasan_check_read+0x11/0x20 [ 301.455969] ? rcu_is_watching+0x8c/0x150 [ 301.460113] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 301.464519] ? __fget+0x414/0x670 [ 301.467962] evdev_ioctl_handler+0x144/0x1a0 [ 301.472364] evdev_ioctl+0x27/0x2e [ 301.475889] ? evdev_ioctl_compat+0x30/0x30 [ 301.480199] do_vfs_ioctl+0x1de/0x1720 [ 301.484071] ? rcu_is_watching+0x8c/0x150 [ 301.488205] ? ioctl_preallocate+0x300/0x300 [ 301.492596] ? __fget_light+0x2f7/0x440 [ 301.496554] ? fget_raw+0x20/0x20 [ 301.499991] ? putname+0xf2/0x130 [ 301.503442] ? rcu_read_lock_sched_held+0x108/0x120 [ 301.508461] ? kmem_cache_free+0x25c/0x2d0 [ 301.512690] ? __x64_sys_futex+0x47f/0x6a0 [ 301.516917] ? do_futex+0x27d0/0x27d0 [ 301.520705] ? security_file_ioctl+0x94/0xc0 [ 301.525111] ksys_ioctl+0xa9/0xd0 [ 301.528548] __x64_sys_ioctl+0x73/0xb0 [ 301.532433] do_syscall_64+0x1b9/0x820 [ 301.536307] ? syscall_return_slowpath+0x5e0/0x5e0 [ 301.541242] ? syscall_return_slowpath+0x31d/0x5e0 [ 301.546248] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 301.551599] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 301.556435] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 301.561618] RIP: 0033:0x455b29 [ 301.564788] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 301.584789] RSP: 002b:00007f2451247c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 301.592493] RAX: ffffffffffffffda RBX: 00007f24512486d4 RCX: 0000000000455b29 [ 301.599744] RDX: 0000000020013000 RSI: 00000000400445a0 RDI: 0000000000000015 [ 301.606997] RBP: 000000000072bf50 R08: 0000000000000000 R09: 0000000000000000 [ 301.614254] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 301.621514] R13: 00000000004bd250 R14: 00000000004cb350 R15: 0000000000000001 13:45:30 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(blowfish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b0", 0x4) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000005940)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000003c0)="48107936edbbc8470fd3bd7d3faf24211f88c05f85353b1bcef5de3280f2687c2620032770501ef8a908213c16f3b17383193cefab9cd87a0e4958fa534911c18d419a82e9ac2576bdf6e4aa2b73a8ae9dda065a07a0df23aa43a96ad5c02f8c10c3516fff9e65261d4d15fc36fc66a908f8bc", 0x73}], 0x1, &(0x7f0000000380)}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000100)={&(0x7f0000000300)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/107, 0x6b}], 0x0, &(0x7f0000000200)=""/6, 0x6}, 0x0) recvmsg(r2, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x11c, &(0x7f00000013c0)=[{&(0x7f00000014c0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 13:45:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x4000, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) utimensat(r2, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={{}, {r3, r4/1000+10000}}, 0x100) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x64, 0x220200) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000040)=0x3, 0x4) ioctl$TCSETAF(r1, 0x80047437, &(0x7f00000000c0)) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x11400}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x12c, 0x24, 0x600, 0x70bd28, 0x25dfdbfd, {0x3}, [@nested={0xe8, 0x1f, [@generic="806c2a4b954e6c4b70245b79742ff4f3a21cc2dfacbae187f33877a86f1cc97502442eab97999973ce6891fa854aa82b2b40071bf63566eb59ad4ceb1f18e73ac95a3e5a5c6ca21a5c473cecd681239fcc6d10734cfbbf840185b34bb3a25d54c7a6564b1c5361a8a62e02e30595f15c25d104d2ff2e3dcfb4a48615a285c06b7e30837f5ee921ff52f9f79e14c3a2ae2e1b46eccb33d73c6a89891a2623520aa7595c26c0a538ee258331323c7537eb4287213c57a7e2bfe71134", @typed={0x14, 0x55, @ipv6=@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x1d}}}, @typed={0x14, 0x19, @ipv6=@local={0xfe, 0x80, [], 0xaa}}]}, @generic="566903e4ef0a0004a8476ac80d6e47d101de62d64fec36eca847eabc4f3d6bb67d6f698f4a2803fb6fb384c75c293d"]}, 0x12c}, 0x1, 0x0, 0x0, 0x400c0}, 0x20000001) 13:45:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCSSOFTCAR(r1, 0x541d, &(0x7f0000000000)=0xec03) 13:45:30 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="0401050005000001f4000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:30 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x1f) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000002140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x0, 0x0, 0x3, 0x4}}, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="49f82ffd87ae155e93f5b5af1f663ca2d4dceb8d42142d85c9cf1840f695121048b20b5f07e85db3c7e0aa47b5675b245f6db729ac94c64cb418a33e4499730eed0af84f1236068e1968634c156c12b4bab5d5cb9390d191fab5fcbbdb23812a722b47f90dda99e088a94dddfab69033060c626dce5c30f2404d4cd482c85dded6f3f9fce3ccebffd53ddb35794c319f6eb692db6ceff64a0fed77e756189715089d381a864e44eb24d2fbf88e791a8157b93d18634ca241962ebe8eceb1834e927660fb8d2964880dbd63c270c471ec20686a632166d888e4cd501f6c64a6"}, {&(0x7f0000000080)="6e3c9b848675d19138bad81f108b0f56fba883ec2d6fb005bbf5778850c3743c693c16728f1cb6de62c0f346a6f20ceadf840695"}, {&(0x7f0000000240)="6b384e2937b946029f7aed753d4ec248ac4a3c7b814ac5662d2af09ba88f523ba01c048da418d61f95cc7a2057e93ecd1c1d00246a637b26c75b17526f46229a7beff0c6b13234e63073cbc4eca1e7bc9f4f1b51925416646f9d9dee2a590a7c297324f224dcba5138d660339036d7703efb5b23086788d1c683d53321bb43d6936798af26636fbe1f00f6e432e553884f794ad10f910b794a02ac3fbd5a9b35015be3b4d9b52150c995be5d978c144511604cf530"}, {&(0x7f0000000300)="0eb1889d45d1b7779656ab666695b2046e38b161490f53b699adb9dee574b0fa7376159a1eb3350ead0fe0d6f84b1f06f88c6df70e5ea4e75f13b4e91efb251f0e6e4a7e8c5f548cd9f95d00683d36523b0fd662607e43746571ad02c63200f1340ce5c77ff911c345aba9bd8df75f670fae"}], 0x0, &(0x7f0000000440)=[{0x0, 0x11f, 0x1, "0153e494e863c2712e7231e5955b70bf8b14d91d5c802e71a59fe5186ed7bb0d5f590600cf6d866e685b48276627ad21a8fcf612b7be43091e6ca78b38dfb0a58d8adf25fc2425579e9968a2db96bfd17c244657c2d2effccbe4c592762478d4d6c177c3b6e482057605ac331335eb7649a54c97f37cbdaaa8c1af90465456d6f82c2cf4bd06865fad2077f8e950e5a5819a299da3766c94879be0e1e3a3dcef433db5ff4900a99b31c63b8c47107b144db4a5017af9d1e2dbce86c539885045aa1071aa4728f6427278edada86ea0e5aa791a88b914e6b7c1"}, {0x0, 0x114, 0x1, "82e51bfc4a3efd223297a6ca687b216304808794d6e36496ac07eb7666a9e9fe851fafa8220e747eb4f0527a166b1518c573b19e41253122b9d7d8a1464f4492aa65d2c7b97c9bdc582c1a0d52a8839da7c9497cb7c2e9e9a50d8e94529dbd508c494d57db4897c2847dabceab2bc6e5731ef31841267b09fde4c8a3f2d623eb6b68f23dc1dfc27c17f979a7974398c2635e8055349d570959c29782d3896574ff57131cefe29ccd9e69e17e2ab70988620364fb02e182b687ffcab0d3bad9a3556d7437de05"}], 0x0, 0x44004}, 0xa2}, {{&(0x7f0000000640)=@vsock={0x28, 0x0, 0xffffffff, @hyper}, 0x0, &(0x7f0000000900)=[{&(0x7f00000006c0)="1228530b0f40377b54b496b583a815031d0ea3419d85ef58894237a3045fbb5af63e2b7b31921f10c04c1e5775dd70e0f0bdc1501a387fc9b6282471d22d0a1de00399d499122d9775addbafb5b30077e45db847a36c7fc35c0c2d6fa3d4ffc0c594f7756d524dabfc428e6f590c13e878a9b0c3d51ecb4474bc42cddd496027f31a287daf6b0ff4267550e1490c1c3cd4cd"}, {&(0x7f0000000780)="908466a1d5e17438518a57aca7ad7eaa7a5b82b58a7098adee933f38627debfc09c7e820af677ea89585d034b5f79c9fc332cc06c49cf99f31c0ea45a37c855b86b71557260d4f4459d6489224b841e8ad5f278953a07bea58639689814fde1ffa173f6333a9ea093f767418d77a944a39d9ed0a9ff0f919746a7cf2095ccea0a202bdf526fd764646cafc6cd9153acf355a8c75b73762af9bedb0a10078d85419d4088ca447e7ff3858814dcf33fb"}, {&(0x7f0000000840)="63382864e7ee60fe1a3e86312eb83ed6130cfe79517b6274ee3b50bc8e6e29f1ea957505cf841a1d4c42a0a66f0e12fe26663363be056771014a6f60b96f32a8f11b158372de75658314c8a2147d2c"}, {&(0x7f00000008c0)="00e5d78a0bfde8348383e6bdccbbce402c88af4a602829a3056e17bdc6441e2bfac4dabc925285c6348588a7109662dc8fa29d4b44d7"}], 0x0, &(0x7f0000000940)=[{0x0, 0x0, 0x4}], 0x0, 0x8000}}, {{&(0x7f0000000980)=@pptp={0x18, 0x2, {0x3, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000a00)="cfd3c204a5f4bdea9eb407a07768afcfa979ce20068860a43b4a87ec550142f6260102b81e0c5b6f3df7a9b92f22a8f6fa53dc0cec4f7b6ed0cdf7b61eacd7c3ca14af27492723e29e9dd29a568e5739edeaaf659d845bd91b2dc28d0be691e9f4e74fd85b2620a2aa1e80d7fdb31cd12846a704ad51ae8539c77f0d8f61b30f07ff0a89f1595f5fd00bafe1421fb83d72897ad8a739ded2eb3fa41d36277f81157b44e2e13b2d22098a6b28bad13ea8e3b1a36fa0f5cb3ce9163e2bcd"}, {&(0x7f0000000ac0)="b23ac0b0e9ac67e19e0570284e038995dcba03fc2864ca030f3233966bd6f706682beb5e98afad2e396be5b52d20045ee019212134d7853d05b743b07801d5f9188fcfaccafc290a19105d950b75e4d214f6205e1ab04da23c941810895602d9487c980d0e5969064ba14411700d0568c19ebb86d3edd303f80f012a75c0f3bea1962b13c65190cc00ca57840c0d45b92608"}, {&(0x7f0000000b80)="f8b96ddf65ca4cfcfa24a92fd324464d46ef1fd43af8164501f13f907bf2345dc3f032a0b5ede3f76ee29ca415ea9cb024f6b6ad7c25dbc93c02b65e2a554dca07f6ca6f9a2e06663c57fa561aec0e772a79a7b2b7270514aca9db6e67804ed4c630b16e289959eda4501eb92d08e1cbe1f5d223837bbf2a4b2a47c70e15aeaeec3a68f64fc7f65abec308581af6d7503fc80a3a11213059fd9e39b60ccf9deda9070f669e6c14d6d043a4763d567ea435fd799aba31b57ab15ed960041578042f4de2e6d6d5de9ec294252e323c1fc36388c80a6880b2430b4d31be6b9b025f4194e21016e10321a112ab"}, {&(0x7f0000000c80)="99736b19f6ca0d983d780edaf988a2444143eb680234f199126f2c93fdad0389faca2790ed77587d1ad2ed7463d378d94df36754ce4fc30f847f039a023435b67cf5ed7bd04ca2dead969d27908a939e69c6a99d7471247e4a1c92e8e9da79293e0574132f1aac0d3701a0bccbae3444059c7415afd581cee5e99320933bc4634ed0262fec515419471931eb576defe173b0e57833a4575d4bfbcdbaacde56ce0e1f38a04599c8c75b77d89d"}, {&(0x7f0000000d40)="45cba370b0f879a7dd2651c64e90241ebbcc871480cfe434327028d73c91a2814c59eef9ed452ac9b684d070e04827f18c9ac4c661b0972e80ec46fe2da24c2901e8363947282e8bd73c9b171e1a03549aea57fa9a0eeec31b7cfc963142a5718b69cdbaa8429f33cfc4dceef010aff3a13113ed0de7910d4e01f6"}, {&(0x7f0000000dc0)="a178cfc1f9a958e4d8dd90b3ec962b5c43763c1cf5725a02c0bdd59b645495f0119f6bf5d47203c8da4fd345b2dfd80c5d1a4e2b29ca7c8cfa2e4072efd5cf299f2da301824c2afe2e800e7f775a34fbc466fa82588a53e26334830f79e52aeb845f24b6b697ac9317628d0641fd3f871387fb83d97e24d5db2fe0"}, {&(0x7f0000000e40)="381538d0700a08ac1bd8272e6ab433f7cdc1b32f97349632d91a9b2a9f2b5e042b6673f86b92853c1a5cdab080535dcbca167b8cb05bae553bbadbe3174e4d3143fbbb0b8fefffa14973b29b198e7d48e3a1bcf0aaa444f8c087781033699df96df514bc54b9616a8745a3a21e55618790d36775e61caee1e772f0a5"}, {&(0x7f0000000ec0)="ee017956a04ee90ff7b7a9171d5ac978e423e0956b0fc7a701fd186dbc6da0e8f8349fd936aa7535a8b8f7d19c96a2ceec7d68753702bcf017"}], 0x0, &(0x7f0000000f80)=[{0x0, 0x194, 0xffffffff, "936d6cb5e48f2f1fd9855f0162274c312cfb4c74baeca5d88c9a4947a95f98dfd4d04cf2a7b1b3f79393f9e8c5edb894db33ac84286364046bb3d89a66179d1a99eca027c24a4d545f6a99cbfd21aaea3447b290eb564816c26bf96d7e7edecb789cce4d2f4aff21fa43edbf86073330f6d40c418bc701d46ca4e5fb02d2faa03d220620330e876eab982c11b567e9e6bd0ec18113f835e155d9c0bb3e9a6cf070e769707ff1b7108fefbfbb8538da1085e87e071488d750c58a5fcc6409f632769ddad4b71b6e72bdbf71599ec73f76aabc7d0bc8b5894a642b210d37b739c89038375f95ebf87825944cbdf43afe0f20ffb292e08b59be4ae9139ab7dd744759e449ef20bbf3752048711bff62f988eea65a7a9d759c7d21d02edaa3dbf60e2ad654314d987c59c523c5a58b209bb5d4462b4eb265864e5ce729e9f96558ae684d36755f7737a9b74b8ce4f88166c94464692c22f08abf433439c36a2bc4ac6c8171b1be6c65c88d1c9ff432e479612403f0b1b164ce0e9bdf6ed943e52beae78d81a058ee54071669e36c0f89ce7d7abb46dbfc62efa7ebe4ad65e12672f193d9e6e8b07ead68d9239a73ebd6ce03234902049a1e1d1514bb5533b4f1cb604ca04459b894db341b90a1da591565a588b157b6b8cf6abba401ba2c642eb73f17f33030a7e143079347ccdefee25c7dc050bfaf6fc8549671928a607a49f35f79a7445534fee0bb46dabc7b0f9ef9222940563a94ddf5e176999e116ae972f13f98be77d466ed80a1016699ea6a82f80c4243119eee81758e65fcfc4f0055436dcc18c7e4553373cbc55d60ecb655703eaf2b523404d4a42ce13a3eeadf3ef936b0194dbc510f6445a2369ceab75cf1a8b9f52c9e6445f263d7644954cac34e3170f59862645b61a294c734c7fc79061d9312a904bcf3bfbbee044a84ada4686a1ae3082549b64e1285afab868c11a639456ad23ef9946fd3d29118f2c9a147a0f297324f99401759027bdb3ae721c13459e1d020b96948d9008ca3ad53b5a2c78ed18ac43f3d1553d01270934e14744dd8754429dcc299e053030b796bd3cc6529c03ea127d9e485314e0f9954597948f7af58dd0b4ea646a5a7218506d06fc004150e56034fb2a0e7f33dd9a95f1caebda3862c5eb152abc30f9d512433123043a2d9fc9666a60ada23f1364e0f75431f5ef8533d147d5cdf5f153d60feaf54879f4c0e2879f4ec9efd39a0e4672ca0902ab6c358cf3135737dd977e1c586c7fcea43c51bbe0b15287def69ef8098955cbea8fde9b2b849cb7ec1991fabe253540871213c66aa0b47d2fdcbeb76e8ccd34605f8b009fa824b4819d64b387d27aaf7293fa4c2228c73c7c3fd6c2ac64b90a348961ea8dbf6c8dbbfc065d2094fb5f93abe75c180b2bc6d9b2d7bd12f5e0d6aceecb3e729f90135f4960540a74e34c025c2d6449bbd7bc7eee1476ef616682e5a5dbf3deda0da64020164b5a61a8d5168edb93f6937e77f0036eaab592017bacdddc0bef3b45b13586c90e9760fdfee4b677065449977a10e7fada2f363eff312a2502dd839943a9d3a2aae891d887592f634f95a58195a6fb3378327efabc234290309f08e8bb0672212d5a7c55f08ff1db1d870339b0c6744f9d9d2c90b0d883146904c701225cdf0be32ed64ad24a3fe305c7e7da72c6b78ef90e9927fa73d76f5e0938b4586bddc09e5ad99e621035708144e9db8e733d1333ce0371dd6958d849625faf0bc1b8ec1ba5c36402805adf27f4a70befca2bb3a6bf09c615efdf7b1357d6eb606f248d2e43c4941168f17a301f9aea9acbc80a8ac79edb807ff1f5745186d4e94b9b7838f0ee9ae9a7df49dd796f01bb69eea2326e9fffb5e72215701186ac38b2d54eb8c72e7f2a17e0d1bd512c4c7cba7a68005374f842317272a0a46989c831a79537a071d232d94397b35b20a88a4d3f294a4f681cde1539d44db3fff003bdf7584a6432b05ba183779b6aad782c98a11812f846469e6345dcf03843342385d8b770c09156be40a1f98ec9b2694035c1b0034760cc2a677e112aeb95ddcbc6acc769ee57131ccb565f0eacd31897f27a14436853ec49ce55b263949c11a925f1497b903dd21619bb04b8fab4e77e0260a0e5a50b9f5e925ee60aac916ee8096c2671cbf44a5d280395d5b40c541b4d2ddbfbbb01090470f40219e8445f6c38207b925d323e4e146a3e279d18c35129125e249da9f8cf7309b9c78cd5fccda7603bd2c759ff8361ce7e3d7b4d5d85fb8a9261bea8051c08e31f444cf13fabb62ade628546b10aae5ed6cc6c7c15f8a6462e849906f4b7e8a547669d58d6e8ba638a73abe84d236ce0cddae12267f0072c920ddc75be6d298d8f66c6a05ebda351afaf83f6352b44ea5c3139dfcd551b80b2d6b6ff9087d875b4c71262f61313e87ca8952fe82559cabda6d07d3b84b6fa14f9d8e913366f5b96fe07858e2f0a23a76ebfce546c3ba9734976de4ce81d758ed69830eebaa92e2419800bd7345d0e43dfcbefddd99e8564bde2770435af8865251af3fece249751af0e7864bfe90dbc26d549631939f1754703b3d2d2994b544995df1fa7a6fca3a0774c24950a153e03f801bc792a4221be7e88c5c6f96b16fadc9d6fef62dce1c60466adccaa88b8d63642c96e1d83233edf278c0b73c0a595f150d730fca3d32853415551842e7f2f7333e0ac972282b0d5af0430d75c95e913abae24557260ef619d6b2ad555e5693c5bafc64dfb3ae093132d19281b5203247c48669db78af09ab3a7ff0ca0b85358892279db70290ff7baed43523d32bc00a20dfd5f3e187196d070e97c1f34893c9934b4c9d6e6f19b8fa226c012369fb4f65cb7b21899ab8cbaf1d2b0d4f65f77feff3f5c92bcfdcbf94c1cf61d019b30981a4557afa05043c042dad266e2538c2e10ba248395fe7227005729fd51248ab183316eec6519e3256d08c3d2c6f48777e52962bbb5ae555eca26f5aafad30f87605ed8005cde5fdd70cf332fdce2ef26ea97e308a2a5d25871eaea867463e73f474a521fad0b732e93b43bff5302d83faefb9b3acb604116928e73e2531cc96bf353b650fa0f96c26cbba1032f6d43033f0ff2c3bfec2ccf1356b567c794113167b8b96d4f87d1d2bed333f67de759d576f6c56483f76cb0bc5e353b35516a5d311b2f12d6c658ce9397a6dcb0dea45dd56aee1d1909940ec088061e1d10feeaf66e32494dbda1fa3d55787fc1ca85ea2191921e59d38b5a000d5373abad4f0886d7a50159cf50c20c6ff562b5a6cb28bd7410155680dd7f4509d4e760cb3c9f647015bb719d8400461a7ad16c00e2df2dceeae235dbe8300d7a7e52b95f3566228e5786c535ba2c931725498ac6c2ed60fed43cbe3f45640320479854e7d6ede51f3f34b7b12e47186af8a6ad59bd5a48814bd766a0cf45f12d0f9038f8d1f7e755e84edb42bc65bb9c93a1f64b1e85d51da5e80f68985c995616b80e0bfaa2e291dcd499b442da8bbddf6e4dfdd6daaf854bec9c1eaf6dde32a3e99c7f382116739a989cd738c202307cb45aa8855af9d83da1c3ac656cff6af43cc5c47a52722aed5f0c7a96ff29a5edfb77496caeb144697d39d0d0cf036560da82e646de50bf592d0ee49723491cbe1bc7042671825247de01418a4e056ead282ec648c9160ca22886ed514e68b1191970ad5471442e570cbd1d2d3627163cb16111074f96efd7749dc286ea12ce5f64a2215e24a57f111484913ef639992436e4cb5edd22c8ae749d01ff883ee58729fbd115e7981992c52329e83e9e425849db380b309bb76da0f159c62c4eb50fc694b060c7114a019ded30a1768ca1479e74f5d27ed4ad2df2b66f36191bcc85f3aafd22e54ac5aa8f8a7c1cc4c5763453c2252d2e24f194e8e81f4d33220a21f6ec74bee71ca1be6608ddfddb408622dfc1240488aea02937b15a7ec218a07e23aa08d7b95264fe9d3b2939ba55df0db58f888ad4577aa1a8f50ba38f92475beeb1dccbbdc51623dd146ba543818e47e36d2151678ca1752ea46a102de5ac4b5e06d3142e340419bb322afc21d67edf362a7f885aef867794ba5f175a8b9f85fe8bf70b28d128fe3158191c96f776320b01e139d4fc5a807ad3d5533b563f0be9ddafe40c4132ddf5056a81349203ccf7f528608a57bdc51462b72a3e491913c45abe17390f7699a37ce989d3a6cd17b925ca26834568d0c6d3a76d348db1fad25537e3437da8e9ec31fbc349396364dadb71db17f48a0a5240b8b3252fce1ce1ad7f8f75af60d90b99b7653e60219a5aefce6c963d04e099a8b543a977d428192aefa9e9a65488289059b708282f688c2f94bbba4b3f4998517e03c568353d5ba366632a5993574db7a46981b24630f85df9fdd2315fbeb0a45d3db7840e42a28bf27c4b3fca4348db09d71f98d9e901228125865911532635d91a25c7c46a568f971e499f4903a1759b1e2abffc6a08e4c2c55be83a560d15ef4c65b3a582090f3862bc37443891cc6e2358a9f3672aa026790a08f36b64e256a8e9f5ab1d4d9549a9b4a8aeba82218fed414485da84e551fdae18e6fb276603c3ac91f621b9da83eecc02668d5568029d96cdb1e8df9da415160c2c2d76ee3183f22ec09d50abf1697321974f3d8c28e751677807f829b8b01b3d1d01ca556fd3a3f36ff83f0b40857de03ea2ddca4a3bc05acf62ad1f0d6e8e96c4573e87d662d2d4ae130379527a068ff5ced4046e32c93bac890f80d084982bfe8c4f6d04e79b9be43d2d6d1cd11a83efb5c79e92387e3da6de03c6907b2aeb58f204a349dbefb0170d8309fa3a77fb47be8e4f7f837ff4d579f9ef0a6b65b440f208bd291ab0621bdb2be5a0809a720c076a68cb32cdf40b98ff2a509fef5dac62dd0bdc8c08f4e5517e0dc454ad1e22bead8fee788f58d4d147bd2da4894b204374d148ea68e0da84668be08aded71718534082aacb12d3f133ab1458eb2682e1613abb4df3d5d9abc68f81b06658ea1122d16f661605fbb882790c7bb120f6abb1e4a667307a8b4c62b630f1cf91d6b08ea3df338a610b192df921d3dae6b1057675278ec9724591c7e50240dc2770a0893a5b1fac363978fe75546a7e809a480f8cb7836287589e368f005633f8f4fa15f6c23347bd363f1cebc9a30e1f74896e7cd24ba05255cff8f3708a118f7381925e5a52041f18932d17c5a485b744d0000c5334fba532212d505234c5090b8eb9ad26aadcf6a3143915d382b1ea20ccbbc7a672b6cc36ae24e1a69bdfb9a0f53de6d2fc14e2ede6740f235aadce6148f4769a044043b32b50decb6733d24ed1c90fff639a554ae36929514c63092d143e328cf85e7094dd006c0dc0802f5f24bdcf5e03e7f74d045bfd089bc969b44f03898a496bc123395ddc22c1246fdb78dd41c1f7abb6450031c4b3ef1aa69cfe2692778bd57092c4f3a1e7fdd64164166d8912ce5c8b6b253f6c0a185cf844f78ebace4d4e6cd38a24ffeec78c05cfc7c4387418faea9f40b7ff4f2b83410acf4f75da6636a7b5654a6d7147833cb24243a8a892966fb502ef0651ff10e5d6b21968c12d26b2321c1c7f91cc348b7618e46e4f1c70a83e41a1fde4ea50b3855aebbe84b246b133c07145e6ee06a1afe85b4df014a06daa4a74c56cd18728abb59877b2c2ac2be060f06e39ab45f57cff98640a19f915cdad0a6b3a312b74c4479ee22aafd5b63076c919a9ebbe6f10978cf9655aec5a099407510bed2e3c822c209a4b6708dd58bb021051b5a"}, {0x0, 0x88, 0x3b62a9ca, "b70ac0c54b3505a162c3ad8863aab8c124f82c621bee04eb93d329ea971c660180ac3246932c55118d716a4262731b4c11c6061371977c8fe20d4534a255603316baff882a181bc7a9fa4837626f1f6f8e10ebd5a0199632eb954d741c0e35e7c315c3e444228c"}, {0x0, 0x1, 0x800, "e1691865fec64887d63603b309160ea104ccec385a5abf1a193d93664c0b25418e355bdab41ade1cc7f7cf040bc4af8e4fd7b3b1e652d999077063da33de54f8e510aba4e03f2d9b6d1b4bf1d88c612cf529ac58cfbfba8f5bf3b46eb0d5c9fff3a37037df4b59d07a678ca698cac9c6bc5d"}, {0x0, 0x0, 0x80000000}, {0x0, 0x102, 0x6, "3865049e6c3ccba256aff740b351cd868e6426d656bf339b1e2b48e5b267c504979b6902369a3d4dd5ea29bf345ed1"}, {0x0, 0x109, 0x9, "de89ae2738de094bf2ccf0de12a733ebd5ce5da25761cf153379ca57683733225f2900fd3fb8"}], 0x0, 0x4000}, 0xec}], 0x161, 0x0) r1 = msgget$private(0x0, 0x0) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000002200)=""/102) ppoll(&(0x7f0000000380)=[{r0}], 0x1, &(0x7f00000003c0), &(0x7f0000000400), 0x8) 13:45:30 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="040105000511000000000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:30 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000980)=""/230, 0xe6}], 0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1400}) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) 13:45:30 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x400000000000000) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mount(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000880)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000980)) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) fstat(r1, &(0x7f0000000700)) 13:45:30 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000d01000)=0x7ff, 0x4) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="5780d01c", 0x4) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet6(r0, &(0x7f0000000280)="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", 0xa5a, 0x0, &(0x7f0000809000)={0xa, 0x4e20, 0xb32, @loopback={0x0, 0x1}}, 0x1c) dup2(r1, r0) 13:45:30 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000600000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:30 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$packet_buf(r0, 0x107, 0x2, &(0x7f0000000180)="9757139d258e3d7adfb675c75ffc81a92c5f26ff6f004ab478c2b2e305b7799680523a632b3760a84d4f1e933d32712d86a3a93ae510e132a9792a2dfa93d994ddf8a0f2e651d421ffaafa0590cf7b8c336fa747f3283a2200869e914bffb0f927689d7129ad524d00e06df6296d97c8c39ec859c9e915de252d109763b7d3515c44e2aeea01963e7aeb4d093a12619420cc49ab35d1603f3afd09d3e97b2bd81a8c0d18d5c3dbcab2aec411e7cdb907dd3563ea23bb85a0ed57a33ad2f7600c1b99ed29b101e75ad900afabef2c44ab808b23903d8b7eabb318ce9c980e61743f3fd6d1bfbf2323a30396b6e4f5402e27ee24dc", 0xf4) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000280)={0x101, 0x0, 0x5, 0x0, 0x0, [{r0, 0x0, 0xe8ab}, {r0, 0x0, 0x6}, {r0, 0x0, 0x4}, {r0, 0x0, 0x8}, {r0, 0x0, 0x8}]}) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="e599b5bf0800000000000000fb54211105", 0xfffffffffffffed1) [ 302.710831] FAULT_FLAG_ALLOW_RETRY missing 30 [ 302.715448] CPU: 0 PID: 20880 Comm: syz-executor6 Not tainted 4.18.0-rc1+ #111 [ 302.722826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.722833] Call Trace: [ 302.722856] dump_stack+0x1c9/0x2b4 [ 302.722877] ? dump_stack_print_info.cold.2+0x52/0x52 [ 302.743649] ? kasan_check_write+0x14/0x20 [ 302.747887] ? do_raw_spin_lock+0xc1/0x200 [ 302.752131] handle_userfault.cold.32+0x47/0x62 [ 302.756823] ? userfaultfd_ioctl+0x4fd0/0x4fd0 [ 302.761413] ? debug_check_no_locks_freed+0x310/0x310 [ 302.766621] ? print_usage_bug+0xc0/0xc0 [ 302.770704] ? print_usage_bug+0xc0/0xc0 [ 302.774766] ? graph_lock+0x170/0x170 [ 302.778577] ? userfaultfd_ctx_put+0x810/0x810 [ 302.783170] ? find_held_lock+0x36/0x1c0 [ 302.787250] ? __lock_acquire+0x7fc/0x5020 [ 302.791489] ? lock_downgrade+0x8f0/0x8f0 [ 302.795642] ? graph_lock+0x170/0x170 [ 302.799475] ? find_held_lock+0x36/0x1c0 [ 302.803558] ? lock_downgrade+0x8f0/0x8f0 [ 302.807721] ? kasan_check_read+0x11/0x20 [ 302.811877] ? do_raw_spin_unlock+0xa7/0x2f0 [ 302.816297] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 302.820885] ? kasan_check_write+0x14/0x20 [ 302.825135] ? do_raw_spin_lock+0xc1/0x200 [ 302.829396] __handle_mm_fault+0x3a0a/0x4460 [ 302.833825] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 302.838677] ? graph_lock+0x170/0x170 [ 302.842503] ? lock_downgrade+0x8f0/0x8f0 [ 302.846655] ? kasan_check_read+0x11/0x20 [ 302.850889] ? rcu_is_watching+0x8c/0x150 [ 302.855036] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 302.859450] ? handle_mm_fault+0x8c4/0xc80 [ 302.863693] handle_mm_fault+0x53e/0xc80 [ 302.867757] ? __handle_mm_fault+0x4460/0x4460 [ 302.872350] ? find_vma+0x34/0x190 [ 302.875912] __do_page_fault+0x620/0xe50 [ 302.879992] ? mm_fault_error+0x380/0x380 [ 302.884159] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 302.889178] ? graph_lock+0x170/0x170 [ 302.892980] do_page_fault+0xf6/0x8c0 [ 302.896774] ? vmalloc_sync_all+0x30/0x30 [ 302.900919] ? find_held_lock+0x36/0x1c0 [ 302.904978] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 302.909822] page_fault+0x1e/0x30 [ 302.913266] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 302.918877] Code: 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f [ 302.938079] RSP: 0018:ffff88017ba277f0 EFLAGS: 00010202 [ 302.943429] RAX: 0000000000000004 RBX: 0000000000000004 RCX: 0000000000000004 [ 302.950694] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff88017ba27890 [ 302.957949] RBP: ffff88017ba27828 R08: ffffed002f744f13 R09: ffffed002f744f12 [ 302.965306] R10: ffffed002f744f12 R11: 0000000000000003 R12: 0000000020013004 [ 302.972563] R13: 0000000020013000 R14: ffff88017ba27890 R15: 00007ffffffff000 [ 302.979862] ? _copy_from_user+0x10d/0x150 [ 302.984102] evdev_do_ioctl+0xb69/0x21a0 [ 302.988240] ? lock_downgrade+0x8f0/0x8f0 [ 302.992378] ? str_to_user+0x90/0x90 [ 302.996081] ? do_futex+0x249/0x27d0 [ 302.999790] ? rcu_is_watching+0x8c/0x150 [ 303.003925] ? graph_lock+0x170/0x170 [ 303.007728] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 303.012130] ? find_held_lock+0x36/0x1c0 [ 303.016183] ? lock_downgrade+0x8f0/0x8f0 [ 303.020320] ? kasan_check_read+0x11/0x20 [ 303.024472] ? rcu_is_watching+0x8c/0x150 [ 303.028601] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 303.032998] ? __fget+0x414/0x670 [ 303.036454] evdev_ioctl_handler+0x144/0x1a0 [ 303.040853] evdev_ioctl+0x27/0x2e [ 303.044383] ? evdev_ioctl_compat+0x30/0x30 [ 303.048688] do_vfs_ioctl+0x1de/0x1720 [ 303.052567] ? rcu_is_watching+0x8c/0x150 [ 303.056710] ? ioctl_preallocate+0x300/0x300 [ 303.061101] ? __fget_light+0x2f7/0x440 [ 303.065060] ? fget_raw+0x20/0x20 [ 303.068496] ? putname+0xf2/0x130 [ 303.071945] ? rcu_read_lock_sched_held+0x108/0x120 [ 303.076960] ? kmem_cache_free+0x25c/0x2d0 [ 303.081203] ? __x64_sys_futex+0x47f/0x6a0 [ 303.085429] ? do_futex+0x27d0/0x27d0 [ 303.089225] ? security_file_ioctl+0x94/0xc0 [ 303.093624] ksys_ioctl+0xa9/0xd0 [ 303.097070] __x64_sys_ioctl+0x73/0xb0 [ 303.100947] do_syscall_64+0x1b9/0x820 [ 303.104828] ? syscall_return_slowpath+0x5e0/0x5e0 [ 303.109752] ? syscall_return_slowpath+0x31d/0x5e0 [ 303.114671] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 303.120033] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 303.124886] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 303.130059] RIP: 0033:0x455b29 [ 303.133235] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 303.152696] RSP: 002b:00007f2451247c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 303.160410] RAX: ffffffffffffffda RBX: 00007f24512486d4 RCX: 0000000000455b29 [ 303.167665] RDX: 0000000020013000 RSI: 00000000400445a0 RDI: 0000000000000015 [ 303.174920] RBP: 000000000072bf50 R08: 0000000000000000 R09: 0000000000000000 [ 303.182186] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 303.189443] R13: 00000000004bd250 R14: 00000000004cb350 R15: 0000000000000001 [ 303.273424] IPVS: ftp: loaded support on port[0] = 21 [ 303.816128] device bridge_slave_1 left promiscuous mode [ 303.821725] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.831754] device bridge_slave_0 left promiscuous mode [ 303.837274] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.754668] team0 (unregistering): Port device team_slave_1 removed [ 305.766340] team0 (unregistering): Port device team_slave_0 removed [ 305.777239] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 305.793616] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 305.816464] bond0 (unregistering): Released all slaves [ 306.157615] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.164082] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.171874] device bridge_slave_0 entered promiscuous mode [ 306.210400] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.216829] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.224597] device bridge_slave_1 entered promiscuous mode [ 306.262728] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 306.301826] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 306.414271] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 306.455632] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 306.632340] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 306.639775] team0: Port device team_slave_0 added [ 306.677867] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 306.686051] team0: Port device team_slave_1 added [ 306.724452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 306.765123] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 306.806904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 306.853889] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 306.861483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 306.870297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 307.215335] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.221720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.228406] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.234777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.242136] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 307.872674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 308.097510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.179492] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 308.265067] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 308.271295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 308.278898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 308.355089] 8021q: adding VLAN 0 to HW filter on device team0 13:45:37 executing program 2: r0 = syz_open_dev$midi(&(0x7f0000001540)='/dev/midi#\x00', 0x15, 0x200000) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) r1 = socket$inet6(0xa, 0x3, 0x6) socketpair(0xf, 0x0, 0x7f, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000140)={"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"}) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000540)=""/4096) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f00000000c0)={0x7b9, 0x9}) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a00090000000600000000ffffffff00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0) getpeername$inet6(r1, &(0x7f0000001580)={0x0, 0x0, 0x0, @ipv4={[], [], @loopback}}, &(0x7f00000015c0)=0x1c) 13:45:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80000, 0x1) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000e87000)={0x10}, 0xc, &(0x7f0000a3bff8)={&(0x7f0000000140)=@setlink={0x15c, 0x13, 0x400, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2000, 0xa00}, [@IFLA_LINKINFO={0x128, 0x12, [@IFLA_INFO_DATA={0xdc, 0x2, "cf8e8e246f0b2cf81ff2c7977d3c8da393bbf738aa31d75c7871a5f481c89c15d7cf3e28f84145284ca37c5b6228c2a57c43af3c0b0e4f0fadd70e272ef682b12666e73e30e3942a2c55e7af94f6cd09a22bd7ec91d11ac9ac2e688268de5bcc78dd34e5b06d774afae8ad016359c56ac2c93806306c1f297350ef36ce9dd47d179eeb2d20ee4c3244594efb93ac1a574027b063d9e2d642a96d1691d3938474066ec90098e70d077bbc888f0ddaa14c1c60205526adb4fe352034b8f0510ff9cfd819c1020f8c79e33125dce3862b33510d7551e8b315"}, @IFLA_INFO_KIND={0x8, 0x1, '+\x00'}, @IFLA_INFO_KIND={0x20, 0x1, 'loself#bdev{]%eth0%cpuset\x00'}, @IFLA_INFO_KIND={0x20, 0x1, 'posix_acl_access%\'vmnet1\x00'}]}, @IFLA_BROADCAST={0xc, 0x2, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, @IFLA_PROTO_DOWN={0x8, 0x27, 0x5}]}, 0x15c}, 0x1}, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x50000, 0x0) getsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f00000002c0)=""/4096, &(0x7f0000000080)=0x1000) 13:45:37 executing program 3: r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x11, 0x20, 0xffffffffffffffff, &(0x7f0000000040)='/\x00') creat(&(0x7f0000000000)='./file1\x00', 0x0) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000}, 0x1c) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@empty, 0xc2a3, 0x0, 0x2, 0x8, 0x8, 0x0, 0x8}, &(0x7f00000000c0)=0x20) 13:45:37 executing program 1: r0 = add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) rt_sigprocmask(0x1, &(0x7f0000000040)={0x3ff}, &(0x7f0000000140), 0x8) r2 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r2) r4 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a}, &(0x7f00000000c0)="7f", 0x1, r3) r5 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x34b, r0) keyctl$dh_compute(0x17, &(0x7f0000000340)={r4, r5, r5}, &(0x7f0000000600)=""/132, 0xffffffffffffff98, 0x0) 13:45:37 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="04010500050000000a000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:37 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="040105000504000000000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCSSOFTCAR(r1, 0x5421, &(0x7f0000000000)=0xec03) 13:45:37 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000980)=""/230, 0xe6}], 0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1, 0xfffffdfd}) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) 13:45:37 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="04010500050000f401000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:37 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x400, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = syz_open_dev$midi(&(0x7f0000006440)='/dev/midi#\x00', 0x80000000, 0x480041) [ 308.959161] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. sendmmsg$nfc_llcp(r0, &(0x7f0000006200)=[{&(0x7f0000000080)={0x27, 0x1, 0x1, 0x6, 0x28d, 0x3, "39d08b55d2c65bf4b24ae25665faaa2164c63f0f3e4b123813b5f436e64e3f749cc7c44797e5bb826634a9bb26584cd2649965e9b264bd00962f30770e41f3", 0xc}, 0x60, &(0x7f0000000200)=[{&(0x7f0000000100)="8190a322cfa14056cc3d4cad1ea3c19e85f9f2f0cda28c3d2aeb762c8f921a68eac2d138f8ec10baaa322a29a6dafcc6bb2a4de2dd88863d1f7ceaad6307b18fbc045870602bc3425200ab8defdd70454e0162e7eb6a6178c5bc90429fde660fcf051196464e07864ac081793144d63c9369c8f02ad69f4b98d3c2d6656a1c37b2ae35927707f985f79a3735645bdd5c435a2aab32ac56fed364dd30c2d6b6d79193c8b9f0a33956237841b1295f4f9d194e74d15727f0557eedf0a1232c211fc4e3e7af9663719279a878d249fa007ef538e874a165aaa448cc64b138ec9e5f39f422ea5f54e507373b8f1d1081fb9aa7934441", 0xf4}], 0x1, &(0x7f0000000340)={0xfffffffffffffc71, 0x110, 0x5451, "7d39b120a387a0bd166bbd5520d32f7e9a770c4acd1870584a6583e17f8b5034be04d79a5c941b604e61504b17bb5641660c0af04d1dd5431f54dba7c2579fbbd9f9d20acc32beaba07beaee855d43d5d2f5086f8c388192d67d4daf0093e8519718cce1ab90a0b3e06cdf995f9995dffa02374e7472544a29d3e9273c8d2e7d76"}, 0xffffffffffffff9f, 0x4004}, {&(0x7f0000000400)={0x27, 0x0, 0x0, 0x3, 0x0, 0x400, "082120aa8e7358bfab0a23ef68250b117003c937d62e89180a8c22dd58ae286c04b82ecd80e0ff18df8ffbf227732faca3af9dd365f1c598f6bc65dd5109b8", 0x2b}, 0x60, &(0x7f0000001b80)=[{&(0x7f0000000500)="095fa694b389f1b99faf7ede8c7cf0d0e34bf0d858e07f21efdde55660d27834e925871130b765dc572c12e8311949d31d11d50071b76c31dfb06889b0961a9240456aa552160ef95be0a7e6470bcd7ef0fffd8c6457c2b1b63b2dd1b999a85987d033e73ac58abdff7d33243b7ee307ede6f7a19648c55875ce3ff4200e4d868ddb4164bb581ed67b17e06ffefa01495c6617f2ee47081ea47f74d0aee6eef7b77c5f54d74055b1a0754db3399f8fe553fea4e199fdc6105b61a422b34d88c6f2e8a54d769b48c3259863bf88f58328c4bda06a3d6fac55d2f17dfa7cad6b1c82", 0xe1}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="1c948518640023d3fc2f0b0ee22620dc24cd309f8df6b2242354de0e997485c35a72bda052c6de09fb068f1297d77fda41ccea36c068b33b825666ca7cd3f43c81208b788308df8b8f21d9297c6186a4cdc3b829f565f0d52885e3a126d5d18e6511a23e199202ba73398d7dc407149da120be21b28b0eb8bdcb869048e0f6e2b17190b848009afa07785d6c3bba8960e21631d0f5d520c0bdb647", 0x9b}, {&(0x7f0000001740)="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", 0xfd}, {&(0x7f0000001840)="a30eb7ec478d577275d0d6420293d72d9c6afeae28bfabaf4812bba46c5d1a1603b89c5f5e7fcf036979fdcd66e81ec1e031f190109c5406623425f47ec53f1d95c7f47b6efb30ab86898d015c65002f0fc15a432a2e9ce2488821fdabc5b86f132e6fb1167f64945870dda100e6c5e0540cbd83c72a073d8b8af5965228b37f44f676d337a2bafd775690b0a9f712", 0x8f}, {&(0x7f0000001900)="c96b232baa598f4829a998e3ec9364c13fe0660d74a3ff214d52ff592f2484854886c4a719c4c9878c0725d25741d6bfdd89a4d37e6c9b26bcb87ba9aea46a6d487a4bb6f191ddf23315cdbe7e92299f545f8dcc1d40fb9b2fec18acbbf2812da69db51328c909dff2c705ccfa60317047f4ae39c2c50d2b9516b925ffbb9bf129b384b000b64cd765a6fec8e635fe036df864bfcbfdc5424bcc2fdef9dbde1e18553e7f1ca0828f7832ba98ed7866a1d713a202a1549c07fd2f2c6cdc317ad71e28d691a0cb2580a7494ab7a4d8fd8a9f386efd701ddf659ac83ad17cd9ab281a9302c805fe9df037e0e25edbc5b9", 0xef}, {&(0x7f0000001a00)="667a920549eada4f193749c27244b365248ce2a75c477af32f98117aa174acf8365527fe4019dcd593eccd28446331b62e065acea5b339d4213ab64e591e9b52aabfe7197c412475ee0f352d5062b2611068c42b2c2c03cc376863cd9358cfa30b9b7b5b1ce95bed301b88cec16f007f34b98006c298f9a8c2be0e768b54b65a7b0d4755063ad4087e01865b21be20f886ed0270e85ef2aa0fb84fad46e3391712747700fc373d81d046825811039a35c85804689f4ea95ff0f90ec85003a1916094d1c893e00e11edc64f4e8acb1ecef04aef8cc40b27300155be8c6cd4888e0b7064e8", 0xe4}, {&(0x7f0000001b00)="f656ea4cdd8fd17568894d612ea92066f1213f3498eb92dd64c57af18198096716ee0447cb7c9ca6ea90757716e70bac1f004398fc89df070ca8e092871352e3d0", 0x41}], 0x8, 0x0, 0x0, 0x8000}, {&(0x7f0000001c00)={0x27, 0x1, 0x1, 0x6, 0x10000, 0x5, "7c2fae2a59d572eaef5707cc190c4138e8ad94582935480b7f29a383947de15f75f582213ac63645d5ea6413058514071b3383aee0e6422d2406e4e54ca81b", 0x17}, 0x60, &(0x7f0000000480)=[{&(0x7f0000000240)="0b1e8ec7db2e5159c731e19ba99d5a6c6e0c0f1aab26b866f318b32bb463c86608ddef6a524e8f", 0x27}, {&(0x7f00000002c0)="81b157fac3957644643b7e96789cb500497ea93e46", 0x15}, {&(0x7f0000001c80)="9bd173d2d516b9c0b080fa13127d2a0cb59aefa03de927557a275efe3b13bb701a35eaa69d55b232138ed5e360ed0d2c2c6e62b1be501d2e74cab0f6b904f90e221a99e049a89d3444e23e7dfe3277186b8312aa4e2db0752e03b626347f71325338d38a1a52ad30d61034516e7539d1a0a246236b37a5bb8b31c07325a2304b845c533504f9d4fce635ce9391d3687734da3257e5515603aa2d61fa7cb517ef68c6a396b22c8f5c01e9a27b5890ed3586efc63aa6f2533c4c7f643a", 0xbc}, {&(0x7f0000001d40)="4011d3d73fb807865e6a4851966346fc073ca44d4204b5eb637fa92ae342ac126285989b0fdc52148986f94be857364fde2382f239dc9b6ed75d868482308cb3439c38dc5ee440558713405500d8254c8dc9c3d5a67c51d79d14e26ea0f399007f9af4148d9aaff638d49b5e617610b08abc6d52726b76e3d70a4416290aacb9f176cc7a17c2a2b75fe57e776b42574ed5c2a10228abcd0ff8ecbf10010d6e482204dc76aa43aba4eb3ce1038c4431a5e35a45942f2a7466303d024c78be9fd0a3e2f2079468629fcf904d699585ed1724c955eb73413a4bc450998c205f0908ea4f82e0f9329b", 0xe7}], 0x4, &(0x7f0000001e40)={0x58, 0x0, 0x101, "4b97ab8c3f2aa206b31fa9b7b913b1160f92c30ee5a4d8d4a51104a2236dff74d1fb562e28a7da99f77cf039b9e7f794ab195c10f6234c2c3e820c78f41ee1af3b"}, 0x58, 0x4000000}, {&(0x7f0000001ec0)={0x27, 0x0, 0x0, 0x5, 0x40, 0xbf11, "3df8487499e7529d82aaa3306546c3094a91f36ceea7042f38c1685d2ced4e8915d9d81692995cbdc5ba05a8ed8cf56e23ce412f35da08f8ae3b3f6c602ffc", 0xe}, 0x60, &(0x7f0000000600)=[{&(0x7f0000001f40)="a86cb923148a9954d89fcc16e82dd3f966643f01c857ed15fe90303bcc7f269843cbd72fd9abadfccf5055b852b880cd435bfe604f8ae72547e3eeccbcead8800933d80a1f92812155d3958a485f4bf37ce298d86e884c42906315d6b2fd397000b23b058e1ef08bb4545d32fdfbb3a0300a951837a7d36ef15bc706ff4f02258d10688a0ec4a1301bd1c702ffae66f9cd798d38ffc290e386a852d2d1d0e98f75e81ef7c6b30ba21ba3d422ab31b5ecc373f544104a56e0b43fe2d5c931eac68b0ca4b5383a008518e72a57526d0e", 0xcf}], 0x1, &(0x7f0000002040)={0x18, 0x1, 0x6, "89b7e081"}, 0x18, 0x4000}, {&(0x7f0000002080)={0x27, 0x1, 0x0, 0x7, 0x9, 0x7fffffff, "adb52fd545f61694cf463b9127d55f9bb1160dadbc140a3449ec2c67c6df66a794c4c6b61278e1a98350029bb1af5730dd5af4e2db939d23c84a68175a0a18", 0x25}, 0x60, &(0x7f0000003300)=[{&(0x7f0000006780)="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", 0x1000}, {&(0x7f0000003100)="97e167b7526715f37e76d4bfa0ed3580d8eb2dc36053afeada2ca209da38abcc89a25899a69aaffbe193d31406c98f9fc5c02747c1bcd023308fdeca584f9c6881e26e3caab6367c9657a16a1fc6986ac7c0ce618172c2c79f0bec1bc0142ed70dd34428ef96ded834cff0ed5dc1fe665c70d511f7d545782bbeeca3f8d4fe37f81ab487f4841df7a7e947f78980716d6c3e3c95e623b298b64cd61631412bf460513687449b8505768f12f940aa6b9a481b34c0d42f5f30f5ae0d98246382da7f53e53d95", 0xc5}, {&(0x7f0000003200)="69ce5ac8e4d5f0b198622d584b61788594691ac0cc6adabb0835cd7ca98a6d632bf3c2e931aecd205ee0965808aa0943fba3a4a38d8c0dbf3c6a12bcad1f2d8f7a99324d1dfab275956c24f16c32020ef9df63add906e178c57596b1d34af51d85300397fa2c8331463cad0a155c6f07a60249edb3f2c7d68cb27cebe683a60aa17108b80328ce067c1a96b9ee2e36ec147a5f1aef1d41ffa2bbb4264ba8def16bafd8c0aa9a76d8b76baff7f39a7456952a94e65b95552fd3637af30dc34bf4dbf600235d5b3af700470917e14f8aba17cdb44bb1f494b1b364da", 0xdb}], 0x3, &(0x7f0000003340)=ANY=[@ANYBLOB="30000000000000001701dfff03000000e602936edb4ab40b2d5a5f56a8a249fee1f22db69ad026e6e17e4380e6000000"], 0x30, 0x1}, {&(0x7f0000003380)={0x27, 0x1, 0x2, 0x5, 0x1f, 0x100000000, "65ec5336d0421dbb64976e57ea315b528d5bb6d72d22ce3f0c0219bcdf0ef83710379d595cbd0795cf7e99c93c9e3e5dabcae58736580737c141fcda2e5776", 0x6}, 0x60, &(0x7f0000003880)=[{&(0x7f0000003400)="10d648cfcb7ee6f3dcfc53f7053441f95f7e58e10308f99f9e9c6d9c561066d546b2e74550685c5b1d939d5d814e0c5544296b8b4e1fbadc53c1d88ee878879f58c8cb9751e29ae3", 0x48}, {&(0x7f0000003480)="615ac3499d8e49703828fda8ed2524f4f4938ac1b5c9936f256bd4ca7badf8a379e2b545c2978607516f6f1e6b788cfe7873333b03bfbf62129a723249f996f4f4d6", 0x42}, {&(0x7f0000003500)="cae193e3622a4f44066347653d6302c791c49375dff08ddbca3da78f615b306cd2b84c25d7d8cf466975d3620cab467bbbf04cbcd1f7a670c73ea4594da46d5887b840690dfd69e37206bd27a3d20ceef7fe9f3cf8c7c977325bb9ebb6f03e9a522471394df39121742f0f442d12e082b980bd56ab179bfbc250ac6e914dc1fd600bab3cca0ab9fd2db4133bdcea4f0edf4a3c5b22fc", 0x96}, {&(0x7f00000035c0)="94065edb077f5904309465c04b1a926e620fd1b200c14eed800e643e09cf3927259c5518366f3fbcc37cbcdef9ce2f4b0f1e148c7f0f64d9a60d95f0728215b09ab5fbb1a7717f71455cd435e12d23d8f34ab374bd109ca374f8849a81b0895e3cac782fb92d997ee3e1b02b11eb5a1dcdbfd14e5fa4cecc313f37280df611aada5c931bc9b756108bddb96e6cdf14eb", 0x90}, {&(0x7f0000006740)="35a7d66b72", 0x5}, {&(0x7f00000036c0)="5d7264f38b24813afd2686c6e62d92795663da42e9808bd8e325a7edbc80b80d92e69bc864a60b2d71e7b0545a6dfb3cf4b2d1dd309933208ac4f9689cce72c9815460c19cd3868268cf7c4d13e7ad1cdd9b682605ad9774283dffa56190deb8c5a21993b43c154fba10ca130a0d1e4eeb4d5518010b7cc7a53dfb35643d61990013fe8988b9d0cb0edab63936195625424f60183827af188af8d55c8b44dd04d45204adc44d163eec1b68848443a5d2058bedd1768a0f4f395269", 0xbb}, {&(0x7f0000003780)="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", 0xfe}], 0x7}, {&(0x7f0000007780)={0x27, 0x1, 0x0, 0x2, 0x1, 0xfffffffffffffff8, "212bdeb65df62abf5ff7f5e091a7a5c0fd5e699dd919a34bf2afde1315a080420dfd9379f06a22f266bb39b4ccb0f8f92ec4bf68ae532e0cfd1a9cda4ba365", 0x3c}, 0x60, &(0x7f0000004a80)=[{&(0x7f0000003980)="3c71f7b6cc937805110263ca61cfd2e98956bc37bd4c91848ad1c8843fd8c3830802909fdd6a67addd793ed770d6564368a66ff091c7aac4fe9d7999b85c121e3b22dc91c3552608f90143dc56e1594d58fabf6e4824cbc7a97e95f714bd08c61f03be370e0a1a35f9cebe0476b61599c89d7af98fbae7c711da6bfbfcc5a22c96cf57a01ab1c7d5b0724abf00254ba8123dc59debb3fd416a8acaa3d14b7d1135db1c3a0260f1e10e3e6579aff6d2cfc453a84abd26079cb28daad6e290dd6b066abbfc152b77502006be0e63e60f1080d866043004db633defdec7689808eeca2f7e240586", 0xe6}, {&(0x7f0000003a80)="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", 0x1000}], 0x2, &(0x7f0000004ac0)={0x58, 0x105, 0x5, "419a447c03fa9bffa7e68cf77afd4a97fda81a48ea271be7415369244e35c51d17638d25a72aa51d09e5c0a92e032e711511c6fff0b246b6f656fa8ba0942baa0efc4fbf0a"}, 0x58, 0x4000000}, {&(0x7f0000004b40)={0x27, 0x1, 0x1, 0x5, 0x8, 0x7fffffff, "6aeecebf197f4fc895b6e2be9a959da9ca2436b55013077c437dedad97daf17860775ac56802ea87dd7dffab9265d13160455d2a4520998d579f1f512aaae3", 0x2a}, 0x60, &(0x7f0000004f80)=[{&(0x7f0000004bc0)="7cb80522979f68cef1a84ca1d5b7dd4161512b185decdb476ef9172ed76a8df0442c0ae19f227d1fe1e83a4ea50e2c8bf1b2037a0114d566737ac33374e6ed491ea3a06ac9b6678c6e621858e6068d3a18576087eb438eec64b25a6159b80e3621ba71a8bdabdf130a80afc8d49127cfb2690fb8680026bd1a584f8724681628da7fa81ccdf58799405efe0d33e122367a9dff766e2e079981fc077b044a1bacb5c49da318", 0xa5}, {&(0x7f0000004c80)="08770cf48f7d1726da90fa207b4647ce74cb6b8f877c53f7b57a299390ac54a24d76a994b3015533583d4075496583b14ff68ae0ea3ab541ab266f494e21748f3c8707c722383339153e68b293e51a5a4c0d53a3accf85ac321a7ebbc50b4eb35161e0d9a909e129a22adb9de554b089a19542cc77dd18dcbe12a5b4b6af7189eeb73a4284dac5fb55f2", 0x8a}, {&(0x7f0000004d40)="08123072b10241cde5dafd09e9a68d1e9f5bbd140c4fe0a1fc62782622a6502c264ac832568ac29b2a62dcae7c90e5553e6bff37314dded25b5aea2d29e1b622fbb3cd9029ca2a9fe6f19163f652c189df584f6e053251cf28ce114ec140ee75da4bece64f8d4f4625db8b3cb009066e103897d0bb0fcbdab8e66f46e659fa0638e895b285a476b4db1c7591242427", 0x8f}, {&(0x7f0000004e00)="958f32f590b2ade2f1a0a12d7b9741f71dd2fbcdf394b27a74aa833786af55871065736395ad8036e5c556d5d6d17d469de07ef4da691fd331681774d6580bffdc2debb646bf73365c3b75cb2227f27573a2631e3f2fa0f32959a9bf580d9a387bf15954c6cbf71d8ae5941f3bff534b91a0e9e9661100ab86c44dd9d3f240216ee362d3f65f6b1306748b6088c5de494a3f2ccd5159de66e1ac1ea2dbab72c3c5b39724ffd76370e1401e10cebbfdb22b4746a62b640da9c6e7da7156eb97c21d31ed7111057845", 0xc8}, {&(0x7f0000004f00)="1c54a9553b8bf42eb5e180f584440fbc5b6d65e0593e91b27855b2a5a7", 0x1d}, {&(0x7f0000004f40)="69c65508698d5954c783356e692c3370f5a668a0cba3c3e3c7a9bc05543f886c4345448d34df60c8bc4c4d", 0x2b}], 0x6, &(0x7f0000005000)={0x20, 0x117, 0x7fff, "eda56b3c2cf1a2e65b96e0fdd485"}, 0x20, 0x4000001}, {&(0x7f0000005040)={0x27, 0x1, 0x2, 0x7, 0x1000, 0x8, "f08a53f1eff4b6b79fca15f0dac7d3e3a1485cb1e7ffce57ffbb2c4150dea6b631d2cc90bb8e854d75bf20dd70f02d3339dfc0da8c418585253cc8306f2699", 0x4}, 0x60, &(0x7f0000006180)=[{&(0x7f00000050c0)="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", 0x1000}, {&(0x7f00000060c0)="df07bae4876b71de663e860160bd43e2d6033a77648aabf8b86e92c87050091f7c39", 0x22}, {&(0x7f0000006100)="c451adb5bdf6c858ee82974796e9a929ccfff0bc7a1376f925a0613a5d60f0a97a11eecb348574a226beef5fde6d7f6a0968e5b9eb42b95b2e66815e244b1bca76e86ef8cd9e949ed328a94bf6a37be894b1b19550869165014661907a3d71890c5a02f6be10a253c9a4ce59", 0x6c}], 0x3, &(0x7f00000061c0)={0x10, 0x1, 0xfe1}, 0x10, 0x40}], 0x9, 0x4080) r1 = open(&(0x7f0000000640)="2e2f66696c65302f662e6c6530f0", 0x40003ffe, 0x0) truncate(&(0x7f0000000280)="2e2f66696c65302f662e6c6530f000", 0xcea) ioctl$KVM_RUN(r0, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000006540)={0x0, @in6={{0xa, 0x4e24, 0x7f, @loopback={0x0, 0x1}, 0x80000000}}, 0x7ff, 0x6, 0x73, 0x7fffffff}, &(0x7f0000006600)=0x98) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000023c0)={0x303, 0x33}, 0x4) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000006640)={r2, 0x801, 0x30, 0x5, 0x200}, &(0x7f0000006680)=0x18) poll(&(0x7f0000006480)=[{r0, 0x20}], 0x1, 0xeb) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000064c0)=[@in={0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x401}, @in6={0xa, 0x4e23, 0xfffffffffffffff9, @dev={0xfe, 0x80, [], 0xd}, 0xffffffffffffff7f}], 0x48) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000002240)={'nat\x00', 0xee, "142af251991515129d884eabe7313f61019b581fab088075eaa8353e52bf39a940d9e1f5bb37882d3540e1fad040bd6f97ea45cfc8f51d0fa85b05f673602f51cf2cba63b0d61aa8584546a89814f0b5ff8764d7b208a10ec3d6cb1a61548e8d5ebfd6afed811e5fbf2a75da98b5a698ae159104f5d431fa01e0787c0bac4d8e12bd1d494c05adf8bb676328d6dad9b1c6eea072a4e1615ff2f70fbd93d44d1d2049c287c6ad652e2e5d3fbc9f4083ef1248703a8bad8ea3ff866b425617b76ba7b763c9683494510fa6f1ecfdc2faf0c0f7f5992a60c00d33d5efbe5eebbcb65f9dd05e1016b99fdce2dc1a3250"}, &(0x7f0000002380)=0x112) openat$ptmx(0xffffffffffffff9c, &(0x7f0000006400)='/dev/ptmx\x00', 0x900, 0x0) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000000)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000066c0)={0x0}, &(0x7f0000006700)=0xc) getuid() bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002200)={r0, &(0x7f0000002100)="06481ebeacd829961cee460bd1b45928027ed852be06201044e2840384019f18c4f85c416fd82fddf238dbc04dd7f4041bb8994bece229d8ca4486336dafaa9ce701201f25f40e", &(0x7f0000002180)="01b15768f2dbd37919db2d75adaa1134cf6959c962a190dfc1db6f74b5f22ec182db09c34182d4737d32a5377c8ac8d3adf1012903cedc6e96c1ed3c3f953ff979b9e380fbd32c5405b60cf446136d19e2c605be9c008349e24a5f4be59a", 0x1}, 0x20) ioprio_get$pid(0x5, r3) sync_file_range(r1, 0x9, 0x1, 0x2) 13:45:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x2000080000089a2, &(0x7f0000000040)={'bridge0\x00', @ifru_map}) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x0, 0x0) ioctl$TIOCSBRK(r1, 0x5427) 13:45:37 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4002, &(0x7f0000000000)=0x101, 0x100, 0x0) get_mempolicy(&(0x7f000029a000), &(0x7f00003e8000), 0x401, &(0x7f0000336000/0x3000)=nil, 0x2) 13:45:37 executing program 4: r0 = socket$inet(0x2, 0x2, 0x101) getsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000040)={@rand_addr, @dev}, &(0x7f0000000080)=0xc) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x7a00000000000002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="000100000008000066000000c9030000ec000204000000000200000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x4002, 0x10) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000180)=@fragment={0x7e, 0x0, 0x8001, 0xf40, 0x0, 0x800, 0x68}, 0x8) [ 309.057085] FAT-fs (loop3): Directory bread(block 2) failed [ 309.063464] FAT-fs (loop3): Directory bread(block 3) failed [ 309.069568] FAT-fs (loop3): Directory bread(block 4) failed [ 309.075981] FAT-fs (loop3): Directory bread(block 5) failed [ 309.089261] FAT-fs (loop3): Directory bread(block 6) failed [ 309.122668] FAT-fs (loop3): Directory bread(block 7) failed [ 309.172636] FAT-fs (loop3): Directory bread(block 8) failed [ 309.210220] EXT4-fs (loop4): Unrecognized mount option "G" or missing value 13:45:38 executing program 1: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x80000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) [ 309.219639] FAT-fs (loop3): Directory bread(block 9) failed 13:45:38 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500004a00000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:38 executing program 2: unshare(0x2000400) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x101400, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000100)) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x200000000000000, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000000)) ioctl$BLKRAGET(r2, 0x40005504, &(0x7f0000000040)) [ 309.244875] FAT-fs (loop3): Directory bread(block 10) failed [ 309.271402] FAT-fs (loop3): Directory bread(block 11) failed 13:45:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_pts(r0, 0x0) dup3(r0, r0, 0x1fffe) 13:45:38 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="040105000502000000000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x1fe, 0x3, 0x8003000, 0x2000, &(0x7f0000fe9000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000140)="baf80c66b89298b38c66efbafc0cb80001ef0f4acf0f175dfb0f0f9403000d0faeb3d74e885ce0b86b0c8ee066b9040b000066b82d50000066ba000000000f3066b9ab03000066b8167e000066ba000000000f302e0f01ca", 0x58}], 0x1, 0x10, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:45:38 executing program 2: r0 = epoll_create1(0x80006) r1 = socket(0x1d, 0x0, 0x1116) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0xfffffffe8000201f}) setsockopt$inet_udp_int(r1, 0x11, 0x6e, &(0x7f0000000500), 0xfffffffffffffd77) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, &(0x7f00000004c0)) r3 = creat(&(0x7f00000002c0)='./file0/file0\x00', 0xfffffffffffffffd) pwritev(r3, &(0x7f0000000480)=[{&(0x7f00000008c0)='b', 0x1}], 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000640)=0xe3) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000540)=0x0) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r5, 0x0, r4, 0x0) fcntl$getown(r6, 0x9) syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[@ANYBLOB="f2abb72befcd57e803364388ffe03bdb5bcecc605750ce746292fd08961b2e02ac15375a87c4225b9ad1510ebfc39c88b49855dc82b0491d2b22ca8ce75bebdd5a94dd2b34677a647f9cf81f5be0643b61495e8e7f21d0f02eb5153cc61c996fa95498e56c9e03a67aa95db350deef641906cdcf6ceaf2469d2957ef4e383f6869624ec788cef3db191d343f27ae89c81f8b684cadce02ee2a07778dd7845082f0b0dccb33d8c61544f5777ade1500000000"], 0x1}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r7 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mq_notify(r7, &(0x7f00000004c0)={0x0, 0x2e, 0x100000001, @thr={&(0x7f0000000040)="7be4d6b00202ca53878499e01146863a2e7c8ca45e1910e5eba6453bb6f234b5a1b1bca731970a74bfc8e1793749ea18156c9b8a615bfa2f506fcf44060d36e38f66f111149434d5139e416358ea33f34b4507cdc299f7868d5f186e6bd604", &(0x7f00000000c0)="3c5d8da40d1477844fc4c160b6004a90edc520a6935a49cf5da4c2b525d13146ed27d429c762a4b0e9aaed82555cd1ae800d"}}) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x101000, 0x0) preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/249, 0xf9}], 0x1, 0x0) ppoll(&(0x7f00000001c0)=[{r7, 0x8000}, {r8, 0x420}], 0x2, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={0x9}, 0x8) mq_timedsend(r7, &(0x7f00000e6000), 0x0, 0xe7, &(0x7f0000e0b000)) r9 = getpid() syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r10 = syz_open_procfs(r9, &(0x7f0000000040)='net/rt6_stats\x00') sendfile(r10, r10, &(0x7f00000000c0), 0x9) 13:45:38 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000000000100ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:38 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0xfffffffe, 0x400, &(0x7f0000000000)=""/13, &(0x7f000033bffc)=0xfffffda7) [ 309.552770] attempt to access beyond end of device [ 309.557842] loop3: rw=1, want=72, limit=2 [ 309.632479] attempt to access beyond end of device [ 309.637597] loop3: rw=1, want=72, limit=2 [ 309.642135] Buffer I/O error on dev loop3, logical block 71, lost async page write [ 309.775525] FAULT_FLAG_ALLOW_RETRY missing 30 [ 309.780169] CPU: 0 PID: 21244 Comm: syz-executor6 Not tainted 4.18.0-rc1+ #111 [ 309.787547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 309.796905] Call Trace: [ 309.799502] dump_stack+0x1c9/0x2b4 [ 309.803137] ? dump_stack_print_info.cold.2+0x52/0x52 [ 309.808337] ? do_raw_spin_lock+0x1a7/0x200 [ 309.812673] handle_userfault.cold.32+0x47/0x62 [ 309.817360] ? userfaultfd_ioctl+0x4fd0/0x4fd0 [ 309.821952] ? debug_check_no_locks_freed+0x310/0x310 [ 309.827246] ? perf_event_update_userpage+0xd30/0xd30 [ 309.832453] ? print_usage_bug+0xc0/0xc0 [ 309.836534] ? print_usage_bug+0xc0/0xc0 [ 309.840598] ? __perf_event_task_sched_in+0x24f/0xbb0 [ 309.845795] ? userfaultfd_ctx_put+0x810/0x810 [ 309.850389] ? find_held_lock+0x36/0x1c0 [ 309.854468] ? __lock_acquire+0x7fc/0x5020 [ 309.858717] ? lock_downgrade+0x8f0/0x8f0 [ 309.862879] ? graph_lock+0x170/0x170 [ 309.866701] ? find_held_lock+0x36/0x1c0 [ 309.870779] ? lock_downgrade+0x8f0/0x8f0 [ 309.874949] ? kasan_check_read+0x11/0x20 [ 309.879366] ? do_raw_spin_unlock+0xa7/0x2f0 [ 309.883783] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 309.888377] ? kasan_check_write+0x14/0x20 [ 309.892618] ? do_raw_spin_lock+0xc1/0x200 [ 309.896866] __handle_mm_fault+0x3a0a/0x4460 [ 309.901289] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 309.906135] ? graph_lock+0x170/0x170 [ 309.909959] ? lock_downgrade+0x8f0/0x8f0 [ 309.914126] ? kasan_check_read+0x11/0x20 [ 309.918284] ? rcu_is_watching+0x8c/0x150 [ 309.922441] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 309.926858] ? handle_mm_fault+0x8c4/0xc80 [ 309.931104] handle_mm_fault+0x53e/0xc80 [ 309.935182] ? __handle_mm_fault+0x4460/0x4460 [ 309.939777] ? find_vma+0x34/0x190 [ 309.943329] __do_page_fault+0x620/0xe50 [ 309.947399] ? mm_fault_error+0x380/0x380 [ 309.951554] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 309.956577] ? graph_lock+0x170/0x170 [ 309.960389] do_page_fault+0xf6/0x8c0 [ 309.964201] ? vmalloc_sync_all+0x30/0x30 [ 309.968355] ? find_held_lock+0x36/0x1c0 [ 309.972432] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 309.977289] page_fault+0x1e/0x30 [ 309.980752] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 309.986369] Code: 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f [ 310.005951] RSP: 0018:ffff8801aafef7f0 EFLAGS: 00010202 [ 310.011323] RAX: 0000000000000004 RBX: 0000000000000004 RCX: 0000000000000004 [ 310.018688] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff8801aafef890 [ 310.025973] RBP: ffff8801aafef828 R08: ffffed00355fdf13 R09: ffffed00355fdf12 [ 310.033266] R10: ffffed00355fdf12 R11: 0000000000000003 R12: 0000000020013004 [ 310.040546] R13: 0000000020013000 R14: ffff8801aafef890 R15: 00007ffffffff000 [ 310.047851] ? _copy_from_user+0x10d/0x150 [ 310.052105] evdev_do_ioctl+0xb69/0x21a0 [ 310.056188] ? lock_downgrade+0x8f0/0x8f0 [ 310.060351] ? str_to_user+0x90/0x90 [ 310.064077] ? do_futex+0x249/0x27d0 [ 310.067799] ? rcu_is_watching+0x8c/0x150 [ 310.071964] ? graph_lock+0x170/0x170 13:45:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCSSOFTCAR(r1, 0xc0189436, &(0x7f0000000000)=0xec03) [ 310.075773] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 310.080212] ? find_held_lock+0x36/0x1c0 [ 310.084296] ? lock_downgrade+0x8f0/0x8f0 [ 310.088465] ? kasan_check_read+0x11/0x20 [ 310.092619] ? rcu_is_watching+0x8c/0x150 [ 310.096770] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 310.101198] ? __fget+0x414/0x670 [ 310.104665] evdev_ioctl_handler+0x144/0x1a0 [ 310.109081] evdev_ioctl+0x27/0x2e [ 310.112627] ? evdev_ioctl_compat+0x30/0x30 [ 310.116953] do_vfs_ioctl+0x1de/0x1720 [ 310.120843] ? rcu_is_watching+0x8c/0x150 [ 310.124997] ? ioctl_preallocate+0x300/0x300 [ 310.129407] ? __fget_light+0x2f7/0x440 [ 310.133390] ? fget_raw+0x20/0x20 [ 310.136845] ? putname+0xf2/0x130 [ 310.140305] ? rcu_read_lock_sched_held+0x108/0x120 [ 310.145346] ? kmem_cache_free+0x25c/0x2d0 [ 310.149591] ? __x64_sys_futex+0x47f/0x6a0 [ 310.153830] ? do_futex+0x27d0/0x27d0 [ 310.157634] ? security_file_ioctl+0x94/0xc0 [ 310.162045] ksys_ioctl+0xa9/0xd0 [ 310.165503] __x64_sys_ioctl+0x73/0xb0 [ 310.169411] do_syscall_64+0x1b9/0x820 [ 310.173303] ? finish_task_switch+0x1d3/0x890 [ 310.177804] ? syscall_return_slowpath+0x5e0/0x5e0 [ 310.182828] ? syscall_return_slowpath+0x31d/0x5e0 [ 310.187770] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 310.193147] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 310.198091] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 310.203279] RIP: 0033:0x455b29 [ 310.206462] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 310.225837] RSP: 002b:00007f2451247c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 310.233554] RAX: ffffffffffffffda RBX: 00007f24512486d4 RCX: 0000000000455b29 [ 310.240824] RDX: 0000000020013000 RSI: 00000000400445a0 RDI: 0000000000000015 [ 310.248186] RBP: 000000000072bf50 R08: 0000000000000000 R09: 0000000000000000 [ 310.255456] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 310.262725] R13: 00000000004bd250 R14: 00000000004cb350 R15: 0000000000000001 13:45:39 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000980)=""/230, 0xe6}], 0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1, 0x80ffff00000000}) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) 13:45:39 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="04010500050000c0ffffff00ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:39 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="040105000526000000000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:39 executing program 4: syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) rt_sigaction(0x400000000000007, &(0x7f0000000000)={0x4224ef, {0xffffffbfffbff270}, 0x0, 0x1}, &(0x7f0000000240), 0x8, &(0x7f0000000100)) rt_sigsuspend(&(0x7f0000000040)={0x5}, 0x8) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_dev$random(&(0x7f0000008140)='/dev/random\x00', 0x0, 0x0) 13:45:39 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x7fffffff, &(0x7f0000000180)="2957e1311f16f4776710700ef8b1916dd8300000000000000035e159193155433996062e71d4514307c5403d14c4ae040cfbc7982621d2b159705878d26c4e77461cc67ad6897f46c483d7fb680bd4e54d02e1d7ae446954880dd4eeba81532faaea60b4c30a23aae5f3420e7758e2f5cdcefa8941c4acfd75d3faed697ef18bdc238f6a2399946604c9978bb7e44996895d00e80fc4107cb78491a81321dba91b4d174062f183a15cddd85a803f4625ae0072ae9dd71366a1094ee2e7bdfaf46e632c6e4f05b893cee471f3c73156316256") mmap(&(0x7f0000226000/0x1000)=nil, 0x1000, 0x5, 0x20030, r0, 0x2000000003c) fstat(r0, &(0x7f0000000000)) mremap(&(0x7f000053b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00000cc000/0x4000)=nil) mmap(&(0x7f0000000000/0xfd8000)=nil, 0xfd8000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 13:45:39 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x10001, 0x2480) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000000c0)={0x59, 0x8, [0x0, 0x0]}) 13:45:39 executing program 2: r0 = creat(&(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)=""/45, &(0x7f00000000c0)=0x2d) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000200)=ANY=[@ANYRES64=r0, @ANYRES16=0x0]) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000140)={0x2, 0x9, 0x3, 0x30, 0x1, [{0x24, 0x2, 0x7f, 0x0, 0x0, 0x1000}]}) rmdir(&(0x7f0000000000)='./file0\x00') 13:45:39 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x20000000000001, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$SG_IO(r0, 0x2285, &(0x7f00000006c0)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, &(0x7f0000000200)}, &(0x7f00000003c0)="a1063bbafa46a2bec1988e9b23f27219fdf258a921ba0ea30ffccf2b050faf51f7", &(0x7f0000000580)=""/236, 0x0, 0x0, 0x0, &(0x7f0000000680)}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x200, 0x0) 13:45:39 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup2(r0, r0) ioctl$LOOP_CLR_FD(r1, 0x400452c8) fcntl$setlease(r0, 0x400, 0x2) 13:45:39 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x1f) open(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x2) pause() syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x410e, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000380)='./file0/file0\x00', 0x22c2, 0x0) write$binfmt_elf32(r1, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) 13:45:39 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000000000e00ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:39 executing program 3: sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x101800, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000100)=0x7) read(r0, &(0x7f0000000000)=""/105, 0x69) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0xa86c, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) r2 = syz_open_pts(r0, 0x2) r3 = dup3(r2, r1, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x40, @local={0xfe, 0x80, [], 0xaa}, 0x1}, @in={0x2, 0x4e21, @broadcast=0xffffffff}, @in6={0xa, 0x4e22, 0x3, @empty, 0x5}, @in={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x4e21, 0x0, @loopback={0x0, 0x1}, 0x73}, @in6={0xa, 0x4e22, 0x7fffffff, @mcast1={0xff, 0x1, [], 0x1}, 0x9}, @in6={0xa, 0x4e24, 0x41, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0xf}}, 0x80000000}], 0xac) write(r0, &(0x7f0000c34fff), 0x1000002c1) [ 310.877931] sd 0:0:1:0: [sg0] tag#6363 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 310.886859] sd 0:0:1:0: [sg0] tag#6363 CDB: ATA command pass through(12)/Blank [ 310.894333] sd 0:0:1:0: [sg0] tag#6363 CDB[00]: a1 06 3b ba fa 46 a2 be c1 98 8e 9b 23 f2 72 19 [ 310.903269] sd 0:0:1:0: [sg0] tag#6363 CDB[10]: fd f2 58 a9 21 ba 0e a3 0f fc cf 2b 05 0f af 51 [ 310.912224] sd 0:0:1:0: [sg0] tag#6363 CDB[20]: f7 13:45:39 executing program 1: r0 = socket(0x11, 0x803, 0x300) syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYRES32=r0], &(0x7f0000000040)={0x0, 0x0, [0x0, 0x9f2, 0x10000]}) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000080)="0bdc7d7d", 0x4) recvmmsg(r0, &(0x7f0000002e00)=[{{&(0x7f0000002b80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast1}}}, 0x80, &(0x7f0000002d00), 0x0, &(0x7f0000002d40)=""/164, 0xa4}}], 0x40000000000014d, 0x0, 0x0) socket(0xa, 0x80000, 0x1) 13:45:39 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000000003f00ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:39 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="040105000500000001000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCSSOFTCAR(r1, 0x5415, &(0x7f0000000000)=0xec03) [ 311.222486] device bridge_slave_1 left promiscuous mode [ 311.228201] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.264309] device bridge_slave_0 left promiscuous mode [ 311.269970] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.352471] team0 (unregistering): Port device team_slave_1 removed [ 311.367248] team0 (unregistering): Port device team_slave_0 removed [ 311.380778] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 311.398598] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 311.445738] bond0 (unregistering): Released all slaves [ 311.653368] FAULT_FLAG_ALLOW_RETRY missing 30 [ 311.657983] CPU: 0 PID: 21322 Comm: syz-executor6 Not tainted 4.18.0-rc1+ #111 [ 311.665345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.674696] Call Trace: [ 311.677290] dump_stack+0x1c9/0x2b4 [ 311.680941] ? dump_stack_print_info.cold.2+0x52/0x52 [ 311.686149] ? kasan_check_write+0x14/0x20 [ 311.690393] ? do_raw_spin_lock+0xc1/0x200 [ 311.694638] handle_userfault.cold.32+0x47/0x62 [ 311.699320] ? userfaultfd_ioctl+0x4fd0/0x4fd0 [ 311.703907] ? debug_check_no_locks_freed+0x310/0x310 [ 311.709105] ? print_usage_bug+0xc0/0xc0 [ 311.713178] ? print_usage_bug+0xc0/0xc0 [ 311.717237] ? graph_lock+0x170/0x170 [ 311.721040] ? userfaultfd_ctx_put+0x810/0x810 [ 311.725638] ? find_held_lock+0x36/0x1c0 [ 311.729711] ? __lock_acquire+0x7fc/0x5020 [ 311.733951] ? lock_downgrade+0x8f0/0x8f0 [ 311.738104] ? graph_lock+0x170/0x170 [ 311.741927] ? find_held_lock+0x36/0x1c0 [ 311.745998] ? lock_downgrade+0x8f0/0x8f0 [ 311.750177] ? kasan_check_read+0x11/0x20 [ 311.754345] ? do_raw_spin_unlock+0xa7/0x2f0 [ 311.758852] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 311.763444] ? kasan_check_write+0x14/0x20 [ 311.767678] ? do_raw_spin_lock+0xc1/0x200 [ 311.771920] __handle_mm_fault+0x3a0a/0x4460 [ 311.776336] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 311.781177] ? graph_lock+0x170/0x170 [ 311.785023] ? lock_downgrade+0x8f0/0x8f0 [ 311.789193] ? kasan_check_read+0x11/0x20 [ 311.793344] ? rcu_is_watching+0x8c/0x150 [ 311.797492] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 311.801907] ? handle_mm_fault+0x8c4/0xc80 [ 311.806160] handle_mm_fault+0x53e/0xc80 [ 311.810228] ? __handle_mm_fault+0x4460/0x4460 [ 311.814815] ? find_vma+0x34/0x190 [ 311.818359] __do_page_fault+0x620/0xe50 [ 311.822429] ? mm_fault_error+0x380/0x380 [ 311.826582] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 311.831603] ? graph_lock+0x170/0x170 [ 311.835411] do_page_fault+0xf6/0x8c0 [ 311.839213] ? vmalloc_sync_all+0x30/0x30 [ 311.843364] ? find_held_lock+0x36/0x1c0 [ 311.847441] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 311.852291] page_fault+0x1e/0x30 [ 311.855746] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 311.861361] Code: 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f [ 311.880736] RSP: 0018:ffff8801ceeff7f0 EFLAGS: 00010202 [ 311.886108] RAX: 0000000000000004 RBX: 0000000000000004 RCX: 0000000000000004 [ 311.893392] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff8801ceeff890 [ 311.900670] RBP: ffff8801ceeff828 R08: ffffed0039ddff13 R09: ffffed0039ddff12 [ 311.907944] R10: ffffed0039ddff12 R11: 0000000000000003 R12: 0000000020013004 [ 311.915214] R13: 0000000020013000 R14: ffff8801ceeff890 R15: 00007ffffffff000 [ 311.922510] ? _copy_from_user+0x10d/0x150 [ 311.926753] evdev_do_ioctl+0xb69/0x21a0 [ 311.930907] ? lock_downgrade+0x8f0/0x8f0 [ 311.935073] ? str_to_user+0x90/0x90 [ 311.938801] ? do_futex+0x249/0x27d0 [ 311.942520] ? rcu_is_watching+0x8c/0x150 [ 311.946682] ? graph_lock+0x170/0x170 [ 311.950484] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 311.954908] ? find_held_lock+0x36/0x1c0 [ 311.958981] ? lock_downgrade+0x8f0/0x8f0 [ 311.963142] ? kasan_check_read+0x11/0x20 [ 311.967288] ? rcu_is_watching+0x8c/0x150 [ 311.971434] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 311.975847] ? __fget+0x414/0x670 [ 311.979314] evdev_ioctl_handler+0x144/0x1a0 [ 311.983747] evdev_ioctl+0x27/0x2e [ 311.987296] ? evdev_ioctl_compat+0x30/0x30 [ 311.991617] do_vfs_ioctl+0x1de/0x1720 [ 311.995506] ? rcu_is_watching+0x8c/0x150 [ 311.999667] ? ioctl_preallocate+0x300/0x300 [ 312.004074] ? __fget_light+0x2f7/0x440 [ 312.008051] ? fget_raw+0x20/0x20 [ 312.011506] ? putname+0xf2/0x130 [ 312.014963] ? rcu_read_lock_sched_held+0x108/0x120 [ 312.019996] ? kmem_cache_free+0x25c/0x2d0 [ 312.024263] ? __x64_sys_futex+0x47f/0x6a0 [ 312.028503] ? do_futex+0x27d0/0x27d0 [ 312.032307] ? security_file_ioctl+0x94/0xc0 [ 312.036720] ksys_ioctl+0xa9/0xd0 [ 312.040173] __x64_sys_ioctl+0x73/0xb0 [ 312.044064] do_syscall_64+0x1b9/0x820 [ 312.047956] ? syscall_return_slowpath+0x5e0/0x5e0 [ 312.052906] ? syscall_return_slowpath+0x31d/0x5e0 [ 312.057852] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 312.063232] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 312.068082] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 312.073269] RIP: 0033:0x455b29 [ 312.076447] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 312.095821] RSP: 002b:00007f2451247c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 312.103541] RAX: ffffffffffffffda RBX: 00007f24512486d4 RCX: 0000000000455b29 [ 312.110817] RDX: 0000000020013000 RSI: 00000000400445a0 RDI: 0000000000000015 [ 312.118085] RBP: 000000000072bf50 R08: 0000000000000000 R09: 0000000000000000 [ 312.125366] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 312.132642] R13: 00000000004bd250 R14: 00000000004cb350 R15: 0000000000000001 13:45:41 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000980)=""/230, 0xe6}], 0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1, 0x80ffff}) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) 13:45:41 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000007a0a00fffffffffd63012c"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000e1018800006a0a00ff1973c523c8bfd1ebebbdd54b77c91ac1fffff6006118"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x9, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000000440)="73797a6b584e3e2f9afed6d0ee3d5d5de2f791e4545b69c564e359a02949ab535c1b25caa665b968d2f1a32e3febe4189befa5f044722bae83e5b6959e392e8d24e41b4ce153c97b5a23e135e38d3b1d14ad7a9eeb7069347fee053569544f1a0000000000000000", 0x80000001, 0x43, &(0x7f0000000300)=""/187, 0x400000000, 0x0, [], 0x0, 0xc}, 0x48) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000002c0)={0x9}, 0x1) 13:45:41 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="040105000500000004000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:41 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="04010500050000000e000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:41 executing program 1: mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={0x0, 0xbf}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000080)={r2, 0x1}, &(0x7f00000000c0)=0x8) 13:45:41 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x2004000008912, &(0x7f0000000180)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000080)=@abs={0x1}, 0x6e) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r4 = socket$netlink(0x10, 0x3, 0x80000000004) listen(r2, 0x0) write(r4, &(0x7f000058bfe4)="29000000140005b7ff000000040860eb01001001ffa40e07fff00fd57f25ffffff0100002a00f3ff09", 0x29) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000080)="f20f080f01cf0f233a66baf80cb86402868cef66bafc0c66ed67660ff6b9360036663e0f35b9c60d00000f322e2ef30fbeb541240000f30f211366baf80cb81f926b83ef66bafc0cb000ee", 0x4b}], 0x1, 0x5d, &(0x7f0000000040), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 13:45:41 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000040)=0xe1ac) 13:45:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCSSOFTCAR(r1, 0x5451, &(0x7f0000000000)=0xec03) 13:45:41 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000080), &(0x7f0000000000)=0x1b5) 13:45:41 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") syz_mount_image$reiserfs(&(0x7f0000000740)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x400000b1e, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000001c40)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x40086602, &(0x7f0000000080)={0xcffa}) 13:45:41 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="04010500050000e803000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000), 0x4) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="f1c814d900a9be31e975fbb313b120a9", 0x10) [ 312.929878] REISERFS warning (device loop1): sh-2021 reiserfs_fill_super: can not find reiserfs on loop1 13:45:41 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000020f88)="24000000100007031dfffd946fa2830020200a0009000300001d85687f0000000400ff7e28000000100a43ba16a0aa1ca10bb356da5d8060000000060000000029ec2400020cd37ed01cc073", 0x4c}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x4, [0xffffffffffffffff, 0xecd7, 0x633a, 0x100]}, &(0x7f0000000040)=0xc) 13:45:41 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="04010500050000000003e800ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:41 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="040105000500000006000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 313.060312] REISERFS warning (device loop1): sh-2021 reiserfs_fill_super: can not find reiserfs on loop1 [ 313.092930] IPVS: ftp: loaded support on port[0] = 21 13:45:41 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f0000044000)) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x4018920a, 0x20000000) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000040)={{0x11, @multicast1=0xe0000001, 0x4e20, 0x3, 'lblc\x00', 0x4, 0x0, 0x5e}, {@rand_addr=0x8, 0x4e23, 0x3, 0x7f, 0x7ff, 0x9}}, 0x44) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000100)=""/129, 0x81}], 0x1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x15) [ 313.105746] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. [ 313.177065] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. [ 313.546561] FAULT_FLAG_ALLOW_RETRY missing 30 [ 313.551265] CPU: 0 PID: 21410 Comm: syz-executor6 Not tainted 4.18.0-rc1+ #111 [ 313.558637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 313.568812] Call Trace: [ 313.571419] dump_stack+0x1c9/0x2b4 [ 313.575067] ? dump_stack_print_info.cold.2+0x52/0x52 [ 313.580276] ? kasan_check_write+0x14/0x20 [ 313.584517] ? do_raw_spin_lock+0xc1/0x200 [ 313.588761] handle_userfault.cold.32+0x47/0x62 [ 313.593446] ? userfaultfd_ioctl+0x4fd0/0x4fd0 [ 313.598035] ? debug_check_no_locks_freed+0x310/0x310 [ 313.603348] ? perf_event_update_userpage+0xd30/0xd30 [ 313.608545] ? print_usage_bug+0xc0/0xc0 [ 313.612631] ? print_usage_bug+0xc0/0xc0 [ 313.616701] ? __perf_event_task_sched_in+0x24f/0xbb0 [ 313.621910] ? userfaultfd_ctx_put+0x810/0x810 [ 313.626511] ? find_held_lock+0x36/0x1c0 [ 313.630593] ? __lock_acquire+0x7fc/0x5020 [ 313.634830] ? lock_downgrade+0x8f0/0x8f0 [ 313.638980] ? graph_lock+0x170/0x170 [ 313.642800] ? find_held_lock+0x36/0x1c0 [ 313.646873] ? lock_downgrade+0x8f0/0x8f0 [ 313.651029] ? kasan_check_read+0x11/0x20 [ 313.655179] ? do_raw_spin_unlock+0xa7/0x2f0 [ 313.659592] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 313.664185] ? kasan_check_write+0x14/0x20 [ 313.668426] ? do_raw_spin_lock+0xc1/0x200 [ 313.672675] __handle_mm_fault+0x3a0a/0x4460 [ 313.677108] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 313.681990] ? graph_lock+0x170/0x170 [ 313.685821] ? lock_downgrade+0x8f0/0x8f0 [ 313.689991] ? kasan_check_read+0x11/0x20 [ 313.694145] ? rcu_is_watching+0x8c/0x150 [ 313.698295] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 313.702713] ? handle_mm_fault+0x8c4/0xc80 [ 313.706960] handle_mm_fault+0x53e/0xc80 [ 313.711033] ? __handle_mm_fault+0x4460/0x4460 [ 313.715620] ? find_vma+0x34/0x190 [ 313.719170] __do_page_fault+0x620/0xe50 [ 313.723248] ? mm_fault_error+0x380/0x380 [ 313.727411] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 313.732446] ? graph_lock+0x170/0x170 [ 313.736272] do_page_fault+0xf6/0x8c0 [ 313.740090] ? vmalloc_sync_all+0x30/0x30 [ 313.744231] ? find_held_lock+0x36/0x1c0 [ 313.748316] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 313.753182] page_fault+0x1e/0x30 [ 313.756629] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 313.762233] Code: 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f [ 313.781464] RSP: 0018:ffff8801883077f0 EFLAGS: 00010202 [ 313.786825] RAX: 0000000000000004 RBX: 0000000000000004 RCX: 0000000000000004 [ 313.794095] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff880188307890 [ 313.801352] RBP: ffff880188307828 R08: ffffed0031060f13 R09: ffffed0031060f12 [ 313.808613] R10: ffffed0031060f12 R11: 0000000000000003 R12: 0000000020013004 [ 313.815883] R13: 0000000020013000 R14: ffff880188307890 R15: 00007ffffffff000 [ 313.823185] ? _copy_from_user+0x10d/0x150 [ 313.827412] evdev_do_ioctl+0xb69/0x21a0 [ 313.831480] ? lock_downgrade+0x8f0/0x8f0 [ 313.835618] ? str_to_user+0x90/0x90 [ 313.839318] ? do_futex+0x249/0x27d0 [ 313.843037] ? rcu_is_watching+0x8c/0x150 [ 313.847181] ? graph_lock+0x170/0x170 [ 313.850966] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 313.855367] ? find_held_lock+0x36/0x1c0 [ 313.859421] ? lock_downgrade+0x8f0/0x8f0 [ 313.863561] ? kasan_check_read+0x11/0x20 [ 313.867692] ? rcu_is_watching+0x8c/0x150 [ 313.871826] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 313.876222] ? __fget+0x414/0x670 [ 313.879669] evdev_ioctl_handler+0x144/0x1a0 [ 313.884076] evdev_ioctl+0x27/0x2e [ 313.887604] ? evdev_ioctl_compat+0x30/0x30 [ 313.891912] do_vfs_ioctl+0x1de/0x1720 [ 313.895789] ? rcu_is_watching+0x8c/0x150 [ 313.899934] ? ioctl_preallocate+0x300/0x300 [ 313.904342] ? __fget_light+0x2f7/0x440 [ 313.908312] ? fget_raw+0x20/0x20 [ 313.911755] ? putname+0xf2/0x130 [ 313.915214] ? rcu_read_lock_sched_held+0x108/0x120 [ 313.920225] ? kmem_cache_free+0x25c/0x2d0 [ 313.924446] ? __x64_sys_futex+0x47f/0x6a0 [ 313.928677] ? do_futex+0x27d0/0x27d0 [ 313.932473] ? security_file_ioctl+0x94/0xc0 [ 313.936878] ksys_ioctl+0xa9/0xd0 [ 313.940334] __x64_sys_ioctl+0x73/0xb0 [ 313.944212] do_syscall_64+0x1b9/0x820 [ 313.948094] ? finish_task_switch+0x1d3/0x890 [ 313.952591] ? syscall_return_slowpath+0x5e0/0x5e0 [ 313.957514] ? syscall_return_slowpath+0x31d/0x5e0 [ 313.962449] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 313.967810] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 313.972648] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 313.977827] RIP: 0033:0x455b29 [ 313.980999] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 314.000233] RSP: 002b:00007f2451247c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 314.007937] RAX: ffffffffffffffda RBX: 00007f24512486d4 RCX: 0000000000455b29 [ 314.015201] RDX: 0000000020013000 RSI: 00000000400445a0 RDI: 0000000000000015 [ 314.022482] RBP: 000000000072bf50 R08: 0000000000000000 R09: 0000000000000000 [ 314.029745] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 314.037035] R13: 00000000004bd250 R14: 00000000004cb350 R15: 0000000000000001 13:45:43 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000980)=""/230, 0xe6}], 0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1, 0x4000}) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) [ 315.248663] FAULT_FLAG_ALLOW_RETRY missing 30 [ 315.253358] CPU: 0 PID: 21444 Comm: syz-executor6 Not tainted 4.18.0-rc1+ #111 [ 315.260722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 315.270066] Call Trace: [ 315.272660] dump_stack+0x1c9/0x2b4 [ 315.276287] ? dump_stack_print_info.cold.2+0x52/0x52 [ 315.281483] ? kasan_check_write+0x14/0x20 [ 315.285721] ? do_raw_spin_lock+0xc1/0x200 [ 315.289961] handle_userfault.cold.32+0x47/0x62 [ 315.294640] ? userfaultfd_ioctl+0x4fd0/0x4fd0 [ 315.299231] ? debug_check_no_locks_freed+0x310/0x310 [ 315.304437] ? print_usage_bug+0xc0/0xc0 [ 315.308499] ? print_usage_bug+0xc0/0xc0 [ 315.312561] ? print_usage_bug+0xc0/0xc0 [ 315.316618] ? graph_lock+0x170/0x170 [ 315.320422] ? userfaultfd_ctx_put+0x810/0x810 [ 315.325004] ? find_held_lock+0x36/0x1c0 [ 315.329073] ? mark_held_locks+0xc9/0x160 [ 315.333220] ? graph_lock+0x170/0x170 [ 315.337019] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 315.342062] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 315.346824] ? find_held_lock+0x36/0x1c0 [ 315.350893] ? lock_downgrade+0x8f0/0x8f0 [ 315.355051] ? kasan_check_read+0x11/0x20 [ 315.359195] ? do_raw_spin_unlock+0xa7/0x2f0 [ 315.363613] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 315.368209] ? kasan_check_write+0x14/0x20 [ 315.372442] ? do_raw_spin_lock+0xc1/0x200 [ 315.376685] __handle_mm_fault+0x3a0a/0x4460 [ 315.381102] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 315.385941] ? graph_lock+0x170/0x170 [ 315.389755] ? lock_downgrade+0x8f0/0x8f0 [ 315.393899] ? kasan_check_read+0x11/0x20 [ 315.398101] ? rcu_is_watching+0x8c/0x150 [ 315.402247] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 315.406658] ? handle_mm_fault+0x8c4/0xc80 [ 315.410915] handle_mm_fault+0x53e/0xc80 [ 315.414966] ? __handle_mm_fault+0x4460/0x4460 [ 315.419551] ? find_vma+0x34/0x190 [ 315.423087] __do_page_fault+0x620/0xe50 [ 315.427139] ? mm_fault_error+0x380/0x380 [ 315.431274] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 315.436281] ? graph_lock+0x170/0x170 [ 315.440081] do_page_fault+0xf6/0x8c0 [ 315.443874] ? vmalloc_sync_all+0x30/0x30 [ 315.448013] ? find_held_lock+0x36/0x1c0 [ 315.452096] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 315.456944] page_fault+0x1e/0x30 [ 315.460394] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 315.465998] Code: 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f [ 315.485215] RSP: 0018:ffff8801856df7f0 EFLAGS: 00010202 [ 315.490581] RAX: 0000000000000004 RBX: 0000000000000004 RCX: 0000000000000004 [ 315.498620] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff8801856df890 [ 315.505879] RBP: ffff8801856df828 R08: ffffed0030adbf13 R09: ffffed0030adbf12 [ 315.513137] R10: ffffed0030adbf12 R11: 0000000000000003 R12: 0000000020013004 [ 315.520479] R13: 0000000020013000 R14: ffff8801856df890 R15: 00007ffffffff000 [ 315.527779] ? _copy_from_user+0x10d/0x150 [ 315.532013] evdev_do_ioctl+0xb69/0x21a0 [ 315.536105] ? lock_downgrade+0x8f0/0x8f0 [ 315.540244] ? str_to_user+0x90/0x90 [ 315.543950] ? do_futex+0x249/0x27d0 [ 315.547648] ? rcu_is_watching+0x8c/0x150 [ 315.551784] ? graph_lock+0x170/0x170 [ 315.555569] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 315.559973] ? find_held_lock+0x36/0x1c0 [ 315.564054] ? lock_downgrade+0x8f0/0x8f0 [ 315.568804] ? kasan_check_read+0x11/0x20 [ 315.572949] ? rcu_is_watching+0x8c/0x150 [ 315.577089] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 315.581495] ? __fget+0x414/0x670 [ 315.584954] evdev_ioctl_handler+0x144/0x1a0 [ 315.589360] evdev_ioctl+0x27/0x2e [ 315.592885] ? evdev_ioctl_compat+0x30/0x30 [ 315.597193] do_vfs_ioctl+0x1de/0x1720 [ 315.601071] ? rcu_is_watching+0x8c/0x150 [ 315.605207] ? ioctl_preallocate+0x300/0x300 [ 315.609598] ? __fget_light+0x2f7/0x440 [ 315.613555] ? fget_raw+0x20/0x20 [ 315.617003] ? putname+0xf2/0x130 [ 315.620476] ? rcu_read_lock_sched_held+0x108/0x120 [ 315.625489] ? kmem_cache_free+0x25c/0x2d0 [ 315.629719] ? __x64_sys_futex+0x47f/0x6a0 [ 315.633954] ? do_futex+0x27d0/0x27d0 [ 315.637750] ? security_file_ioctl+0x94/0xc0 [ 315.642146] ksys_ioctl+0xa9/0xd0 [ 315.645586] __x64_sys_ioctl+0x73/0xb0 [ 315.649460] do_syscall_64+0x1b9/0x820 [ 315.653347] ? syscall_return_slowpath+0x5e0/0x5e0 [ 315.658263] ? syscall_return_slowpath+0x31d/0x5e0 [ 315.663281] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 315.668647] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 315.673494] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 315.678676] RIP: 0033:0x455b29 [ 315.681849] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 315.701079] RSP: 002b:00007f2451247c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 315.708780] RAX: ffffffffffffffda RBX: 00007f24512486d4 RCX: 0000000000455b29 [ 315.716051] RDX: 0000000020013000 RSI: 00000000400445a0 RDI: 0000000000000015 [ 315.723315] RBP: 000000000072bf50 R08: 0000000000000000 R09: 0000000000000000 [ 315.730569] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 315.737820] R13: 00000000004bd250 R14: 00000000004cb350 R15: 0000000000000001 [ 316.038539] IPVS: stopping master sync thread 19328 ... [ 316.046335] device bridge_slave_1 left promiscuous mode [ 316.051895] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.065515] device bridge_slave_0 left promiscuous mode [ 316.071113] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.130917] team0 (unregistering): Port device team_slave_1 removed [ 318.141396] team0 (unregistering): Port device team_slave_0 removed [ 318.152737] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 318.171344] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 318.200131] bond0 (unregistering): Released all slaves [ 318.277642] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.284097] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.291466] device bridge_slave_0 entered promiscuous mode [ 318.328716] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.335153] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.342521] device bridge_slave_1 entered promiscuous mode [ 318.380250] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 318.417684] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 318.529931] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 318.569682] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 318.745716] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 318.755974] team0: Port device team_slave_0 added [ 318.792639] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 318.800207] team0: Port device team_slave_1 added [ 318.837092] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 318.879364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 318.918503] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 318.925707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 318.934473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 318.975068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 319.353087] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.359511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.366213] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.372597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.379994] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 320.274614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.289177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 320.361307] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 320.442604] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 320.448932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 320.456000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 320.535302] 8021q: adding VLAN 0 to HW filter on device team0 13:45:49 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x200, 0x4) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl(r0, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) get_robust_list(r3, &(0x7f0000000280)=&(0x7f0000000240)={&(0x7f0000000100)={&(0x7f0000000080)}, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)}}, &(0x7f00000002c0)=0x18) syz_emit_ethernet(0x66, &(0x7f0000000140)=ANY=[@ANYBLOB="2b00000000001b207f5c5eeb08004500001800000000002f9078ac1414aaac1414aa34c1880b0000000000000800000086dd080088be00000000100000000100000000000000080022eb00eaffff1f0000000200000000000000000000000800655800000000"], &(0x7f0000000000)) connect$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x3, {0x9, 0x9, 0x9, 0x0, 0x5, 0x5}, 0x1f, 0x1ff}, 0xe) 13:45:49 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="04010500050000003f000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:49 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(ctr(serpent),md5-generic)\x00'}, 0x58) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100), 0x10) r1 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x3, 0xac002) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000300)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="d179f20600000000001c14b1048c5b1bd2e7fcd330451c64b8614fcff9671a5cf54ab025", 0x24) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="0a4d08087f4f5a57b39f9c787c548a51abe50aaf4f686f22dd1d5f674cac89330958ed752928df0ed985877cf74c96109868adb51325f13332ce9fd56396ce9d20c30ceff60a68f94357752d4a0333de0cb314c1c7266c8bbb91d07c447fc05d2cc9838513650555611f8d91bc6837b2cff60e9ec8a79b7e1166b10c8d6974c5063ccd63bff87efbb29e0fa5dd2350ee1ec74eb8b046355f4ddfc007e7028c7d30531a2440130f273b9a85832120a5e7829061f28c1ab8547b182d39c1c9d5c2bb0831166ffe2dc222daf5adb8bcc56d306b59743f4e5b3c8d28a878df64484dd26e5251cead53acdccc8cb30ad5df", 0xef) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001880)="2ef99f8baf76f54e8b1c8677f925731e", 0x10}], 0x1, &(0x7f0000000200)}, 0x0) recvmmsg(r2, &(0x7f00000028c0)=[{{&(0x7f0000000080)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000180), 0x0, &(0x7f00000018c0)=""/4096, 0x1000}}, {{&(0x7f0000001580)=@sco, 0x80, &(0x7f0000001700)=[{&(0x7f0000001680)=""/91, 0x5b}], 0x1, &(0x7f0000001740)=""/150, 0x96}}], 0x2, 0x0, &(0x7f0000001800)={0x77359400}) 13:45:49 executing program 3: ioctl(0xffffffffffffffff, 0x8000000001009375, &(0x7f0000006f80)="010000000000001018") r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x40100, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x9, 0x100000000}, &(0x7f00000000c0)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r1, 0xed1, 0x30}, 0xc) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={r1, 0x1d}, &(0x7f0000000180)=0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev={0xfe, 0x80, [], 0xc}, 0x5, 0x3, 0x1, 0x5, 0xfffffffffffffff9, 0x0, 0x200}, 0x20) 13:45:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCSSOFTCAR(r1, 0x2, &(0x7f0000000000)=0xec03) 13:45:49 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000000040)=0x2220, 0xff30) recvmsg(r2, &(0x7f00000013c0)={&(0x7f0000000240)=@hci={0x0, 0x0}, 0x80, &(0x7f0000001340), 0x0, &(0x7f0000001380)=""/45, 0x1d8}, 0x2) r4 = open(&(0x7f0000000100)='./file0\x00', 0x200, 0x80) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x100, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f0000000200)=r5) sendmmsg(r1, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f00000018c0)}}], 0x1, 0x0) recvfrom(r2, &(0x7f0000000180)=""/63, 0x3f, 0x10000, &(0x7f00000002c0)=@llc={0x1a, 0x33b, 0x1, 0x9fd8, 0x6, 0x4, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x16}}, 0x80) ioctl$sock_netdev_private(r0, 0x89fa, &(0x7f0000000100)) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', r3}) 13:45:49 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="040105000500060000000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:49 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000980)=""/230, 0xe6}], 0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1, 0xffff8000}) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) 13:45:49 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="04010500050000004a000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:49 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x9, 0x3}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000200)={r2, 0xfffffffffffffff9}, 0x8) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000200)) close(r0) 13:45:49 executing program 2: r0 = socket$rds(0xa, 0x2, 0x11) sendmsg$rds(r0, &(0x7f000000afc8)={&(0x7f0000004ff0)={0xa, 0x1}, 0xe8, &(0x7f0000010000)=[{&(0x7f000000c000)=""/4096}, {&(0x7f000000e000)=""/79}, {&(0x7f000000f000)=""/255, 0x42e1f40f82fdb420}], 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="1400000000000000290000003e0000000000000000000005000000000000000014010000080000000000000000000000", @ANYPTR=&(0x7f000000f000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f000000eff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1f}, 0x8000) 13:45:50 executing program 3: r0 = socket$inet(0x2, 0x3, 0x800000800000001) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x2c) write$binfmt_misc(r1, &(0x7f00000000c0)={'syz1', "bbde575e807774a6b40e85cf14accc3eb25db61db1211eb0456df5c32ff13b2fab3761d11e6d210f0cb6c087d0c4b9192aa5e1999462e33a87e935179256b76688a6357c0d91717f99b67c59986f2fa480129f84d39424252a8896218ed3e928743ae2a6c6efed24beadc33a261e57daac8d951ff937351b35f980475c292f2b0e9800a8f778cd67cb54e336baeda01f00118dac628d941430393aeaa4b77214569d6f4dbe531ade06cefe86ee5879648275864cf41daecb1b9e0c5e641575f5ffa9f163e06ddc82dfb08d95990e904065ca09132c0a008d4974e0310589175f87ba6b59ddb6138dab"}, 0xed) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0xc) 13:45:50 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000e00000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:50 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r0, 0x40) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000040)={0x401, {{0xa, 0x4e22, 0x3ff, @ipv4={[], [0xff, 0xff], @rand_addr=0x3}, 0xfffffffffffffff8}}, 0x1, 0x1, [{{0xa, 0x4e20, 0x3d, @empty, 0xd5c2}}]}, 0x110) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) shutdown(r1, 0x1) 13:45:50 executing program 3: r0 = socket(0x10, 0x3, 0x3) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000900)={&(0x7f0000000040)={0x14, 0x1e, 0x201}, 0x14}, 0x1}, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000140), &(0x7f0000000180)=0x8) 13:45:50 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="0401050005000a0000000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:50 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000200000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:50 executing program 3: r0 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x10000, @loopback={0x0, 0x1}, 0x8000}}, 0x7, 0x80000000, 0x72, 0x23, 0x40}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000001c0)={r1, @in6={{0xa, 0x4e24, 0x9, @mcast1={0xff, 0x1, [], 0x1}, 0x8}}, [0x0, 0xbb5, 0x0, 0x5862, 0x1, 0x100000000, 0x8, 0x3ff, 0x4800000000000, 0x2fa, 0x7fffffff, 0xba5, 0x9, 0x4, 0x1]}, &(0x7f00000002c0)=0x100) r2 = socket(0x8, 0x2, 0x2) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000000)='veth1_to_bridge\x00') syz_mount_image$nfs4(&(0x7f0000000340)='nfs4\x00', &(0x7f0000000380)='./file1\x00', 0xffff, 0x2, &(0x7f0000000500)=[{&(0x7f00000003c0)="6358943d1c", 0x5, 0x81}, {&(0x7f0000000400)="f27fd599c602df374a055c5d84b8447123cd3ab61f9c7a055f816297ae775cfa63468ada1b109c6698636699a9bcac09e9f0b5fc295805bdba5810299578577e10dbc2a4e97c634d40ad0efe38efd6a68e45feb50e8fc9619dcfb463c50fc9db8c85d21546d41aefcab6d35a789affe559fac58cb6d22424fd9e197d7808935dd2a5b53190e9cff87c727d334222df72ebbc6518e4d920b520f885365d4227bc0749696c29ac2431d17b8013c2753e378e179fad558e5554bea8b0b95280455a0a8f58c5d38348b01c12c0934cd249d13bb7440f062e2f8ada0f8ab6afc96bb4", 0xe0, 0x6}], 0x201040, &(0x7f0000000540)='!\x00') ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000580)=0x88f0) sendmsg$nl_generic(r2, &(0x7f0000001480)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000001440)={&(0x7f0000001180)={0x24, 0x2e, 0x21, 0x0, 0x0, {}, [@typed={0x8, 0x0, @pid}, @typed={0x8, 0x0, @pid}]}, 0x24}, 0x1}, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000300)=0x4, 0x2) [ 321.910529] FAULT_FLAG_ALLOW_RETRY missing 30 [ 321.915173] CPU: 0 PID: 21760 Comm: syz-executor6 Not tainted 4.18.0-rc1+ #111 [ 321.922624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.931982] Call Trace: [ 321.934577] dump_stack+0x1c9/0x2b4 [ 321.938216] ? dump_stack_print_info.cold.2+0x52/0x52 [ 321.943415] ? kasan_check_write+0x14/0x20 [ 321.947659] ? do_raw_spin_lock+0xc1/0x200 [ 321.951902] handle_userfault.cold.32+0x47/0x62 [ 321.956584] ? userfaultfd_ioctl+0x4fd0/0x4fd0 [ 321.961173] ? debug_check_no_locks_freed+0x310/0x310 [ 321.966372] ? perf_event_update_userpage+0xd30/0xd30 [ 321.971573] ? print_usage_bug+0xc0/0xc0 [ 321.975642] ? print_usage_bug+0xc0/0xc0 [ 321.979706] ? __perf_event_task_sched_in+0x24f/0xbb0 [ 321.984898] ? userfaultfd_ctx_put+0x810/0x810 [ 321.989498] ? find_held_lock+0x36/0x1c0 [ 321.993578] ? __lock_acquire+0x7fc/0x5020 [ 321.997819] ? lock_downgrade+0x8f0/0x8f0 [ 322.001979] ? graph_lock+0x170/0x170 [ 322.005804] ? find_held_lock+0x36/0x1c0 [ 322.009895] ? lock_downgrade+0x8f0/0x8f0 [ 322.014057] ? kasan_check_read+0x11/0x20 [ 322.018205] ? do_raw_spin_unlock+0xa7/0x2f0 [ 322.022615] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 322.027205] ? kasan_check_write+0x14/0x20 [ 322.031439] ? do_raw_spin_lock+0xc1/0x200 [ 322.035694] __handle_mm_fault+0x3a0a/0x4460 [ 322.040134] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 322.044999] ? graph_lock+0x170/0x170 [ 322.048840] ? lock_downgrade+0x8f0/0x8f0 [ 322.053024] ? kasan_check_read+0x11/0x20 [ 322.057184] ? rcu_is_watching+0x8c/0x150 [ 322.061341] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 322.065750] ? handle_mm_fault+0x8c4/0xc80 [ 322.069972] handle_mm_fault+0x53e/0xc80 [ 322.074039] ? __handle_mm_fault+0x4460/0x4460 [ 322.078630] ? find_vma+0x34/0x190 [ 322.082173] __do_page_fault+0x620/0xe50 [ 322.086229] ? mm_fault_error+0x380/0x380 [ 322.090391] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 322.095414] ? graph_lock+0x170/0x170 [ 322.099211] do_page_fault+0xf6/0x8c0 [ 322.103011] ? vmalloc_sync_all+0x30/0x30 [ 322.107155] ? find_held_lock+0x36/0x1c0 [ 322.111218] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 322.116065] page_fault+0x1e/0x30 [ 322.119527] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 322.125126] Code: 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f [ 322.144381] RSP: 0018:ffff88017a1d77f0 EFLAGS: 00010202 [ 322.149737] RAX: 0000000000000004 RBX: 0000000000000004 RCX: 0000000000000004 [ 322.157005] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff88017a1d7890 [ 322.164271] RBP: ffff88017a1d7828 R08: ffffed002f43af13 R09: ffffed002f43af12 [ 322.171620] R10: ffffed002f43af12 R11: 0000000000000003 R12: 0000000020013004 [ 322.178890] R13: 0000000020013000 R14: ffff88017a1d7890 R15: 00007ffffffff000 [ 322.186191] ? _copy_from_user+0x10d/0x150 [ 322.190446] evdev_do_ioctl+0xb69/0x21a0 [ 322.194521] ? lock_downgrade+0x8f0/0x8f0 [ 322.198677] ? str_to_user+0x90/0x90 [ 322.202395] ? do_futex+0x249/0x27d0 [ 322.206104] ? rcu_is_watching+0x8c/0x150 [ 322.210263] ? graph_lock+0x170/0x170 [ 322.214066] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 322.218498] ? find_held_lock+0x36/0x1c0 [ 322.222580] ? lock_downgrade+0x8f0/0x8f0 [ 322.226740] ? kasan_check_read+0x11/0x20 [ 322.230918] ? rcu_is_watching+0x8c/0x150 [ 322.235073] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 322.239496] ? __fget+0x414/0x670 [ 322.242975] evdev_ioctl_handler+0x144/0x1a0 [ 322.247395] evdev_ioctl+0x27/0x2e [ 322.250942] ? evdev_ioctl_compat+0x30/0x30 [ 322.255269] do_vfs_ioctl+0x1de/0x1720 [ 322.259162] ? rcu_is_watching+0x8c/0x150 [ 322.263320] ? ioctl_preallocate+0x300/0x300 [ 322.267730] ? __fget_light+0x2f7/0x440 [ 322.271708] ? fget_raw+0x20/0x20 [ 322.275165] ? putname+0xf2/0x130 [ 322.278627] ? rcu_read_lock_sched_held+0x108/0x120 [ 322.283655] ? kmem_cache_free+0x25c/0x2d0 [ 322.287900] ? __x64_sys_futex+0x47f/0x6a0 [ 322.292143] ? do_futex+0x27d0/0x27d0 [ 322.295949] ? security_file_ioctl+0x94/0xc0 [ 322.300360] ksys_ioctl+0xa9/0xd0 [ 322.303814] __x64_sys_ioctl+0x73/0xb0 [ 322.307710] do_syscall_64+0x1b9/0x820 [ 322.311600] ? finish_task_switch+0x1d3/0x890 [ 322.316111] ? syscall_return_slowpath+0x5e0/0x5e0 [ 322.321049] ? syscall_return_slowpath+0x31d/0x5e0 [ 322.325988] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 322.331364] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 322.336228] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 322.341520] RIP: 0033:0x455b29 [ 322.344691] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 322.363882] RSP: 002b:00007f2451247c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 322.371577] RAX: ffffffffffffffda RBX: 00007f24512486d4 RCX: 0000000000455b29 [ 322.378839] RDX: 0000000020013000 RSI: 00000000400445a0 RDI: 0000000000000015 [ 322.386099] RBP: 000000000072bf50 R08: 0000000000000000 R09: 0000000000000000 [ 322.393354] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 322.400606] R13: 00000000004bd250 R14: 00000000004cb350 R15: 0000000000000001 [ 323.103299] IPVS: ftp: loaded support on port[0] = 21 [ 323.460053] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.466451] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.473770] device bridge_slave_0 entered promiscuous mode [ 323.500240] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.506650] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.513942] device bridge_slave_1 entered promiscuous mode [ 323.541200] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 323.566891] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 323.637592] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 323.664923] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 323.773763] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 323.780914] team0: Port device team_slave_0 added [ 323.805974] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 323.813192] team0: Port device team_slave_1 added [ 323.838116] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 323.864862] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 323.891900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 323.919138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 324.152102] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.158485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.165161] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.171539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.013842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.096377] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 325.178870] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 325.185135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 325.192754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 325.268489] 8021q: adding VLAN 0 to HW filter on device team0 13:45:54 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x1, 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f00000000c0)={0x2, 0x0, [{}, {}]}) ioctl$KVM_GET_REG_LIST(r0, 0x400452c8, &(0x7f0000000080)=ANY=[@ANYBLOB="df020000000020c59f9b8a9cc45300001800000015"]) 13:45:54 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500002600000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:54 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x400, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000140)="55724fae02b7a4d669", 0x9, 0x8}], 0x0, &(0x7f0000000240)) 13:45:54 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="0401050005000003e8000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:54 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x400, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x80000) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000040)=0x2) syz_init_net_socket$llc(0x1a, 0x3, 0x0) semget$private(0x0, 0x2, 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a000000000340000000000003000600db40720746bd9b64e0000001000000000000000002000100000000000000000200000000030005000200000002000000e00000010000000000000000"], 0x50}, 0x1}, 0x0) 13:45:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCSSOFTCAR(r1, 0x5427, &(0x7f0000000000)=0xec03) 13:45:54 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x4, 0x80000) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000080)={{0x0, @broadcast=0xffffffff, 0x4e24, 0x2, 'wrr\x00', 0x4, 0x80, 0x2d}, {@multicast2=0xe0000002, 0x4e24, 0x7, 0x1, 0x2}}, 0x44) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='io\x00') sendfile(r2, r2, &(0x7f0000000440)=0x8000, 0x200) 13:45:54 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000980)=""/230, 0xe6}], 0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1, 0xfdfdffff00000000}) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) 13:45:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffe, 0x2000, &(0x7f0000008000/0x2000)=nil}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x200000, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) remap_file_pages(&(0x7f0000009000/0x4000)=nil, 0x4000, 0x0, 0x397, 0x80010) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0x80003, 0x0, [0x3, 0x0, 0x0, 0x0, 0x0, 0xc7e6]}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x9, 0x40040) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f00000001c0)={0x2, 'irlan0\x00', 0x1}, 0x18) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000001040)=ANY=[@ANYBLOB="06000000000000000000000000000000000000000000000000dfff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011760000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000d2000000000000000000000000000000000000000000000000000000000001"]) r4 = socket$inet6(0xa, 0x6, 0x0) unshare(0x2000400) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl(r5, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r6 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r4, 0x6) connect$inet(r6, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r6, 0x10d, 0xf, &(0x7f0000000180), &(0x7f0000000040)=0xffd8) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000080)={0x400, 0x7, 0x3, 0x4, 0x80}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:45:54 executing program 2: migrate_pages(0x0, 0x49, &(0x7f0000000980)=0x1, &(0x7f00000009c0)=0x5dd5) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x10000, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000040)) [ 325.860197] FAT-fs (loop3): invalid media value (0x00) [ 325.865696] FAT-fs (loop3): Can't find a valid FAT filesystem 13:45:54 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="0401050005000000f0ffff00ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(r0, 0x5423, &(0x7f0000000000)={0x19}) syz_open_dev$random(&(0x7f0000000100)='/dev/random\x00', 0x0, 0x60000) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000180)="295ee1311f16f477671070") ioctl$TCSETSW(r0, 0x5423, &(0x7f0000000080)) rt_sigreturn() r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x4, 0x8100) ioctl$TTUNGETFILTER(r2, 0x801054db, &(0x7f00000001c0)=""/124) ioctl$void(r0, 0xc004587f) [ 325.947573] FAT-fs (loop3): invalid media value (0x00) [ 325.953011] FAT-fs (loop3): Can't find a valid FAT filesystem 13:45:54 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000240)={0xffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000002c0)={0xf, 0x8, 0xfa00, {r1, 0x10}}, 0x10) write$vnet(r0, &(0x7f00000001c0)={0x1, {&(0x7f0000000080)=""/61, 0x3d, &(0x7f00000000c0)=""/210, 0x3, 0x4}}, 0x68) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000300)={0x5, 0x3}) accept4$inet(r0, &(0x7f0000000340)={0x0, 0x0, @loopback}, &(0x7f0000000380)=0x10, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x44, 0xa6, 0xa37, 0x1, 0x1, 0x0, [0x10]}, 0x2c) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000003c0)={'nr0\x00', 0x200}) 13:45:54 executing program 2: r0 = getpgid(0x0) sched_setaffinity(r0, 0x8, &(0x7f00009ad000)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000001080), 0x0, 0xffff) readv(r2, &(0x7f0000002600)=[{&(0x7f0000001040)=""/219, 0xdb}, {&(0x7f0000001140)=""/233, 0xe9}, {&(0x7f0000001240)=""/71, 0x47}, {&(0x7f00000012c0)=""/20, 0x14}, {&(0x7f0000001300)=""/227, 0xe3}, {&(0x7f0000001400)=""/228, 0xe4}, {&(0x7f0000001500)=""/47, 0x2f}, {&(0x7f0000001540)=""/78, 0x4e}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)}], 0xa) fcntl$lock(r2, 0x6, &(0x7f00000025c0)={0x2, 0x0, 0x0, 0x1, r0}) write(r2, &(0x7f0000335000), 0xfffffe19) readv(r1, &(0x7f0000119ff0)=[{&(0x7f0000000040)=""/4096, 0xfffffe99}], 0x1) 13:45:54 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000003400000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:54 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x400) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r2, 0x410, 0x70bd2d, 0x25dfdbfb, {0x8}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9800000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffffffffffc00}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}]}]}, 0x50}, 0x1}, 0x10) r3 = socket(0x10, 0x3, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000140)=0x1) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[]}, 0x1}, 0x0) bind$bt_sco(r3, &(0x7f0000000000)={0x1f, {0x5, 0x5bf9f733, 0x8, 0x2, 0x65}}, 0x8) write(r3, &(0x7f0000000080)="2400000052001f0014f9f407000904ff0200070208000100feffffff0800000000000006", 0x24) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x28800, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000240)=@ioapic={0x5, 0x40, 0x3, 0x9, 0x0, [{0x7fffffff, 0xffff, 0x1, [], 0x1}, {0x69, 0xb962, 0x8, [], 0x3f6}, {0x7, 0x3, 0x7fff, [], 0x93a}, {0x0, 0xff, 0x7fff, [], 0xfffffffffffffffe}, {0x9, 0x5, 0xfffffffffffffffc, [], 0x2}, {0x7, 0x2, 0x9}, {0x8, 0x7ff, 0x25, [], 0x27fc}, {0x2, 0xfffffffffffffffd, 0x1f, [], 0x1000}, {0x3, 0x9dd, 0x7ff, [], 0x1}, {0x1000, 0x1f, 0x8, [], 0x80000000}, {0x1, 0xffff, 0x6, [], 0x6}, {0x7, 0xe87, 0xb818, [], 0xfffffffffffffffa}, {0x4, 0xd7, 0xe0, [], 0x10000}, {0x4, 0x4, 0x0, [], 0x1}, {0x2, 0x8, 0x3, [], 0x2f9aab07}, {0x0, 0x6, 0x10000, [], 0xfff}, {0xc58, 0x78be, 0x4, [], 0x1f0}, {0x3, 0x4, 0x5, [], 0x100000001}, {0x9, 0x401, 0x9, [], 0x7}, {0x1f, 0x1, 0x2400000, [], 0xd7}, {0x101, 0x8, 0x32, [], 0x140}, {0x8, 0x20, 0x1, [], 0x5}, {0x1, 0x1, 0x8, [], 0x5}, {0x8, 0xdf, 0x8, [], 0x5}]}) 13:45:55 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="0401050005004a0000000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:55 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e24}}, 0x1, 0x8, 0x4, 0x4, 0x5}, &(0x7f00000006c0)=0x98) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000700)={r1, 0xffffffffffff7fff}, &(0x7f0000000780)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000480)={r2, 0x9}, &(0x7f00000004c0)=0x8) r3 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x20000) read(r3, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000140)={{0x40000000080}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x4010800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f000019ffe9)={0xc1}) r4 = dup(r3) getsockopt$inet6_buf(r4, 0x29, 0xce, &(0x7f0000000080)=""/66, &(0x7f0000000000)=0x42) getpeername$packet(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000540)=0x14) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000580)={@mcast1={0xff, 0x1, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @dev={0xfe, 0x80, [], 0xb}, 0xfffffffffffffffb, 0x3, 0x1, 0x100, 0x1ff, 0x200000, r5}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f0000000380)={{0x1, 0x1}, 0x1, 0x1000000000000b82, 0xaa5, {0x0, 0x2}, 0xfb2d, 0x4}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r4, 0xc0bc5310, &(0x7f00000002c0)={0x0, 0x0, 'client1\x00', 0x0, "ef203e537a87c900", "faf5678d77b33a3cc3176e0f1e193f9e25ce6a99eb22aaad0a355ab1ab0f8961"}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000200)) memfd_create(&(0x7f0000000100)='\x00', 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 13:45:55 executing program 1: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) r2 = getpgid(r1) sched_getaffinity(r2, 0x8, &(0x7f0000000040)) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x40000, 0x0) futimesat(r4, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={{}, {0x77359400}}) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") clone(0x0, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000100), &(0x7f0000000200)) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x10001, 0x4, 0x40008, 0x0, 0x10000}, &(0x7f0000000400)=0xffffffffffffff1e) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000280)={r6, 0x1, 0x10}, &(0x7f00000002c0)=0xc) accept4$vsock_stream(r4, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @host=0x2}, 0x10, 0x80000) read(r0, &(0x7f0000000200)=""/30, 0x1e) 13:45:55 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="04010500050000ffffffc000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001300090468fe0700000000000700ff3f03000000450001070000001419001a0004000200070000000000000000005d14a4e91ee438", 0x39}], 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) getpid() r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x80, 0x0) ioctl$void(r1, 0x5451) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000140)=""/171) [ 326.736504] FAULT_FLAG_ALLOW_RETRY missing 30 [ 326.741130] CPU: 1 PID: 22133 Comm: syz-executor6 Not tainted 4.18.0-rc1+ #111 [ 326.748500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 326.757860] Call Trace: [ 326.760459] dump_stack+0x1c9/0x2b4 [ 326.764114] ? dump_stack_print_info.cold.2+0x52/0x52 [ 326.769302] ? kasan_check_write+0x14/0x20 [ 326.773534] ? do_raw_spin_lock+0xc1/0x200 [ 326.777767] handle_userfault.cold.32+0x47/0x62 [ 326.782434] ? userfaultfd_ioctl+0x4fd0/0x4fd0 [ 326.787006] ? debug_check_no_locks_freed+0x310/0x310 [ 326.792204] ? perf_event_update_userpage+0xd30/0xd30 [ 326.797394] ? print_usage_bug+0xc0/0xc0 [ 326.801447] ? print_usage_bug+0xc0/0xc0 [ 326.805503] ? __perf_event_task_sched_in+0x24f/0xbb0 [ 326.810710] ? userfaultfd_ctx_put+0x810/0x810 [ 326.815315] ? find_held_lock+0x36/0x1c0 [ 326.819400] ? __lock_acquire+0x7fc/0x5020 [ 326.823648] ? lock_downgrade+0x8f0/0x8f0 [ 326.827809] ? graph_lock+0x170/0x170 [ 326.831630] ? find_held_lock+0x36/0x1c0 [ 326.835709] ? lock_downgrade+0x8f0/0x8f0 [ 326.839871] ? kasan_check_read+0x11/0x20 [ 326.844026] ? do_raw_spin_unlock+0xa7/0x2f0 [ 326.848442] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 326.853044] ? kasan_check_write+0x14/0x20 [ 326.857286] ? do_raw_spin_lock+0xc1/0x200 [ 326.861535] __handle_mm_fault+0x3a0a/0x4460 [ 326.865954] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 326.870802] ? graph_lock+0x170/0x170 [ 326.874623] ? lock_downgrade+0x8f0/0x8f0 [ 326.878780] ? kasan_check_read+0x11/0x20 [ 326.882933] ? rcu_is_watching+0x8c/0x150 [ 326.887085] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 326.891508] ? handle_mm_fault+0x8c4/0xc80 [ 326.895758] handle_mm_fault+0x53e/0xc80 [ 326.899832] ? __handle_mm_fault+0x4460/0x4460 [ 326.904426] ? find_vma+0x34/0x190 [ 326.907973] __do_page_fault+0x620/0xe50 [ 326.912045] ? mm_fault_error+0x380/0x380 [ 326.916205] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 326.921236] ? graph_lock+0x170/0x170 [ 326.925042] do_page_fault+0xf6/0x8c0 [ 326.928846] ? vmalloc_sync_all+0x30/0x30 [ 326.932998] ? find_held_lock+0x36/0x1c0 [ 326.937074] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 326.941928] page_fault+0x1e/0x30 [ 326.945392] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 326.951008] Code: 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f [ 326.970386] RSP: 0018:ffff8801d22f77f0 EFLAGS: 00010202 [ 326.975762] RAX: 0000000000000004 RBX: 0000000000000004 RCX: 0000000000000004 [ 326.983034] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff8801d22f7890 [ 326.990308] RBP: ffff8801d22f7828 R08: ffffed003a45ef13 R09: ffffed003a45ef12 [ 326.997577] R10: ffffed003a45ef12 R11: 0000000000000003 R12: 0000000020013004 [ 327.004863] R13: 0000000020013000 R14: ffff8801d22f7890 R15: 00007ffffffff000 [ 327.012174] ? _copy_from_user+0x10d/0x150 [ 327.016430] evdev_do_ioctl+0xb69/0x21a0 [ 327.020514] ? lock_downgrade+0x8f0/0x8f0 [ 327.024682] ? str_to_user+0x90/0x90 [ 327.028413] ? do_futex+0x249/0x27d0 [ 327.032134] ? rcu_is_watching+0x8c/0x150 [ 327.036298] ? graph_lock+0x170/0x170 [ 327.040108] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 327.044536] ? find_held_lock+0x36/0x1c0 [ 327.048619] ? lock_downgrade+0x8f0/0x8f0 [ 327.052787] ? kasan_check_read+0x11/0x20 [ 327.056943] ? rcu_is_watching+0x8c/0x150 [ 327.061098] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 327.065533] ? __fget+0x414/0x670 [ 327.069020] evdev_ioctl_handler+0x144/0x1a0 [ 327.073450] evdev_ioctl+0x27/0x2e [ 327.077002] ? evdev_ioctl_compat+0x30/0x30 [ 327.081332] do_vfs_ioctl+0x1de/0x1720 [ 327.085234] ? rcu_is_watching+0x8c/0x150 [ 327.089393] ? ioctl_preallocate+0x300/0x300 [ 327.093807] ? __fget_light+0x2f7/0x440 [ 327.097798] ? fget_raw+0x20/0x20 [ 327.101256] ? putname+0xf2/0x130 [ 327.104719] ? rcu_read_lock_sched_held+0x108/0x120 [ 327.109749] ? kmem_cache_free+0x25c/0x2d0 [ 327.113996] ? __x64_sys_futex+0x47f/0x6a0 [ 327.118248] ? do_futex+0x27d0/0x27d0 [ 327.122055] ? security_file_ioctl+0x94/0xc0 [ 327.126475] ksys_ioctl+0xa9/0xd0 [ 327.129937] __x64_sys_ioctl+0x73/0xb0 [ 327.133947] do_syscall_64+0x1b9/0x820 [ 327.137845] ? syscall_return_slowpath+0x5e0/0x5e0 [ 327.142782] ? syscall_return_slowpath+0x31d/0x5e0 [ 327.147722] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 327.153095] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 327.157960] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 327.163160] RIP: 0033:0x455b29 [ 327.166345] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 13:45:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCSSOFTCAR(r1, 0x545d, &(0x7f0000000000)=0xec03) 13:45:55 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000006000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 327.185700] RSP: 002b:00007f2451247c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 327.193513] RAX: ffffffffffffffda RBX: 00007f24512486d4 RCX: 0000000000455b29 [ 327.200797] RDX: 0000000020013000 RSI: 00000000400445a0 RDI: 0000000000000015 [ 327.208080] RBP: 000000000072bf50 R08: 0000000000000000 R09: 0000000000000000 [ 327.215360] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 327.222726] R13: 00000000004bd250 R14: 00000000004cb350 R15: 0000000000000001 13:45:56 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000980)=""/230, 0xe6}], 0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1, 0x4000000000000000}) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) 13:45:56 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x24080) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f0000000040)) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000a77ff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x10f, 0x3, 0x0, 0x4) sendmsg$unix(r1, &(0x7f00000003c0)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000100)="ba64202e722224c179fad5c261b7260318ac28a7ed7c83db08b40ec32ec30b71befbf48b728e7652bb8f2194b27b8a108fe0834e9d613f958f129880b0a99c4e80d8528bd4812a1bdc09edd8dcb2b4e280b252b36f6ddb1cab8148609aba99b3c25a73ba213e999fe328d7da938268418ae15b0d26118fec73b3b6e8022adaa5c5b0063e85331b0b7da3cabc37a40c93edc7ac83a46248dbd3dd1a863c6de3ea754eb56619f4339f4c3a5f4dc888a0f9062a98a8b48dc0876ad03eccf39cae82e95de168c646949548", 0xc9}, {&(0x7f0000000200)="c28ec06d08d4fe6c919199c6be768d3493acfab2236e8a7e5b31611d7f26507bded1d2254e8c37a01bed937b6be11b288891189bbd8fe2e2ec4e364fcef1b9c3ebd094f3b853348bb9e4680f59573d52b8d885a6ddc8dbae3fe3f14a7d9351034e9a80d026ebe67b7c418753f3ad2efd7af7891ca5d67266195577bf01992281a6f4ba47c55b44bd6f481bc0dd3a4c7f102ffb89a3fbe06799ac867159a2793c3c87d62b1f52f432599ebd15ecd296f4936c35bcc21c318ec262330477c6f64e0699277f547ea02445df29da", 0xcc}, {&(0x7f0000000300)="886fc35e1e8e6c3a69e13be27a3125a26eb86c9c8288c56bbeec85e1138413e4e024a0e574cd3c0d8ebb", 0x2a}, {&(0x7f0000000340)="ec178aafe218928150459591e65b9dabc52e6af5", 0x14}], 0x4, 0x0, 0x0, 0x20040810}, 0x4000) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x3) 13:45:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8000000004) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x181080, 0x0) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa8000000000000008000f0fffeffe809000000fff5dd000000090001000b0aa8f7410400000000fcff", 0x58}], 0x1) 13:45:56 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="040105000500400300000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:56 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000400000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) connect$netlink(r0, &(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x2400000}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [], 0xaa}}]}, 0x2c}, 0x1}, 0x0) 13:45:56 executing program 4: syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000040)="000100000008000081000000c9030000f4000204000000000000000000000000002000000000000040350ce9943df0256e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00ba5689c41d5edbc92eb564c301e3bec0e851e96e0ec6d9a3f225d0627eba7025129076c538136731394770ccd10fb39cdf6396ceb8a61a400771f6cc1df6aa6ad3a2f83d0a39885fb4ba077397"]) r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x40, 0x80040) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x85b, 0x4) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) [ 327.665531] netlink: 'syz-executor2': attribute type 2 has an invalid length. [ 327.669229] EXT4-fs (loop4): invalid inodes per group: 8192 [ 327.669229] 13:45:56 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000731ac0ff000000000000000000000000950000000000c2b1770f43d85c8ab720231295006daa20866d9d38d875d60b6088968500f3c2f6953df6dc7ae2d8d4627f1c8a3b15547f9c8a00b40b5f67a733aa0780898068911187f5aab5efeaa93514dc0e516aa08c2ab9afdc7b78"], &(0x7f0000000000)="47504cc000", 0x8, 0x1ac, &(0x7f00001a7f05)=""/251}, 0x48) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000014c0)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000001500)={@remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0xa}, r1}, 0xc) 13:45:56 executing program 3: unshare(0x64000400) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) fadvise64(r1, 0x0, 0x9, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x6}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, {0x0, @random="24d5b62a824b"}, 0x0, {0x2, 0x0, @rand_addr}, 'syzkaller0\x00'}) 13:45:56 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r2 = syz_open_pts(0xffffffffffffff9c, 0x82) r3 = memfd_create(&(0x7f0000000200)='posix_acl_accessprocvmnet1em0-vboxnet0cpuset\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f0000000240)={{0x1, 0x1, 0x1, 0x3, 0x4}, 0xee, 0x80, 0x80000000}) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000000)=""/113) r4 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendto(r4, &(0x7f0000000100), 0x0, 0xffffffffffffffff, &(0x7f0000000400)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "2614c485abea76768d933995167dba93b3935f0f50e0b148a7c3d2fa16020ed988e6cbd6fdbbdc7bb3a944ec43dace33ecb7acf3f73576e16d13d7d2268a8b"}, 0x80) recvmsg(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=""/50, 0x8}, 0x0) sendto(r4, &(0x7f0000001640)="13", 0x1, 0x0, &(0x7f0000002a80)=@hci={0x1f}, 0x80) 13:45:56 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000000001100ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 327.783369] EXT4-fs (loop4): invalid inodes per group: 8192 [ 327.783369] 13:45:56 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, &(0x7f00000003c0)=@in={0x0, 0x0, @multicast1}, &(0x7f0000000ac0)=0x80, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) r4 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r3, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r5, 0x5452, &(0x7f0000b28000)=0x3c) fcntl$setsig(r5, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r6}], 0x3f, 0xfffffffffffffff8) r7 = dup2(r5, r6) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040)=0x2, 0x4) fcntl$setown(r7, 0x8, r4) tkill(r4, 0x16) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) recvfrom$llc(r2, &(0x7f0000000080)=""/74, 0x4a, 0x2002, 0x0, 0x0) 13:45:56 executing program 1: mkdir(&(0x7f0000000300)='./control\x00', 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) unlink(&(0x7f0000000180)='./control/file0\x00') write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ftruncate(r2, 0x0) dup2(r3, r2) rmdir(&(0x7f0000000040)='./control\x00') close(r1) syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x1ef0000, 0x0) 13:45:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCSSOFTCAR(r1, 0x540b, &(0x7f0000000000)=0xec03) [ 327.921561] IPVS: ftp: loaded support on port[0] = 21 13:45:56 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000000000200ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:56 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="040105000500f0ffff000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 328.554609] FAULT_FLAG_ALLOW_RETRY missing 30 [ 328.559261] CPU: 1 PID: 22224 Comm: syz-executor6 Not tainted 4.18.0-rc1+ #111 [ 328.566614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 328.575973] Call Trace: [ 328.578567] dump_stack+0x1c9/0x2b4 [ 328.582191] ? dump_stack_print_info.cold.2+0x52/0x52 [ 328.587389] ? kasan_check_write+0x14/0x20 [ 328.591634] ? do_raw_spin_lock+0xc1/0x200 [ 328.595878] handle_userfault.cold.32+0x47/0x62 [ 328.600565] ? userfaultfd_ioctl+0x4fd0/0x4fd0 [ 328.605161] ? debug_check_no_locks_freed+0x310/0x310 [ 328.610373] ? print_usage_bug+0xc0/0xc0 [ 328.614437] ? print_usage_bug+0xc0/0xc0 [ 328.618500] ? graph_lock+0x170/0x170 [ 328.622308] ? userfaultfd_ctx_put+0x810/0x810 [ 328.626899] ? find_held_lock+0x36/0x1c0 [ 328.630973] ? __lock_acquire+0x7fc/0x5020 [ 328.635361] ? lock_downgrade+0x8f0/0x8f0 [ 328.639601] ? graph_lock+0x170/0x170 [ 328.643419] ? find_held_lock+0x36/0x1c0 [ 328.647494] ? lock_downgrade+0x8f0/0x8f0 [ 328.651654] ? kasan_check_read+0x11/0x20 [ 328.655802] ? do_raw_spin_unlock+0xa7/0x2f0 [ 328.660228] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 328.664818] ? kasan_check_write+0x14/0x20 [ 328.669056] ? do_raw_spin_lock+0xc1/0x200 [ 328.673309] __handle_mm_fault+0x3a0a/0x4460 [ 328.677731] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 328.682577] ? graph_lock+0x170/0x170 [ 328.686397] ? lock_downgrade+0x8f0/0x8f0 [ 328.690562] ? kasan_check_read+0x11/0x20 [ 328.694713] ? rcu_is_watching+0x8c/0x150 [ 328.698865] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 328.703284] ? handle_mm_fault+0x8c4/0xc80 [ 328.707533] handle_mm_fault+0x53e/0xc80 [ 328.711600] ? __handle_mm_fault+0x4460/0x4460 [ 328.716195] ? find_vma+0x34/0x190 [ 328.719741] __do_page_fault+0x620/0xe50 [ 328.723808] ? mm_fault_error+0x380/0x380 [ 328.727965] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 328.732988] ? graph_lock+0x170/0x170 [ 328.736822] do_page_fault+0xf6/0x8c0 [ 328.740628] ? vmalloc_sync_all+0x30/0x30 [ 328.744789] ? find_held_lock+0x36/0x1c0 [ 328.748864] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 328.753718] page_fault+0x1e/0x30 [ 328.757188] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 328.762807] Code: 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f [ 328.782193] RSP: 0018:ffff8801746ff7f0 EFLAGS: 00010202 [ 328.787569] RAX: 0000000000000004 RBX: 0000000000000004 RCX: 0000000000000004 [ 328.794852] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff8801746ff890 [ 328.802131] RBP: ffff8801746ff828 R08: ffffed002e8dff13 R09: ffffed002e8dff12 [ 328.809404] R10: ffffed002e8dff12 R11: 0000000000000003 R12: 0000000020013004 [ 328.816673] R13: 0000000020013000 R14: ffff8801746ff890 R15: 00007ffffffff000 [ 328.823975] ? _copy_from_user+0x10d/0x150 [ 328.828226] evdev_do_ioctl+0xb69/0x21a0 [ 328.832307] ? lock_downgrade+0x8f0/0x8f0 [ 328.836466] ? str_to_user+0x90/0x90 [ 328.840194] ? do_futex+0x249/0x27d0 [ 328.843936] ? rcu_is_watching+0x8c/0x150 [ 328.848088] ? graph_lock+0x170/0x170 [ 328.851892] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 328.856317] ? find_held_lock+0x36/0x1c0 [ 328.860392] ? lock_downgrade+0x8f0/0x8f0 [ 328.864547] ? kasan_check_read+0x11/0x20 [ 328.868700] ? rcu_is_watching+0x8c/0x150 [ 328.872851] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 328.877274] ? __fget+0x414/0x670 [ 328.880746] evdev_ioctl_handler+0x144/0x1a0 [ 328.885162] evdev_ioctl+0x27/0x2e [ 328.888712] ? evdev_ioctl_compat+0x30/0x30 [ 328.893040] do_vfs_ioctl+0x1de/0x1720 [ 328.896940] ? rcu_is_watching+0x8c/0x150 [ 328.901098] ? ioctl_preallocate+0x300/0x300 [ 328.905511] ? __fget_light+0x2f7/0x440 [ 328.909488] ? fget_raw+0x20/0x20 [ 328.912944] ? putname+0xf2/0x130 [ 328.916407] ? rcu_read_lock_sched_held+0x108/0x120 [ 328.921430] ? kmem_cache_free+0x25c/0x2d0 [ 328.925698] ? __x64_sys_futex+0x47f/0x6a0 [ 328.929942] ? do_futex+0x27d0/0x27d0 [ 328.933744] ? security_file_ioctl+0x94/0xc0 [ 328.938158] ksys_ioctl+0xa9/0xd0 [ 328.941617] __x64_sys_ioctl+0x73/0xb0 [ 328.945513] do_syscall_64+0x1b9/0x820 [ 328.949410] ? syscall_return_slowpath+0x5e0/0x5e0 [ 328.954346] ? syscall_return_slowpath+0x31d/0x5e0 [ 328.959281] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 328.964749] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 328.969603] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 328.974793] RIP: 0033:0x455b29 [ 328.977978] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 328.997369] RSP: 002b:00007f2451247c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 329.005086] RAX: ffffffffffffffda RBX: 00007f24512486d4 RCX: 0000000000455b29 [ 329.012351] RDX: 0000000020013000 RSI: 00000000400445a0 RDI: 0000000000000015 [ 329.019618] RBP: 000000000072bf50 R08: 0000000000000000 R09: 0000000000000000 [ 329.026887] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 329.034156] R13: 00000000004bd250 R14: 00000000004cb350 R15: 0000000000000001 13:45:58 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000980)=""/230, 0xe6}], 0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1, 0xfdfdffff}) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) 13:45:58 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000011000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:58 executing program 3: r0 = socket$inet(0x15, 0x5, 0x0) getuid() syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x7, 0x200040) bind$inet(r0, &(0x7f000001bff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f0000024ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f0000001480)={0x0, 0x11, &(0x7f0000000040)=[{&(0x7f0000000000), 0xffbf}], 0x1, &(0x7f0000000180)}, 0x0) recvmsg(r0, &(0x7f0000001a40)={&(0x7f0000000380)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x7, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/13}, {&(0x7f0000000100)=""/219}, {&(0x7f0000000200)=""/185}, {&(0x7f00000002c0)=""/105}], 0x18c}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0xe, 0x4, 0x488, 0xffffffff, 0x268, 0x3b8, 0x0, 0xffffffff, 0xffffffff, 0x3b8, 0x3b8, 0x3b8, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @loopback={0x0, 0x1}, [0xffffffff, 0x0, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xff, 0xff000000], 'ip6tnl0\x00', 'ifb0\x00', {}, {0xff}, 0x5e, 0x5, 0xbb68566d714afbe7, 0x1e79a00f2eb836be}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0x6, 0x4, 0x0, [0x8de9, 0x3, 0x101, 0x4000000000000000, 0x5, 0xc47, 0x3, 0xd9d, 0x1, 0x40, 0x0, 0x80000001, 0x6, 0x20, 0x9, 0x3], 0x6}}, @common=@icmp6={0x28, 'icmp6\x00', 0x0, {0x11, 0x2, 0x4}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@loopback={0x0, 0x1}, @dev={0xfe, 0x80, [], 0x1d}, [0xff000000, 0xffffffff], [0xffffff00, 0xffffff00, 0xff, 0xffffffff], 'erspan0\x00', 'dummy0\x00', {}, {}, 0x29, 0xffffffff80000000, 0x0, 0x20}, 0x0, 0xc8, 0x108}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x3, 0x3, 0x7, 0x7, 0x459f, 0x59982e0a, 0x9, 0x1]}}}, {{@uncond, 0x0, 0x128, 0x150, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x4d5, 0x4d4, 0x8, 0xfffffffffffffe00, 0x3}}, @common=@frag={0x30, 'frag\x00', 0x0, {0x27, 0x200, 0x200, 0x5, 0x3}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0xfffffffffffff001}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4e8) 13:45:58 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="0401050005000001f4000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:58 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) r1 = accept4$inet6(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, @mcast2}, &(0x7f0000000280)=0x1c, 0x800) poll(&(0x7f00000002c0)=[{r0}, {r1, 0x8004}, {r0, 0xd200}, {r0, 0x100}, {r0, 0x210}], 0x5, 0x9) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000001c00)=@in={0x2, 0x4e23, @broadcast=0xffffffff}, 0x80, &(0x7f0000001e40), 0x0, &(0x7f0000001e80)}}], 0x2, 0x0) fstatfs(r0, &(0x7f0000000140)=""/224) ioctl$void(r0, 0xc0045c7f) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x500, 0x0) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000040)) 13:45:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCSSOFTCAR(r1, 0x80045432, &(0x7f0000000000)=0xec03) 13:45:58 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") socket$inet_udp(0x2, 0x2, 0x0) 13:45:58 executing program 2: r0 = socket$packet(0x11, 0xe, 0x300) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080), &(0x7f0000000700)=0x10) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x800, 0x7, &(0x7f0000000600)=[{&(0x7f00000000c0)="4f8f1a2d103f4778e192a7424913abc51d8489ed3727f4b23308dbdd6f1c434f92bf17cb1e7c19ad0490fbd625fbe806e691f83b1b", 0x35, 0x5}, {&(0x7f0000000140)="0cf5838337ebc00a223ef934dcc0da417ca1b119391a147008c6044d86a073303702351457efedf77076c98f485e8ef93db82d6b3b4cf5c3258fee10b8973ffc09cc26a95df4ca9f0ffea99d0a4aa6989a244b1f67f71cc4b2a8de955d336998499c79daa7a31c6330a1cbc955ea8970c663759662257fef729317bf2ceb9f585deab7c21c6956221cb970cb1d0387ba966a71a9c6da05eb51fff0a68bf384746068b3642f938add943a43f417bb441a7c6f2d4f2d3099cf18aa301b679d147e96b200bf1ed2c17db55b", 0xca, 0x4}, {&(0x7f0000000240)="1e3782f0db81647ff73e76440b635941d6c05a81868ed3aef75d5a4f151b424b38b0d67282e7731f90ea98d813d9d432bcee2fc799dc99e352ad8670b602bf19db2f804787d6872bb3620cbbbe6a8f5e3060a7feb2d749754c85af1d94c6b46714c7e74244193d40c9e6c1431a5b364ab4d6dc8e9a297fdb98ab35b99b68682776468b2a9cb8862fd70e8fdc8ac54bd5b6c57e465f2a4ab26fe83a12", 0x9c, 0x8}, {&(0x7f0000000300)="367e043f0719cd01c68c555e048f44f724e2380ca90219e3e1dc92ac0a7e7086f6649be59514375df83718aa4af837e2382e466d895f14f7a99d2d941a56fe7a590f3a5a82af3cb9097d3ad6dde0d2e2fda99a8b95d70ca09bd4913db7ffb7e7973c0c062741556a4ef897b2a690c27a9513fce2f3ea95da7951ef779f3df4cc4fb474310739434f82d2d12bf664f0de14b08d786d20f2b78e2501ace9c587d6f6fa0797877b699b2dff76d0e50bcaa339b69617f1b53bf3aa849d5111d1a8430b6d1b376036ad737962519da192d7310a36d40430085e46ff", 0xd9}, {&(0x7f0000000400)="bee2742c22bbf61b431708cb33751cfacac3165cc3a96ed0426c9d6406c87767deb760749a53797436c0b2bf69827b45ee8e6ef136788f96900eebe457424771635f2f2ecfce9208f39a73d2a8144b973054596684a412e1fa0381be42e41d83019f2563323b08f28c06d1972c64f3785500b256bdb35008825f68c447a44448795fce1a7b076b245fc8bf319515e96ea9b4a5632944fac6356cfc1f6c3dfa34235bee02ce45e98581054473ecffa5", 0xaf, 0x200}, {&(0x7f00000004c0)="8643998d154573d31e2e41e1264785cb23d3f5c2162b8078889614cdc8143cd64ce0b758c06d04434c941538fa96e8f3b237b5e8f692e89103c592fbefe6589407c38f7d94e8da42aea38d1e4823c1f3f71e12481bdd14fb9f7658be0d0f74687d8bf919c7e50ea59d4151999d87770c7a8c01", 0x73, 0x7f}, {&(0x7f0000000540)="8eaaeae7d82992cb8767277d49628833a7ab32005e51d9aa6a222e0c182300fd89ae0a687ac7c28f02dcf91f5bd6c1cc0de0955bb2a1bd85c8cd94f8a99bca61c97015a2244205d93f1b0f3d3e29f65a3fb9708ab41795d7bd6d538c9c682ab26b781c94ea4d00f274cab0059ce0d345993a7760a2f2fd4d164618a41f33626ac87761e33c9323ae9a5fcaea7afeb76ad9", 0x91, 0xfd9}], 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c6572726f72733d72656d6f756e742d726f2c616c6c0200000074696d653d3334322c0090f72be52bc36c02262d873487b4e1b73ac3032829a716042cda94ba73f8d8b8575e30058b691678811c20bf32e164eaf19a7def46897910957c02caffd3afb2df53d8688a52c36ab6fec38f165a03b799a89e8a832cb7644c7531ff20442580bb15af9afdffc859e03b47ae9ddde774c41ddffb9ccc352cab1edf8a419d"]) syz_open_dev$mice(&(0x7f00000006c0)='/dev/input/mice\x00', 0x0, 0x40000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x1010000004006, 0x4) 13:45:58 executing program 3: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f0000000080)='./control/file1\x00'}, 0x10) rmdir(&(0x7f00000001c0)='./control\x00') umount2(&(0x7f0000000040)='./control/file1\x00', 0x0) close(r1) chdir(&(0x7f0000000140)='./file0\x00') 13:45:58 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500001100000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:58 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket(0x16, 0x8000a, 0x3) getsockopt(r1, 0x200100000114, 0x2718, &(0x7f0000000000)=""/1, &(0x7f0000000080)=0x1) 13:45:58 executing program 1: syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_void(r0, 0x29, 0x30, 0x0, 0x300) r1 = getpgrp(0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) getresgid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={r1, r2, r3}, 0xc) 13:45:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000797ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x20000000002287, &(0x7f0000000000)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x200000, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000340)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000200)={{0x7, 0x2, 0x7, 0x8000, 'syz0\x00', 0x8}, 0x3, 0x100, 0x6, r2, 0x3, 0x7, 'syz1\x00', &(0x7f00000001c0)=['wlan1eth0\x00', '/dev/cuse\x00', 'lo:/em0%wlan0\x00'], 0x22, [], [0xfffffffffffffff7, 0x5, 0x80000001, 0x2]}) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000080)=""/255) 13:45:58 executing program 1: capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) r0 = perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x80000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x3000, 0xa0, &(0x7f0000ffc000/0x3000)=nil) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000380)) dup2(r0, r0) r2 = accept(r0, 0x0, &(0x7f00000003c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000140)=0xffffff5f) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = geteuid() stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getpgid(0xffffffffffffffff) r8 = getpid() shmctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x3ff, r3, r4, r5, r6, 0x108, 0x6}, 0x1e, 0x3, 0x8e, 0x98a, r7, r8, 0x4}) 13:45:58 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="04010500050000000001f400ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:58 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="0401050005ffffffc0000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 330.365547] FAULT_FLAG_ALLOW_RETRY missing 30 [ 330.370172] CPU: 0 PID: 22318 Comm: syz-executor6 Not tainted 4.18.0-rc1+ #111 [ 330.377533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 330.386884] Call Trace: [ 330.389474] dump_stack+0x1c9/0x2b4 [ 330.393106] ? dump_stack_print_info.cold.2+0x52/0x52 [ 330.398301] ? kasan_check_write+0x14/0x20 [ 330.402548] ? do_raw_spin_lock+0xc1/0x200 [ 330.406793] handle_userfault.cold.32+0x47/0x62 [ 330.411476] ? userfaultfd_ioctl+0x4fd0/0x4fd0 [ 330.416074] ? debug_check_no_locks_freed+0x310/0x310 [ 330.421281] ? perf_event_update_userpage+0xd30/0xd30 [ 330.426480] ? print_usage_bug+0xc0/0xc0 [ 330.430547] ? print_usage_bug+0xc0/0xc0 [ 330.434604] ? __perf_event_task_sched_in+0x24f/0xbb0 [ 330.439800] ? userfaultfd_ctx_put+0x810/0x810 [ 330.444371] ? find_held_lock+0x36/0x1c0 [ 330.448439] ? __lock_acquire+0x7fc/0x5020 [ 330.452681] ? lock_downgrade+0x8f0/0x8f0 [ 330.456828] ? graph_lock+0x170/0x170 [ 330.460621] ? find_held_lock+0x36/0x1c0 [ 330.464691] ? lock_downgrade+0x8f0/0x8f0 [ 330.468840] ? kasan_check_read+0x11/0x20 [ 330.472986] ? do_raw_spin_unlock+0xa7/0x2f0 [ 330.477386] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 330.481969] ? kasan_check_write+0x14/0x20 [ 330.486192] ? do_raw_spin_lock+0xc1/0x200 [ 330.490418] __handle_mm_fault+0x3a0a/0x4460 [ 330.494834] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 330.499706] ? graph_lock+0x170/0x170 [ 330.503515] ? lock_downgrade+0x8f0/0x8f0 [ 330.507833] ? kasan_check_read+0x11/0x20 [ 330.511981] ? rcu_is_watching+0x8c/0x150 [ 330.516133] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 330.520531] ? handle_mm_fault+0x8c4/0xc80 [ 330.524757] handle_mm_fault+0x53e/0xc80 [ 330.528810] ? __handle_mm_fault+0x4460/0x4460 [ 330.533390] ? find_vma+0x34/0x190 [ 330.537713] __do_page_fault+0x620/0xe50 [ 330.541791] ? mm_fault_error+0x380/0x380 [ 330.545944] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 330.550950] ? graph_lock+0x170/0x170 [ 330.554760] do_page_fault+0xf6/0x8c0 [ 330.558549] ? vmalloc_sync_all+0x30/0x30 [ 330.562687] ? find_held_lock+0x36/0x1c0 [ 330.566741] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 330.571585] page_fault+0x1e/0x30 [ 330.575034] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 330.580641] Code: 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f [ 330.599872] RSP: 0018:ffff88017a5577f0 EFLAGS: 00010202 [ 330.605223] RAX: 0000000000000004 RBX: 0000000000000004 RCX: 0000000000000004 [ 330.612479] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff88017a557890 [ 330.619741] RBP: ffff88017a557828 R08: ffffed002f4aaf13 R09: ffffed002f4aaf12 [ 330.626998] R10: ffffed002f4aaf12 R11: 0000000000000003 R12: 0000000020013004 [ 330.634260] R13: 0000000020013000 R14: ffff88017a557890 R15: 00007ffffffff000 [ 330.641533] ? _copy_from_user+0x10d/0x150 [ 330.645780] evdev_do_ioctl+0xb69/0x21a0 [ 330.649850] ? lock_downgrade+0x8f0/0x8f0 [ 330.654003] ? str_to_user+0x90/0x90 [ 330.657724] ? do_futex+0x249/0x27d0 [ 330.661438] ? rcu_is_watching+0x8c/0x150 [ 330.665592] ? graph_lock+0x170/0x170 [ 330.669405] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 330.673822] ? find_held_lock+0x36/0x1c0 [ 330.677875] ? lock_downgrade+0x8f0/0x8f0 [ 330.682020] ? kasan_check_read+0x11/0x20 [ 330.686160] ? rcu_is_watching+0x8c/0x150 [ 330.690288] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 330.694692] ? __fget+0x414/0x670 [ 330.698138] evdev_ioctl_handler+0x144/0x1a0 [ 330.702543] evdev_ioctl+0x27/0x2e [ 330.706089] ? evdev_ioctl_compat+0x30/0x30 [ 330.710394] do_vfs_ioctl+0x1de/0x1720 [ 330.714263] ? rcu_is_watching+0x8c/0x150 [ 330.718398] ? ioctl_preallocate+0x300/0x300 [ 330.722801] ? __fget_light+0x2f7/0x440 [ 330.726756] ? fget_raw+0x20/0x20 [ 330.730192] ? putname+0xf2/0x130 [ 330.733637] ? rcu_read_lock_sched_held+0x108/0x120 [ 330.738651] ? kmem_cache_free+0x25c/0x2d0 [ 330.742873] ? __x64_sys_futex+0x47f/0x6a0 [ 330.747096] ? do_futex+0x27d0/0x27d0 [ 330.750896] ? security_file_ioctl+0x94/0xc0 [ 330.755308] ksys_ioctl+0xa9/0xd0 [ 330.758761] __x64_sys_ioctl+0x73/0xb0 [ 330.762662] do_syscall_64+0x1b9/0x820 [ 330.766541] ? syscall_return_slowpath+0x5e0/0x5e0 [ 330.771463] ? syscall_return_slowpath+0x31d/0x5e0 [ 330.776395] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 330.781775] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 330.786657] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 330.791851] RIP: 0033:0x455b29 [ 330.795037] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 330.814217] RSP: 002b:00007f2451247c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 330.821914] RAX: ffffffffffffffda RBX: 00007f24512486d4 RCX: 0000000000455b29 [ 330.829168] RDX: 0000000020013000 RSI: 00000000400445a0 RDI: 0000000000000015 [ 330.836422] RBP: 000000000072bf50 R08: 0000000000000000 R09: 0000000000000000 [ 330.843676] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 330.851022] R13: 00000000004bd250 R14: 00000000004cb350 R15: 0000000000000001 13:45:59 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000980)=""/230, 0xe6}], 0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1, 0x40000000}) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) 13:45:59 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0x0, 0x0}) mknod$loop(&(0x7f0000000080)='./file0\x00', 0xc108, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x5, 0x9, &(0x7f0000001800)=[{&(0x7f00000000c0)="5b773374b048957eb9f7e486ae06be2ac519e2d5bf4c9cb8a9268a1fc025e7ec0b605f107e769050faef90a2ea21c7befefd5108eaa3c1765f6cea51be3c3bd25d99430c417a922cfe22be4ca151d4d1f2829cf8e39cd7acdba2d90f540401e758293e2331223216e9b099d89543aca28a819c0e00dd68b67977a38246ce2be023565da47ea5dcf62e2aa887b07b5c7fc70cfcc5f4a9ad61d4f30ca7640400d9e64f3acae81df519b36820d3a0173c9dbeb067", 0xb3, 0x800}, {&(0x7f0000000280)="584ccd1a6ab123215c4f6f29850a6ab7d4136882ee5cd7ecb6b72b36b379c79a6e556d8470267a898a9ad9ee8d79b39c7c702abc930b83e7430e721129a585303c1e97c01cd8af1e0b0bb23168fa1181f864f0f6d60633e0bdc773b24c7de34acc831981f2b647e2d1b757a7ee438d8eb319bed43b85689836c50fbcee111a4453d288dd9ec47227fd73eb277e5629c720a3d556616c34c1149645a6883a580d8de1adb15c241d5801bc", 0xaa, 0x8001}, {&(0x7f0000000340)="df872e9ebd76b4553143763c6a6baf883041ac6ae462d855af7b469dee3cc061426bf81550017b8408e679ecad3701b2e5a37d514fdaf6785e7f77fcc838d36a2166d0d85011d248e771cdf51eaad8e4db770cce5593af34be1abcc9ea4873e84b1d2c2e1b29669652a006174c028e105fcc2422aa6ab22786dd7a25c161b3f42f9b69d026b45b2a3688d93ee15e9c633d21a32d4bda345442ad5ea084bc1bef788441223ff5238d6b7722b5cf", 0xad, 0xffffffffffffff81}, {&(0x7f0000000180)="e0300de954b8", 0x6, 0x5}, {&(0x7f0000000400)="c1b93eb892182ef6c6d04c05dfb7556b271c3d0ef4cf6c97225f1b577729fcc60fcd89f5601e466936354fbb08649b88b2d99fa9725c2bc4607f1fdfbb94a0d7777606f3184d582b5d5839b2fca895cb938ffecef42ae6823d65cc0d56d050ee3faabced4d7c1726dab3883ffbfc9c14c991585d42f51635e59babf9d85286b69500ed48be934f0b", 0x88, 0x1}, {&(0x7f00000004c0)="6c09bffa167342f47afe5a7d8ff73f1c907e018e6a63948d9d7594346c6c8f42132b41828bbfa80b7249cf31bfd3b2096dde93301e6f5f5bd5e8b16d3269c6b7f50882b90bf09c791f4f3b415fb4ffb39fdae053940230d68bdddf0f4bdc08e809e23564449c4492b7f1828c6da4e7207e694814b649be0c66c0621b52d25a9d2182ae3c43c8526b07bb6f796cc8760a73e976aa03801d67e1953ca79057750fea199fbfec9501124fae6447b6481ff85b718fe6b95d71e50f784143c9ec63d515938ebf58d8ab6ff4476feae7edccba7dd051fb273493", 0xd7, 0x8000}, {&(0x7f0000000600)="deaeefb3b2d2b96038a3957c047ba8e3d053fd80fe536df3889c9e703da939db8504e3dbb359ee04314782baed5558856d5f9ba87d70cbc97437f13ac5e93e7f6f5e3de8e6f043b94309e31283702cced1ae0c4191840744b1f2eb357c68c08697acea30e30b15e7beda4ce479a605d4e81ec5e0d2cadd3984ebed445aec3798da2aaca835e74437eef147a6c958bfc553063610508eab329733be08ce8efbb447eda28bf27f697045e9e1e6247d06c789398a53d4f09ff389f4e0f950d7082bb32b1716c18538d55f143f36c063ab47ed932b3cdeb410226d8a7164341b6f", 0xdf, 0x815}, {&(0x7f0000000700)="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", 0x1000, 0x6}, {&(0x7f0000001700)="cb5eae47d9c621256db58374a5ef4d021df09053808f225b27560bd76707369e347911ed5663a37837e643a35358d66b24a3cee275b1bfbce75f12d3c38167d0a2f2c24c3770a15b98e367beccb524bcfad7169d3e38fa9ea46c5613845f750006183463880bbb6ab07ee5694c9c67783c5835197d50007cdb4fd0113f34a0e348c1ee5281cf9aa0ab7e43245950a9752fe4d45f3ac6fc262efef46964611096697b7430d22275b4b596c37c5265fce0ca1e7c0db7407e1bb2137fc669b92a34f258096941299a0a50188df73d46a397372e55db5abcd455284822037e2a3a1227f119cb1943f8919b7bdc2df5b2194c552e884e7584aa4bc11a0b5e", 0xfc, 0x5}], 0x80000, &(0x7f00000001c0)=ANY=[@ANYBLOB="666d61736b3d3036322c74696d655f6f66667365743d352c6e6f636173652c1c916d655f6f6666ad04000000000000363d34fbba747a3d5554432c00"]) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000001ac0)={0x3, 0x6}) mq_open(&(0x7f0000001b00)='vfat\x00', 0x630d0673e2dc8b8d, 0x2, &(0x7f0000001b40)={0x7, 0xa55b, 0x5, 0x2, 0x100, 0x4, 0xa29, 0x4}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001940)={{{@in=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000001a40)=0xe8) getgroups(0x1, &(0x7f0000001a80)=[0x0]) chown(&(0x7f0000001900)='./file0\x00', r2, r3) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x2be}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0x31e, &(0x7f0000002a00)=[{&(0x7f0000002a40)="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", 0x1000}, {&(0x7f0000002900)="82bf31b51fce3493c53ceaf3913cfdf10a48dd92c158e74d8bd739ff348fdd29e2c875fe9c2922b8c9786489c0873d244a3e49f257ceb6226b6a1ed7fbb80cf5815d124f5d57c38672d4677e91bd4358acb07d1fca4baa1e999998e663950fdba9bd8b16faa6ec28b4931f84cbccb94ae65d2ce7e6d5fc6afb5384ba23569f58f4d25869d066eba785e7f2c64ca8f52eaba877e9917e68ecca7e437ab4b35bdd89a78da8062c0a1abb1d5ab9bf4c538d5102e6384fe17f35102a5fb689386bbe18835a049af4a1339df6d67c01a02467906d2bda97fe6adb71b7d8bd14c6ac74c5c265cc2659403776810c8193feedface6e1adc2e", 0xf5}], 0x2, &(0x7f0000000600)}}], 0x2, 0x2) 13:45:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x0, 0x90000) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000380)={0x3, &(0x7f0000000300)=[{0x0, 0x0, 0x9, 0x200}, {0x7f, 0xcea, 0x3, 0x2}, {0x9, 0x3301, 0x2, 0x480000000000000}]}) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x18}, 0x1}, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) ppoll(&(0x7f0000000440)=[{r1, 0x1000}], 0x1, &(0x7f00000004c0)={r2, r3+10000000}, &(0x7f0000000500)={0x8}, 0x8) r4 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x800, 0x10d000) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0xc4}, &(0x7f0000000100)=0x8) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000400)={'ifb0\x00', &(0x7f00000003c0)=@ethtool_rxfh={0x0, 0x7, 0xdd4, 0x2, 0x5, "2660ec", 0x40, [0x0, 0x2, 0x96d6, 0x7, 0x101, 0xfffffffffffffffa]}}) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000280)={r5, 0xfffffffffffffffb}, 0x8) 13:45:59 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000), &(0x7f00000000c0)=0x8) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x3c, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) syz_open_procfs(r2, &(0x7f0000000100)='pagemap\x00') 13:45:59 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000000002600ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCSSOFTCAR(r1, 0x5409, &(0x7f0000000000)=0xec03) 13:45:59 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="040105000500000026000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:45:59 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x18) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc0109207, &(0x7f0000000140)) 13:46:00 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="0401050005000003e8000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:00 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={0xffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000200)={0xa, 0x4, 0xfa00, {r2}}, 0xc) ioctl(r0, 0x4000008912, &(0x7f0000000040)="2957e1311f16f477671070") r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}, [], {0x95}}, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f000001b000)={r3, 0x0, 0xe, 0x9d, &(0x7f0000000000)="e460019234060dc106621abc86dd", &(0x7f00000000c0)=""/157, 0x20000000000028}, 0x28) 13:46:00 executing program 4: getsockname(0xffffffffffffff9c, &(0x7f0000000000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, &(0x7f0000000080)=0xfffffffffffffd86) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000340)={0x1, 0x1, 0x1, 0x5, 0x0, 0x10000, 0x4, 0x206bd466, 0x6, 0x8000, 0xfffd}, 0x38f) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp\x00', 0x0, 0x0) r2 = gettid() ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f00000000c0)={0x3, 0x9}) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000380)) r3 = getpgrp(0x0) kcmp(r2, r3, 0x0, r1, r1) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4400}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="140600001c0008012dbd7000fddbdf25150000003c618d0be104603b3d981b6c631fa4408fc1a12cf46490972498bbaaf429752032d087801c2cdd"], 0x14}, 0x1, 0x0, 0x0, 0x24040802}, 0x80) kcmp(r3, r2, 0x3, r1, r1) 13:46:00 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x20) fcntl$notify(r0, 0x0, 0x2) pselect6(0xfe13, &(0x7f0000000680), &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000380), &(0x7f0000000000)={&(0x7f00000003c0), 0x8}) 13:46:00 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000026000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x80, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)=0x6) listen(r0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x400000, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) 13:46:00 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="040105000500110000000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:00 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000140)="63392bcac787c4582622e2195729e606be1f1ca85c4d29d0976d2f9cdb9a7075b9df51c8767018b3db630badd09cbffc2655fccfc4aedf7a21432f0a4674e02b14f40c04808ef4636371a0a1af6fa1c16c5e028de4a9ba60b0d9bd7804f2c0b956b2c1337a083f2b602ff07a20a8ceb3be33f42f2ba8ab38d66d053416030eb65a2b0532c7f013061771484ac5be", 0x8e, 0xfffffffffffffffe) r1 = request_key(&(0x7f0000000200)='user\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000002c0)='bridge0\x00', 0xfffffffffffffffb) r2 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000003c0)="937ba2b701f042cfa6eef1cda62d4703b42fdb5f025009d3fc9a585d8300ec95492f6758ccd99248babfb638d9add080a2f32e11c765b23a8c17b75826210af8dc8f079c997c6f319e42289f7cb2170baeaaf7e543ee209ae1b359cf29825bd8a729f53a49ccf13f69398b84cb01fc863fee79555e2aad40f68a38c49e17c8e02d8cf589fd4a902a452984ad003423aaeb85f53af77257ce8b27085ed22402d6cf2994d8", 0xa4, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000480)={r0, r1, r2}, &(0x7f00000004c0)=""/172, 0xac, &(0x7f0000000640)={&(0x7f0000000580)={'michael_mic\x00'}, &(0x7f00000005c0)="d3e15888c63daa9f1ab0017516eb61e55e48589c79a04b2647029c26b4f1dcdb6810997da48ace7ecd2a2defd33b1b15d7e2110a172f4f2447cdf20193378c209d3ecf89d4ff011684c123d89c887252c054816ef588dcfd6468", 0x5a}) r3 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='\r\x00\x00\x00\x00\x00\x00\x00\x00"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']}) [ 331.617550] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 332.059624] FAULT_FLAG_ALLOW_RETRY missing 30 [ 332.064310] CPU: 1 PID: 22405 Comm: syz-executor6 Not tainted 4.18.0-rc1+ #111 [ 332.071674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 332.081030] Call Trace: [ 332.083627] dump_stack+0x1c9/0x2b4 [ 332.087265] ? dump_stack_print_info.cold.2+0x52/0x52 [ 332.092462] ? kasan_check_write+0x14/0x20 [ 332.096702] ? do_raw_spin_lock+0xc1/0x200 [ 332.100944] handle_userfault.cold.32+0x47/0x62 [ 332.105627] ? userfaultfd_ioctl+0x4fd0/0x4fd0 [ 332.110223] ? debug_check_no_locks_freed+0x310/0x310 [ 332.115420] ? perf_event_update_userpage+0xd30/0xd30 [ 332.120629] ? print_usage_bug+0xc0/0xc0 [ 332.124695] ? print_usage_bug+0xc0/0xc0 [ 332.128869] ? __perf_event_task_sched_in+0x24f/0xbb0 [ 332.134070] ? userfaultfd_ctx_put+0x810/0x810 [ 332.138663] ? find_held_lock+0x36/0x1c0 [ 332.142744] ? __lock_acquire+0x7fc/0x5020 [ 332.146990] ? lock_downgrade+0x8f0/0x8f0 [ 332.151137] ? graph_lock+0x170/0x170 [ 332.154951] ? find_held_lock+0x36/0x1c0 [ 332.159020] ? lock_downgrade+0x8f0/0x8f0 [ 332.163185] ? kasan_check_read+0x11/0x20 [ 332.167333] ? do_raw_spin_unlock+0xa7/0x2f0 [ 332.171739] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 332.176333] ? kasan_check_write+0x14/0x20 [ 332.180577] ? do_raw_spin_lock+0xc1/0x200 [ 332.184833] __handle_mm_fault+0x3a0a/0x4460 [ 332.189262] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 332.194116] ? graph_lock+0x170/0x170 [ 332.197942] ? lock_downgrade+0x8f0/0x8f0 [ 332.202110] ? kasan_check_read+0x11/0x20 [ 332.206266] ? rcu_is_watching+0x8c/0x150 [ 332.210421] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 332.214844] ? handle_mm_fault+0x8c4/0xc80 [ 332.219101] handle_mm_fault+0x53e/0xc80 [ 332.223187] ? __handle_mm_fault+0x4460/0x4460 [ 332.227779] ? find_vma+0x34/0x190 [ 332.231306] __do_page_fault+0x620/0xe50 [ 332.235376] ? mm_fault_error+0x380/0x380 [ 332.239508] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 332.244511] ? graph_lock+0x170/0x170 [ 332.248345] do_page_fault+0xf6/0x8c0 [ 332.252133] ? vmalloc_sync_all+0x30/0x30 [ 332.256288] ? find_held_lock+0x36/0x1c0 [ 332.260343] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 332.265218] page_fault+0x1e/0x30 [ 332.268663] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 332.274269] Code: 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f [ 332.293454] RSP: 0018:ffff8801c8b5f7f0 EFLAGS: 00010202 [ 332.298816] RAX: 0000000000000004 RBX: 0000000000000004 RCX: 0000000000000004 [ 332.306072] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff8801c8b5f890 [ 332.313339] RBP: ffff8801c8b5f828 R08: ffffed003916bf13 R09: ffffed003916bf12 [ 332.320594] R10: ffffed003916bf12 R11: 0000000000000003 R12: 0000000020013004 [ 332.327863] R13: 0000000020013000 R14: ffff8801c8b5f890 R15: 00007ffffffff000 [ 332.335140] ? _copy_from_user+0x10d/0x150 [ 332.339363] evdev_do_ioctl+0xb69/0x21a0 [ 332.343412] ? lock_downgrade+0x8f0/0x8f0 [ 332.347545] ? str_to_user+0x90/0x90 [ 332.351251] ? do_futex+0x249/0x27d0 [ 332.354965] ? rcu_is_watching+0x8c/0x150 [ 332.359109] ? graph_lock+0x170/0x170 [ 332.362912] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 332.367311] ? find_held_lock+0x36/0x1c0 [ 332.371362] ? lock_downgrade+0x8f0/0x8f0 [ 332.375496] ? kasan_check_read+0x11/0x20 [ 332.379626] ? rcu_is_watching+0x8c/0x150 [ 332.383757] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 332.388154] ? __fget+0x414/0x670 [ 332.391599] evdev_ioctl_handler+0x144/0x1a0 [ 332.395993] evdev_ioctl+0x27/0x2e [ 332.399521] ? evdev_ioctl_compat+0x30/0x30 [ 332.403832] do_vfs_ioctl+0x1de/0x1720 [ 332.407702] ? rcu_is_watching+0x8c/0x150 [ 332.411835] ? ioctl_preallocate+0x300/0x300 [ 332.416224] ? __fget_light+0x2f7/0x440 [ 332.420182] ? fget_raw+0x20/0x20 [ 332.423618] ? putname+0xf2/0x130 [ 332.427057] ? rcu_read_lock_sched_held+0x108/0x120 [ 332.432065] ? kmem_cache_free+0x25c/0x2d0 [ 332.436300] ? __x64_sys_futex+0x47f/0x6a0 [ 332.440519] ? do_futex+0x27d0/0x27d0 [ 332.444305] ? security_file_ioctl+0x94/0xc0 [ 332.448699] ksys_ioctl+0xa9/0xd0 [ 332.452135] __x64_sys_ioctl+0x73/0xb0 [ 332.456026] do_syscall_64+0x1b9/0x820 [ 332.459918] ? syscall_return_slowpath+0x5e0/0x5e0 [ 332.464833] ? syscall_return_slowpath+0x31d/0x5e0 [ 332.469753] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 332.475103] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 332.479933] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 332.485102] RIP: 0033:0x455b29 [ 332.488277] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 332.507454] RSP: 002b:00007f2451247c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 332.515150] RAX: ffffffffffffffda RBX: 00007f24512486d4 RCX: 0000000000455b29 [ 332.522414] RDX: 0000000020013000 RSI: 00000000400445a0 RDI: 0000000000000015 [ 332.529675] RBP: 000000000072bf50 R08: 0000000000000000 R09: 0000000000000000 [ 332.536939] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 332.544200] R13: 00000000004bd250 R14: 00000000004cb350 R15: 0000000000000001 13:46:01 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x100000010000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x8e, 0xfffffffffffffffb) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") dup3(r1, r2, 0xfffffffffffffffd) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc) 13:46:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x2, 0x7, 0x3ff, 0x741b, 0x0, 0xff, 0x4000, 0x8, 0x5, 0x1, 0xa066, 0x1, 0x401, 0x100000000, 0x401, 0x503, 0x8, 0xfffffffffffffff2, 0x1, 0x6, 0x800, 0x8, 0xffffffffffffffff, 0x0, 0x200, 0x7fff, 0x1, 0x3, 0x401, 0x1, 0x5, 0x100, 0x401, 0xb48, 0xfffffffffffffffd, 0x0, 0x0, 0x8, 0x6, @perf_config_ext={0xaeb4, 0x5}, 0x0, 0x6, 0x8aa, 0x3, 0x8, 0xffffffffffffffff, 0x40}, r2, 0xd, 0xffffffffffffff9c, 0x8) dup3(r0, r1, 0x0) 13:46:01 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000000000a00ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:01 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000980)=""/230, 0xe6}], 0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x6ebe, 0x103100) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x10c, r4, 0x810, 0x70bd2b, 0x25dfdbfe, {0x7}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2={0xff, 0x2, [], 0x1}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2=0xe0000002}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}, @IPVS_SVC_ATTR_AF={0x8, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local={0xfe, 0x80, [], 0xaa}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xff}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1}}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xe034}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000841}, 0x4000894) r5 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r6 = dup(r1) getsockopt$netlink(r6, 0x10e, 0x6, &(0x7f00000000c0)=""/26, &(0x7f0000000140)=0x1a) ioctl$EVIOCGMTSLOTS(r5, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x8000, 0x0) 13:46:01 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="0401050005f0000000000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCSSOFTCAR(r1, 0x5418, &(0x7f0000000000)=0xec03) 13:46:01 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x4, 0x2) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000180)={{{@in=@broadcast, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000100)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@mcast2, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@rand_addr}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'ifb0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000540)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffff9c, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000600)=0x14) clock_gettime(0x0, &(0x7f0000001c80)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000740)=""/218, 0xda}, {&(0x7f0000000840)=""/194, 0xc2}, {&(0x7f0000000940)=""/162, 0xa2}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x4, 0x0, 0x0, 0x2c82}, 0x2}, {{&(0x7f0000001a40)=@can={0x0, 0x0}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001ac0)=""/8, 0x8}], 0x1, &(0x7f0000001b40)=""/191, 0xbf, 0x1f}, 0x6}], 0x2, 0x0, &(0x7f0000001cc0)={r10, r11+30000000}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000001dc0)={'syzkaller0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1b, &(0x7f00000022c0)={@local, 0x0}, &(0x7f0000002300)=0x14) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f00000027c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x104000}, 0xc, &(0x7f0000002780)={&(0x7f0000001e00)=ANY=[@ANYBLOB="40040000", @ANYRES16=r2, @ANYBLOB="08002cbd7000fedbdf250000000008000100", @ANYRES32=r3, @ANYBLOB="3c00020038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004005177000008000100", @ANYRES32=r4, @ANYBLOB="a000020064000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b00000034000400040000fffcffffff0200090704000000d9000003ff0100000180f90020000000000000d3060000000400ff080200000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000300000008000100", @ANYRES32=r5, @ANYBLOB="f80002003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000000c00040072616e646f6d000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000800000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f616463617374000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000101000008000600", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="b001020040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r8, @ANYBLOB="08000700000000083c0001002400016c696e6bf42d5804cc5501000000d000e32900000000000008000300060000000400706d44e8b752f5444c15af6aa60419cd524b615fa3893027a07ba6a9c6daf30c9c9c1a25ce413aede7ca06c552ba1ffc6df444187d2a3b33812a164df7906cd7f1123af34cedccbbb8840dbe7ca0661f58c7f87b4b0b214e09a59816a8891bf02d38c01719156d6087684c84ad168b4fc1b4b70f50ec443bc806ed7bc823824a7357ba", @ANYRES32=r9, @ANYBLOB="3c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000000c0004001f0001000900000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000000008044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004006163746976656261636b75700000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000600000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004009ea78d1308000600", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="800002003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462616c616e636500"], 0x440}, 0x1}, 0x800) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000400)=0xfffffffffffffffe, &(0x7f0000000440)=0x4) ioctl$KDSETLED(r0, 0x4b32, 0x0) 13:46:01 executing program 1: r0 = socket$inet_sctp(0x2, 0x402000400000005, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x5}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000200)={r1, @in6={{0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, [], 0x1a}, 0x401}}}, 0x84) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000002000000ffffffff0000000000000000000000000000000014838e1e81eb659e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000092b7c264be464b2c00e0ffffff0000000000000000000100000002000000ac1414000000000000000000000000bf4ce8ded87f000000000000000000000000000000000000000000000000962d41512a4400000000000000000000000000000000000000000000000000000000000000000000004ab1db00000000000000000000000000000040000000000000000000000000000000000000000000000005000000000000000000000000000000"], 0x10c) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0xffffffffffffffff, 0x80003) 13:46:01 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) r0 = msgget$private(0x0, 0x420) msgrcv(r0, &(0x7f0000000140)={0x0, ""/48}, 0x38, 0x1, 0x800) 13:46:01 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x8000, 0x0) write$fuse(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2800000001000000000000000000000007000000000017009f010000000000000080000000000000"], 0x28) r1 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f00000000c0)=0x2) close(r1) 13:46:01 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000000400300ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:01 executing program 2: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7, 0x8080) sendmsg$inet_sctp(r0, &(0x7f0000000500)={&(0x7f0000000040)=@in={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000080)="fd7b76e92d7c19a3bf668ad9f9056d32785af2978108dafdebeee9f7357a13f8aa5bf9a09f3508e1c842126f2e2efd574630fb657c62f8c75d1d12ac8f253a2b64188b4cdf0721c86ead43cf2c5fd280796a7af373aa6549", 0x58}, {&(0x7f0000000100)="18213c23932a19d95fbc670b16c0eb2cdc5822238112c38105050840983a553ec5afc0820d6c02102cbc1691c775527997c95f2ac509b520e9822af08797de786f6e6a23c2d66eb9443ad6dfe74e76df3a624184c367b1975c31891343cde5a9ade9ad2ff280d99d6da4b211fa57eaed4fc34b91e92ec283c34cf603c78cb19dcf79522b5052ee1ee00bf4e94f2e882185c32d9fad8e7758f47579fda66825d2c4384456e93b2ee030fb7fd13e4429cb86861ee64f20e5c8", 0xb8}, {&(0x7f00000001c0)="fdbfb212106e05512cc59c12dcc5ea0c36b307840aef0fa84ff9d7a743bc9a5fe47d8132ef381773753e7f85c22a4a5840b7280ea6e78fc816fc7b30ba5c80bbbe8d98dcaad1bdb6bef7ec62f4cd71ce1a14b8ca8a4d448c082ab3330760bfd579f54607d07322bb74fb34a0e3ca46dec563de9dc9a7c951f449b389017973333dba99e44af6cc5f9d75c7bdcbd0d67f21c75f79ec9be86ca8550425b41e9fbc52a8d044bcb4252f65c182005f6dc36885165ce53fd5de742a4954907c982231ba1a21b2628c59bffaa68b", 0xcb}, {&(0x7f00000002c0)="f1a1b8c9f69d9b51d78a8c98d1805c933ebf8208933a490b97ddb65af52a59e7b68f29ce4974400bf1576c5dbba8ad07ba23b4334fdaf1d9d48a51b7b1b69fe246fcc8b1d09340b72c9ac3e3c93b524f1ea95f8a6af4e2d7d37e46634fa95def20ed5e90f41517415ad5d3ba514a3b0980921fd97191471957ca694ee85478ab3145ae38d731584234aab6bb2c2a65bd", 0x90}, {&(0x7f0000000380)="f2d7f512a4b9734479071c235d8f00015f0a82d70f4ae3e351ea72537bd1df30c341bd2b3bbbdc5358772e7518a18dc6533a5f8207918dc6f9be70f5412746c3492a8610433104bc24903c7f1efe13db07c76868bc70980d4753e7d346816572cba81e50b2", 0x65}, {&(0x7f0000000400)="849ef637b5", 0x5}], 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x30, 0x20004000}, 0x40000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x1e, &(0x7f0000000140), 0x1a5) 13:46:01 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x486782, 0x0) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000340)={0x1, 0x0, [{}]}) setns(r0, 0x4000000) accept$packet(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8008020}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)=@delqdisc={0x100, 0x25, 0x510, 0x70bd2c, 0x25dfdbfc, {0x0, r1, {0x3, 0x4}, {0x6, 0xfff1}, {0xffef, 0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9b}, @TCA_STAB={0x48, 0x8, [@TCA_STAB_DATA={0x14, 0x2, [0x6, 0x4, 0x7, 0x401, 0x3ff, 0x9, 0x2]}, @TCA_STAB_BASE={0x1c, 0x1, {0x4, 0x9, 0x2, 0xffffffffffff17c8, 0x1, 0x7fffffff, 0x9, 0x6}}, @TCA_STAB_DATA={0x8, 0x2, [0x7fb]}, @TCA_STAB_DATA={0xc, 0x2, [0x4, 0x1, 0x3]}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1000}, @TCA_STAB={0x58, 0x8, [@TCA_STAB_BASE={0x1c, 0x1, {0x2, 0x7, 0x7, 0x6, 0x1, 0x6, 0x8, 0x4}}, @TCA_STAB_BASE={0x1c, 0x1, {0x9, 0x5, 0x6, 0x1020000, 0x1, 0x3f, 0xc2, 0x3}}, @TCA_STAB_BASE={0x1c, 0x1, {0x3f, 0x8, 0x3, 0x83f2, 0x1, 0x0, 0xaa2, 0x1}}]}, @qdisc_kind_options=@q_hfsc={{0xc, 0x1, 'hfsc\x00'}, {0x8, 0x2, 0x8}}, @TCA_RATE={0x8, 0x5, {0x800000008000, 0xf2f}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3f}]}, 0x100}, 0x1, 0x0, 0x0, 0x4080}, 0x40000) socket$pppoe(0x18, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000240)=0x6, 0x4) r2 = socket(0xa, 0x802, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x800) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000300)={0x7}, 0x4) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000000c0)=0x2, 0x4) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000740)="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") ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000040)={[{0x9, 0x1d96, 0x1f, 0x8, 0xffffffffffffff00, 0x12, 0x894a, 0x3, 0x4, 0x7, 0x7, 0xefad, 0x5}, {0xddd6, 0x8000, 0xfffffffffffff2ee, 0xfffffffffffffffd, 0x7f, 0xfffffffffffffffa, 0x0, 0x100000000, 0x2, 0xff, 0x2, 0x7ff, 0x8}, {0x0, 0x7, 0x9, 0x100000000, 0x0, 0x7e, 0x9, 0x2954, 0xff, 0x8, 0x10000, 0x8, 0xae}], 0x7fff}) write(r2, &(0x7f0000001500)="244000001a0025f0f76bb404feff141c020b5aff6e10b500001180cc08001d0023020000", 0xfffffffffffffd28) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000280)=0x81, &(0x7f00000002c0)=0x4) 13:46:01 executing program 2: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7fff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r1, r0, &(0x7f0000f28ff8), 0x100000002) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x800000003) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x2, 0x400000) r2 = getpgid(0x0) open(&(0x7f0000000080)='./bus\x00', 0x400000, 0x0) tkill(r2, 0x80000000000013) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) 13:46:01 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="04010500050000000000000affb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:01 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="04010500054a000000000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 333.788446] FAULT_FLAG_ALLOW_RETRY missing 30 [ 333.793419] CPU: 0 PID: 22489 Comm: syz-executor6 Not tainted 4.18.0-rc1+ #111 [ 333.800803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 333.810156] Call Trace: [ 333.812754] dump_stack+0x1c9/0x2b4 [ 333.816400] ? dump_stack_print_info.cold.2+0x52/0x52 [ 333.821605] ? kasan_check_write+0x14/0x20 [ 333.825846] ? do_raw_spin_lock+0xc1/0x200 [ 333.830089] handle_userfault.cold.32+0x47/0x62 [ 333.834771] ? userfaultfd_ioctl+0x4fd0/0x4fd0 [ 333.839373] ? debug_check_no_locks_freed+0x310/0x310 [ 333.844580] ? perf_event_update_userpage+0xd30/0xd30 [ 333.849779] ? print_usage_bug+0xc0/0xc0 [ 333.853850] ? print_usage_bug+0xc0/0xc0 [ 333.857921] ? __perf_event_task_sched_in+0x24f/0xbb0 [ 333.863120] ? userfaultfd_ctx_put+0x810/0x810 [ 333.867713] ? find_held_lock+0x36/0x1c0 [ 333.871792] ? __lock_acquire+0x7fc/0x5020 [ 333.876033] ? lock_downgrade+0x8f0/0x8f0 [ 333.880192] ? graph_lock+0x170/0x170 [ 333.884021] ? find_held_lock+0x36/0x1c0 [ 333.888102] ? lock_downgrade+0x8f0/0x8f0 [ 333.892245] ? kasan_check_read+0x11/0x20 [ 333.896394] ? do_raw_spin_unlock+0xa7/0x2f0 [ 333.900791] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 333.905364] ? kasan_check_write+0x14/0x20 [ 333.909592] ? do_raw_spin_lock+0xc1/0x200 [ 333.913835] __handle_mm_fault+0x3a0a/0x4460 [ 333.918253] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 333.923099] ? graph_lock+0x170/0x170 [ 333.926912] ? lock_downgrade+0x8f0/0x8f0 [ 333.931060] ? kasan_check_read+0x11/0x20 [ 333.935198] ? rcu_is_watching+0x8c/0x150 [ 333.939343] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 333.943742] ? handle_mm_fault+0x8c4/0xc80 [ 333.947981] handle_mm_fault+0x53e/0xc80 [ 333.952047] ? __handle_mm_fault+0x4460/0x4460 [ 333.956628] ? find_vma+0x34/0x190 [ 333.960160] __do_page_fault+0x620/0xe50 [ 333.964226] ? mm_fault_error+0x380/0x380 [ 333.968372] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 333.973389] ? graph_lock+0x170/0x170 [ 333.977180] do_page_fault+0xf6/0x8c0 [ 333.980975] ? vmalloc_sync_all+0x30/0x30 [ 333.985124] ? find_held_lock+0x36/0x1c0 [ 333.989179] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 333.994022] page_fault+0x1e/0x30 [ 333.997474] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 334.003074] Code: 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f [ 334.022256] RSP: 0018:ffff88017d12f7f0 EFLAGS: 00010202 [ 334.027608] RAX: 0000000000000004 RBX: 0000000000000004 RCX: 0000000000000004 [ 334.034871] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff88017d12f890 [ 334.042138] RBP: ffff88017d12f828 R08: ffffed002fa25f13 R09: ffffed002fa25f12 [ 334.049484] R10: ffffed002fa25f12 R11: 0000000000000003 R12: 0000000020013004 [ 334.056746] R13: 0000000020013000 R14: ffff88017d12f890 R15: 00007ffffffff000 [ 334.064047] ? _copy_from_user+0x10d/0x150 [ 334.068288] evdev_do_ioctl+0xb69/0x21a0 [ 334.072341] ? str_to_user+0x90/0x90 [ 334.076063] ? do_futex+0x249/0x27d0 [ 334.079961] ? graph_lock+0x170/0x170 [ 334.083761] ? lock_downgrade+0x8f0/0x8f0 [ 334.087907] ? find_held_lock+0x36/0x1c0 [ 334.091974] ? lock_downgrade+0x8f0/0x8f0 [ 334.096137] ? kasan_check_read+0x11/0x20 [ 334.100274] ? rcu_is_watching+0x8c/0x150 [ 334.104414] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 334.108822] ? __fget+0x414/0x670 [ 334.112293] evdev_ioctl_handler+0x144/0x1a0 [ 334.116691] evdev_ioctl+0x27/0x2e [ 334.120228] ? evdev_ioctl_compat+0x30/0x30 [ 334.124548] do_vfs_ioctl+0x1de/0x1720 [ 334.128422] ? ioctl_preallocate+0x300/0x300 [ 334.132828] ? __fget_light+0x2f7/0x440 [ 334.136789] ? fget_raw+0x20/0x20 13:46:02 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet(0x2, 0x200000002, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000004c0), &(0x7f0000000480)=0x1ef) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x51b, 0x2000) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f00000000c0)=0x9) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) 13:46:02 executing program 4: gettid() r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx2\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = semget(0x2, 0x7, 0x111) semctl$IPC_RMID(r2, 0x0, 0x0) r3 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r3, 0x0, 0x0, 0x73e0) sendmmsg$alg(r1, &(0x7f0000002b80)=[{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000002980)='j', 0x1}], 0x1, &(0x7f0000002a40)}], 0x1, 0xc000) sendfile(r1, r3, &(0x7f00000000c0)=0xffffffffffffffff, 0xefa) 13:46:02 executing program 1: r0 = socket(0x11, 0x80082, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'bridge0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="03000000cafee738b1839aae6c597c9e6653eef9da29dfb298e2accf21c6538d105dfef4598bf9ce5bc2cd67b1aeddbb8718addbdc3a9b975e6fb9ff6499c62d4a0e51fd0ebb57998e1aae6e595505936b4fe7f982fca0b12794f5e0f330a2d72223b2c016992cfc1216c7969ba3f2e64c9a47e8383a63da054c96ac3b9c1048452eaf165226abfa883e606d2c2f5cafd170522609694d1727c84f1e787940c9bed8dcc53f14b19a789e404384ea87000000000000000000000000d70000000000000000"]}) fcntl$setstatus(r0, 0x4, 0x400) [ 334.140230] ? sockfd_lookup_light+0xc5/0x160 [ 334.144726] ? __x64_sys_futex+0x47f/0x6a0 [ 334.148956] ? do_futex+0x27d0/0x27d0 [ 334.152744] ? security_file_ioctl+0x94/0xc0 [ 334.157138] ksys_ioctl+0xa9/0xd0 [ 334.160578] __x64_sys_ioctl+0x73/0xb0 [ 334.164450] do_syscall_64+0x1b9/0x820 [ 334.168333] ? syscall_return_slowpath+0x5e0/0x5e0 [ 334.173274] ? syscall_return_slowpath+0x31d/0x5e0 [ 334.178220] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 334.183599] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 334.188475] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 334.193671] RIP: 0033:0x455b29 [ 334.196859] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 334.216188] RSP: 002b:00007f2451247c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 334.223889] RAX: ffffffffffffffda RBX: 00007f24512486d4 RCX: 0000000000455b29 [ 334.231149] RDX: 0000000020013000 RSI: 00000000400445a0 RDI: 0000000000000015 [ 334.238412] RBP: 000000000072bf50 R08: 0000000000000000 R09: 0000000000000000 [ 334.245683] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 334.252954] R13: 00000000004bd250 R14: 00000000004cb350 R15: 0000000000000001 13:46:03 executing program 6: r0 = getpid() r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer2\x00', 0x80000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f00000003c0)={{0x0, 0x3, 0x2, 0x3, 0xffffffffffff001a}, 0x0, 0x6, 0x9}) sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r2 = timerfd_create(0x0, 0x0) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000980)=""/230, 0xe6}], 0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80000) get_robust_list(r0, &(0x7f00000002c0)=&(0x7f0000000280)={&(0x7f00000001c0)={&(0x7f0000000140)}, 0x0, &(0x7f0000000240)}, &(0x7f0000000300)=0x18) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r4, 0x400445a0, &(0x7f0000013000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000003000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r5, 0xc08c5102, &(0x7f0000a07fff)) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1}) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) 13:46:03 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000002000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:03 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="04010500050000004a000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCSSOFTCAR(r1, 0x5441, &(0x7f0000000000)=0xec03) 13:46:03 executing program 4: r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)={0x3, {{0xa, 0x4e24, 0x7, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}, 0x0, 0x7, [{{0xa, 0x4e21, 0x7fffffff, @mcast2={0xff, 0x2, [], 0x1}, 0x8}}, {{0xa, 0x4e21, 0x5, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}}, {{0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, [], 0x1d}, 0xff}}, {{0xa, 0x4e23, 0x101, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x9}}, {{0xa, 0x4e20, 0x35a, @mcast1={0xff, 0x1, [], 0x1}, 0x2}}, {{0xa, 0x4e23, 0x9, @loopback={0x0, 0x1}, 0x80a}}, {{0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, [], 0x1d}, 0x8000}}]}, 0x410) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) io_submit(r1, 0x0, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x8, 0x8, 0x6, r0, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, r0}]) epoll_create(0x80000001) 13:46:03 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0xfffffffffffffed0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000002c0)=""/4096, 0x1003}], 0x34, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 13:46:03 executing program 3: syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x101, 0x80000) syz_mount_image$vfat(&(0x7f0000000380)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xdffc, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f83a0a", 0x18}], 0x0, &(0x7f0000000240)=ANY=[]) statfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000900)=""/213) 13:46:03 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000107}]}) [ 334.510887] FAT-fs (loop3): Directory bread(block 5237) failed [ 334.537506] FAT-fs (loop3): Directory bread(block 5238) failed 13:46:03 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="c92be2d06c6d61d7d4"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b4000000000000000000000000000400000000000000000000000000000095000000000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 13:46:03 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="04010500050000000e000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 334.571545] FAT-fs (loop3): Directory bread(block 5239) failed [ 334.589707] FAT-fs (loop3): Directory bread(block 5240) failed 13:46:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000063fc900000000000000050000008c0100000400000000000000000065750ede825e45a90f3d09876e6d0cd4e191a1f98937702d8f9523b12ed909205c7333bb937dee28d4b2921ea4c8fa86a91c8275dd4b26916a0dc30c518cdf628235cebb98b7559414d05501b53517cdf5426294335b7189c3003b2cbdae69c720e6ff0000000000710e13"], 0x89) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000040)="0700e1311f16f477671070") syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x200, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000240)="063eeb803dd7ae13002ba16e610b69a0b7ab8e24d4077e059ac151f0110f7fe31c3db3860888f0d9f2a3f6211d3511aadaa50095383a10e30bb1e428eeb3f352a96b0b61b9d0815c122c7e618305ffb11a1091d1738aebd470870a0ed5f099e272a1ff877f1df3d7d31dba1c13e53ef496035996418b84f55ac276f7ae45cda85dc36244966717f27564f96831f2186324f3a4c1d574231ca34cfb", 0x9b}, {&(0x7f0000000300)="7e70e9bc5c34a8eea5377395c946b4049f21bc7f548b804c1b5bb466233d044881616ea6699b805b0d03a6f1d3512baf2cebde8f08ac77e6296d625ec399665fa688e2c7132213344beb0d014e0ffeed5b08be5e4a76c72b612007460f4010549d099114b4dc0991e7b92773d2377c7f60911330a3286f460928154efb9cbde11bbe4e7250589e17c5ae88bdf590c13cf2971c6fe428352d8dfcb43760b53853c13a114a2b2899c6c48406d703925be3ad195efd3d6c4653f2c6e85a8158f0203a39c50f30ca4e8d1ad22b696378a7d8bb28", 0xd2, 0xbf9c000000000000}, {&(0x7f0000000400)="ecacaa74ceb205eec12be5c09c199ac0078d37848e1b48eb2da23d48acb7e3c3360e013cd6b4d3066d3edd71119a70009b51513c583eb96aa4e11f398bf6d951ce6c156765f4aedb479ba708b22e4fcefdbc19953d0199c5035bc7065c992085cea6c157e474221075f2fe259a51a87719c26c5c1dae064658b29999616de20c2ebb3610b42b8ee46e1d5c294d0d950021c96e0aafab049bbd13e320a3baef400eedea24f06f1a0d", 0xa8, 0xe084}, {&(0x7f00000004c0)="4b4c7081a3d47b432ba6c2795f07fb851238a48120b6a09d59ce6fa50c3307cc860028c0acf7302a5561759c730ad04764ebf10c103e97e7c253d151fb39047e450e414315cb8ba07d2ce2ab4d7fb55a5fc3b1d83eec2282bc84528416504ded41e2afdf9611a0a654d374906b", 0x6d, 0x3f}, {&(0x7f0000000540)="5a17ab04c04eac68fed3c7e075c7c289438d784db261aa7de3a19ad8d0594c158d885ffd321fc9eb6f55270257f3eae9089dbe92554d80d6ac916001b0fd55f30f29fcc3f8f974fc4478726797cc0890c55d7072d247577c724a9732551979e2af35fee90d2e2bb39710cdddf38f08b70f318a79109071", 0x77, 0x100000001}], 0x538610855e0bb47f, &(0x7f0000000140)=ANY=[@ANYBLOB='2']) r2 = syz_open_pts(r0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0x2, 0xc9}) 13:46:03 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000440)=ANY=[@ANYBLOB="4200000000000000000000000000000000000000eafffff0ffffff3f0142313e434adbdff396c79c6a0000000000000000000000000000000000000000000000000000000000"]) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000004c0)=@assoc_value={0x0, 0x1bc}, 0xffffffffffffff1f) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x101000, 0x81) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=0x0, &(0x7f0000000040)=0x4) r4 = socket$inet6(0xa, 0x1, 0x0) accept4(r0, &(0x7f0000000280), &(0x7f0000000180)=0x80, 0x80000) ioctl(r4, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r5 = creat(&(0x7f0000000000)='./file0\x00', 0x10c) connect$unix(r5, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e21}, 0x6e) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r3}, &(0x7f00000000c0)=0xc) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000300)={[0x8, 0x7ff, 0x100000001, 0x6, 0x8, 0x8, 0xc18, 0x8, 0x25e000000000000, 0x28000000, 0x72e, 0x9, 0x0, 0xd4, 0x100, 0x5adc], 0x4000, 0x440}) [ 334.615885] FAT-fs (loop3): Directory bread(block 5241) failed [ 334.643619] FAT-fs (loop3): Directory bread(block 5242) failed 13:46:03 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000180)=0x80000000000001, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x601, 0x4) sendto$inet(r0, &(0x7f0000000000)="d9", 0x1, 0x0, &(0x7f0000000080)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000001100)="d6", 0x1, 0x4000004, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) accept(r0, &(0x7f00000001c0)=@nfc_llcp, &(0x7f00000000c0)=0x80) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f00000002c0)={'team_slave_0\x00', {0x2, 0x4e21, @multicast2=0xe0000002}}) [ 334.691695] FAT-fs (loop3): Directory bread(block 5243) failed [ 334.729897] FAT-fs (loop3): Directory bread(block 5244) failed 13:46:03 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000000f0ffffffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 334.741385] sctp: [Deprecated]: syz-executor1 (pid 22558) Use of int in maxseg socket option. [ 334.741385] Use struct sctp_assoc_value instead [ 334.754487] FAT-fs (loop3): Directory bread(block 5245) failed [ 334.799614] FAT-fs (loop3): Directory bread(block 5246) failed 13:46:03 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="04010500050000000a000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:03 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x3) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0x84, 0x0, 0x1ff, 0xe8c, 0x1, 0x8, 0x10000, 0x7c, 0x6, 0x8}) [ 334.857165] sctp: [Deprecated]: syz-executor1 (pid 22571) Use of int in maxseg socket option. [ 334.857165] Use struct sctp_assoc_value instead [ 335.391138] FAULT_FLAG_ALLOW_RETRY missing 30 [ 335.395753] CPU: 1 PID: 22593 Comm: syz-executor6 Not tainted 4.18.0-rc1+ #111 [ 335.403926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 335.414069] Call Trace: [ 335.416675] dump_stack+0x1c9/0x2b4 [ 335.420322] ? dump_stack_print_info.cold.2+0x52/0x52 [ 335.425532] ? kasan_check_write+0x14/0x20 [ 335.429780] ? do_raw_spin_lock+0xc1/0x200 [ 335.434044] handle_userfault.cold.32+0x47/0x62 [ 335.438746] ? userfaultfd_ioctl+0x4fd0/0x4fd0 [ 335.443369] ? debug_check_no_locks_freed+0x310/0x310 [ 335.448570] ? perf_event_update_userpage+0xd30/0xd30 [ 335.453847] ? print_usage_bug+0xc0/0xc0 [ 335.457906] ? print_usage_bug+0xc0/0xc0 [ 335.462077] ? __perf_event_task_sched_in+0x24f/0xbb0 [ 335.467255] ? userfaultfd_ctx_put+0x810/0x810 [ 335.471923] ? find_held_lock+0x36/0x1c0 [ 335.475984] ? __lock_acquire+0x7fc/0x5020 [ 335.480225] ? lock_downgrade+0x8f0/0x8f0 [ 335.484371] ? graph_lock+0x170/0x170 [ 335.488275] ? find_held_lock+0x36/0x1c0 [ 335.493196] ? lock_downgrade+0x8f0/0x8f0 [ 335.497348] ? kasan_check_read+0x11/0x20 [ 335.501483] ? do_raw_spin_unlock+0xa7/0x2f0 [ 335.505881] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 335.510455] ? kasan_check_write+0x14/0x20 [ 335.514701] ? do_raw_spin_lock+0xc1/0x200 [ 335.518926] __handle_mm_fault+0x3a0a/0x4460 [ 335.523334] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 335.528188] ? graph_lock+0x170/0x170 [ 335.531990] ? lock_downgrade+0x8f0/0x8f0 [ 335.536140] ? kasan_check_read+0x11/0x20 [ 335.540281] ? rcu_is_watching+0x8c/0x150 [ 335.544417] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 335.548816] ? handle_mm_fault+0x8c4/0xc80 [ 335.553044] handle_mm_fault+0x53e/0xc80 [ 335.557094] ? __handle_mm_fault+0x4460/0x4460 [ 335.561683] ? find_vma+0x34/0x190 [ 335.565221] __do_page_fault+0x620/0xe50 [ 335.569362] ? mm_fault_error+0x380/0x380 [ 335.573505] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 335.578510] ? graph_lock+0x170/0x170 [ 335.582299] do_page_fault+0xf6/0x8c0 [ 335.586086] ? vmalloc_sync_all+0x30/0x30 [ 335.590308] ? find_held_lock+0x36/0x1c0 [ 335.594364] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 335.599197] page_fault+0x1e/0x30 [ 335.602640] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 335.608247] Code: 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f [ 335.627687] RSP: 0018:ffff8801cf9df7f0 EFLAGS: 00010202 [ 335.633040] RAX: 0000000000000004 RBX: 0000000000000004 RCX: 0000000000000004 [ 335.640315] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff8801cf9df890 [ 335.647572] RBP: ffff8801cf9df828 R08: ffffed0039f3bf13 R09: ffffed0039f3bf12 [ 335.654828] R10: ffffed0039f3bf12 R11: 0000000000000003 R12: 0000000020013004 [ 335.662081] R13: 0000000020013000 R14: ffff8801cf9df890 R15: 00007ffffffff000 [ 335.669352] ? _copy_from_user+0x10d/0x150 [ 335.673577] evdev_do_ioctl+0xb69/0x21a0 [ 335.677627] ? lock_downgrade+0x8f0/0x8f0 [ 335.681779] ? str_to_user+0x90/0x90 [ 335.685503] ? do_futex+0x249/0x27d0 [ 335.689213] ? rcu_is_watching+0x8c/0x150 [ 335.693349] ? graph_lock+0x170/0x170 [ 335.697141] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 335.701551] ? find_held_lock+0x36/0x1c0 [ 335.705602] ? lock_downgrade+0x8f0/0x8f0 [ 335.709736] ? kasan_check_read+0x11/0x20 [ 335.713880] ? rcu_is_watching+0x8c/0x150 [ 335.718025] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 335.722435] ? __fget+0x414/0x670 [ 335.725890] evdev_ioctl_handler+0x144/0x1a0 [ 335.730288] evdev_ioctl+0x27/0x2e [ 335.733811] ? evdev_ioctl_compat+0x30/0x30 [ 335.738114] do_vfs_ioctl+0x1de/0x1720 [ 335.741993] ? rcu_is_watching+0x8c/0x150 [ 335.746130] ? ioctl_preallocate+0x300/0x300 [ 335.750522] ? __fget_light+0x2f7/0x440 [ 335.754491] ? fget_raw+0x20/0x20 [ 335.757926] ? putname+0xf2/0x130 [ 335.761377] ? rcu_read_lock_sched_held+0x108/0x120 [ 335.766378] ? kmem_cache_free+0x25c/0x2d0 [ 335.770618] ? __x64_sys_futex+0x47f/0x6a0 [ 335.774852] ? do_futex+0x27d0/0x27d0 [ 335.778649] ? security_file_ioctl+0x94/0xc0 [ 335.783049] ksys_ioctl+0xa9/0xd0 [ 335.786492] __x64_sys_ioctl+0x73/0xb0 [ 335.790367] do_syscall_64+0x1b9/0x820 [ 335.794246] ? syscall_return_slowpath+0x5e0/0x5e0 [ 335.799163] ? syscall_return_slowpath+0x31d/0x5e0 [ 335.804081] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 335.809446] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 335.814299] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 335.819474] RIP: 0033:0x455b29 [ 335.822656] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 335.842018] RSP: 002b:00007f2451247c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 335.849752] RAX: ffffffffffffffda RBX: 00007f24512486d4 RCX: 0000000000455b29 [ 335.857031] RDX: 0000000020013000 RSI: 00000000400445a0 RDI: 0000000000000016 [ 335.864308] RBP: 000000000072bf50 R08: 0000000000000000 R09: 0000000000000000 [ 335.871563] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 335.878833] R13: 00000000004bd250 R14: 00000000004cb350 R15: 0000000000000001 13:46:04 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000980)=""/230, 0xe6}], 0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000200)={0xaa}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x800, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000280), &(0x7f00000002c0)=0x30) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) gettid() ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x301, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x80, 0x0) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000001c0)={0x303, 0x33}, 0x4) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1}) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) 13:46:04 executing program 4: r0 = perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x9e2, 0xffffffff, 0x800000000, 0x9, 0x0, 0x8, 0x400, 0x3, 0xa7, 0xffffffff, 0x71f, 0xff, 0x4, 0x7, 0x4, 0x40, 0x72, 0x4, 0x5e, 0xd1da, 0x80, 0x5, 0x4, 0x4, 0xffff, 0x0, 0x7, 0x1, 0x1, 0xe000000000, 0x7f, 0x5, 0x7, 0x200, 0x7fffffff, 0x3, 0x0, 0x0, 0x0, @perf_bp, 0x4, 0xe057, 0xfffffffffffffffb, 0x7, 0xc0, 0x3, 0x5a}, 0x0, 0x9, 0xffffffffffffff9c, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x256, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, r0, 0x0) r1 = socket$inet(0x2, 0x2, 0x480000000000000) setsockopt$inet_int(r1, 0x0, 0x400000000b, &(0x7f0000778ffc)=0x100000001, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f00006cdffb)="8907040000", 0x5) sendto$inet(r1, &(0x7f0000440000), 0xffe6, 0x0, &(0x7f00002ce000)={0x2, 0x4e20, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000040)='ip6gre0\x00') ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000240)={r1, 0x0, 0x80000000, 0x3e2, 0x8b9}) recvmsg(r1, &(0x7f0000000540)={&(0x7f00000000c0)=@nfc_llcp, 0x80, &(0x7f00000004c0)}, 0x2101) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x42, 0x0) ioctl$TCXONC(r2, 0x540a, 0x80000000) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x1) 13:46:04 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000003e80000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:04 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f00000001c0)) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) poll(&(0x7f0000000180)=[{r2}], 0x1, 0x2) 13:46:04 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x200, 0x20040) connect$llc(r0, &(0x7f0000001300)={0x1a, 0x303, 0x33, 0x8, 0x80000001, 0xca, @link_local={0x1, 0x80, 0xc2}}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, 0x0}, &(0x7f0000001600)=0x14) sendmsg$xdp(r0, &(0x7f0000003780)={&(0x7f00000000c0)={0x2c, 0x2, r1, 0x26}, 0x10, &(0x7f0000003740)=[{&(0x7f0000001700)="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", 0x1000}, {&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000000000)="8a", 0x1}, {&(0x7f0000003700)="69ad5086a51c3f8dd68bf17860737949c35e50951759fc156e340037f24dfb", 0x1f}], 0x100000fb, 0x0, 0x0, 0x10}, 0x8001) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000100)=ANY=[@ANYBLOB="001000031c000000030000000010040000000300"]) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000001340)={0x7f, 0x7fffffff, 0x7}) syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2}, @random="b42d87402e52", [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x30, 0x3a, 0xc0ffffff, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0xffffff89, 0x0, 0x0, 0x0, {0x0, 0x6, "0a07ec", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0xff, 0xff], @dev={0xac, 0x14}}}}}}}}}, &(0x7f00000016c0)) lstat(&(0x7f00000011c0)='./file0\x00', &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = add_key$keyring(&(0x7f0000001280)='keyring\x00', &(0x7f00000012c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, r2, r3) 13:46:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x9) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x7, 0x1, 0x4, 0xfff, 0x100}, 0xc) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x800002, 0x12, r2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) mbind(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000040)=0x1, 0x9, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000100)=0x14) mlock(&(0x7f0000004000/0x5000)=nil, 0x5000) 13:46:04 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="0401050005fffff000000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCSSOFTCAR(r1, 0x5413, &(0x7f0000000000)=0xec03) 13:46:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) statx(r1, &(0x7f0000000080)='./file0\x00', 0x900, 0x800, &(0x7f0000000140)) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)={0x9}) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001900010100000000000000001c000000262cd2d7a2ebb900000200000000000c00010a0000eef93287000041fd5c7ee00111a7548277c8534c9276a0c9afcb7191c1bc0d0766ab325678f95c10ed929178e847f5a5ba3b77b8ad92622d34d9d00f524e2a1b227d9a0c4816b09692"], 0x28}, 0x1}, 0x0) 13:46:05 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2}, @random="14759b3ac5f5", [{[], {0x8100, 0x38c0, 0x3, 0x4}}], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x30, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0xffffff8c, 0xfffffff5, 0x0, 0x0, {0x0, 0x6, "0a07ec", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0xff, 0xff], @dev={0xac, 0x14}}}}}}}}}, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x0, 0x0, 0x10]}) 13:46:05 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="04010500050000004a000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:05 executing program 2: socketpair$inet(0x2, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$int_out(r0, 0x2, &(0x7f0000000040)) r1 = syz_open_dev$sndpcmc(&(0x7f000000b000)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffb, 0x0) ioctl(r1, 0xc1004111, &(0x7f0000000000)) [ 336.356329] netlink: 12 bytes leftover after parsing attributes in process `syz-executor3'. 13:46:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000003, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x1, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2000000000000002, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) 13:46:05 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000000000001ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:05 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="04010500050e000000000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 336.439968] netlink: 12 bytes leftover after parsing attributes in process `syz-executor3'. 13:46:05 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x80c0, 0x0) connect$vsock_dgram(r1, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @any=0xffffffff}, 0x10) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f000048f000)="ad56b6c5824c8eb995298992ea54c7beef9f5d56530f90c2", 0x18) r2 = accept$alg(r0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000c2bfc0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f000007d000)="b3", 0x1}]) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000180)={0xf, 0x8, 0xfa00, {r4}}, 0x10) 13:46:06 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r1 = timerfd_create(0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={0xffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000380)={0x15, 0x110, 0xfa00, {r4, 0xfffffffffffffffd, 0x0, 0x0, 0x0, @ib={0x1b, 0xdaf, 0x8001, {"fec2c825db496d62ed40d75818271234"}, 0x0, 0x119, 0xaa}, @in={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}}}, 0x118) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000980)=""/230, 0xe6}], 0x1) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f00000002c0)='bridge0\x00') mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x2}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000280), 0x4) r6 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r6, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1}) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) 13:46:06 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f0000000040)="e7", 0x1, 0x1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0xfffffffffffffda9, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000000c0)={'IDLETIMER\x00'}, &(0x7f0000000100)=0x1e) read(r0, &(0x7f0000000500)=""/246, 0xfed4) 13:46:06 executing program 2: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0xffffffffffffffff, 0x7, 0x1, 0x9, &(0x7f0000000080)=[0x0], 0x1}, 0x20) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x5}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000200)={r1, @in6={{0xa, 0x4e22, 0xc7, @mcast2={0xff, 0x2, [], 0x1}, 0x8}}}, 0x84) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x42000, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0x20000000000000f, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 13:46:06 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="04010500050000000000004affb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:06 executing program 4: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2000000000001, 0x0) r1 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000687000)=0x5c802861, 0x4) bind$inet6(r1, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f00007a8fff), 0xfffffd4b, 0xfffffeffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x1}, 0x1}, 0x239) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x9, 0x4) ioprio_get$uid(0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x20000000, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x10000, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x108) 13:46:06 executing program 1: io_setup(0x404, &(0x7f0000000180)=0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x400000000001, 0x1) timer_create(0x7, &(0x7f00000001c0)={0x0, 0x35, 0x7, @thr={&(0x7f0000000040)="39d8d60d79ad5fd438ea66e8fd1637b5bd4ef57bf7a756b5271e3585c91be4bc91df20eee22a5840d73fa80df29f7144e3955c0cfd385c13d1e40ad80f2bd133ef5e0adaafc8c57f066e467b3c03a607b6478383069847f7cf37f6fe076e47a0e0e53f48a6c6d750e039b3ebe61a19c08780b545c075ca464671e8db21351a2ded1d11ecb94546a93dec51f7fb00e35a664a19a3c848a7a1aea90955889dc26a318b4544b44cc67c3c1ec160be4359", &(0x7f0000000100)="5dbd6104ec024384e92cefdf9759e6c5180062428508c914c1638872adfb02ede5a1d2cccd33acc9ef330e9e6ac326a6b99be2051dca26d2b865e7243096c4752f5ef7bbd1c0c857ecc2e8443f1995d25a88c0e2273584d783024e26e5668c4b3f3c03b0e8bf457d5acc2f2a9e7fd972f0eb567cb6c2c03a"}}, &(0x7f0000000200)) io_submit(r0, 0x1, &(0x7f0000000440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)}]) 13:46:06 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="040105000500000011000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCSSOFTCAR(r1, 0xc0045877, &(0x7f0000000000)=0xec03) [ 337.413225] QAT: Invalid ioctl 13:46:06 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="177bb33449ab9c9592e1b8c5cf70d249b132b344657c9c6f208e044d5aa6d7f3f2b8189c3bf01b1c7ff1e12fd021a09a", 0x30}], 0x1, &(0x7f0000000000)}, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x8, 0x8000) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000040)) readv(r1, &(0x7f0000002ac0)=[{&(0x7f0000002880)=""/12, 0xc}, {&(0x7f00000029c0)=""/255, 0xff}], 0x2) [ 337.454854] QAT: Invalid ioctl 13:46:06 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="04010500050000000000003fffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:06 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x4000) listen(r1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000180)) sendto$inet6(r3, &(0x7f0000000280), 0xfffffdf7, 0x20000005, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=""/133) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e23, 0x9, @loopback={0x0, 0x1}, 0x7fff}}, [0x7, 0x401, 0x8, 0x176, 0x5, 0x5, 0x3, 0x1ff, 0x18, 0x2, 0x100000000, 0x1, 0x2, 0xaa7, 0x81]}, &(0x7f0000000440)=0x100) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000480)={r4}, &(0x7f00000004c0)=0x8) shutdown(r3, 0x0) 13:46:06 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x80004, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000400)="67400f35c74424009b000000c74424029dace042ff1c2466470f5b84b009f00000660f38827e062e67cd0066b81f010f00d0660fef9a0400000066b8f9008ed03636660f382a51f6c461a9fb91f3000000", 0x51}], 0x1, 0x0, &(0x7f0000000180), 0x0) 13:46:06 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="040105000500000002000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 337.680454] QAT: Invalid ioctl [ 337.693456] QAT: Invalid ioctl [ 337.702285] QAT: Invalid ioctl [ 337.713655] QAT: Invalid ioctl [ 337.721636] QAT: Invalid ioctl 13:46:06 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000000060000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:06 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x20000, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0x3, 0x4) ioctl$KVM_GET_REG_LIST(r0, 0x800452d2, &(0x7f0000000080)={0x2000000000000242, [0x0]}) getsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f00000000c0)=""/111, &(0x7f0000000140)=0x6f) [ 337.735303] QAT: Invalid ioctl [ 337.747647] QAT: Invalid ioctl [ 337.765644] QAT: Invalid ioctl [ 337.787477] QAT: Invalid ioctl [ 337.805654] QAT: Invalid ioctl [ 337.815998] QAT: Invalid ioctl [ 337.833095] QAT: Invalid ioctl 13:46:06 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000000000026ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 337.844215] QAT: Invalid ioctl [ 337.855150] QAT: Invalid ioctl [ 337.858653] QAT: Invalid ioctl [ 337.869226] QAT: Invalid ioctl [ 337.878881] QAT: Invalid ioctl [ 337.891860] QAT: Invalid ioctl [ 337.909917] QAT: Invalid ioctl [ 337.926950] QAT: Invalid ioctl [ 337.930611] QAT: Invalid ioctl [ 337.934277] QAT: Invalid ioctl [ 337.940692] QAT: Invalid ioctl [ 337.944361] QAT: Invalid ioctl [ 337.947842] QAT: Invalid ioctl [ 337.972255] QAT: Invalid ioctl [ 337.976939] QAT: Invalid ioctl [ 337.980605] QAT: Invalid ioctl [ 337.984670] QAT: Invalid ioctl [ 337.988359] QAT: Invalid ioctl [ 337.992257] QAT: Invalid ioctl [ 337.995828] QAT: Invalid ioctl [ 338.005791] QAT: Invalid ioctl [ 338.010745] QAT: Invalid ioctl [ 338.014207] QAT: Invalid ioctl [ 338.017956] QAT: Invalid ioctl [ 338.021484] QAT: Invalid ioctl [ 338.025341] QAT: Invalid ioctl [ 338.032056] QAT: Invalid ioctl [ 338.035668] QAT: Invalid ioctl [ 338.039601] QAT: Invalid ioctl [ 338.043533] QAT: Invalid ioctl [ 338.047387] QAT: Invalid ioctl [ 338.050803] QAT: Invalid ioctl [ 338.054701] QAT: Invalid ioctl [ 338.058406] QAT: Invalid ioctl [ 338.061901] QAT: Invalid ioctl [ 338.065609] QAT: Invalid ioctl [ 338.069409] QAT: Invalid ioctl [ 338.072865] QAT: Invalid ioctl [ 338.329973] FAULT_FLAG_ALLOW_RETRY missing 30 [ 338.334722] CPU: 1 PID: 22745 Comm: syz-executor6 Not tainted 4.18.0-rc1+ #111 [ 338.342091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 338.351453] Call Trace: [ 338.354058] dump_stack+0x1c9/0x2b4 [ 338.357703] ? dump_stack_print_info.cold.2+0x52/0x52 [ 338.362969] ? kasan_check_write+0x14/0x20 [ 338.367222] ? do_raw_spin_lock+0xc1/0x200 [ 338.371479] handle_userfault.cold.32+0x47/0x62 [ 338.376168] ? userfaultfd_ioctl+0x4fd0/0x4fd0 [ 338.380769] ? debug_check_no_locks_freed+0x310/0x310 [ 338.386088] ? perf_event_update_userpage+0xd30/0xd30 [ 338.391304] ? print_usage_bug+0xc0/0xc0 [ 338.395390] ? print_usage_bug+0xc0/0xc0 [ 338.399467] ? __perf_event_task_sched_in+0x24f/0xbb0 [ 338.404696] ? userfaultfd_ctx_put+0x810/0x810 [ 338.409296] ? find_held_lock+0x36/0x1c0 [ 338.413389] ? __lock_acquire+0x7fc/0x5020 [ 338.417644] ? lock_downgrade+0x8f0/0x8f0 [ 338.421812] ? graph_lock+0x170/0x170 [ 338.425647] ? find_held_lock+0x36/0x1c0 [ 338.429719] ? lock_downgrade+0x8f0/0x8f0 [ 338.430823] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 338.433874] ? kasan_check_read+0x11/0x20 [ 338.433895] ? do_raw_spin_unlock+0xa7/0x2f0 [ 338.452760] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 338.457365] ? kasan_check_write+0x14/0x20 [ 338.461641] ? do_raw_spin_lock+0xc1/0x200 [ 338.465891] __handle_mm_fault+0x3a0a/0x4460 [ 338.470325] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 338.475173] ? graph_lock+0x170/0x170 [ 338.479179] ? lock_downgrade+0x8f0/0x8f0 [ 338.483395] ? kasan_check_read+0x11/0x20 [ 338.487642] ? rcu_is_watching+0x8c/0x150 [ 338.491803] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 338.496204] ? handle_mm_fault+0x8c4/0xc80 [ 338.500459] handle_mm_fault+0x53e/0xc80 [ 338.504515] ? __handle_mm_fault+0x4460/0x4460 [ 338.509095] ? find_vma+0x34/0x190 [ 338.512631] __do_page_fault+0x620/0xe50 [ 338.516805] ? mm_fault_error+0x380/0x380 [ 338.521218] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 338.526234] ? graph_lock+0x170/0x170 [ 338.530049] do_page_fault+0xf6/0x8c0 [ 338.533862] ? vmalloc_sync_all+0x30/0x30 [ 338.538209] ? find_held_lock+0x36/0x1c0 [ 338.542264] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 338.547098] page_fault+0x1e/0x30 [ 338.550812] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 338.556421] Code: 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f [ 338.575683] RSP: 0018:ffff8801c7bdf7f0 EFLAGS: 00010202 [ 338.581039] RAX: 0000000000000004 RBX: 0000000000000004 RCX: 0000000000000004 [ 338.588299] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff8801c7bdf890 [ 338.595566] RBP: ffff8801c7bdf828 R08: ffffed0038f7bf13 R09: ffffed0038f7bf12 [ 338.602834] R10: ffffed0038f7bf12 R11: 0000000000000003 R12: 0000000020013004 [ 338.610109] R13: 0000000020013000 R14: ffff8801c7bdf890 R15: 00007ffffffff000 [ 338.617409] ? _copy_from_user+0x10d/0x150 [ 338.621661] evdev_do_ioctl+0xb69/0x21a0 [ 338.625736] ? lock_downgrade+0x8f0/0x8f0 [ 338.629932] ? str_to_user+0x90/0x90 [ 338.633941] ? do_futex+0x249/0x27d0 [ 338.637670] ? rcu_is_watching+0x8c/0x150 [ 338.641853] ? graph_lock+0x170/0x170 [ 338.645674] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 338.650106] ? find_held_lock+0x36/0x1c0 [ 338.654160] ? lock_downgrade+0x8f0/0x8f0 [ 338.658298] ? kasan_check_read+0x11/0x20 [ 338.662433] ? rcu_is_watching+0x8c/0x150 [ 338.666565] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 338.670963] ? __fget+0x414/0x670 [ 338.674430] evdev_ioctl_handler+0x144/0x1a0 [ 338.678828] evdev_ioctl+0x27/0x2e [ 338.682354] ? evdev_ioctl_compat+0x30/0x30 [ 338.686660] do_vfs_ioctl+0x1de/0x1720 [ 338.690545] ? rcu_is_watching+0x8c/0x150 [ 338.694692] ? ioctl_preallocate+0x300/0x300 [ 338.699102] ? __fget_light+0x2f7/0x440 [ 338.703062] ? fget_raw+0x20/0x20 [ 338.706500] ? putname+0xf2/0x130 [ 338.709947] ? rcu_read_lock_sched_held+0x108/0x120 [ 338.714952] ? kmem_cache_free+0x25c/0x2d0 [ 338.719193] ? __x64_sys_futex+0x47f/0x6a0 [ 338.723427] ? do_futex+0x27d0/0x27d0 [ 338.727236] ? security_file_ioctl+0x94/0xc0 [ 338.731644] ksys_ioctl+0xa9/0xd0 [ 338.735093] __x64_sys_ioctl+0x73/0xb0 [ 338.738969] do_syscall_64+0x1b9/0x820 [ 338.742855] ? syscall_return_slowpath+0x5e0/0x5e0 [ 338.747770] ? syscall_return_slowpath+0x31d/0x5e0 [ 338.752692] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 338.758046] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 338.762889] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 338.768069] RIP: 0033:0x455b29 [ 338.771242] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 338.790466] RSP: 002b:00007f2451247c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 338.798181] RAX: ffffffffffffffda RBX: 00007f24512486d4 RCX: 0000000000455b29 [ 338.805434] RDX: 0000000020013000 RSI: 00000000400445a0 RDI: 0000000000000017 [ 338.812706] RBP: 000000000072bf50 R08: 0000000000000000 R09: 0000000000000000 [ 338.819961] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 338.827219] R13: 00000000004bd250 R14: 00000000004cb350 R15: 0000000000000001 13:46:07 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000980)=""/230, 0xe6}], 0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffff}, 0x13f, 0x100a}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f0000000240)={0x4, 0xae, 0xfa00, {r4, 0x28c1}}, 0x2) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1}) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) 13:46:07 executing program 1: symlink(&(0x7f0000000280)='/\x00', &(0x7f0000000040)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000680), 0x10a032, &(0x7f00000001c0)=ANY=[@ANYBLOB="64656275675f775a6e0902e059aebb230b6973697a653d372c00"]) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xd05, 0x193000) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)=0x100000000) 13:46:07 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="0401050005000e0000000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:07 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000000f00000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCSSOFTCAR(r1, 0x540c, &(0x7f0000000000)=0xec03) 13:46:07 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x100, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x42000, 0x0) r2 = syz_fuse_mount(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x0, 0x0, 0x101, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x10080, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x408202) r5 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x1, 0x0) r7 = openat$md(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/md0\x00', 0x2001, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000440)={0x6, 0x40, 0x7, 0x0, 0x0, [{r1, 0x0, 0xfffffffffffff430}, {r2, 0x0, 0x6}, {r3, 0x0, 0x2}, {r4, 0x0, 0x3}, {r5, 0x0, 0xf1a2}, {r6}, {r7, 0x0, 0x1}]}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(khazad-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r9 = accept$alg(r8, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x0, &(0x7f0000002b00)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) write$binfmt_elf64(r9, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000"], 0x18) recvmsg(r9, &(0x7f0000000100)={&(0x7f0000000180)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000016c0)=""/209, 0xd1}], 0x1, &(0x7f00000017c0)=""/201, 0xc9}, 0x0) 13:46:07 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x1000004000008912, &(0x7f0000000040)="295ee1311f16d477671070") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f0000000200)=""/252) 13:46:07 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x2, 0x80200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x54, 0x0, &(0x7f0000000100)=[@reply_sg={0x40486312, {{0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, &(0x7f0000000080), &(0x7f00000000c0)=[0x78, 0x30, 0x0]}, 0x81}}, @decrefs={0x40046307}], 0x18, 0x0, &(0x7f0000000180)="2b6742fc25d467043e2b0b6eaa8007e6f6af86c3197859c8"}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000200)=0xffff00000000000) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x0, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) mkdirat(r4, &(0x7f00000002c0)='./file0\x00', 0x100) epoll_wait(r3, &(0x7f0000000300)=[{}, {}, {}, {}, {}], 0x5, 0x2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x7) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000380)={0x12, 0x13, &(0x7f0000000340)="d9d137592cc6a0f71e82f30e8cc41e59ffd113"}) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000003c0)=0x1, 0x4) pwritev(r3, &(0x7f0000001680)=[{&(0x7f0000000400)="c318774ed42d236944d97f1b2074987340ed23e472cef4b5e5bec45de24bb0a00a78518756f3beda2c6df228ba3a9e43a058ccb627921b18db0afa33ee77ffd5e39d7651ec432fea9af9b19b6c2cd7a9606ce68e87573eee77d2a9067d282cd14680bc3c2edfac168cd1a8571435bed15a0846a3b7cbe72076734d27495fc6cd9b6601f6c5d37c92eac09e688c498dbfca00fa54af8ebb5922", 0x99}, {&(0x7f00000004c0)="f51ef74ab33405f17e4fbb7cb845c9aa11d3619f0a9e6f24def649fd43de781db53d09c202c798d826abe44a192201ee1e948032b8dc6edd25479f2309a6d48e229f7886f63a2ea1ced5946dfde66ee5f242232daf8f5a4f3da99be8cb0e0d24e704e0b48e7e56b5b54800102cd1242814f89dd3844da668c653bf055f7800817197530a98", 0x85}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="9bb1c886e867360fbac654da2ae0d548ba20a3183edec3720e265f135fd8d44fb80846cf28ac0e27df39f044ed51729986c77c2908dc15de4a085efd8118f3dfa1cdbba9ce6e6282f5e412921c4491289a014354d4c5dd7c8d35c264e2713b1c2f0f07fc04676b8b0cc94103f96689aef4221e43d29a6516eac0938419358750ec0486e49239966701f70a299a40e17360c679a0033fc8ce5a", 0x99}, {&(0x7f0000001640)="89546b0772ea5d0288ad", 0xa}], 0x5, 0x0) readahead(r4, 0xff, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000001700)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f0000001800)=0xe8) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000001840)=r5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fdatasync(r3) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x8) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000001d00)=@filter={'filter\x00', 0xe, 0x3, 0x430, [0x0, 0x200018c0, 0x200018f0, 0x20001b48], 0x0, &(0x7f0000001880), &(0x7f00000018c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x19, 0x18, 0x60, 'bpq0\x00', 'veth1_to_team\x00', 'veth1\x00', 'bcsh0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], @random="9671d58ea867", [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], 0x70, 0xf0, 0x128}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x1000, 'syz1\x00', 0x3f}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}]}, @common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0xffffffffffffffff}}}}, {{{0x3, 0x13, 0x88a2, 'ip6gretap0\x00', 'veth0\x00', 'bond0\x00', 'ip_vti0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0xff, 0x0, 0xff, 0x0, 0xff], 0xa0, 0xd0, 0x100, [@vlan={'vlan\x00', 0x8, {{0x0, 0x6, 0x0, 0x2, 0x4}}}]}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x7d6}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0x5, 0x1, 0x89ff, 'dummy0\x00', 'bcsh0\x00', 'bcsh0\x00', 'vlan0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0xff, 0x0, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], 0xd0, 0x148, 0x178, [@cgroup0={'cgroup\x00', 0x8, {{0x5}}}, @state={'state\x00', 0x8, {{0x2}}}]}, [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x20, 0x80000000, 0x3}}}]}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}]}]}, 0x4a8) r7 = gettid() capset(&(0x7f0000001d80)={0x20080522, r7}, &(0x7f0000001dc0)={0x3, 0x8001, 0x9, 0xfffffffffffffffc, 0x7, 0x81}) socket$l2tp(0x18, 0x1, 0x1) prctl$getname(0x10, &(0x7f0000001e00)=""/94) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000001e80)=""/4096) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000002e80)={0x0, @in={{0x2, 0x7}}, 0x6, 0x20}, &(0x7f0000002f40)=0x90) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000002f80)={0x9, 0x202, 0xffffffff, 0x5, r8}, 0x10) read(r1, &(0x7f0000002fc0)=""/160, 0xa0) r9 = getgid() syz_fuseblk_mount(&(0x7f0000003080)='./file0\x00', &(0x7f00000030c0)='./file0\x00', 0x6000, r6, r9, 0x3, 0x100000001, 0x20) 13:46:07 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="0401050005000000000e0000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 338.947967] Unknown ioctl 21667 [ 338.961638] Unknown ioctl 1074025690 [ 338.979998] Unknown ioctl 44547 13:46:07 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/autofs\x00', 0x65a380, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000d4effc), 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001780)={'ip_vti0\x00', 0x0}) sendmmsg(r1, &(0x7f0000008980)=[{{0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x4880}, 0x4}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="3f5de59aa8b4fe2796dd329fad804a1f664c33086e94b108f5ad5c5b4ff9ad2ae017b2c62a8e80331c78c483f111737cf94a71b095f651a5ff0f2271bf93fadfb8de29d226a24275f46afc3f2a9613c5fd780b6b1c7cbf80d27db629cbf08ed2cdae35424945eeb8f66088f820d0999400818ea3882a4ce1066979b9969ea12e5833c29097", 0x85}, {&(0x7f0000000200)="f7b6cfa2a021058c7cbd11ddd3be9bae803ae3654da7776cf810309ae1d045f2d6f7c02d424de507f4cd2dea0450a57529bfba2c2589aef4c3f175a4c1a51d8848fe417134155e75a9d59e87389ec097773b5330536dffcdd11f7106b3c4020790decf591643a3cef6a5ddb73255cbc1ae6ba308ada09d64d9928d3b14a702ee3960fc38", 0x84}, {&(0x7f00000002c0)="51eab194a01d43d95ecabe75fd324f6af98a9c9690a244feffcef82afb153e85e98429858a73ede9212bd1708284fdb7a0ecc516486c9a0cc89e329770c90a8a54ca83651b7fb5a9b3db95eed12e57602213f3db4c67f700e35300ee9012196ea5eaa80d3c4e06babb162dc3e651f4782f", 0x71}], 0x3, 0x0, 0x0, 0x40040}, 0x9}, {{&(0x7f0000000380)=@in6={0xa, 0x4e22, 0x2, @mcast1={0xff, 0x1, [], 0x1}, 0x4306598b}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)}, {&(0x7f0000001440)="cbc2114673ef00c62e715985196b7a5b24a351761c7287831333627385a8db0a065ea11b0935aba94974200b499f6c1f4f4921f7c857dbb2592ba2124e2e69107aea6a722ce41b5c3deaaefa7223e9206de2eb9bb18c8e86e3d30971525f6101c7f619579ffced7310b3da74649b096be1a95d10717eb4809b7b0c3e3713ddc3bc52f4d7f9c8a723", 0x88}, {&(0x7f0000001500)="08f235390e1f998dfa762c94227bb807091456f831452ee68dc168c355d1d76d58fc6c2d201013e215ceeaa224691cdc8e8a1bc0e27fc1a99f115b33933531f77c6d2efb33b3c4437923052e5efdcefabbf6f60344b859e7a1462f6ae295ea7d396049776a4c5ea0b8fde1a5026b901decae2e76d75a988d166e5f8d51bc07a298531b55c36289b67520fa925626cf9ff2a38768c0d9b7e113db338a59468e6c2577d890d82429e93cf5687f45e77e8c1b1ad8940ca08d6db7c2d69bab70a0b3a7ce919e71a9b54247bd2f03f2d4f321f1e45d82560fff7cf120519e89c24a8d19a17580eb3ed9daf439391beadcfb119f46dd24510809c3", 0xf8}, {&(0x7f0000001600)="e8a1d557fe1b55192c3e3accf9ab024a42de966d7de54601e294776876469b8ba86ea15b6de1380a20e0f1f55e88fb1dda09e244c48fa89c947f38445a532c30de7793f912b23c5589", 0x49}, {&(0x7f0000001680)="584bbb3d3eee3ab34fee4cbd98e145dc441de07ce635f03edc2ef358a1aee182fd1d8c33eefa", 0x26}, {&(0x7f00000016c0)="6abbeb87d0951f8a2f9bef1f4aeda324f3e606549d5bd30db015a43ed5fedb0161c3e8b97bfe705393307f444319e373c921ed0eb22bccd426ee", 0x3a}], 0x7, 0x0, 0x0, 0x24008080}, 0xfffffffffffffffa}, {{&(0x7f00000017c0)=@ll={0x11, 0xf8, r2, 0x1, 0xffffffffffffffe1, 0x6}, 0x80, &(0x7f0000002b80)=[{&(0x7f0000001840)="6c263d6bc689bbac2fca21454ca70b4fd8dd7ab351f30e92d8219df5ad009e49518af19d7af6fd6fe5c433511c1de9e54944a1522abbaca0c3532e83a02ea447954fb4b7641e2e2f5d3ad4582ce0b825cbb4e44b61e24d1737f4842e76538a6a81e1b9eb77df9a1ac87cf2f89f040c379eea19edb7649dae93f72f751ef1746867cae3ab3f933706955dc848f73ef2d2f06575d11856a87a576cf7e43708ae9ae026b1e4aa4e9bb1509a11d713e7f4fdb62f9e11b0be09ec110c40d07491705e3d52cf59b5b59a08921032583f55e7763223", 0xd2}, {&(0x7f0000001940)="aaa34a7278e142c4dde405b670842d0e8fc8137b8d4a7d862059838f0da1460e930677fe4ada12315cb67ab0d24b821ebb174b0d25771aceb73af08095cfb0f3e1e7844e025699c038ef2e7410b1945bc62d2698ec1fb0091b24d92f2275b4dbda705f7db4cd43c06c37f57ef1ead10f0aec91474c33f4e12a6fbf42b93f04f7ff214e3222322ef649113d3b7bdab4613c8133eca1f93f124718c90a56c0ba94dfb119b604a5780498e5e13189a6f3ddd1014c3f83eaf54acb371db2a233c38eae8ad6159d03dbae8ff920864959dbbc6da3fe171cb2da", 0xd7}, {&(0x7f0000001a40)="42288e8cd5853adfc829a494945ea180af7c7436fb89f13ee09d807f", 0x1c}, {&(0x7f0000001a80)="f30cca1a7684969d8b97f3a3d5bce2ff7f15d7372d527641f85391d83bb0", 0x1e}, {&(0x7f0000001ac0)="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", 0x1000}, {&(0x7f0000002ac0)="3d8398d267685a8159a57ac24889577be1ec838e15abac5046a8657c9d817e5997a526e113e5dfbd392043552b81a127e614e0dcf75a46bb95cb34ef4f99fc566185046f011072e15deab280c94fdbb44c1a0a1f2a1d54e9d8660ef0132022eb797cc8049ec582878fd5105177e91ea354708f1385a7dd8c7298f540f20e188d514b", 0x82}], 0x6, &(0x7f0000002c00), 0x0, 0x40015}, 0x3}, {{&(0x7f0000002c40)=@vsock={0x28, 0x0, 0x2711, @my=0x1}, 0x80, &(0x7f0000003100)=[{&(0x7f0000002cc0)="38868d3b7246e1ec9d7b63ca7d5b69b8c3e6076e4d72e8dcd7ac9c6dbf128b9f313d56333c4fc75df5de2685ce0e46e346ae7253d1e82c48d64f4e6b61b9f3a7a117e8d2bae7e3e6ebb3b6b346216435f99e9f9e732148ced117a0cfbf8ab3d284d3a1964b038994d4bc3a06fe6b5b43eb1f0cfed22e243793d80e4eb24b1bb226284e566adb2a7759bc042c22fec40366af6438ed419126121d379e8014dca1545805fd58b01eafb17d128f3613bc5b018858fdfa467fc5e753", 0xba}, {&(0x7f0000002d80)="d33ad798839150d6d99f459b3390636b9a9e0ad9a35ec726ebac205b2e48883f820df0ac477f1e7d50db0b4675", 0x2d}, {&(0x7f0000002dc0)="c4e0d760dbfee7ef945780df2f5bba21982e3d669d538b246c1ba282ad1066c7f5dd5047eb7f966644a2d8d190ded6cbfaddcabcdde1a9d38775229283ac90f7a699c0c3af01ef76bc97a16adf188e60f4292953fcba5f5d81c8016fc31d0f69ffc9fe870e", 0x65}, {&(0x7f0000002e40)="cf226b1fbdaa07ecd327675935e8bf9b96ec56a1693484295a6fc5092ff82942cbe9deaf5db6a9f3cb77bed39ca89426c07baa2cd158c024427e872dffdd6207b32f59cee2d34f7c9d65aa66bb2217d50dd127406b1afa428a3f15e520c1b9ccf4d651146b9f4e3041c2a605adf08ad4efda3a7dde522d4fadcd8779b599e10de9cbb7c523d3b0df3cb3b24204867625dc21bd90d3016f13274579a35145d8c921466364bce73ecfd6205aab0c4f2b98e445f5dd854f316c2c02f518efe766a366d9b935aca2d72dbab0ce435e38fe9fb852bd1fa1d62ea459528ab3db0d54cac776dbe5b1a609546d831832b604a21007040ee3d74e291d0f1b890ba70d", 0xfe}, {&(0x7f0000002f40)="c121487f05f9ab4e79a5d1d7b8c094313a42684c0c5b256bb65182d111f8cec609e35e3f7d40e020961a8150a960357f760838a6", 0x34}, {&(0x7f0000002f80)="95cf789a8604b6e35707799264d775a8a80f90a4387bd4a1f44ad96d163db5cd86062fe3860e9cb4c1b67380f36f0f3d329b1249cac9b8a4945a6340dadba83f5c88363f2e0149990f97d3c1085eb5712a3b", 0x52}, {&(0x7f0000003000)="19a22bdcc22f6354a6e13d7c90b50b5fb176466b36db5dc9624fb7e51ea6b2a7595545a69ddec77af682146d65505e0d3416070dd88395de8b74a26da27d99ff3dccb17378b6794079fed1df333a99554fd81c0296c6c6a4fede7ad01eb6e4db", 0x60}, {&(0x7f0000003080)="60238d73481851e62b26356e194e5b790db4eb91a45f85ed1232094ab53d59f0a8fb9829a1ddc3cb2c1560724356f519c33857fb75dc1b3addea32f166941c3faef2a1a14e7e05f1c32ad1d8c62fda4500aa50ab3b0ea9a28525e0f5c4a2c4da007142b4894294d39b92b8110e5aa2bf8978a0c46d448dd4e7bd", 0x7a}], 0x8, 0x0, 0x0, 0x48000}, 0xcd}, {{&(0x7f0000003180)=@pptp={0x18, 0x2, {0x3, @broadcast=0xffffffff}}, 0x80, &(0x7f0000004440)=[{&(0x7f0000003200)="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", 0x1000}, {&(0x7f0000004200)="2f57202c34ce0cf494cd37dcfbfc119e9ec0ebe753f81a82e34c6d44b15ae8b26c12e634de4e80ae85d119a78b7967fa0d4669b36ff859dcf601a8e0f6ead5deece6e34b723117d6d998a5a38b17396052294c78478d96301a1c251c711f67954621c5ea04742fc558cfe1d59fa90f878e522e8edc076cdd71fc4aa3bd7de0f1330130bf3aa685dd273ef3be30c5b4dc75aaa5f304f2bd80f4e0046a7e0c7a175c671187a08d6ce65234902f3b9e414397e9b541f65612473f7242f809bcd9e72feab62b03abb9486c31d02a8fc119b8", 0xd0}, {&(0x7f0000004300)="1b6c7154fb816ea7b529e36c5b59973a9fe0b4cffb9578d6b29321c27c32e7a3bb2e619bf5910e9d0453d1e85572aec5ada25f89aff5721b0ba54bf4c48b426cef1b88e8da22525895663ed3befe1f5d17e64de24debc52d5ff693db4d5b30478d3f41e48182a30e6beb14", 0x6b}, {&(0x7f0000004380)="46a1ecf8dadad1db883afa8d79bb48045d23f3a7b318fad0746608944db60daacc73a4ac64679eb0b958e9ecce8f382b68a28f6bdbf105c87488f77c946509f6476d27bb5cd66a7cf53172ff86edb6c30b9e742df966315093b0decc86a3605a57c5e0d110b8890b95a46ba88aa1e8750c446501d0", 0x75}, {&(0x7f0000004400)="bc24bf83106b", 0x6}], 0x5, &(0x7f00000044c0)=[{0x70, 0x11, 0xb31, "65c186fec1afd92ae7f8a35300131e3e0934578d191c246e22de658b014e37fe3b83cc95e5b6ce5076f2590ef9057961124d4cd670201186118924d0a73e655b06c316f0fa3fc9b5a5d05199efdce34129da46c0b88eead8957e"}, {0x98, 0x119, 0xeb, "2c8c3623dd72cb657ae0e054eb53cf73315dd3111aa0a38f8aea7da403d5ac2ced7a623b6fdb231b4123291833b5441fdc8125ef64419ee58f4ac8ab498d5f8bff5c81209406c62d9e2978ea977a89c34a2972b44e45a29f070dcc04048dd7da2a54304772f7da52f671c395b0f281c0a02a7e082a2c5581589edcc1ad811158199e4fba25b2"}, {0x58, 0x111, 0xb23, "bdcc15f4a058af146a1e0dd19d28d1d28f0c7e666cfd233f66eff5b109e9229e2831275211fc3afa0c698ec6ca6226d1230cf52f3c68b99047ad421de0d81780c6f44c3a09"}, {0xf0, 0x0, 0xff, "3618e6b1a8540f80efd7292a80e0a87c0be25c0db46cb89c5f781df9064407d3428043f673c45efac295ddfc1b953bfb87cb9cb3245e863d5d123c8e0ffdd5cc526420b7a5f7607240ef52c8824e8c762957ad8ae7c86635e7b45aa0a45fa7c45b4741bdd604236209c6cba7a546d9e2aa6de6c265bcc07976d41adf08c9052fabf4585db18eb3088213a5f085b1b5fb30b9816c84530e3e7620b9a39a34d89afaf36f33c0a3386548a935512d75c0b74f08120e9f981852d471204a99e5400c0d31550c7035bdb80bb18b358cf9fe3c4e853ef065f3ebda02728d6adf035053"}, {0xf0, 0x13f, 0x401, "b9b161d8c70aa20654f1a71fb0651d3debb4cf4a75ece46b0d88a1fe92eb36eea03a41176ada0e429eb154117883fc7c1e009a16e8c346b67c9d8c1be4aa93d491b84131f791f4e078642d730def49f58c45fdc671ab5dad7d24c2a09922a57490ca7bbd680d506d80b9086e53a02566063befb4c20e26ed759f333623a6a699aa05dc37656a5fa8cb42802dd1d20f0587dfb128e09da0ce6127e9523926d940c595fcec3b7830ad85e8521d732c18379f95a488c5773756aad6fdc376b5fd8a5f350d1850ee0010923694dd2cd242d8e30fd83b3dc1903c6cecaa0e"}, {0xa0, 0x117, 0x8, "bc103f6210b74e2f84c17d18435b65ae70b3640f2a7f2ecf5c1ae8378777367c5c01e541c8b279696a026c7be9f2701320c182fbf626f622ea52df5528f989560379df26c9d0647b436c06a73e3ba941fd374fba3d3317ab2da371119751e2d0b0444267ee41b5ce9fcac0f5aaea88d8a1229645068b8eb53d41c64e8e155d3978b487ec8ba97a59be5b"}, {0xf8, 0x100, 0x100, "17cfab08c213ef5b6c5f6e9f0b6fa5783df6e927dda078a096602df585c85d1668cd5adba13b0410ae1dfab30af037e72706783d617c3af34caeb91f004e6ba0a9e9556fe42a7c6deefa5fecb14a7a5d6a3b1145cc1c0b113bb2f8c6dc39dbdab60f7cafbfa67595fcb63864564bf4731413baa819b928855e81c59e6100c514c6b37ee8052d016c519adbcf2956fe43031928c2cb4da9dbbfdc7f25915312b6886ac8727c100b1302444585400c1ce1373203533f5f508ae5b195088eae6b20c80db201815d6c9a2915acb38ba22fbe8d8706670fa990a937eb3634dfb3db4209f29288502b99bc"}], 0x4d8, 0x20000000}, 0x7}, {{&(0x7f00000049c0)=@ipx={0x4, 0x5, 0x10000, "857e76e068fa", 0x81}, 0x80, &(0x7f0000004c40)=[{&(0x7f0000004a40)="ebbbb16c134bca085d2ad71fb215ea3c978a8a22d0ca7adf1fd170318a40a559b33c6b05b2c2e7219f0276bb0cca78d8cd90d00acd7b0908dc3aa3009d1c39d908bdbe41cf505cabd4de3e7c15e8d48ce4819d0411d5bb4aa854717c9b5bc3095d67adadc614048f70ce55329d85998c409e2e99ed537f3d15a564fe8f2f4a86b31e3840deea1e7daab6c7e389f085a5271975f901a488f7d865f9c9c0ed115c25313f89ca42ac82554c48d59281b272eb1b00f0ebf45fcb360bc9cc706da548f1bf236ef891737e9aa1c800d8855f189accaeec5ce3215047", 0xd9}, {&(0x7f0000004b40)="e0b3483819207b8d", 0x8}, {&(0x7f0000004b80)="5c94f4cc158b2cc8ad50af8ec1dceb8e931e8047380a4dd1fd4226272056e3f223d5009fdb9486ecd962eb9429efc81741ef3c1af57bbaef62592da386cc40f170943bd4c9bcf80a2b633c9eb9c7fabaf003ae6f2e17d3f5847fffc458394a638bd64b7bad088cfdc5b4e312f1d58dedd71370", 0x73}, {&(0x7f0000004c00)="4a9deab4f344325cbe94ed38b25bc349ead1a990e08c6673d07a07a2b63f94817c722d519089c328c535122bb4fb7708", 0x30}], 0x4, &(0x7f0000004c80)=[{0xe0, 0x10f, 0x6, "48fa17a4c24275a2d0208484b00b4670a503eaa1acc286ca4b3800e74e067a0152f7ea49ff0df7d8fe675f3013aa930d19f3bb6a4b910ecfa60d0585d6ede097a18007f262dba7afb617ddd0c8141fae6efa22f1e55fd8d98c2cd704f883e6d8a5ffdf17d0724eee5ccc6ff80fefe2d37ed1d11ebbe3da8bf19147e86395f3a5326d3a04aa32a064051a52b776cf7f5198cdc42c67f124420d09e68fbed27ac0c0d5917e498637be2df2942571c65be214bf33a9119d3c85d58542cf19b25e8372a55857e3b7989fa09fc45de8d8b7"}, {0x90, 0x19f, 0x8, "75124fea94c8d278823deec356410a3d893da5295d1a933293b01b3391361a098f2ff0883857b0969772f3f9a3263894baaa17028751be889685c69018f974663d08858f27b2e5aeae630a0a72204c1ce684a783189c95f81d6729d023bf57b9f97adc9583c4464663c10b5e415747ea7c53614cd6d08cd7d16c9d"}, {0x48, 0x100, 0x1, "ffbd6c60cf3a30682df148b5aa5124c0d978cd60e4034fad09899b9e8f2888227db0b5b6e0f509713fd3353add3092b8fed1c83e"}, {0xf0, 0x117, 0x1, "af293e628997a1031b676e8dd661bd47f6d6e74deecf80b305e4dc294dc9817a0edf62adf5db25c23d875f234d39df44bd1a8433c98e8d752ac8f3fb66172d3f600c0295119cfd7100f3a4ed9bea2b85a1758b894d90cd3372419c338459de320ebca5eeb654de961e8667af3e3ea60655e3d39a292c3e836f866394d471d67e6f9e5c34e3105276cf38225462e4460fcee912f69a8260b5511a4a9ef49dbf4a371430474162ca0b491c25482cb16a71a8aa7687d78c68ddb190535959fc092df2f5316c5b553de218dc421a7176a1ae379dbb6c00a5bb674a3c8260183a47"}], 0x2a8, 0x20000000}, 0x8000}, {{&(0x7f0000004f40)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x0, 0x1, 0x0, {0xa, 0x4e22, 0x10001, @ipv4={[], [0xff, 0xff]}}}}, 0x80, &(0x7f0000005000)=[{&(0x7f0000004fc0)}], 0x1, &(0x7f0000005040)=[{0x80, 0x105, 0x73a9, "84645499d1f4f4de3fbbb5e2bacc5d52e411e4221f9e8581045df47b61c1bf927e1e63a21a0b7ba05bcfebc1b3797e1933b1bd60a37d1e7202938f54555c672d6a7b6f93922a30866e91f4a2f80c0896225e9ff483725f8615163a50f7fe07236e895360292bf1639fb0dee7"}], 0x80, 0x4040000}, 0x2}, {{0x0, 0x0, &(0x7f0000006240)=[{&(0x7f00000050c0)="9da41571", 0x4}, {&(0x7f0000005100)="3126fcf061724bdb73f57a267dae5b633541996130e2cd386d24dbd0ab347991edb7b445f47c832ae3ebc3a9a9f53c8fd7b3a934c7c46e52ae531f7154afa2ac3421cc6a2542bfbd31c64833483528f77fed610d347af375c99a4dae20cd03393142eb77d1b6195cb473fdf04a8e33bfa66c8d74ec8872d79a5dca555221feb72298835456beac811dcbe2c042e1ec4999fbaded761782a9aabe34c527218d02983014a49c20f167c4", 0xa9}, {&(0x7f00000051c0)="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", 0x1000}, {&(0x7f00000061c0)="a8386b5fe593569fc41dbc00226ef8f3e8fc0a94267ab1f46d4a65e3a50cfd86696305c75d69d2d8260f7d44e78987212a00f9271f6c5f6d3015a65f754522c47497d743de002e8d283ab85dcc6ee0988f69b5ef34e2e23d65006cd3a3237dbc79e483a5a07fcceaaf9f2a3f49ba101adfd576c5389fcc2188dee1", 0x7b}], 0x4, 0x0, 0x0, 0x20000014}, 0x80}, {{&(0x7f0000006280)=@ethernet={0x307, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x80, &(0x7f0000007540)=[{&(0x7f0000006300)="77c2a87f3370427385e69a622e4ac6702bb16c847e6946be5b5f2cee6ae097f240ebc14f2d4d1026cc9605dd92f87ea47f84ff72b82712f6a00abceb73098d3ed15c91d16d6b80e97ec24a3a95c27e71dc79b4a7aec88eaeee96ba793a2a70e27e4d5a9373361afee315a0d8fb203b", 0x6f}, {&(0x7f0000006380)="8ba9e008b7d5013fdc25a1a9af5f356a7d7b7652085c93f3de845d81cfbade49ffb62fa76fa393e4ad32320df6179f7a74ba1962d2b443feab803d33440d1673ae77643f4ea318818a13378fe1f898388207c6253fa784fbf8cc818437de950bf2bf84df4fd3419f1e27f0982b05fa782bad9aa524fea9d98697b37be273d7fec8164122582d24f328e1448ba65b064cb01f9f40302805ed6d7383cc3f045c413d0bd633077ca3ac9ab2e45568e24bfe304c111e3de1a08a422490f3a0ade9351c94dc2b18ee4f922e9e4de81b574fc7b437a116ce058709e7e9daeca34444e594c8d12e449868a20403f0ffb3d9705434e6bdc6b0cada0d7db9add0dbcd8dac8825df5d7b762722566c3d79cef2729047611a1b82a3fda611e87991962577df53b561499e75cda7621993a500c5a7a0a39b3b6d442f16d5b9ec3a6343db51e606526cb7823582e73a8bfc9c79c75d59e3ebf20d77b903fe14e1b2fcac9ef8bba77bfaaf224a3bab76a9c1eece9cc13b17ef46ee42559a9f09f00016a7a84ae102b2cfc4a61d25c946e605e49089d34d44ebdab5ba307003f4566e6dc65eb9d2bb90b72fa9e51739cf4fb0e9ccabd7ff64bac84f178b22432c669c93f5922195b84066f0f4b4a7d82a0e4619d181b4df56c95ee51a571f094ccf66df2591f16a49621519f636a3cbb2618756ea13bb068d14fb4171b71e4f3d66313ac5240522c1b865270d6e26393a6b248e67cd0e796ed7532c6ea242be2834ff35f87371f690b91a412d79430863fc5b831ed5f7d3712522cdca88f390f29daf552371a120544b4a03fcf31ead8f322664d325599e4099c5a3d18118988813861dd8df61e902c4f3a9e279f9df23b68b615be20876371ecd030bb63e1a2fd42b90a9ade6c1f14697b591d63948d23bfdf72e4722be9b1b14a179ea1cd049841a49f1a6fc81c4a82b2859d2b1fb162be650655f973cd981b5f6d62ee10f0651d4e7c761b6cabfe9991823592b416b1cfec898ef0b4d4252e68aee9d8d2d70de89288da9807df597ecb6123f4b48ea905b0d3b2bdea189e9a24641fb24103e352ec65b4654f912634703be1564b80221bc991d1122366ed2d7a209adf9695dcb5ec43c51022a0d4a036c1bbd35705c751c1b8c473a252e31d0e847b5832bf13de9fec762ba8c9c42546666332af793e39c632f94c6d5061211faced6019c663d03023260d2e2c420f6411af9a36f05c58d55104a70a94b1ddf764de0200ac89c472187d2c15c2c99686c78d95da133c2792b55504d895c2cb4dbe5a8abf2340c9e41d2802d281008d397d7fbd1575c462093104f00e06cb7b6a3e15cd0c6dcc92793ee5e1a3fb7d431d74112d957b9c740a384899cceb906d7db6dbdf935316b33a570e2d10eff11178ca81367d41375c21ab160f6c468cf4da6e782433f9e59fd216cf4fe993141194c2c5835f360ef1ffa723346b9b3dbb35f8fe158901f9fb4b12c3ea7da76d4c2cb56b0862378a4e43046f03058f46b2f1ec33ac78140c35542ad7eb28487434bc71fea80358c7994d311836948a09784c51e8482675ec51e628735b6878d6b3a1e69f40f3b078acb6acf40d941ba174d65e45cb8cba304fa85c881410063655e0df090e88307231f66f77fa633824e6633f46c69503ee3189c9cf670a2d5a730b0cf04553b255b7171672c1f6dc2d6aca518f0935a6be364f873723803a46061981cda3cf37c672a8275f7d5525d85d73c8d802d082be457e9506a4a8e1450bb68b2a705cb702f6262ec93a16c2914b39077c5e4b1582dbfb3c1aee1ba6d93f8a679987e5a6b85a963800330d71be738f07a0d683c4435d7e65c28fd06a24df3d6b8ba22c3ad1e674da1388bea2d5d5fb168e4def60102cc72d9c66d25f0e122425d0e82b2129bd0906e8b1f3c6e2a898cc343fbbf6bbb3fef1a667c7cace89a43db823d84891b5e3b74a96b245a640e43cb635e6d06664e07bbd16be78bbd83682219cd1441c02087cc03a76f32344ea6c273bbd9c1f021e7c8b10b4275d6b5cc661f64fd33da46483062cc77b4e6a2fe86d0a0bb78285da4d2390ee38db917c69ebc5f981ff8387443e31b842084d6ae783ce50490c389b255375401ebc5f15015eb2160cba40fad399df4a7bbc82ca1115d993ad80f7035e21abcb275fdac8a8b491d40f878c1cf02c28e4e722336d902495e5a23921898c19b43e8ac4cbf79035465210385d85c70f9f6b60c79296194b2f0542fe0c3d83072468bfb45ea07c4d0b8f26cc31d7ed2cf8bd6f53d8809c4a14e210b0fbd3c846c25517d8777b5e5f8375baf8ab5b122601f30575f47292433135c233dcc8b791b84e2f81c2f64f45186d611eb9695f8ec2a5f53bbdb47a2ea9b0dd89602cd057f882fb27dfb6d9042a9485256c4336b32faacdafa9cd451e887c2c2513dcd7de7ea5ae3ef050bf2960ca84643932ce4ac7bc9fbda1efc235688029d197d01f684e47fea7f91c73e61c0ec27b0298031fb6ad64f52f9e6bd7f3c5f44e441aba4aa40c94feb79fca56698bf954a81d86102887e8822a2c47a1fa388245c7134413bc533aed3bc52b43f3ddbc24e158d9097eda06d84894df9305c91065b6e29c6bb870b07c8e2db09997d60849243b06bd1df70a0afd561cda88210202c77de2cb48af869ede301a242fbb9a7b5723d40b5444139b578f1c34e347c91867111da2067c17e4b3600e447f7c07a8b8a6dc30505b23f58cd9848d34888d8de5e6f5c66111a4075fe3956259dada8a826715925bbf65a3c0abeb18b0214039246de99e8afa695743d77568e6d10dd218cb276e90b44bff133d06e5104120e954b4ffe4f9307867f424116f06bc9c3bda14a049df317b33825533afa3b81dd4997f2323d3ee0ad051e5f06217d6f3a8a2c720e7021f5b0f1ea00cc462210e7f2ee531270e61637a0e94081dab8c2805cd1b4185dc0e6b78581358f9943cd9e4c006ac5e498d8665fd49e381b9128361508a8c7bb6343d43469f338a2d35570f5c725cb2783546d4c3a61aaeae97a89e1fb7aa1bb03fc1ca0c6e64a019d1f4cbf4d34d9839df08df82f7b45296f380169e3e20bd1d6733ba7adcab2d49c26a13e63bbe00a9101f72960926901c5b54cf55c313fe73c0658c87fc3daa547a8bd66e5abdd7e77397ed1f2f0b7e8e7b19fb944693fb8180606dc9e62ab6aeb914eaaad06cdfbcb0461ef562722f52716fea52a443b29afe6c262c7e52bb1fe4360c68ba7c98dcda695afa6b596e3428dd7a27d03252ce918da49d970488de43fc17758a959f8cb05e4b5fddd96d9ef68547b1fd2ff8d39e1f1569c0c9709dd56dcfe5ec738fcdcaa65484cbf964f866b7dc8cc326630bbe82a5f46921e747ad50c78c1ad520785b22f4d300f5ad16269a0f1cd282853a60b770f11b4814e730dd7fa163db667eeb1cfd9f27b2688dc606d614dddccc6240b74164529aba2bb76946f93a99d92dcde3c1d83b664303520b8e4efce8cbf7a31b1cc8a2d3beb11e5e1c4d489e5c9e0a6f43bc92206d65eee5d30a3256021bfb0eef6c3b63eec65783810cb1e89a67a97523cdd83aaa22b651cd818700bd3ad0a5c2f889ffa6b7efff45d1486aa4d44f05cc19b1d0bc85fa7ec8737e4cc858327e29f6e574198f846201e8016ebd4d37e8d18c130feb59ec2614d2ace93653d8bf617866c2e9aecfefea0ca1d229394bf613497b2fd02d2a0137d4862652c1490e28a9c87bad1d164b515bbff6fa41069ed49bf4cb49ce4b56039eacf1d74fc35a3194dfd567de2495b8e45df990e69deac604f928e3910f36aa8af2e9a764da637510e821569557aac6ecc12c2649f8b6a49b57e443dcbf18b9d175a6500d6b013a510bc593886a616800abaf61014e77eeb2e351824669bc7dd3f7545e8c6fd46bb221423a3f5aaadab657ca9fd114da91e7109dfae2466e21bf3d6f06019b53e0007905846c9cca47f94f87b9dd5a434bcc1f2a0c021cbf4508e536ee7539cb8db8475c252711c0dd232146244be02f8d5902540294997ff6487bfcf04dbd95b2b7a6c9aea46ec6c0e53f7c95e6a9e7a4d3fa96255b0eaa328e40647d17957222819c364fb4633669e2412f032d2a93f8940326bfc5fa9063218e12c59bdebb2c7ba07da98dca52db8e344c8e979e0eba0f6e4d646e637c57a60446cd2f05a34486de79b6b90edf2c870e82b7720b3ee8311a5d19bd5d34379a132437e4ccaeab1dbd4f3bf12d8694c4a6a61eab305fe43b56b8dbba12697e3a9320d9d1c8bf7909faf838b323e95dd1bf5dd349a96d63936489cff04630cfb893143cd088564ef471dac9a24b9d675c49069cc3e55d2c2b66cc18e6782b1934e20b7f5ce8671bfeafcdeb1a5038fc8da741d4e8d48d882fd8a4c2140cf4cb1f7923622f4adf8bb8bce12a5a181a8ca831066499b2e1539af240fc65063c5847f5fcb7669c6cd03ec3a15e054a547b8af8e538bc2d518bd45248cc3a333ba9d82f198735ab549ade082cb634280c7874804b6ffd84a0374f7b9bc795a3df3578676aa05746ff8720d247fc244e4d78f9883d70092518ecbfa6bea6e0ca46a3a2bd6143f07033e8b0bcb76a2008ae8ff7910d753e73a14aafd8f70d8747211541c68de5e20561e4b410ce87005fdb4dcc24240777bc8ec47222ee9947f9ce7450bb66b2adad1e7e4bb4bb2f27ab0d2d80e4b95e35873ce1a6d8b5a778caf56eecf2a913f7d51fbe37e10a448347d02bb4e4531cbdd4d719ff50221444d6ce1ce3e1f5de44cd303fb97212e41cbee7bb12ea18f47709ecb6ac46b7c370b849c9ba073707fffd92e1dca076bd892f4e2597dfafca01b9d838ff58cfa37ab49f6d60c1d75a6287ab19c330877fedfb005ecb2e5355675528ad9d321ab15fb42e44e47180892d834767ee092a30365c74c474e50d414a3efbd381b6f792fade70dbb95e0555158b479a88e5f6630a172428f4d1b09e6e9478c7fbd76c7d64b07bc01e0a56a943f9a02ceb1d8274c7da12af498e451573e0cf714301852cea7ca7815212f1530d2af10592ebe9a79827164572d372d8cddc955f9898ce787c5be2a730a51c9e2ad4324a9ee614b6d4ff5fca058311544447b95b14e0ccc466ecb61abee5ce24d56d4dd114f798e5382e34afcc41b53f77a220c3943342032a5d7ea04e2716f98cdd48d12877006a0f0e2f9612c0940afd5d29ce5898b95d35b4488317a34f0cb278c5d6e8cd33ea03a3b12d04a296c03ee00fdaf277f29b8cd2b61fd7ee8082a036e0e16a8e5c64d97a40c685fad61a3c0ee6d25a2f058f3662b4ccba61ac73eda71f2a972314fced5f5a0bc4ae86b17267072bfcd1b220a645c10c581e58f639b33f46d0189da0a56128e040596a542df420ef9876e51828a70f8b16a42e9c6c7377e0438afdb97b27e5a1199f930a782617b0bc4182da61decac902e427635901c5461c4002fe711aebda384e2a5b01dc2ee22395f39bfdf614a1809368f369a62c7d7be377cd14423a823ee2fd35e15421b0040390d0def6a2856b230462ec96207c784f6269be377b0f84f7855c80b9ceefb9ee2e8925046d0c98cbd48bd01d1b51af62ed3c9515dffd677ab00ce18992b5271ad188b0d1c0a50f0a70eb8d6f2fb94d055c1f5a748dd8f9e0e3078c9ced8d381241dd2d13340acdbcf2c617def0c382d0ec9ebe74985c9c6a3bbe2dc5e00e8356d68fb17cbcbacdac08f9392d80da5c8441901ba6948c3abb63c05b6260dc88ead9ed64c3b61d51c0d287d7655c0ef8c2a72b74ad6b747023f568cb584", 0x1000}, {&(0x7f0000007380)="73b1df887fbf3af0f1ee4a885cfc090a6a2b49cf19607cf9ab3728607c1d9b12d78cd77beecdaf9e49ee76e44a1f909ffa61acb7600a55e2fc5a8ece429276f7ef1005249cbc39ca530360a60d269c4abedbb28f7f54c1568de0bc24f71f5b91546c7deb590debbb4a195a030c3046dd5ce94f38884ce728faa1018c3996830427c2754295b209ee325af956a3f6ab7acbff009b6e5818ce6c44", 0x9a}, {&(0x7f0000007440)="dbe32b3fc8f18766cd914dbf010da6fe4c56e1604488c50db4cb956db61b7f023319d595c4c2e2242f707bfffeb76ee26e39cc8cbb740ea237299b16d646c37e948f873425f2fce72d1c67c7acb3e14073c43cb5ae55fb357b59a3c0827eb0e96ce47a63dfe51ed9e296a15e61c97d31fda82de2cbc37fb47e1f7c84d95c0671f8cebcd6258d35ae2b", 0x89}, {&(0x7f0000007500)="fddf3b9ac493718a9c9bb2972e8d7cd2b534ee3055275919180e4be3362758bbc025e5205505", 0x26}], 0x5, &(0x7f00000075c0)=[{0xe8, 0x84, 0x1, "c383abe20788326063ec81d07c2be5ef9804154d404c80209283538f9916b16f9defc978c5fa527f3c96a82f99d265f05f89d89cef016d413ca494b9663ed6f81d06b80f99bef6ecb4d90df00597aecbfeb27268ebe2abb035ef8c6add7d899c3756d5b29a3b527f432d1b16548494222bffd980d4e934cbc4988c33822f46f2abfe85877c9a8c3d3ad4ff1cbf417a8cbde4ff9a7090245889e6e7a3300aab05d6dc2caa0e4c98bedacb27cd69bb067f90afe02dd9781ca772a8d00623676068011cac5a8ffe90635033bf977f4acb564469"}, {0x28, 0x10c, 0x2, "74ecd2b41c4050eaa13a194a3a88e469ef52efc25d6ba7"}, {0x1010, 0x1, 0x6b71, "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"}, {0x108, 0x10d, 0x5a6, "3b21193e7b90a4dd3c7a49a9a6409d0acbc067d4931e7862afaf1067b3f7c73497e638c633c6f05eb42993560460f6f162895b3e01beadf27405f5be73a092b164ec7877f6a2667375ddf216f691171fc9517d4a5ad406041aea921411637d88c8c907321fb77da860168cadecd373d84912bb3687ec4abc69ed0562c88f684dfc50a01ce888d626daa1dca91367fc108141119dceabcc224a76a71c2306ac16f0aa2842655921897969bef85aae08aa03ba302a75d19e9ac70938212a671f523d48300af01642fba5e74432c1d6327c9a08a2527a4845e33140a7979707a922e540bc05421f2b2b31c24c79fc96b6f9947666316d4b"}, {0x18, 0x0, 0x1000, "4816ed71af92eeeb"}, {0xb0, 0x11d, 0x3, "e7fe7ddbf4f6bad4fbe513afcd430a9ef7702d57a1a4dadfc186bc80728288b55561270f453d8cc4d43d6f629cf716215b129cb1b7b007fc44ef4013e4f8645e1125433b206f869e491b53a3f2dc14f96c65878066166b42f37479fe01b7bddcd47dc6d950017358ec7c1ab9aaef0ac3fabde7f1ac473e9306538ae4832bfaa10faebd08170f2be6030238f6c2ae7a148abd5f8ac978f643ed2c"}, {0x40, 0x10e, 0x70, "c3389a49a7833205076a275668be83faaf50e213b94938a321cf618646335c33014de19c74f80ee15c23e0b10d"}, {0x68, 0x119, 0xb2, "aaba0226d991d01cf0c84bc6a3484feafa1c9f77692c0826308a19cffa2d6a04791d639fb64701f864a602ed201f677b2f4f298ab8bf9e7cd293b1ee8fca4930cea8ff15925c0175a9fe221b07476f380a0f27369df4"}], 0x1398, 0x8001}, 0x3}], 0xa, 0x5dc52f0bfc290bfe) r3 = accept4(r1, 0x0, &(0x7f0000000000), 0x80000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x6}, &(0x7f0000000080)=0x8) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000001400)=@known='system.posix_acl_access\x00') setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000000c0)={0x4, 0x8200, 0x3, 0x6, r4}, 0x10) [ 339.030717] Unknown ioctl 21667 [ 339.038127] Unknown ioctl 1074025690 13:46:07 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x1fc, 0x0) ioctl(r0, 0x800000000000937e, &(0x7f00000000c0)="010000000000000018040000000100000055ec78dfd849832f") [ 339.091886] Unknown ioctl 44547 [ 339.118017] EXT4-fs (sda1): Unrecognized mount option "debug_wZn àY®»# isize=7" or missing value 13:46:07 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="0401050005c0ffffff000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl(r4, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000080)={0xffffffff, 0x2}) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) 13:46:07 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="0401050005000000e8030000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000240)=@ioapic={0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000100)={0x0, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{0x77359400}, {r2, r3/1000+10000}}) 13:46:08 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x2) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=""/249, 0xf9) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{}], 0x1}, 0x0) [ 339.803684] FAULT_FLAG_ALLOW_RETRY missing 30 [ 339.809110] CPU: 0 PID: 22833 Comm: syz-executor6 Not tainted 4.18.0-rc1+ #111 [ 339.816473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 339.825825] Call Trace: [ 339.828423] dump_stack+0x1c9/0x2b4 [ 339.832068] ? dump_stack_print_info.cold.2+0x52/0x52 [ 339.837266] ? kasan_check_write+0x14/0x20 [ 339.841509] ? do_raw_spin_lock+0xc1/0x200 [ 339.845756] handle_userfault.cold.32+0x47/0x62 [ 339.850446] ? userfaultfd_ioctl+0x4fd0/0x4fd0 [ 339.855036] ? debug_check_no_locks_freed+0x310/0x310 [ 339.860256] ? perf_event_update_userpage+0xd30/0xd30 [ 339.865542] ? print_usage_bug+0xc0/0xc0 [ 339.869609] ? print_usage_bug+0xc0/0xc0 [ 339.873687] ? __perf_event_task_sched_in+0x24f/0xbb0 [ 339.878881] ? userfaultfd_ctx_put+0x810/0x810 [ 339.883484] ? find_held_lock+0x36/0x1c0 [ 339.887569] ? print_usage_bug+0xc0/0xc0 [ 339.891642] ? lock_downgrade+0x8f0/0x8f0 [ 339.895798] ? graph_lock+0x170/0x170 [ 339.899614] ? find_held_lock+0x36/0x1c0 [ 339.903714] ? lock_downgrade+0x8f0/0x8f0 [ 339.907871] ? kasan_check_read+0x11/0x20 [ 339.912036] ? do_raw_spin_unlock+0xa7/0x2f0 [ 339.916451] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 339.921048] ? kasan_check_write+0x14/0x20 [ 339.925282] ? do_raw_spin_lock+0xc1/0x200 [ 339.929515] __handle_mm_fault+0x3a0a/0x4460 [ 339.933941] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 339.938858] ? graph_lock+0x170/0x170 [ 339.942674] ? lock_downgrade+0x8f0/0x8f0 [ 339.946829] ? kasan_check_read+0x11/0x20 [ 339.950974] ? rcu_is_watching+0x8c/0x150 [ 339.955114] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 339.959606] ? handle_mm_fault+0x8c4/0xc80 [ 339.963844] handle_mm_fault+0x53e/0xc80 [ 339.967906] ? __handle_mm_fault+0x4460/0x4460 [ 339.972488] ? find_vma+0x34/0x190 [ 339.976028] __do_page_fault+0x620/0xe50 [ 339.980090] ? mm_fault_error+0x380/0x380 [ 339.984237] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 339.989254] ? graph_lock+0x170/0x170 [ 339.993055] do_page_fault+0xf6/0x8c0 [ 339.996853] ? vmalloc_sync_all+0x30/0x30 [ 340.000993] ? find_held_lock+0x36/0x1c0 [ 340.005075] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 340.009925] page_fault+0x1e/0x30 [ 340.013401] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 340.019021] Code: 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f [ 340.038223] RSP: 0018:ffff88017ab2f7f0 EFLAGS: 00010202 [ 340.043576] RAX: 0000000000000004 RBX: 0000000000000004 RCX: 0000000000000004 [ 340.050835] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff88017ab2f890 [ 340.058093] RBP: ffff88017ab2f828 R08: ffffed002f565f13 R09: ffffed002f565f12 [ 340.065359] R10: ffffed002f565f12 R11: 0000000000000003 R12: 0000000020013004 [ 340.072719] R13: 0000000020013000 R14: ffff88017ab2f890 R15: 00007ffffffff000 [ 340.080170] ? _copy_from_user+0x10d/0x150 [ 340.084411] evdev_do_ioctl+0xb69/0x21a0 [ 340.088481] ? lock_downgrade+0x8f0/0x8f0 [ 340.092628] ? str_to_user+0x90/0x90 [ 340.096332] ? do_futex+0x249/0x27d0 [ 340.100042] ? rcu_is_watching+0x8c/0x150 [ 340.104200] ? graph_lock+0x170/0x170 [ 340.108011] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 340.112423] ? find_held_lock+0x36/0x1c0 [ 340.116478] ? lock_downgrade+0x8f0/0x8f0 [ 340.120616] ? kasan_check_read+0x11/0x20 [ 340.124751] ? rcu_is_watching+0x8c/0x150 [ 340.128886] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 340.133296] ? __fget+0x414/0x670 [ 340.136746] evdev_ioctl_handler+0x144/0x1a0 [ 340.141155] evdev_ioctl+0x27/0x2e [ 340.144689] ? evdev_ioctl_compat+0x30/0x30 [ 340.148998] do_vfs_ioctl+0x1de/0x1720 [ 340.152889] ? rcu_is_watching+0x8c/0x150 [ 340.157037] ? ioctl_preallocate+0x300/0x300 [ 340.161451] ? __fget_light+0x2f7/0x440 [ 340.165416] ? fget_raw+0x20/0x20 [ 340.168877] ? putname+0xf2/0x130 [ 340.172343] ? rcu_read_lock_sched_held+0x108/0x120 [ 340.177351] ? kmem_cache_free+0x25c/0x2d0 [ 340.181597] ? __x64_sys_futex+0x47f/0x6a0 [ 340.185842] ? do_futex+0x27d0/0x27d0 [ 340.189734] ? security_file_ioctl+0x94/0xc0 [ 340.194152] ksys_ioctl+0xa9/0xd0 [ 340.197610] __x64_sys_ioctl+0x73/0xb0 [ 340.201494] do_syscall_64+0x1b9/0x820 [ 340.205386] ? syscall_return_slowpath+0x5e0/0x5e0 [ 340.210302] ? syscall_return_slowpath+0x31d/0x5e0 [ 340.215320] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 340.220673] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 340.225515] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 340.230701] RIP: 0033:0x455b29 [ 340.233883] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 340.253144] RSP: 002b:00007f2451247c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 340.260844] RAX: ffffffffffffffda RBX: 00007f24512486d4 RCX: 0000000000455b29 [ 340.268104] RDX: 0000000020013000 RSI: 00000000400445a0 RDI: 0000000000000015 [ 340.275361] RBP: 000000000072bf50 R08: 0000000000000000 R09: 0000000000000000 [ 340.282637] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 340.289897] R13: 00000000004bd250 R14: 00000000004cb350 R15: 0000000000000001 13:46:09 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000980)=""/230, 0xe6}], 0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x232, r1, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x452d00) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1}) mprotect(&(0x7f0000013000/0x2000)=nil, 0x2000, 0x2000002) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x100, 0x0) 13:46:09 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet(0x1e, 0x7, 0x3, &(0x7f0000000040)={0x0}) sendmsg$key(r0, &(0x7f0000f22000)={0x0, 0x0, &(0x7f0000f22000)={&(0x7f00001d7000)={0x1e, 0x0, 0x403, 0x0, 0x1}, 0x2ac4}, 0x1}, 0x0) 13:46:09 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000026000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:09 executing program 1: perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffff00, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:46:09 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x800, 0x40) sendmsg$alg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="4d93cbc8b394ff1dd270ee4600bf0cf55fc673ce1a02b319ed7430493977d5f3d1d194ceef6ff56f891ff826d1f7fff0fefb411f5f7dc3ac0a9aae306cb4435e7f6b20c5302bd2cbfdd514d6f11e8d62b9be5b799bd01478fb80889a7a20abf8753c74e7eab10454c1a1d04b5a6379ba23c0116f66aa616196608d797e926c49", 0x80}, {&(0x7f0000000140)="69654aac70f6c022bf68c062134fb730aff5746191f578122912fb0a20655388532601c7c675d460997bad084ac6b96c5f290e72ef5c4efee4029566421663bb112723bd9f5636c3e1369375377260bc2acd093634d6d46edf520d0b89e5abad304da86bd32d7719", 0x68}, {&(0x7f00000001c0)="0bc71251aa57138d7a3d9166a1330a993b3d91c092af7aea48af95c23de52321cd78108b244070dfc21ffa869e38865989f33385f3607d31aaef807af33e76a3a125f3efac7cc09e92e92cdc60366636b9d84b8ad582273cc06f2b80b422aada1670b77b5541199adabbe93155c64d0a19de4b351f0b31fe1629119cd6d0e1b55db2baf5a0f96e79ef54d95bbd7f25cbfbab458c736df9b491360be7a8c9bcc07bcb7409bd4d764ac16e8d2204ebfded4bfbd96d510f4305a02f64b7ce0ae34502c355e7089cd8", 0xc7}], 0x3, &(0x7f0000000300)=[@assoc={0x18, 0x117, 0x4, 0x2}, @assoc={0x18, 0x117, 0x4, 0x1}, @assoc={0x18, 0x117, 0x4, 0x100000000}, @assoc={0x18, 0x117, 0x4, 0x200}], 0x60, 0x80}, 0x40004) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020300090a0000000000000000008000030006000000000002000000e0e72d0100000000000000000200010000000000000000681b000000030005000000000002000000e00000010000000000000000"], 0x50}, 0x1}, 0x0) recvmmsg(r0, &(0x7f00000035c0)=[{{&(0x7f0000002ec0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000003240), 0x0, &(0x7f00000032c0)=""/40, 0x28}}, {{&(0x7f0000003300)=@generic, 0x80, &(0x7f0000003500), 0x0, &(0x7f0000003540)=""/122, 0x7a}}], 0x2, 0x10000, &(0x7f0000003780)={0x77359400}) 13:46:09 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="0401050005e8030000000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:09 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x80) r1 = dup(r0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x9, 0x7, 0x1000, 0x0, 0x587}) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000580)="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") sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1d}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "5101c81e5370ca0a"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f00005e4000)={&(0x7f0000000040)={0x1d}, 0x10, &(0x7f0000000200)={&(0x7f00000aef80)={0x5, 0x900, 0x0, {}, {}, {0x0, 0x9, 0x5}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "260503dd3e3c0a6afe3f7b377378f2e013e66ff1bf538a0f1abc5b8beb605be3d9448c99787c873249ed9c34e040a29606427925d8dd9065c240a288783179ce"}}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000500)={&(0x7f0000000480)={0x7, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a1947cab94fc62fd"}}, 0x48}, 0x1}, 0x0) 13:46:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCSSOFTCAR(r1, 0x5452, &(0x7f0000000000)=0xec03) 13:46:09 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x100000001) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x39, &(0x7f0000000000)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) r1 = semget(0x0, 0x4, 0x240) semctl$GETNCNT(r1, 0x1, 0xe, &(0x7f0000000040)=""/4096) 13:46:09 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet6_sctp(0xa, 0x200000000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x13, &(0x7f0000ad2000), &(0x7f0000000000)=0xffffffffffffff8b) 13:46:09 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000011000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:09 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0x40) accept4$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @any=0xffffffff}, 0x10, 0x80800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffff00, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:46:09 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000003100)='./file0/.ile0\x00', 0x152fff, 0x0) read(r0, &(0x7f0000003380)=""/4096, 0xf) memfd_create(&(0x7f00000002c0)='\\\x00', 0x3) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0/.ile0\x00', 0x40, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000080)="7055fb0c2da4ecf31c6957b7920aca6bcf07c9bb930d0242779af12449bd891d8cb0dc599bbf7c36384f8b210a64adb9", 0x30, 0x80000001}, {&(0x7f00000001c0)="abafa36b9cc7c11666d15cb21e6e33b85293a3b05753452e856978836dae0b24d5a21e5cd9a736f2755fd93957160b5c6bc5ac3f71f0334e51d9cf4ff0040f210acd2fd9d9bba2440d4eca26d4aafb93d94c01c943fe1006191b2d32a68cc634c75de8e4c3627ab6a5f7c2fb9b4488b58c583154e2158256f92975be2af474dd13a776933a8af718c1ef0cd95e932cac89dfd6b4a85f3856a45d65aebcca237d83c2ef257229dfaf4cc42325f245dad3573e0e038c6ceea0107d6fd385be98a0e76d39c769a84cce5d23c01c75dd56b0217abc2da6ae5d92426b5f1c71812d3f1a1d301e2d66", 0xe6, 0x7}], 0x8, &(0x7f0000000100)={[{@gid={'gid', 0x3d, [0x35, 0x36, 0x31, 0x35, 0x37, 0x31, 0x32]}, 0x2c}, {@discard='discard', 0x2c}, {@nfs='nfs', 0x2c}, {@dmask={'dmask', 0x3d, [0x34, 0x30, 0x30, 0x34, 0x34]}, 0x2c}, {@nfs='nfs', 0x2c}, {@uid={'uid', 0x3d, [0x37, 0x31, 0x37, 0x36, 0x31, 0x35, 0x36]}, 0x2c}, {@discard='discard', 0x2c}, {@errors_remount='errors=remount-ro', 0x2c}]}) 13:46:09 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)={0x80, 0x2, 0x1, 0x0, 0x0, [{r0, 0x0, 0x3ff}]}) timer_create(0xfffffffffffffffe, &(0x7f0000044000)={0x0, 0x0, 0x1}, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x0, 0xe4c}}, &(0x7f0000040000)) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x6, 0x2) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000100)={0x95, "76ed7cdb15493e62df97edf2cd9aa76bfde7e88182b4ded18f01d2d0dff09fa4e3bae69ffbf86e2daa56df1425fcc696a3d283293498b5d4132edad7e79e8b4f6461a05996f53ac8d1428caf0e87bce4aec1c1b6c707141086cb2b818112288f9669fd2ed6ac4d3c92fb81eafc6b3b5027f147733970ca59b19cc4046acfc4bbce8db522fa1233a73748a20bfae21a82320e054406"}) 13:46:09 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000006000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:09 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="040105000500260000000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 341.517810] FAULT_FLAG_ALLOW_RETRY missing 30 [ 341.522620] CPU: 1 PID: 22904 Comm: syz-executor6 Not tainted 4.18.0-rc1+ #111 [ 341.529980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 341.539332] Call Trace: [ 341.541929] dump_stack+0x1c9/0x2b4 [ 341.545575] ? dump_stack_print_info.cold.2+0x52/0x52 [ 341.550780] ? kasan_check_write+0x14/0x20 [ 341.555022] ? do_raw_spin_lock+0xc1/0x200 [ 341.559273] handle_userfault.cold.32+0x47/0x62 [ 341.563956] ? userfaultfd_ioctl+0x4fd0/0x4fd0 [ 341.568557] ? debug_check_no_locks_freed+0x310/0x310 [ 341.573761] ? perf_event_update_userpage+0xd30/0xd30 [ 341.578969] ? print_usage_bug+0xc0/0xc0 [ 341.583046] ? print_usage_bug+0xc0/0xc0 [ 341.587115] ? __perf_event_task_sched_in+0x24f/0xbb0 [ 341.592318] ? userfaultfd_ctx_put+0x810/0x810 [ 341.596914] ? find_held_lock+0x36/0x1c0 [ 341.601349] ? __lock_acquire+0x7fc/0x5020 [ 341.605601] ? lock_downgrade+0x8f0/0x8f0 [ 341.609759] ? graph_lock+0x170/0x170 [ 341.613591] ? find_held_lock+0x36/0x1c0 [ 341.617691] ? lock_downgrade+0x8f0/0x8f0 [ 341.621852] ? kasan_check_read+0x11/0x20 [ 341.626005] ? do_raw_spin_unlock+0xa7/0x2f0 [ 341.630602] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 341.635207] ? kasan_check_write+0x14/0x20 [ 341.639454] ? do_raw_spin_lock+0xc1/0x200 [ 341.643697] __handle_mm_fault+0x3a0a/0x4460 [ 341.648111] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 341.652946] ? graph_lock+0x170/0x170 [ 341.656762] ? lock_downgrade+0x8f0/0x8f0 [ 341.660928] ? kasan_check_read+0x11/0x20 [ 341.665063] ? rcu_is_watching+0x8c/0x150 [ 341.669208] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 341.673617] ? handle_mm_fault+0x8c4/0xc80 [ 341.677851] handle_mm_fault+0x53e/0xc80 [ 341.682341] ? __handle_mm_fault+0x4460/0x4460 [ 341.686913] ? find_vma+0x34/0x190 [ 341.690453] __do_page_fault+0x620/0xe50 [ 341.694503] ? mm_fault_error+0x380/0x380 [ 341.698641] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 341.703653] ? graph_lock+0x170/0x170 [ 341.707440] do_page_fault+0xf6/0x8c0 [ 341.711226] ? vmalloc_sync_all+0x30/0x30 [ 341.715362] ? find_held_lock+0x36/0x1c0 [ 341.719423] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 341.724256] page_fault+0x1e/0x30 [ 341.727709] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 341.733310] Code: 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f [ 341.752534] RSP: 0018:ffff880182fc77f0 EFLAGS: 00010202 [ 341.757884] RAX: 0000000000000004 RBX: 0000000000000004 RCX: 0000000000000004 [ 341.765148] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff880182fc7890 [ 341.772402] RBP: ffff880182fc7828 R08: ffffed00305f8f13 R09: ffffed00305f8f12 [ 341.779666] R10: ffffed00305f8f12 R11: 0000000000000003 R12: 0000000020013004 [ 341.786919] R13: 0000000020013000 R14: ffff880182fc7890 R15: 00007ffffffff000 [ 341.794195] ? _copy_from_user+0x10d/0x150 [ 341.798421] evdev_do_ioctl+0xb69/0x21a0 [ 341.802482] ? lock_downgrade+0x8f0/0x8f0 [ 341.806619] ? str_to_user+0x90/0x90 [ 341.810330] ? do_futex+0x249/0x27d0 [ 341.814051] ? rcu_is_watching+0x8c/0x150 [ 341.818881] ? graph_lock+0x170/0x170 [ 341.822668] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 341.827079] ? find_held_lock+0x36/0x1c0 [ 341.831132] ? lock_downgrade+0x8f0/0x8f0 [ 341.835272] ? kasan_check_read+0x11/0x20 [ 341.839407] ? rcu_is_watching+0x8c/0x150 [ 341.843556] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 341.847961] ? __fget+0x414/0x670 [ 341.851405] evdev_ioctl_handler+0x144/0x1a0 [ 341.855800] evdev_ioctl+0x27/0x2e [ 341.859340] ? evdev_ioctl_compat+0x30/0x30 [ 341.863647] do_vfs_ioctl+0x1de/0x1720 [ 341.867517] ? rcu_is_watching+0x8c/0x150 [ 341.871663] ? ioctl_preallocate+0x300/0x300 [ 341.876749] ? __fget_light+0x2f7/0x440 [ 341.880712] ? fget_raw+0x20/0x20 [ 341.884152] ? putname+0xf2/0x130 [ 341.887590] ? rcu_read_lock_sched_held+0x108/0x120 [ 341.892948] ? kmem_cache_free+0x25c/0x2d0 [ 341.897172] ? __x64_sys_futex+0x47f/0x6a0 [ 341.901490] ? do_futex+0x27d0/0x27d0 [ 341.905285] ? security_file_ioctl+0x94/0xc0 [ 341.909690] ksys_ioctl+0xa9/0xd0 [ 341.913131] __x64_sys_ioctl+0x73/0xb0 [ 341.917091] do_syscall_64+0x1b9/0x820 [ 341.920966] ? syscall_return_slowpath+0x5e0/0x5e0 [ 341.925881] ? syscall_return_slowpath+0x31d/0x5e0 [ 341.930799] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 341.936157] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 341.940988] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 341.946249] RIP: 0033:0x455b29 [ 341.949423] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 341.968645] RSP: 002b:00007f2451247c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 341.976441] RAX: ffffffffffffffda RBX: 00007f24512486d4 RCX: 0000000000455b29 [ 341.983695] RDX: 0000000020013000 RSI: 00000000400445a0 RDI: 0000000000000015 [ 341.990948] RBP: 000000000072bf50 R08: 0000000000000000 R09: 0000000000000000 [ 341.998204] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 342.005458] R13: 00000000004bd250 R14: 00000000004cb350 R15: 0000000000000001 13:46:11 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r1 = timerfd_create(0x4000000000000b, 0x80000) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000980)=""/230, 0xe6}], 0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000300)) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x200000, 0x0) mmap(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x2000000, 0x10410, r4, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001300000526bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="44000013001000000800270000000fb98f76ebaccd677468305f746fc19765616d000000"], 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x4800) ioctl$EVIOCGMTSLOTS(r4, 0x400445a0, &(0x7f0000013000)) ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000240)) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000000380)={{0x4, 0x4, 0x33, 0x8000, '\x00', 0x8da5}, 0x0, [0xffffffffffffffe2, 0x4, 0x3, 0x10a, 0x7, 0x9, 0x2, 0x1ff, 0x9, 0x80000000, 0x1, 0xffffffffffffff81, 0x9, 0x1000, 0x100000000000, 0x7, 0x5, 0x7, 0xa4, 0x0, 0x8, 0xe4, 0x5, 0x7, 0x1000, 0x401, 0x6, 0x3, 0xc8ea, 0x9, 0x8, 0x7fff, 0x3, 0x6, 0x9, 0x7, 0x1f, 0x80, 0x4, 0x1, 0x101, 0x7, 0xfd9e, 0x8, 0xc12, 0xdef4, 0x4, 0x0, 0x53e, 0x9, 0x1ff800, 0x2, 0x4, 0xffff, 0xffffffffffffffff, 0x52, 0xffffffffffffffff, 0x8, 0x1, 0x0, 0x3, 0x6, 0x10000, 0x3f, 0x9, 0x5, 0x8, 0x9, 0x0, 0x7ff, 0x4, 0x1, 0x9, 0x7, 0x8, 0x1, 0x88e, 0x29, 0x9, 0x8001, 0x8000, 0xfff, 0xfd5, 0x8, 0x7, 0x0, 0x1f, 0x8, 0x68, 0xffffffff, 0x1, 0xdb8, 0xffff, 0x100000001, 0x4, 0x2, 0x80000000, 0x2, 0x3, 0xf6c, 0x2, 0x8000000000, 0x9, 0x0, 0x4, 0x2, 0x4, 0x1, 0x6, 0x0, 0x7d44, 0x10001, 0x5, 0xf9f6, 0x0, 0x4, 0x919, 0x3, 0xac, 0x5, 0x10001, 0x200, 0x9, 0x7fffffff, 0x9, 0x100000001, 0x4, 0x5], {0x0, 0x989680}}) syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffff8, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1}) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) 13:46:11 executing program 3: mlockall(0x3) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xf2, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000000c0)={0x8}, 0x4) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xfffffffffffff800, 0x40) migrate_pages(0x0, 0x20, &(0x7f0000000040)=0x3, &(0x7f0000000080)=0x100000001) 13:46:11 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="01010000000af400000000409d925400", 0x10) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x10000, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r2) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000380)=0x8) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {0x6}}, 0x14}, 0x1}, 0x0) memfd_create(&(0x7f00000001c0)='/dev/vsock\x00', 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000005c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) 13:46:11 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="040105000503e80000000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/169, 0xa9}, {&(0x7f0000000100)=""/166, 0xa6}], 0x2, &(0x7f00000085c0)=""/25, 0x19}}], 0x1, 0x0, &(0x7f0000008880)) sendmsg$nl_route(r0, &(0x7f0000000800)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@ipv4_getnetconf={0x14, 0x52, 0x301, 0x0, 0x0, {0x2}}, 0x14}, 0x1}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x2000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000240)={0x7, 0x775e, 0x8000, {0x77359400}, 0x81, 0x401}) 13:46:11 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="0401050005000000000003e8ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCSSOFTCAR(r1, 0x541f, &(0x7f0000000000)=0xec03) 13:46:11 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477471070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffffffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000000)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0xfffffffffffffffd}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x20}, 0xc) write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) write$binfmt_misc(r2, &(0x7f0000000040)={'syz1'}, 0x4) 13:46:11 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = fcntl$getown(r0, 0x9) rt_sigqueueinfo(r1, 0x34, &(0x7f0000000000)={0x20, 0x45fe, 0x8, 0x2}) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000100)={"626f6e643000000000041300", @ifru_names='bond0\x00'}) 13:46:12 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x101000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x4e22, 0x1ff, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x7}, {0xa, 0x4e22, 0x80000001, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x13}}, 0x6}, 0x6, [0x10001, 0x5, 0x3, 0x81, 0x8, 0x6, 0x0, 0x7f]}, 0x5c) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockopt$inet6_tcp_buf(r1, 0x6, 0x3f, &(0x7f0000000040)=""/38, &(0x7f0000000080)=0x26) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file1\x00') creat(&(0x7f0000000280)='./file1\x00', 0x10c) fcntl$setpipe(r2, 0x407, 0x4) [ 343.254642] FAULT_FLAG_ALLOW_RETRY missing 30 [ 343.259430] CPU: 1 PID: 22936 Comm: syz-executor6 Not tainted 4.18.0-rc1+ #111 [ 343.266804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 343.276161] Call Trace: [ 343.278760] dump_stack+0x1c9/0x2b4 [ 343.282414] ? dump_stack_print_info.cold.2+0x52/0x52 [ 343.287620] handle_userfault.cold.32+0x47/0x62 [ 343.292303] ? userfaultfd_ioctl+0x4fd0/0x4fd0 [ 343.296896] ? debug_check_no_locks_freed+0x310/0x310 [ 343.302289] ? plist_del+0x4a1/0x9d0 [ 343.306007] ? print_usage_bug+0xc0/0xc0 [ 343.310079] ? print_usage_bug+0xc0/0xc0 [ 343.314216] ? graph_lock+0x170/0x170 [ 343.318041] ? __lock_is_held+0xb5/0x140 [ 343.322124] ? __lock_acquire+0x7fc/0x5020 [ 343.326374] ? graph_lock+0x170/0x170 [ 343.330209] ? find_held_lock+0x36/0x1c0 [ 343.334304] ? lock_downgrade+0x8f0/0x8f0 [ 343.338467] ? kasan_check_read+0x11/0x20 [ 343.342625] ? do_raw_spin_unlock+0xa7/0x2f0 [ 343.347050] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 343.351648] ? kasan_check_write+0x14/0x20 [ 343.355893] ? do_raw_spin_lock+0xc1/0x200 [ 343.360160] __handle_mm_fault+0x3a0a/0x4460 [ 343.364587] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 343.369443] ? graph_lock+0x170/0x170 [ 343.373274] ? lock_downgrade+0x8f0/0x8f0 [ 343.377438] ? kasan_check_read+0x11/0x20 [ 343.381590] ? rcu_is_watching+0x8c/0x150 [ 343.385749] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 343.390173] ? handle_mm_fault+0x8c4/0xc80 [ 343.394440] handle_mm_fault+0x53e/0xc80 [ 343.398530] ? __handle_mm_fault+0x4460/0x4460 13:46:12 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) fallocate(r3, 0x0, 0x0, 0x5) fchdir(r3) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x11abc126, &(0x7f0000000100)=""/84) creat(&(0x7f0000000000)='./file0\x00', 0x0) dup2(r1, r2) 13:46:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCSSOFTCAR(r1, 0x5437, &(0x7f0000000000)=0xec03) [ 343.403890] ? find_vma+0x34/0x190 [ 343.407452] __do_page_fault+0x620/0xe50 [ 343.411536] ? mm_fault_error+0x380/0x380 [ 343.415704] ? graph_lock+0x170/0x170 [ 343.419526] do_page_fault+0xf6/0x8c0 [ 343.423343] ? vmalloc_sync_all+0x30/0x30 [ 343.427525] ? find_held_lock+0x36/0x1c0 [ 343.431612] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 343.436479] page_fault+0x1e/0x30 [ 343.439951] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 343.445583] Code: 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f [ 343.464940] RSP: 0018:ffff8801757cf7f0 EFLAGS: 00010202 [ 343.470319] RAX: 0000000000000004 RBX: 0000000000000004 RCX: 0000000000000004 [ 343.477623] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff8801757cf890 [ 343.484902] RBP: ffff8801757cf828 R08: ffffed002eaf9f13 R09: ffffed002eaf9f12 [ 343.492175] R10: ffffed002eaf9f12 R11: 0000000000000003 R12: 0000000020013004 [ 343.499449] R13: 0000000020013000 R14: ffff8801757cf890 R15: 00007ffffffff000 [ 343.506749] ? _copy_from_user+0x10d/0x150 [ 343.511018] evdev_do_ioctl+0xb69/0x21a0 [ 343.515094] ? str_to_user+0x90/0x90 [ 343.518830] ? kasan_check_read+0x11/0x20 [ 343.522993] ? graph_lock+0x170/0x170 [ 343.526826] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 343.531422] ? compat_start_thread+0x80/0x80 [ 343.535843] ? _raw_spin_unlock_irq+0x27/0x70 [ 343.540354] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 343.545382] ? trace_hardirqs_on+0xd/0x10 [ 343.549539] ? find_held_lock+0x36/0x1c0 [ 343.553617] ? lock_downgrade+0x8f0/0x8f0 [ 343.557786] ? kasan_check_read+0x11/0x20 [ 343.562025] ? rcu_is_watching+0x8c/0x150 [ 343.566179] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 343.570609] ? __fget+0x414/0x670 [ 343.574090] evdev_ioctl_handler+0x144/0x1a0 [ 343.578525] evdev_ioctl+0x27/0x2e [ 343.582074] ? evdev_ioctl_compat+0x30/0x30 [ 343.586400] do_vfs_ioctl+0x1de/0x1720 [ 343.590298] ? ioctl_preallocate+0x300/0x300 [ 343.594711] ? __fget_light+0x2f7/0x440 [ 343.598689] ? __schedule+0x1ed0/0x1ed0 [ 343.602671] ? fget_raw+0x20/0x20 [ 343.606395] ? __ia32_sys_shutdown+0x80/0x80 [ 343.610823] ? exit_to_usermode_loop+0x8c/0x370 [ 343.615505] ? security_file_ioctl+0x94/0xc0 [ 343.619921] ksys_ioctl+0xa9/0xd0 [ 343.623386] __x64_sys_ioctl+0x73/0xb0 [ 343.627282] do_syscall_64+0x1b9/0x820 [ 343.631178] ? syscall_return_slowpath+0x5e0/0x5e0 [ 343.636116] ? syscall_return_slowpath+0x31d/0x5e0 [ 343.641063] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 343.646536] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 343.651396] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 343.656587] RIP: 0033:0x455b29 [ 343.659770] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 343.679146] RSP: 002b:00007f2451268c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 343.686867] RAX: ffffffffffffffda RBX: 00007f24512696d4 RCX: 0000000000455b29 [ 343.694141] RDX: 0000000020013000 RSI: 00000000400445a0 RDI: 0000000000000016 [ 343.701414] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 343.708687] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 343.715961] R13: 00000000004bd250 R14: 00000000004cb350 R15: 0000000000000000 [ 343.725361] bond0: cannot enslave bond to itself. 13:46:12 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f00000001c0)="6f1005fbf46be1a1e72a4454ee5108635bdec935bd3baec00442bbb30c4c7b81255c80") 13:46:12 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="04010500050000000a000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:12 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="040105000500000001f40000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:12 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') poll(&(0x7f0000000100)=[{r0, 0xa661}], 0x1, 0x87) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000059ee8d32bdd538a200000000bfa300000000000007000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000230000006a0a00fe00000000850000000b000000b700000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0x10, 0xc0, &(0x7f0000000080)="c9ecf37c9d0000000000000000000000", &(0x7f0000000280)=""/192}, 0x28) [ 343.860129] overlayfs: unrecognized mount option "oûôká¡ç*DTîQc[ÞÉ5½;®ÀB»³ L{%\€" or missing value 13:46:12 executing program 1: syz_emit_ethernet(0x15d, &(0x7f0000000440)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x14}, [], {@ipv6={0x86dd, {0x4, 0x6, "9da054", 0x127, 0x11, 0x2d, @loopback={0x0, 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[@hopopts={0x67, 0xc, [], [@generic={0x7, 0x1e, "85d569f4cbd06275e05641861d7c4d26e636935b34519ceaf4c40b871c57"}, @hao={0xc9, 0x10, @local={0xfe, 0x80, [], 0xaa}}, @calipso={0x7, 0x28, {0x5, 0x8, 0xd685, 0xffffffffffffff7f, [0x1000, 0x2, 0x8, 0x4]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0xc, 0xa, 0x3, 0x0, 0x0, [@loopback={0x0, 0x1}, @mcast1={0xff, 0x1, [], 0x1}, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, @ipv4={[], [0xff, 0xff], @rand_addr=0x1}]}, @dstopts={0x6c, 0x3, [], [@jumbo={0xc2, 0x4, 0x4}, @pad1={0x0, 0x1}, @enc_lim={0x4, 0x1, 0x4}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}], @icmpv6=@echo_reply={0x81, 0x0, 0x0, 0x8, 0xff, "3d394670c1b8d0e437fcedf52aa4d634245a0d0cf14e7fae06f1c33bc287f335b068a255bffc7320e81f444ea596d0"}}}}}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000400)) syz_emit_ethernet(0x3a9, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="16d4b31746df", [], {@ipv6={0x86dd, {0x3, 0x6, "42bbb0", 0x373, 0x2b, 0x9, @dev={0xfe, 0x80, [], 0x16}, @loopback={0x0, 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x37a5e4ae, 0x0, 0xab, 0x0, 0x1, 0x880b, 0xad, 0x0, [0x7], "0b1bb7233a13406432dec752144a609e134f07f8fce10b898077a73a2a7884760142b6af571d90a2e74656cf89b31f3f95345d412be46400eb062a8812e61597e9ac25441fd528b7e326acaec74e71725dfb791dafa16c79e915e59d9220e63ae2edcd3f15fd324245e1e37cd33c5f1525d1c769082b9c60652c436706b80cebc5a3dffd0aa218f141a6713950cd510ee4e3db5527f3b65cc523604a8457f32181b9942d8dbd54613f49fa0347"}, {0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x800, [0x8, 0x0, 0xac], "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"}, {0x4, 0x0, 0x400, 0x2a0, 0x0, 0x0, 0x86dd, [0xfffffffffffffffc], "9246612721e3b9c7d9308dce5540c0cc83bef61b535f188addaddd9692548203dba8c0ad1702221e49ea6b859f3133507597ebe0a4023cf5f72315840949cfc5a739153b8d3097707f783ee34fe6ada0970821fb733a7894d5544fa6988c86ebeabc52a03f26c89d5e9001fddfd8ce491ae802b715d930f7c4e927ca04e1fb67605cefa509869e59afbff8b6b41ec89db5e9306cdd08ef1fe3bfe93005a2cbb6fc39668ac1a502009941a940c0a38ea74ff3130fc63e661cc411db29db647451eac5f00e61ab3c4d60e5255fbba9cac664acd8ae5ce5e88f360440cdbbf146cb11cad770a1661cdeec63b55137d845ad016d72"}, {0x8, 0x88be, 0x2, {{0x5, 0x1, 0x1ba, 0x3981d750, 0x1ff, 0x3, 0x8, 0xffffffff}, 0x1, 0x1f}}, {0x8, 0x22eb, 0x4, {{0x8, 0x2, 0xffff, 0x4, 0x7, 0xf59, 0x1, 0x7}, 0x2, 0x7f, 0x200, 0x1000, 0x8, 0x81, 0x86d, 0x10001, 0xfffffffffffffffa, 0x6707}}, {0x8, 0x6558, 0x0, "ecc9b405ac84b7f9be558eb9589d6ee55305b74c5c1a1de26d2b9b1a1d13bd02be24f2b47c7bf1b4d25b2aaeb2f06b1f74c4ceb0afba95b9c34aa137725e9aea2f836b0db107249870fa5d32c7934b2b77532a7659e1a5720345307724533441545ddd4b5635ade8eee01ef1f8c616b5fac438d50908289f52111e610f6a0c4c67e51e46ed8b"}}}}}}}, &(0x7f00000003c0)={0x1, 0x1, [0x414, 0xd94, 0x3d, 0x737]}) syz_emit_ethernet(0x66, &(0x7f0000101000)={@random="cd390b081bf2", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x2, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback={0x0, 0x1}, @dev={0xfe, 0x80}}}}}}}}, 0x0) 13:46:12 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000980)=""/230, 0xe6}], 0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x200, 0x8400) ioctl$TCGETA(r3, 0x5405, &(0x7f00000002c0)) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$inet(r5, &(0x7f00000001c0)={0x0, 0x0, @local}, &(0x7f0000000240)=0x10) ioctl$EVIOCGMTSLOTS(r4, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1}) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) 13:46:12 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001300)='/dev/ppp\x00', 0x113003, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000001340)="40caebbe8b49241376767c8febc47352", 0x10) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x802) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) readv(r3, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$KVM_DEASSIGN_PCI_DEVICE(r3, 0x4040ae72, &(0x7f0000ff0000)) r4 = dup3(r1, r0, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000011000/0x1000)=nil, 0x1000}, 0x2}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) 13:46:13 executing program 1: r0 = socket$inet6_sctp(0xa, 0x2000000005, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x0, 0x1b2a067ed9e38c51}, &(0x7f0000000180)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000000)={r1, 0x72b3}, 0x8) [ 344.305090] IPVS: ftp: loaded support on port[0] = 21 13:46:13 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x2) epoll_wait(r0, &(0x7f0000000040)=[{}, {}, {}, {}], 0x4, 0x9) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7fff, 0x0, 0xffffffffffffffff, 0x1d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffbd}, [@ldst={0x7, 0x1, 0x0, 0x0, 0x7a}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0x450, &(0x7f000000cf3d)=""/195}, 0x48) 13:46:13 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="0401050005000000ffffffc0ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:13 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}, 0x1}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udplite6\x00') ioctl$KDGKBENT(r2, 0x4b46, &(0x7f00000000c0)={0x1b2a, 0x9, 0x800}) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="021200001100000026bd7000fcdbdf2501001400790000000800120003000000000000003800000006003200030800000900000000000000ac1414bb000000000000000000000000ac14140c00000000000000000000000004000400050000001f000000000700003f00000000000000030000000000000002000b00050000000100000000000000"], 0x88}, 0x1}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000c97ff8)=0xc) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)) [ 344.976668] FAULT_FLAG_ALLOW_RETRY missing 30 [ 344.981409] CPU: 1 PID: 23027 Comm: syz-executor6 Not tainted 4.18.0-rc1+ #111 [ 344.988785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 344.998143] Call Trace: [ 345.000751] dump_stack+0x1c9/0x2b4 [ 345.004398] ? dump_stack_print_info.cold.2+0x52/0x52 [ 345.009692] ? kasan_check_write+0x14/0x20 [ 345.014283] ? do_raw_spin_lock+0xc1/0x200 [ 345.018529] handle_userfault.cold.32+0x47/0x62 [ 345.023235] ? userfaultfd_ioctl+0x4fd0/0x4fd0 [ 345.027827] ? debug_check_no_locks_freed+0x310/0x310 [ 345.033045] ? perf_event_update_userpage+0xd30/0xd30 [ 345.038246] ? print_usage_bug+0xc0/0xc0 [ 345.042528] ? print_usage_bug+0xc0/0xc0 [ 345.046692] ? __perf_event_task_sched_in+0x24f/0xbb0 [ 345.051897] ? userfaultfd_ctx_put+0x810/0x810 [ 345.056496] ? find_held_lock+0x36/0x1c0 [ 345.060575] ? __lock_acquire+0x7fc/0x5020 [ 345.064817] ? lock_downgrade+0x8f0/0x8f0 [ 345.068974] ? graph_lock+0x170/0x170 [ 345.072788] ? find_held_lock+0x36/0x1c0 [ 345.076887] ? lock_downgrade+0x8f0/0x8f0 [ 345.081057] ? kasan_check_read+0x11/0x20 [ 345.085246] ? do_raw_spin_unlock+0xa7/0x2f0 [ 345.089698] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 345.094286] ? kasan_check_write+0x14/0x20 [ 345.098513] ? do_raw_spin_lock+0xc1/0x200 [ 345.102754] __handle_mm_fault+0x3a0a/0x4460 [ 345.107158] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 345.111994] ? graph_lock+0x170/0x170 [ 345.115798] ? lock_downgrade+0x8f0/0x8f0 [ 345.120127] ? kasan_check_read+0x11/0x20 [ 345.124274] ? rcu_is_watching+0x8c/0x150 [ 345.128464] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 345.133062] ? handle_mm_fault+0x8c4/0xc80 [ 345.137288] handle_mm_fault+0x53e/0xc80 [ 345.141350] ? __handle_mm_fault+0x4460/0x4460 [ 345.145924] ? find_vma+0x34/0x190 [ 345.149464] __do_page_fault+0x620/0xe50 [ 345.153529] ? mm_fault_error+0x380/0x380 [ 345.157677] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 345.162677] ? graph_lock+0x170/0x170 [ 345.166466] do_page_fault+0xf6/0x8c0 [ 345.170256] ? vmalloc_sync_all+0x30/0x30 [ 345.174391] ? find_held_lock+0x36/0x1c0 [ 345.178447] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 345.183295] page_fault+0x1e/0x30 [ 345.186753] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 345.192365] Code: 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f [ 345.211551] RSP: 0018:ffff8801ce08f7f0 EFLAGS: 00010202 [ 345.216912] RAX: 0000000000000004 RBX: 0000000000000004 RCX: 0000000000000004 [ 345.224186] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff8801ce08f890 [ 345.231441] RBP: ffff8801ce08f828 R08: ffffed0039c11f13 R09: ffffed0039c11f12 [ 345.238870] R10: ffffed0039c11f12 R11: 0000000000000003 R12: 0000000020013004 [ 345.246126] R13: 0000000020013000 R14: ffff8801ce08f890 R15: 00007ffffffff000 [ 345.253402] ? _copy_from_user+0x10d/0x150 [ 345.257628] evdev_do_ioctl+0xb69/0x21a0 [ 345.261691] ? str_to_user+0x90/0x90 [ 345.265403] ? do_futex+0x249/0x27d0 [ 345.269125] ? graph_lock+0x170/0x170 [ 345.272921] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 345.277324] ? find_held_lock+0x36/0x1c0 [ 345.281376] ? lock_downgrade+0x8f0/0x8f0 [ 345.285524] ? kasan_check_read+0x11/0x20 [ 345.289665] ? rcu_is_watching+0x8c/0x150 [ 345.293797] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 345.298199] ? __fget+0x414/0x670 [ 345.301657] evdev_ioctl_handler+0x144/0x1a0 [ 345.306065] evdev_ioctl+0x27/0x2e [ 345.309601] ? evdev_ioctl_compat+0x30/0x30 [ 345.313911] do_vfs_ioctl+0x1de/0x1720 [ 345.317786] ? sockfd_lookup_light+0xc5/0x160 [ 345.322907] ? ioctl_preallocate+0x300/0x300 [ 345.327300] ? __fget_light+0x2f7/0x440 [ 345.331260] ? __ia32_sys_getsockname+0xb0/0xb0 [ 345.335916] ? fget_raw+0x20/0x20 [ 345.339364] ? put_unused_fd+0x62/0x70 [ 345.343249] ? __x64_sys_futex+0x47f/0x6a0 [ 345.347475] ? do_futex+0x27d0/0x27d0 [ 345.351272] ? security_file_ioctl+0x94/0xc0 [ 345.355665] ksys_ioctl+0xa9/0xd0 [ 345.359102] __x64_sys_ioctl+0x73/0xb0 [ 345.362987] do_syscall_64+0x1b9/0x820 [ 345.366878] ? syscall_return_slowpath+0x5e0/0x5e0 [ 345.371796] ? syscall_return_slowpath+0x31d/0x5e0 [ 345.376713] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 345.382078] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 345.386916] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 345.392097] RIP: 0033:0x455b29 [ 345.395287] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 345.415143] RSP: 002b:00007f2451247c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 345.422854] RAX: ffffffffffffffda RBX: 00007f24512486d4 RCX: 0000000000455b29 [ 345.430112] RDX: 0000000020013000 RSI: 00000000400445a0 RDI: 0000000000000016 [ 345.437376] RBP: 000000000072bf50 R08: 0000000000000000 R09: 0000000000000000 [ 345.444632] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 345.451888] R13: 00000000004bd250 R14: 00000000004cb350 R15: 0000000000000001 [ 346.017289] device bridge_slave_1 left promiscuous mode [ 346.022881] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.036514] device bridge_slave_0 left promiscuous mode [ 346.042136] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.058444] team0 (unregistering): Port device team_slave_1 removed [ 348.068513] team0 (unregistering): Port device team_slave_0 removed [ 348.079232] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 348.098421] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 348.125434] bond0 (unregistering): Released all slaves [ 348.471737] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.478199] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.486050] device bridge_slave_0 entered promiscuous mode [ 348.525527] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.537253] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.546000] device bridge_slave_1 entered promiscuous mode [ 348.584580] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 348.623203] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 348.737746] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 348.779943] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 348.956443] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 348.963867] team0: Port device team_slave_0 added [ 349.004741] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 349.012748] team0: Port device team_slave_1 added [ 349.050244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 349.090183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 349.131113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 349.160333] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 349.167509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 349.182694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 349.525996] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.532423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.539104] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.545506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.552891] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 350.176547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 350.384222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.465963] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 350.548605] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 350.554830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 350.562511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 350.639560] 8021q: adding VLAN 0 to HW filter on device team0 13:46:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000001400)=@getlink={0x24, 0x12, 0x201, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4, 0xf}]}, 0xfffffe6e}, 0x1}, 0xfffffffffffffffc) 13:46:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCSSOFTCAR(r1, 0x5460, &(0x7f0000000000)=0xec03) 13:46:19 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="0401050005000000000a0000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:19 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="040105000500ffffffc00000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:19 executing program 1: r0 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x0, 0x0, @loopback}, &(0x7f0000000140)=0x1c) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000240)='/dev/urandom\x00', 0x800, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000280)=0x2, 0x8) accept(r0, &(0x7f0000000180)=@alg, &(0x7f0000000200)=0x80) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f000001f000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384-ssse3)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="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", 0x100) 13:46:19 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x9) setsockopt(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000000), 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x400000, 0x0) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000040)) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000100)={'NETMAP\x00'}, &(0x7f0000000140)=0x1e) 13:46:19 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xee) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000100)={0x8, 0x81, 0x5, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'vcan0\x00'}) msgget(0x2, 0x4) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getegid() syz_fuseblk_mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff, r2, 0x2bef, 0x1, 0x80000) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="2843429b49c105dffdea81f66073797a30b2f0d34a1d4a78e397"], 0xd) poll(&(0x7f0000000000), 0x20000000000003bb, 0xfffffffffffeffff) 13:46:19 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000980)=""/230, 0xe6}], 0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000140)={0xffffffffffffff9c}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400001}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="ecb0020000056b0fccf69906810624e928f750c31f29ce720565af01e07c4cb9cf9800000000000000000000", @ANYRES16=r5, @ANYBLOB="00032bbd7000010000000400000008000500ff0f00004c0001000c0007002000000004000000080001000200000008000800010000000c000700320000002900000008000500030000000c00070004000000170000000c000700000000000c000000080006000200000008000500010000000c00030008000300020000000c00020008000600030000001400010008000b00736970000800090042000000380003001400020065716c00000000000000000000000000080004000000000008000500000000000800040055000000080005007f0000010800040004000000080006003f000000"], 0xec}, 0x1, 0x0, 0x0, 0x80}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r8, 0x1, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000380)="88", 0x1}]) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) io_destroy(r8) tee(r9, r7, 0x8, 0x0) vmsplice(r10, &(0x7f0000000140)=[{&(0x7f00000000c0)="06", 0x1}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000240)={0x36ad, 0xfffffffffffffff7, 0x200, 'queue0\x00', 0x3a6f}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1}) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) 13:46:20 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x4, &(0x7f0000000280)) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x8200) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000100)=0x5, 0x4) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x200000, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x800002, 0x11, r2, 0x0) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x30e) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in={{0x2, 0x0, @loopback=0x7f000001}}}, 0x90) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000000140)=0x5) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0), 0x1f, 0x3) 13:46:20 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="0401050005000000004a0000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:20 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40bc5311, &(0x7f0000000000)) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f00000000c0), 0x2) getsockname(r2, &(0x7f0000002600)=@can={0x0, 0x0}, &(0x7f0000000140)=0x84) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000026c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@rand_addr}}, &(0x7f00000027c0)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002800)={{{@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in6=@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x4e24, 0x8000, 0x4e24, 0x2, 0xa, 0x20, 0x20, 0x3b, r3, r4}, {0x10001, 0x3, 0x3f, 0x8, 0x4, 0x2, 0x6}, {0xcd6, 0x1, 0xff3, 0x5}, 0x200, 0x0, 0x1, 0x1, 0x2, 0x2}, {{@in=@loopback=0x7f000001, 0x4d4, 0x33}, 0xa, @in=@loopback=0x7f000001, 0x0, 0x5, 0x3, 0x6, 0x3, 0x2, 0x7}}, 0xe8) 13:46:20 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x7ff, 0x725400) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000000c0)=""/126, &(0x7f0000000140)=0x7e) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0xfffffffffffffffd, 0x100000000, @mcast2={0xff, 0x2, [], 0x1}, 0x400000002}, 0x18) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0xffffffffffffff80, 0x1ff}, &(0x7f00000001c0)=0x8) syz_init_net_socket$llc(0x1a, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000200)={r2, 0x6}, &(0x7f0000000240)=0x8) 13:46:20 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x7, 0x40}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000140)={r2, 0x100000000}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000280)={r2, 0x5}, 0x8) r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x4, 0x103003) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000380)="5c12b0e845ba38fac8a5b58d655a4501c8c46a8ab0129e6dc34e45999d904bb450cf00c68202bb99649b6fac61642ec4a82dd9fc3d46031e5716faffbfd592a395c9ad159d2c500659fc7e1252c3e57dd292b2a7a6478ed72376f32cc681eb5b955def87d79dc76f86855f1cc5d88fac63c680f3ff1788e5a9f7b29d47ca569508322ec387c92072462fa148a95129c61bb1bccc5655acf5425fded0cb35d04fa960e5359a7b1fd552224b708c533af7711cc9ede89d38c70c4d1e0869be893bc3a1a9652dbc565a9b4c4ba2085e2e6ae04aaf2333") r4 = memfd_create(&(0x7f00000001c0)="5d706f7369785f61636c5f616363657373cb747275737465642b6c6f73656c66766d6e65743040212b5c00", 0xfffffffffffffffe) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r4) sendfile(r0, r0, &(0x7f0000000240)=0x39, 0x20000102000007) 13:46:20 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair(0x4, 0x6, 0xffff, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000140)=0x10100000000000, &(0x7f0000000280)=0x2) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x8000, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000080)) r3 = fcntl$dupfd(r0, 0x406, r0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r3, 0x2) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xea) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000180)=""/214) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f00000003c0)) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f00000002c0)) 13:46:20 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020d00001400000000000000000000000800120000000300000000000000000006000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000030006000000000002000000ac14ffbb0000000000000000030005000000000002000000ac14ffbb00000000000000000400030000000000000000000000000000000000000000000000000000000000"], 0xa0}, 0x1}, 0x0) r1 = socket$inet(0x2, 0x0, 0xffff) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000040)={{0x2, 0x4e24, @rand_addr=0x6}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x12, {0x2, 0x4e20, @loopback=0x7f000001}, 'vcan0\x00'}) 13:46:20 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000000260000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:20 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet6(0xa, 0x3, 0x10000000000007) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000000)=@hopopts={0x67, 0x5, [], [@hao={0xc9, 0x10}, @pad1={0x0, 0x1}, @enc_lim={0x4, 0x1, 0x20}, @hao={0xc9, 0x10, @loopback={0x0, 0x1}}]}, 0xfffffffffffffe17) r2 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x1, 0xafc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000040)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x10) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000140), 0x7b, 0x0) 13:46:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCSSOFTCAR(r1, 0x5414, &(0x7f0000000000)=0xec03) 13:46:20 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="040105000500000000020000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:20 executing program 1: rt_sigaction(0x400000000000007, &(0x7f0000000040)={0x4024f7, {0xffffffbfffbff26f}}, &(0x7f0000000240), 0x8, &(0x7f0000000100)) sysfs$1(0x1, &(0x7f0000000000)='+%cpusetcgroup\x00') mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/icmp\x00') 13:46:20 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="0401050005000000f4010000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:20 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x5, 0x800) accept$inet(r0, &(0x7f0000000080)={0x0, 0x0, @rand_addr}, &(0x7f00000000c0)=0x10) r1 = gettid() rt_tgsigqueueinfo(r1, r1, 0x9, &(0x7f0000000000)={0x9, 0x0, 0x9b5, 0xfffffffffffffff9}) rt_tgsigqueueinfo(0x0, r1, 0x0, &(0x7f000058a000)) 13:46:20 executing program 3: getgroups(0x3, &(0x7f0000000200)) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x200, 0x400243) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000040)='veth0\x00') ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000180)={0x815, 0x7, 0x7, 0xe69, 0x20}) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x6e, "55df144d842f54f52f6299130eb5f6cf6c289d144e7decc3da47f322c242d948eb213d5e37da5155d704478b7cacd247db8e7fd0ac0c018cab7c6a0f76af15cca1d928c77e736d71c9f3e40c4d50e702d4f94a9a055ce257bff8e46b98328cfdcbfb085c9ee5a678fe716a49d851"}, &(0x7f0000000140)=0x92) 13:46:21 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000980)=""/230, 0xe6}], 0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) sched_setattr(r0, &(0x7f0000000140)={0x30, 0x2, 0x1, 0xaa, 0x0, 0x4, 0x5, 0x100}, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1}) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) 13:46:21 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000002c0)=@broute={'broute\x00', 0x20, 0x1, 0x268, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000340], 0x0, &(0x7f0000000040), &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"]}, 0x2e0) 13:46:21 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000000034000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:21 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000040)) r1 = syz_open_dev$sndctrl(&(0x7f0000000300)='/dev/snd/controlC#\x00', 0x0, 0x2400) ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f0000000180)=ANY=[@ANYBLOB="020000000e010000ff00000000000000090000000005000000000000ffe200000381b8b118835d084d0eee75bfbb2d1e8403163a855c50c113f0a88f236eab108f000000000000000000000038c7336e5bb4d1c8da75c3e814616dee5a37197b4633dedd9fb71729d101dec678d329ccc84dcbe8689049f6bd2a364303176feb2ea38b0dfd2ea6ec73979760e5ac21b3b9ed2453777a3f201ca4c1e70e22b876293de4ba69b02161fe840e18329e364b5765c159ce4dbba05eb7f669a02bbe93cd8006cf024a5ccf90d228143e21ab1a04a21e04bb50f1a8021236df113001b819374f5c9df1eefd6d32"]) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0x10000) dup3(r0, r1, 0x0) 13:46:21 executing program 1: r0 = socket$nl_generic(0xa, 0x5, 0x84) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x800) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000240)={0x20, 0x5f, 0x100, 0x3, 0x20000000000}) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"6272696467653000d40900000000004b", &(0x7f0000000000)=@ethtool_cmd={0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfdfdffff}}) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000180)={{&(0x7f0000000080)=""/154, 0x9a}, &(0x7f0000000140), 0x1}, 0x20) 13:46:21 executing program 2: r0 = socket(0xa, 0x803, 0x39) r1 = dup3(r0, r0, 0x80000) ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) ioctl$sock_bt(r0, 0x8907, &(0x7f0000000000)) sendto$unix(r0, &(0x7f0000000cc0), 0xe0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmsg$kcm(r0, &(0x7f0000000740)={&(0x7f0000000340)=@vsock={0x0, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000940)=""/242, 0xf2}, 0x0) 13:46:21 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="04010500050000f000000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:21 executing program 2: capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000002000)) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6, 0x204081) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={[], 0xd6, 0x4, 0xf48, 0x9, 0x6, r1}) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000040)) socket(0x1a, 0x0, 0x0) 13:46:21 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000000000002ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:21 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f0000000040)={0x9, 0x7, 0x0, 0xa9, 'syz0\x00', 0xffffffffffff0001}) listen(r1, 0x0) close(r1) 13:46:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCSSOFTCAR(r1, 0x40049409, &(0x7f0000000000)=0xec03) 13:46:21 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000c00)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001940)=[{0x0, 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000001300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x4) recvmsg(r1, &(0x7f0000001200)={&(0x7f0000000000)=@vsock={0x0, 0x0, 0x0, @hyper}, 0x3f5, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/78, 0x4e}], 0x1}, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000140)={0x7, &(0x7f0000000100)=[{0x1, 0x9a4}, {0x7ff, 0x6}, {0x80000001}, {0xff, 0x5}, {0xdf39, 0x400}, {0xfffffffffffffff9, 0x800}, {0x6, 0x7f}]}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f00000000c0)={0x3, "bb9869"}, 0x4) 13:46:21 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x20000000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='keyring\x00') r1 = socket$inet(0x2, 0xa, 0x1) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000380)={0x0, 0xe3, "3ee649680b537c389da15693adac15d3182651d73eb37d0dca7f3de3115581f18cb8c5d855fc7ae0f8ec0b20ba65d2ce111339c502c683f5c029b9b88909857a36a5037e59e3fc4ec0cd3e59b1088deb079eeaafa5147b79fa26c2f7cdd7e0e12b864284580adf126242d65a5321ae13c6d44d2a2c09a2789a9738a1bfdd319310e91713e7eae090e9236056a859e13b9d76c9a10c48d026b30f9171f5d6eaae690c82d6fde52dad8323e82f057659560ab5f165e537f418fec3ddd4aecd4bc87b75e90e8df31613ef679bbb406e0384f20de0980b18c202a6a227a930071f91facc12"}, &(0x7f00000002c0)=0xeb) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000300)=@assoc_value={r2, 0x2}, 0x8) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)=""/87, 0x57}], 0x1, &(0x7f00000001c0)=""/139, 0x8b, 0x80000000}, 0x40000000) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x7ff}, 0x8) 13:46:21 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="0401050005000000f0000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x400, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000080)=@mpls_getroute={0x28, 0x1a, 0x1, 0x0, 0x0, {0x1c}, [@RTA_DST={0xc, 0x1, [{}, {}]}]}, 0x28}, 0x1}, 0x0) 13:46:21 executing program 2: r0 = socket$packet(0x11, 0x0, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x4006, 0x4) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x6, 0x400000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f0000000140)={0x2, 0x3000}) sendto$inet6(r0, &(0x7f0000000100)="3901000000c08d11feeb", 0xa, 0x0, &(0x7f00000000c0)={0xa, 0x8953, 0x2000000000e, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000340)=0xe8) bind$packet(r0, &(0x7f0000000380)={0x11, 0x1a, r2, 0x1, 0x5f4, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x14) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x40, 0x0) [ 353.168615] netlink: 'syz-executor3': attribute type 1 has an invalid length. [ 353.300895] FAULT_FLAG_ALLOW_RETRY missing 30 [ 353.305538] CPU: 1 PID: 23461 Comm: syz-executor6 Not tainted 4.18.0-rc1+ #111 [ 353.312909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.322282] Call Trace: [ 353.324888] dump_stack+0x1c9/0x2b4 [ 353.328529] ? dump_stack_print_info.cold.2+0x52/0x52 [ 353.333733] ? kasan_check_write+0x14/0x20 [ 353.337974] ? do_raw_spin_lock+0xc1/0x200 [ 353.342220] handle_userfault.cold.32+0x47/0x62 [ 353.346903] ? userfaultfd_ioctl+0x4fd0/0x4fd0 [ 353.351492] ? debug_check_no_locks_freed+0x310/0x310 [ 353.356690] ? perf_event_update_userpage+0xd30/0xd30 [ 353.361877] ? print_usage_bug+0xc0/0xc0 [ 353.365950] ? print_usage_bug+0xc0/0xc0 [ 353.370025] ? __perf_event_task_sched_in+0x24f/0xbb0 [ 353.375227] ? userfaultfd_ctx_put+0x810/0x810 [ 353.379848] ? find_held_lock+0x36/0x1c0 [ 353.383926] ? __lock_acquire+0x7fc/0x5020 [ 353.388169] ? lock_downgrade+0x8f0/0x8f0 [ 353.392322] ? graph_lock+0x170/0x170 [ 353.396147] ? find_held_lock+0x36/0x1c0 [ 353.401228] ? lock_downgrade+0x8f0/0x8f0 [ 353.405395] ? kasan_check_read+0x11/0x20 [ 353.409554] ? do_raw_spin_unlock+0xa7/0x2f0 [ 353.413967] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 353.418568] ? kasan_check_write+0x14/0x20 [ 353.422813] ? do_raw_spin_lock+0xc1/0x200 [ 353.427062] __handle_mm_fault+0x3a0a/0x4460 [ 353.431497] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 353.436379] ? graph_lock+0x170/0x170 [ 353.440301] ? lock_downgrade+0x8f0/0x8f0 [ 353.444467] ? kasan_check_read+0x11/0x20 [ 353.448623] ? rcu_is_watching+0x8c/0x150 [ 353.452773] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 353.457196] ? handle_mm_fault+0x8c4/0xc80 [ 353.461443] handle_mm_fault+0x53e/0xc80 [ 353.465523] ? __handle_mm_fault+0x4460/0x4460 [ 353.470119] ? find_vma+0x34/0x190 [ 353.473671] __do_page_fault+0x620/0xe50 [ 353.477744] ? mm_fault_error+0x380/0x380 [ 353.481918] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 353.486946] ? graph_lock+0x170/0x170 [ 353.490756] do_page_fault+0xf6/0x8c0 [ 353.494565] ? vmalloc_sync_all+0x30/0x30 [ 353.498725] ? find_held_lock+0x36/0x1c0 [ 353.502808] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 353.507670] page_fault+0x1e/0x30 [ 353.511132] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 353.516748] Code: 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f [ 353.536210] RSP: 0018:ffff8801b9fd77f0 EFLAGS: 00010202 [ 353.541582] RAX: 0000000000000004 RBX: 0000000000000004 RCX: 0000000000000004 [ 353.548858] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff8801b9fd7890 [ 353.556135] RBP: ffff8801b9fd7828 R08: ffffed00373faf13 R09: ffffed00373faf12 [ 353.563409] R10: ffffed00373faf12 R11: 0000000000000003 R12: 0000000020013004 [ 353.570718] R13: 0000000020013000 R14: ffff8801b9fd7890 R15: 00007ffffffff000 [ 353.578028] ? _copy_from_user+0x10d/0x150 [ 353.582302] evdev_do_ioctl+0xb69/0x21a0 [ 353.586378] ? lock_downgrade+0x8f0/0x8f0 [ 353.590555] ? str_to_user+0x90/0x90 [ 353.594289] ? do_futex+0x249/0x27d0 [ 353.598004] ? rcu_is_watching+0x8c/0x150 [ 353.602157] ? graph_lock+0x170/0x170 [ 353.605959] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 353.610384] ? find_held_lock+0x36/0x1c0 [ 353.614464] ? lock_downgrade+0x8f0/0x8f0 [ 353.618648] ? kasan_check_read+0x11/0x20 [ 353.622799] ? rcu_is_watching+0x8c/0x150 [ 353.626954] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 353.631376] ? __fget+0x414/0x670 [ 353.634833] evdev_ioctl_handler+0x144/0x1a0 [ 353.639251] evdev_ioctl+0x27/0x2e [ 353.642777] ? evdev_ioctl_compat+0x30/0x30 [ 353.647088] do_vfs_ioctl+0x1de/0x1720 [ 353.650960] ? rcu_is_watching+0x8c/0x150 [ 353.655099] ? ioctl_preallocate+0x300/0x300 [ 353.659490] ? __fget_light+0x2f7/0x440 [ 353.663453] ? fget_raw+0x20/0x20 [ 353.666895] ? putname+0xf2/0x130 [ 353.670335] ? rcu_read_lock_sched_held+0x108/0x120 [ 353.675339] ? kmem_cache_free+0x25c/0x2d0 [ 353.679562] ? __x64_sys_futex+0x47f/0x6a0 [ 353.683784] ? do_futex+0x27d0/0x27d0 [ 353.687577] ? security_file_ioctl+0x94/0xc0 [ 353.691973] ksys_ioctl+0xa9/0xd0 [ 353.695413] __x64_sys_ioctl+0x73/0xb0 [ 353.699290] do_syscall_64+0x1b9/0x820 [ 353.703263] ? finish_task_switch+0x1d3/0x890 [ 353.707748] ? syscall_return_slowpath+0x5e0/0x5e0 [ 353.712676] ? syscall_return_slowpath+0x31d/0x5e0 [ 353.717594] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 353.722951] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 353.727795] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 353.732969] RIP: 0033:0x455b29 [ 353.736142] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 353.755378] RSP: 002b:00007f2451247c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 353.763075] RAX: ffffffffffffffda RBX: 00007f24512486d4 RCX: 0000000000455b29 [ 353.770332] RDX: 0000000020013000 RSI: 00000000400445a0 RDI: 0000000000000015 [ 353.777600] RBP: 000000000072bf50 R08: 0000000000000000 R09: 0000000000000000 [ 353.784853] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 353.792109] R13: 00000000004bd250 R14: 00000000004cb350 R15: 0000000000000001 13:46:22 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) times(&(0x7f0000000140)) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000980)=""/230, 0xe6}], 0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f00000001c0)=""/36) 13:46:22 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="04010500050003e800000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:22 executing program 4: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x1294c1, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f00000000c0)=0x1) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r3 = inotify_init() r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) dup2(r3, r4) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="65dd3f2e050e00ffaac75866b9800000c00f326635000400000f300f01c86526af0f0117ddc7440f20c066350b000000440f22c0f20f1b51db", 0x39}], 0x1, 0x0, &(0x7f0000000580), 0xfffffea) 13:46:22 executing program 3: r0 = dup(0xffffffffffffffff) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x1, 0x7, 0x100000001, 0x13}, 0x8) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)="73797a5f74756e0000000000001000", 0xdb2d) socketpair(0x19, 0x2, 0x2913, &(0x7f0000000000)) sendto$unix(r1, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 13:46:22 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000004000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:22 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000080)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) socketpair(0xa, 0x6, 0x8001, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000180)={0xf004, 0x5000, 0x80000000, 0x5}) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x2, [@multicast2=0xe0000002, @local={0xac, 0x14, 0x14, 0xaa}]}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f00000001c0)) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendto$inet(r3, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000140)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) 13:46:22 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x14) pwrite64(r0, &(0x7f0000000040)="135e129b4f5f6cfa7e220847a3c6ffd51fb80e07f3795746ffd4d172474098a2aa673f7728cc0693a99b609b7fab4826fbcd5e30467c33c127efe67ec3f8b5b5c1e2479d40169508bed473295ba4ab9c247859103c8be0c9c6da8a6ab1695930de31a05dc71b355bdc58312e5bb2416036a4ae40a8c4b226a3d4ac7eafd2cf69915c7fe7e600b72bbf44e0fb93bbd9f3cae4ed6cf53ed2", 0x97, 0x0) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000200)='./file0\x00', r2, r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xc, 0x4, 0x4, 0xffffffffffff4c25, 0x0, r4, 0x0, [0x305f, 0xa]}, 0x2c) 13:46:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCSSOFTCAR(r1, 0x5423, &(0x7f0000000000)=0xec03) 13:46:23 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000010000000000000000000830000000000", @ANYRES32=r1, @ANYBLOB="0000c0631bac", @ANYRES32=0x0], 0x28}, 0x1}, 0x0) 13:46:23 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000000000011ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:23 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x0, [0x4b564d04]}) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000140)={{0x0, @local={0xac, 0x14, 0x14, 0xaa}, 0x4e22, 0x3, 'wlc\x00', 0x4, 0xffff, 0x27}, {@remote={0xac, 0x14, 0x14, 0xbb}, 0x4e24, 0x0, 0xbe3, 0x3ff, 0x3}}, 0x44) 13:46:23 executing program 3: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x60) r1 = socket$inet6(0xa, 0x1000000000002, 0xffffffffffffffff) getsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f00000000c0)={@rand_addr, @dev}, &(0x7f0000001140)=0x8) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r2 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) connect$inet6(r2, &(0x7f00008c0000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$sock_buf(r2, 0x1, 0x4, &(0x7f0000000100)=""/4096, &(0x7f0000001100)=0x1c) 13:46:23 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) fcntl$setflags(r0, 0x2, 0x1) ioctl$TCSETSF(r1, 0x40045108, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffeffffffff}) 13:46:23 executing program 1: r0 = socket(0x10, 0x4000000000000002, 0x40007) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bcsf0\x00\x00\x00\x00\x00\x00\x00\x00 \x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000003000000020000000600000009000000050600000500000001000000060000008c8e665c4fb3d6634a"]}) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000000), 0x4) connect$l2tp(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x3, 0x2, {0xa, 0x4e23, 0x3, @remote={0xfe, 0x80, [], 0xbb}, 0xfffffffffffffffe}}}, 0x32) 13:46:23 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x0, 0x0) accept4$alg(r0, 0x0, 0x0, 0x80800) name_to_handle_at(r0, &(0x7f0000000240)='\x00', &(0x7f00000002c0)={0x8}, &(0x7f00000003c0), 0x1000) pselect6(0x40, &(0x7f0000000000)={0x0, 0x4, 0x3, 0x1, 0x8, 0xffffffffffffff7f, 0x941f, 0x7f0}, &(0x7f0000000040)={0x8000, 0x6, 0xffffffff, 0x7a6, 0x507, 0x0, 0x9, 0x7}, &(0x7f0000000080)={0x2, 0x58b, 0x200, 0x8000, 0x3, 0x2, 0x9}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={0x1}, 0x8}) 13:46:23 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000000000006ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 355.026589] FAULT_FLAG_ALLOW_RETRY missing 30 [ 355.031205] CPU: 1 PID: 23539 Comm: syz-executor6 Not tainted 4.18.0-rc1+ #111 [ 355.038671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 355.048024] Call Trace: [ 355.050615] dump_stack+0x1c9/0x2b4 [ 355.054257] ? dump_stack_print_info.cold.2+0x52/0x52 [ 355.059459] ? kasan_check_write+0x14/0x20 [ 355.063705] ? do_raw_spin_lock+0xc1/0x200 [ 355.067957] handle_userfault.cold.32+0x47/0x62 [ 355.072642] ? userfaultfd_ioctl+0x4fd0/0x4fd0 [ 355.077231] ? debug_check_no_locks_freed+0x310/0x310 [ 355.082434] ? perf_event_update_userpage+0xd30/0xd30 [ 355.087631] ? print_usage_bug+0xc0/0xc0 [ 355.091724] ? print_usage_bug+0xc0/0xc0 [ 355.095788] ? __perf_event_task_sched_in+0x24f/0xbb0 [ 355.100993] ? userfaultfd_ctx_put+0x810/0x810 [ 355.105587] ? find_held_lock+0x36/0x1c0 [ 355.109853] ? __lock_acquire+0x7fc/0x5020 [ 355.114093] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 355.118851] ? graph_lock+0x170/0x170 [ 355.122691] ? find_held_lock+0x36/0x1c0 [ 355.126770] ? lock_downgrade+0x8f0/0x8f0 [ 355.130933] ? kasan_check_read+0x11/0x20 [ 355.135090] ? do_raw_spin_unlock+0xa7/0x2f0 [ 355.139503] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 355.144091] ? kasan_check_write+0x14/0x20 [ 355.148328] ? do_raw_spin_lock+0xc1/0x200 [ 355.152571] __handle_mm_fault+0x3a0a/0x4460 [ 355.157004] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 355.161854] ? graph_lock+0x170/0x170 [ 355.165673] ? lock_downgrade+0x8f0/0x8f0 [ 355.169832] ? kasan_check_read+0x11/0x20 [ 355.173985] ? rcu_is_watching+0x8c/0x150 [ 355.178136] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 355.182548] ? handle_mm_fault+0x8c4/0xc80 [ 355.186794] handle_mm_fault+0x53e/0xc80 [ 355.190885] ? __handle_mm_fault+0x4460/0x4460 [ 355.195480] ? find_vma+0x34/0x190 [ 355.199029] __do_page_fault+0x620/0xe50 [ 355.203098] ? mm_fault_error+0x380/0x380 [ 355.207251] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 355.212277] ? graph_lock+0x170/0x170 [ 355.216085] do_page_fault+0xf6/0x8c0 [ 355.219889] ? vmalloc_sync_all+0x30/0x30 [ 355.224046] ? find_held_lock+0x36/0x1c0 [ 355.228125] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 355.232982] page_fault+0x1e/0x30 [ 355.236446] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 355.242075] Code: 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f [ 355.261490] RSP: 0018:ffff8801c5bbf7f0 EFLAGS: 00010202 [ 355.266861] RAX: 0000000000000004 RBX: 0000000000000004 RCX: 0000000000000004 [ 355.274129] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff8801c5bbf890 [ 355.281530] RBP: ffff8801c5bbf828 R08: ffffed0038b77f13 R09: ffffed0038b77f12 [ 355.288806] R10: ffffed0038b77f12 R11: 0000000000000003 R12: 0000000020013004 [ 355.296082] R13: 0000000020013000 R14: ffff8801c5bbf890 R15: 00007ffffffff000 [ 355.303561] ? _copy_from_user+0x10d/0x150 [ 355.307822] evdev_do_ioctl+0xb69/0x21a0 [ 355.311888] ? lock_downgrade+0x8f0/0x8f0 [ 355.316037] ? str_to_user+0x90/0x90 [ 355.319753] ? do_futex+0x249/0x27d0 [ 355.323471] ? rcu_is_watching+0x8c/0x150 [ 355.327621] ? graph_lock+0x170/0x170 [ 355.331423] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 355.335849] ? find_held_lock+0x36/0x1c0 [ 355.339930] ? lock_downgrade+0x8f0/0x8f0 [ 355.344122] ? kasan_check_read+0x11/0x20 [ 355.348274] ? rcu_is_watching+0x8c/0x150 [ 355.352430] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 355.356835] ? __fget+0x414/0x670 [ 355.360282] evdev_ioctl_handler+0x144/0x1a0 [ 355.364685] evdev_ioctl+0x27/0x2e [ 355.368210] ? evdev_ioctl_compat+0x30/0x30 [ 355.372516] do_vfs_ioctl+0x1de/0x1720 [ 355.376421] ? rcu_is_watching+0x8c/0x150 [ 355.380570] ? ioctl_preallocate+0x300/0x300 [ 355.384964] ? __fget_light+0x2f7/0x440 [ 355.388921] ? fget_raw+0x20/0x20 [ 355.392390] ? putname+0xf2/0x130 [ 355.395830] ? rcu_read_lock_sched_held+0x108/0x120 [ 355.401671] ? kmem_cache_free+0x25c/0x2d0 [ 355.405906] ? __x64_sys_futex+0x47f/0x6a0 [ 355.410132] ? do_futex+0x27d0/0x27d0 [ 355.413926] ? security_file_ioctl+0x94/0xc0 [ 355.418342] ksys_ioctl+0xa9/0xd0 [ 355.421892] __x64_sys_ioctl+0x73/0xb0 [ 355.425785] do_syscall_64+0x1b9/0x820 [ 355.429662] ? syscall_return_slowpath+0x5e0/0x5e0 [ 355.434581] ? syscall_return_slowpath+0x31d/0x5e0 [ 355.439504] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 355.444862] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 355.449715] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 355.454986] RIP: 0033:0x455b29 [ 355.458189] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 355.477696] RSP: 002b:00007f2451247c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 355.485393] RAX: ffffffffffffffda RBX: 00007f24512486d4 RCX: 0000000000455b29 [ 355.492659] RDX: 0000000020013000 RSI: 00000000400445a0 RDI: 0000000000000015 [ 355.499925] RBP: 000000000072bf50 R08: 0000000000000000 R09: 0000000000000000 [ 355.507195] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 355.514470] R13: 00000000004bd250 R14: 00000000004cb350 R15: 0000000000000001 13:46:24 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000180), 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1}) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) 13:46:24 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) flock(r0, 0xd) sendmsg$alg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000724ff0)=[{&(0x7f0000fa7f12)="b1", 0x1}], 0x1, &(0x7f00000003c0)}, 0x0) 13:46:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x74500) fcntl$getflags(r3, 0x3) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000280)={0x3d, @broadcast=0xffffffff, 0x4e24, 0x4, 'sh\x00', 0x0, 0x0, 0x51}, 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, [], 0xe}, 0x7}, @in6={0xa, 0x4e22, 0x7, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x1}, @in6={0xa, 0x4e20, 0x8a57, @mcast1={0xff, 0x1, [], 0x1}, 0x1}], 0x54) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000040)="f2446eb960000000b800000100ba000000000f30c74424000f000000c7442402eeae5562c7442406000000000f011c248f4848ed0b6dc4e1fa109df8ffffff400fc79ef000000066b82e010f00d8260f412dfc8700000f01cac442fd21de", 0x5e}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) 13:46:24 executing program 3: r0 = socket$inet6(0xa, 0x80803, 0x3) getsockopt$inet6_int(r0, 0x29, 0x50, &(0x7f00000000c0), &(0x7f0000000080)=0x2) 13:46:24 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="040105000500000e00000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:24 executing program 2: r0 = socket(0xa, 0x1, 0x0) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r1) r2 = socket(0x10, 0x2, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x218000, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) socket$inet_sctp(0x2, 0x1, 0x84) setgroups(0x8, &(0x7f00000000c0)=[r5, r1, r1, r1, r1, r5, r5, r5]) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000000)="0d83a3e8e2e566b4a3bbd1c952803105d619504fac85ef1f20ae9bdb884e4662621d46dae6532a046df762a834937bc00570c4549e599fc2801294b5a9169d0541b6ae2bc0db93e6b7b6812c94e4e869ef0dadd4a6f066859024ebcf1a4d46f99839f05b3bdf72a36c0792d7", 0x6c) setresuid(0x0, r4, 0x0) shmget$private(0x0, 0x3000, 0x820, &(0x7f0000ffd000/0x3000)=nil) 13:46:24 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="0401050005000000003f0000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCSSOFTCAR(r1, 0xc020660b, &(0x7f0000000000)=0xec03) [ 355.862914] hugetlbfs: syz-executor2 (23564): Using mlock ulimits for SHM_HUGETLB is deprecated 13:46:24 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000001f40000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000014c0)={'team0\x00', 0x0}) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x9}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000180)={r4, 0xb6, "77450443bd422f4d7af708309b5a5d95394e6d375456d262185549af62bf8a126a560e1ed72b2b1c8f61ea9b390bbc570af8f538f7a34f4ed75c22a1bd59a091d0cd8bad074b3774ab2791b8911493143d77e8b59d757d2df16355167bc39e72ee59b29fcd0872e0614ce375aa4cb1b334de602248cf43fa27ee893867a4c6fa82bff671067e5b7e99211dc591116b99b573d2147ee862b4435557dcba690f707f19b637d6119c054dd76c7c55f2c1e0667f7bfe8982"}, &(0x7f0000000240)=0xbe) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000004f80)={&(0x7f0000000280)={0x5c, r1, 0x1, 0x0, 0x0, {0x4001}, [{{0x8, 0x1, r2}, {0x38, 0x2, [{0x2c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6}}}]}}]}, 0x5c}, 0x1}, 0x0) 13:46:24 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) getpid() setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000000c0)="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") r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r2 = dup(r1) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f00000001c0)=""/222) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xff38) recvmsg(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000002480)=""/4096, 0x1000}], 0x1, &(0x7f0000000340)=""/123, 0x7b}, 0x0) 13:46:24 executing program 4: unshare(0x40000000) r0 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) exit(0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) dup3(r2, r0, 0x0) [ 356.034999] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. 13:46:24 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000000110000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 356.075901] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. 13:46:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4008ae93, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 13:46:24 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="040105000500000340000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:25 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="0401050005000000c0ffffffffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 356.166537] IPVS: ftp: loaded support on port[0] = 21 [ 356.801654] FAULT_FLAG_ALLOW_RETRY missing 30 [ 356.806368] CPU: 1 PID: 23585 Comm: syz-executor6 Not tainted 4.18.0-rc1+ #111 [ 356.813739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 356.823100] Call Trace: [ 356.825703] dump_stack+0x1c9/0x2b4 [ 356.829374] ? dump_stack_print_info.cold.2+0x52/0x52 [ 356.834608] ? kasan_check_write+0x14/0x20 [ 356.838861] ? do_raw_spin_lock+0xc1/0x200 [ 356.843118] handle_userfault.cold.32+0x47/0x62 [ 356.847794] ? userfaultfd_ioctl+0x4fd0/0x4fd0 [ 356.852372] ? debug_check_no_locks_freed+0x310/0x310 [ 356.857575] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 356.861982] ? print_usage_bug+0xc0/0xc0 [ 356.866052] ? print_usage_bug+0xc0/0xc0 [ 356.870112] ? userfaultfd_ctx_put+0x810/0x810 [ 356.874702] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 356.879804] ? __lock_acquire+0x7fc/0x5020 [ 356.884060] ? graph_lock+0x170/0x170 [ 356.887883] ? find_held_lock+0x36/0x1c0 [ 356.891951] ? lock_downgrade+0x8f0/0x8f0 [ 356.896092] ? kasan_check_read+0x11/0x20 [ 356.900231] ? do_raw_spin_unlock+0xa7/0x2f0 [ 356.904629] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 356.909219] ? kasan_check_write+0x14/0x20 [ 356.913466] ? do_raw_spin_lock+0xc1/0x200 [ 356.917704] __handle_mm_fault+0x3a0a/0x4460 [ 356.922142] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 356.926989] ? graph_lock+0x170/0x170 [ 356.930791] ? lock_downgrade+0x8f0/0x8f0 [ 356.934935] ? kasan_check_read+0x11/0x20 [ 356.939083] ? rcu_is_watching+0x8c/0x150 [ 356.943220] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 356.947620] ? handle_mm_fault+0x8c4/0xc80 [ 356.951857] handle_mm_fault+0x53e/0xc80 [ 356.955914] ? __handle_mm_fault+0x4460/0x4460 [ 356.960509] ? find_vma+0x34/0x190 [ 356.964060] __do_page_fault+0x620/0xe50 [ 356.968123] ? mm_fault_error+0x380/0x380 [ 356.972269] ? graph_lock+0x170/0x170 [ 356.976070] do_page_fault+0xf6/0x8c0 [ 356.979862] ? vmalloc_sync_all+0x30/0x30 [ 356.984013] ? find_held_lock+0x36/0x1c0 [ 356.988079] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 356.992921] page_fault+0x1e/0x30 [ 356.996374] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 357.001977] Code: 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f [ 357.021266] RSP: 0018:ffff8801bf1177f0 EFLAGS: 00010202 [ 357.026627] RAX: 0000000000000004 RBX: 0000000000000004 RCX: 0000000000000004 [ 357.034069] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff8801bf117890 [ 357.041330] RBP: ffff8801bf117828 R08: ffffed0037e22f13 R09: ffffed0037e22f12 [ 357.048601] R10: ffffed0037e22f12 R11: 0000000000000003 R12: 0000000020013004 [ 357.055878] R13: 0000000020013000 R14: ffff8801bf117890 R15: 00007ffffffff000 [ 357.063161] ? _copy_from_user+0x10d/0x150 [ 357.067399] evdev_do_ioctl+0xb69/0x21a0 [ 357.071497] ? str_to_user+0x90/0x90 [ 357.075220] ? kasan_check_read+0x11/0x20 [ 357.079372] ? graph_lock+0x170/0x170 [ 357.081207] IPVS: ftp: loaded support on port[0] = 21 [ 357.083182] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 357.083202] ? compat_start_thread+0x80/0x80 [ 357.083222] ? _raw_spin_unlock_irq+0x27/0x70 [ 357.102466] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 357.107505] ? trace_hardirqs_on+0xd/0x10 [ 357.111680] ? find_held_lock+0x36/0x1c0 [ 357.115789] ? lock_downgrade+0x8f0/0x8f0 [ 357.119967] ? kasan_check_read+0x11/0x20 [ 357.124482] ? rcu_is_watching+0x8c/0x150 [ 357.128658] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 357.133083] ? __fget+0x414/0x670 [ 357.136558] evdev_ioctl_handler+0x144/0x1a0 [ 357.140984] evdev_ioctl+0x27/0x2e [ 357.144544] ? evdev_ioctl_compat+0x30/0x30 [ 357.148881] do_vfs_ioctl+0x1de/0x1720 [ 357.152793] ? ioctl_preallocate+0x300/0x300 [ 357.157400] ? __fget_light+0x2f7/0x440 [ 357.161396] ? __schedule+0x1ed0/0x1ed0 [ 357.165377] ? fget_raw+0x20/0x20 [ 357.168817] ? putname+0xf2/0x130 [ 357.172259] ? rcu_read_lock_sched_held+0x108/0x120 [ 357.177274] ? kmem_cache_free+0x25c/0x2d0 [ 357.181506] ? exit_to_usermode_loop+0x8c/0x370 [ 357.186180] ? security_file_ioctl+0x94/0xc0 [ 357.190577] ksys_ioctl+0xa9/0xd0 [ 357.194039] __x64_sys_ioctl+0x73/0xb0 [ 357.198114] do_syscall_64+0x1b9/0x820 [ 357.201987] ? finish_task_switch+0x1d3/0x890 [ 357.206473] ? syscall_return_slowpath+0x5e0/0x5e0 [ 357.211391] ? syscall_return_slowpath+0x31d/0x5e0 [ 357.216314] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 357.221677] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 357.226510] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 357.231684] RIP: 0033:0x455b29 [ 357.234853] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 357.254514] RSP: 002b:00007f2451268c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 357.262215] RAX: ffffffffffffffda RBX: 00007f24512696d4 RCX: 0000000000455b29 [ 357.269494] RDX: 0000000020013000 RSI: 00000000400445a0 RDI: 0000000000000015 [ 357.276766] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 357.284045] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 357.291326] R13: 00000000004bd250 R14: 00000000004cb350 R15: 0000000000000000 13:46:26 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000980)=""/230, 0xe6}], 0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000000280)) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1}) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) socket$bt_rfcomm(0x1f, 0x1, 0x3) 13:46:26 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x80, 0x0) r1 = socket$vsock_dgram(0x28, 0x2, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x202001, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000001c0)={r1, r2, 0xa6, 0xdd49, &(0x7f0000000100)="c0ea1e367e14078e1a11c020a20c4651467562375753298746fed5754f355adf6378a449b9b3ac0fc629984e584d3f85feb7d303a4f69615186ddbe2ab01cdc30b2489fa6116816b31817aecf7eabba17df5f9f542775ab2a479d88c28abe9e4630bd1d1ba9e4f03099310f8aaf67a703a00308d0c3a66302f6b6d7cd8d5b88cb360693a1d7c695eb1dd712749db194a8a548114cfe1244116", 0x5dc1, 0x1, 0xa01, 0x7, 0x1, 0x1, 0x2, "d065ee692a9edc4ff97446c15391d01e52730a4f6c69f4083f97d7beab3c68ffeba09e15b6346eac7417dcbb26d41ee6f8745d6dabbea7b571b8a35c0cad8108b3b3268799f865b6436a868a35e2e449f4b8902057147e0257774a40d435ff18726d75c689b1737bb4c72ff89fbcf31f47f80d312dc7dca6f5f079b3986fcafa8cb250c83f59ce035d0ed17f534c4419032314c19ccfffa5d4c39a7ffc72f4288616fe132f476379ccb18407912dd5d70da96f757628dfd9767a2e252372e2462f862d910a288245"}) socketpair(0x2c, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xf, 0xfff, 0x9, 0xf2, 0x24, r3}, 0x2c) 13:46:26 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = socket(0x10, 0x80002, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r1, &(0x7f0000000000)=@proc={0x10, 0x0, 0x1}, 0xafacab8acb8a892d) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) readv(r1, &(0x7f0000001bc0)=[{&(0x7f0000001740)=""/224, 0xe0}], 0x1) 13:46:26 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="04010500050000000000000effb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:26 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") syz_emit_ethernet(0x15, &(0x7f0000001180)=ANY=[@ANYBLOB="aaaaaaaaaabb000000160000a20000000000000000"], &(0x7f0000000040)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=0x3, 0xfffffffffffffeb7) recvmmsg(0xffffffffffffffff, &(0x7f0000002e00)=[{{&(0x7f0000002b80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast1}}}, 0x80, &(0x7f0000002d00), 0x0, &(0x7f0000002d40)=""/164, 0xa4}}], 0x40000000000014d, 0x0, 0x0) accept$alg(r1, 0x0, 0x0) 13:46:26 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="040105000500000a00000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCSSOFTCAR(r1, 0x5424, &(0x7f0000000000)=0xec03) 13:46:26 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = inotify_init1(0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x3, 0x40) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000180)={{0x1, 0x3, 0x71ab, 0x0, 0x2}, 0x800000, 0x863d, 'id0\x00', 'timer1\x00', 0x0, 0x6, 0x2, 0x0, 0x984}) accept$unix(r2, 0x0, &(0x7f0000000100)) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x999de1c9c635a782, r3, 0x0, 0x0) ptrace(0x4207, r3) clone(0x0, &(0x7f0000000100), &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000200)) ptrace$getregs(0xe, r3, 0x0, &(0x7f0000000000)=""/42) 13:46:26 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r2 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000240)={{0x6, 0x6, 0x7ff, 0x101, 'syz1\x00', 0x7}, 0x3, 0x0, 0x3f, r2, 0x4, 0x0, 'syz0\x00', &(0x7f00000000c0)=[']\x00', '/proc/sys/net/ipv4/vs/sync_qlen_max\x00', '\x00', 'trusted\x00'], 0x2f, [], [0x1, 0x6, 0x4, 0x5aeb]}) readv(r1, &(0x7f0000000540)=[{&(0x7f00000001c0)}, {&(0x7f0000000200)=""/62, 0x3e}], 0x2) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000000)={{0x1d, @loopback=0x7f000001, 0x4e23, 0x0, 'lblcr\x00', 0x20, 0xfffffffffffffff8, 0x60}, {@multicast1=0xe0000001, 0x4e22, 0x2000, 0x3, 0x9cb1, 0x9}}, 0x44) 13:46:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") setrlimit(0x7, &(0x7f0000000000)={0x80020000001, 0x6}) r1 = inotify_init1(0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x87d, 0x10000) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x3, 0x2, 0x1, r2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000140)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f00000001c0)={0x1, 0x7, 0x8e4, 0xffffffffffffff81}) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000100)={0x4, 0x3, 0x401}) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000180)=0x1) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000080)={0xc, 0x1, 0x3}) 13:46:26 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="0401050005000000fffff000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:26 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f0000044000)) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) read(r1, &(0x7f00000001c0)=""/105, 0x69) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x80089203, 0x20000000) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000000)={0x2, 0x10000}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x15) 13:46:26 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000000000004ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:26 executing program 1: timer_create(0x6, &(0x7f0000000000)={0x0, 0x32, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_getoverrun(r0) clone(0x40000000, &(0x7f0000000080)="466a9926aa13ea3899fe66b0e41cabaa2d716232ec16d8a914a2751f21845ae11ce2170ca9ef8c4a41a776fee9dc59035500f15edb319571f1a684c62aad9d922b34a5dbd61a0cb687f88254d1deb93bdb4e30ff7e24e2376936004060674fdae2f840bda8d846f268c2bb0f452f19269f91a32e668b4637e9bba14cb52c4f03e85a6c85f6a1ce906bb0f5754695abe50bccf842b7ef49e701829d3d37b0f3be099f940d4158bcc42595a92f441aa8a30b9b0ef7", &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="02e595bed4058a0733c02c6ea2b6c5cb9cdfe360d294b76e9bae607191703a93644714e2949963ca556e4487e1944542d138e3a497ee7e50a3032e9115e537ec65a0596af3828ff76916356cf1c27df56fe80b085e3ec02ba27771") r1 = syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0xffffffffffffffff, 0x0) connect$vsock_stream(r1, &(0x7f0000000280)={0x28, 0x0, 0x2710, @host=0x2}, 0x10) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r3) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) timer_settime(r0, 0x0, &(0x7f0000000400), &(0x7f0000000440)) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00000004c0)={{0x77359400}, {r7, r8+10000000}}, 0x0) clock_getres(0x2, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000540), &(0x7f0000000580)=0x4) bind$pptp(r1, &(0x7f00000005c0)={0x18, 0x2, {0x0, @broadcast=0xffffffff}}, 0x1e) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000600)={'ip6_vti0\x00', {0x2, 0x4e20}}) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x20000, 0x0) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000680)={0x7ff, 0x3f, 0x40256277}) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000700)={0x4, 0xa2c, 0x3, &(0x7f00000006c0)="4009f6"}) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={r1, 0x2, 0x1, 0x0, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) r11 = openat$cgroup_ro(r9, &(0x7f00000007c0)='cgroup.stat\x00', 0x0, 0x0) fchmod(r9, 0x20) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000800)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) timer_gettime(r0, &(0x7f0000000840)) r13 = accept4$nfc_llcp(r11, &(0x7f0000000880), &(0x7f0000000900)=0x60, 0x80800) r14 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f00000027c0)=[{&(0x7f0000000940)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f00000009c0)="cf6cc1e9149cf111f667ab0e7bd37636585b16d526e376a5e426b4a0b2f2062fad387e61dcd72e1ae61c2864862436aa9f2a06d2faac42da4a1097bb31797cef93cdcec469886b43bc82ca66defc6df9492f", 0x52}, {&(0x7f0000000a40)="704b8afda951da0e75a811d68a2235446c1765469f1f7efc105d776ae021728855c9c033bd71b6dfcdc07b9b6b427a060ff3b86d59f91833bdc5644fa42a5c28b0fce9efa945b91628c1bc7c3bbbc949a03dfd9a0d675fd1222c7209ba8fb485bd04860fe9684540bd04fc6280dc2b78e7e88b14971407cf6cce6d0c2c0fe6e59bb272b6860155c8342a5f932f5f05f3d50b377b9769c2156933956d4306ed1f8420a1ac44c5d4b53e510b92ebf48f250f7383780a3f00dee7efa789c1b778ca47525d1db46dd9dd5c45853398c63f29e9e62a61b34a9c4afbcf675245e411addcac1ce23e", 0xe5}, {&(0x7f0000000b40)="ee842c49be1ba07357f480e017d8a0af88b8cf37ea1a7a15d67fb0151ea7606477320069907620eeee77f8830684d9a19a298e7d9f404988ed5102a2a051218d9688cb7057300ba521e054bacd7579b1d1808bbed67889273c46a513a70b8b3239ca9d01dd83911753e1cfecffee698961a9d969a6484928a04e7e8d42371137ffa1b4c6a21380296e01c1a8d1263792d655cd2906f2ca4ad27c28f281437065473d19a407fea5ca6d89f5b0d263d031d5cdc11d345af66305babf25e0d1caf7e1471b315ffc331bc2617a6166e5ea73e1e345ce0228a6", 0xd7}, {&(0x7f0000000c40)="251cd7d6536b0818862980d68c468096858e3db0120b1094025b109d24a907b1fd9a2826de41d23a9a2541365cc0d044cf384dde88617743c22ab29ef5d5bc644b752209e24a97dcb24c220756db64297371c20b86526edf4aa837c2ec8cf614d2ee9d672c3879548d30bd2ad7bfaa65c47f1d", 0x73}], 0x4, &(0x7f0000000d40)=[@cred={0x20, 0x1, 0x2, r4, r2, r6}, @rights={0x28, 0x1, 0x1, [r1, r13, r1, r15, r12]}, @rights={0x18, 0x1, 0x1, [r13]}, @cred={0x20, 0x1, 0x2, r4, r2, r6}, @cred={0x20, 0x1, 0x2, r4, r5, r3}, @rights={0x18, 0x1, 0x1, [r14]}, @rights={0x38, 0x1, 0x1, [r10, r12, r13, r11, r10, r13, r13, r13, r14, r1]}], 0xf0, 0x4010}, {&(0x7f0000000e40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001280)=[{&(0x7f0000000ec0)="7423f582020fe96c8611e1625bd794680a40047d91aff58fd321ae3b07a58d96eeb282e895cdb91dce41dad090308f4c24119fc80d6bfb2dee802372516ff364a18d8759f13d526be0975a54164eef4c9613cc704fb269a7e9d3f38e6adff4ae98ea56a7e11f70a917ffd9dca1d7ad956ebf0e80ecda49aeaf4b5573d2c3a17e8f3300", 0x83}, {&(0x7f0000000f80)="a218c38e82cffa91447e303dcfd55c386c181fba9a70b9b083610180fe0fe59a1929279b164e3374df50a3788e8bfb3452b0e0b611f9cba894e33da006db9649366030579ce115e78a87829d579e908fb8580d42cec6d6ca7c173efafa64d0e5449af820e7aea5429851fbafa84c30622a3f652b3aba80a18288f43227356d007990deb37b24", 0x86}, {&(0x7f0000001040)="9284031e9a652bdfc3df2d3cbf5ec0eabd4ed82b34f2a272666b59da4943b71d513d69483ad4893f7131e3903f", 0x2d}, {&(0x7f0000001080)="56e39e6f97cc4861b59a621000dc1d8a9f8ae847f1d14ab231b0e7b72f5fb5e31190d402065589dcf386900a750c03f86d7715d7f89666a84b286e016ec9e8a90677c9becba656598d2b51d04e1c18ecc49c3ca08849e3f4f90431ac7b4246fc5b4752c68c56ef7b20be7497587b8fd6fc8d9bc1985167a52e07e983edcfac9aaed08372b01bf7d52c8f202c4929f654e3c57b3dd4294434866c7664720ff7145c1827a291587c8a7f407231d42a5812a5f5a74925d9a2b3ae3a648955d1181d909ed3c6e2a3ddf916d5575cad237f7e330955cdb29416756b2a176c9be991e4b3cee9c071", 0xe5}, {&(0x7f0000001180)="eb6829a43492ada3f16347d4046df9f19135f8613631a8377000007abb35a110b8470e16dd5f61cd7a5db6136a", 0x2d}, {&(0x7f00000011c0)="a818eae250420bfe2b6e3d680d5d6be6544dc11b1d6ec811c110baa6f8df420ad21a8be816632b23480b9efa0d038a7b7efb7504453c42489979da96c3edcf6a6e63c588583f51718f6a5bb700de2d0fa3d4314b6f1144d6975d4a4a93e8d959c73e2d89655e6b", 0x67}, {&(0x7f0000001240)="f9b6f13c33aceff848c4", 0xa}], 0x7, &(0x7f0000001300)=[@rights={0x30, 0x1, 0x1, [r9, r9, r9, r14, r12, r1, r1, r13]}, @cred={0x20, 0x1, 0x2, r4, r2, r3}, @rights={0x18, 0x1, 0x1, [r9, r14]}, @cred={0x20, 0x1, 0x2, r4, r2, r6}], 0x88, 0x8000}, {&(0x7f00000013c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002440)=[{&(0x7f0000001440)="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", 0x1000}], 0x1, &(0x7f0000002480)=[@cred={0x20, 0x1, 0x2, r4, r5, r3}, @rights={0x28, 0x1, 0x1, [r14, r10, r9, r9, r1]}, @cred={0x20, 0x1, 0x2, r4, r2, r3}, @rights={0x20, 0x1, 0x1, [r1, r12, r10, r14]}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @rights={0x20, 0x1, 0x1, [r1, r12, r13]}], 0xc8, 0x20000000}, {&(0x7f0000002580)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002640)=[{&(0x7f0000002600)="f09eb967c2e8254a8f8c3c0e", 0xc}], 0x1, &(0x7f0000002680)=[@rights={0x30, 0x1, 0x1, [r10, r1, r9, r12, r11, r10, r11]}, @cred={0x20, 0x1, 0x2, r4, r2, r6}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @cred={0x20, 0x1, 0x2, r4, r5, r3}, @rights={0x18, 0x1, 0x1, [r11, r1]}, @cred={0x20, 0x1, 0x2, r4, r2, r3}, @rights={0x18, 0x1, 0x1, [r9, r9]}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @cred={0x20, 0x1, 0x2, r4, r5, r3}, @cred={0x20, 0x1, 0x2, r4, r5, r6}], 0x140, 0x44885}], 0x4, 0x0) r16 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002900)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000002a00)={&(0x7f00000028c0)={0x10}, 0xc, &(0x7f00000029c0)={&(0x7f0000002940)={0x78, r16, 0x1, 0x70bd29, 0x25dfdbfb, {0xb}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xffffffff}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3b83}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffffffffff9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x9f}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8081}, 0x4040800) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r10, 0x84, 0x71, &(0x7f0000002a40)={0x0, 0x7fffffff}, &(0x7f0000002a80)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0xa, &(0x7f0000002ac0)={0xffffffffffff8000, 0x2, 0x2, 0x5, 0x3f, 0x7, 0x7, 0x1, r17}, 0x20) 13:46:26 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008910, &(0x7f0000000100)="295ee1311f16f477671070") mlock2(&(0x7f0000a93000/0x3000)=nil, 0x3000, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x100, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000280)=@in6={0xa, 0x4e23, 0x4, @mcast1={0xff, 0x1, [], 0x1}, 0x9fea}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000300)="89338e444b020daf40d1e30c2a547fac4e5ec7dfde6074480d0cc1bdcde8093937634c2062dcd06dc3991e44da450c4439fa0157eafdd1acbf24f913f34847b691fbccdc0459725c8f498daa15877c2b98fc9ddc95ab9634598411f807edfcecf69180e1132e1ee242a1f82e527d108501e26bea6ec0f241b3e1c185b824ba9a670cbe078ed68c38f6fa6ec54c8708b8f54c7198e88269e074c25951a50f6fd5b62df9514341672d95bb09d50b06b5283f0bb1b477cc65526266e45720c053db0f5f29d52538e2c947fac5e5627e5a56f99f5ad3f113aea031378b1406a6df3ec5d01e087c6143e62f876a", 0xeb}, {&(0x7f0000000400)="7ddc77a81f1861aa19e16ed7a5a133d7f30cf570a928ea823dc023ba08774420e21d812b71bd626702452ae268aa34e220acaaff5da1246b9dc15647193d5ee269b5c2948546b6874c9bdf4fcf357efe77c4385dd9df49420a4fd879605709d8264872c05b0f29e6354060424db313eb6825d2658dd35f652e138f7a9d56d33f4958885835c8d770fc98ad217519fa643b64e9d84506946ef0520d994f39", 0x9e}, {&(0x7f00000004c0)="cdf6d835b0002d61d77eebe51027d2e22278aa759544a5667bcfa520461637bb1f102a6ce9d71aed4f8623f8168a63fd6102213ad36fbcb5539b0f1fcf204534e679924e4d718a794ea1e921f957e5525f3238c40d94cf5c387c59388036f75c322c05188519925d8bde7d7b3ec2c05dee5d39cac54da10e0e66671e4de5f7457e07646ddcc037f2ac0fb5f9a1f97095e0113b3e", 0x94}, {&(0x7f0000000580)="861cd323949b90c821270fa9b182683ffca8493361ecc434377b44e994d071c3b5d9b410afebacbbc9cbc434feca4848d7a566f0a4a6cbf64a425611", 0x3c}], 0x4, 0x0, 0x0, 0x2000c040}, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r2, 0x0, 0x70bd2a, 0x25dfdbfe, {0x3}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x21}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x4048010) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2000, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) mremap(&(0x7f0000a94000/0x1000)=nil, 0x1000, 0xe000, 0x3, &(0x7f0000b18000/0xe000)=nil) 13:46:26 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="040105000500e80300000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 358.255241] IPVS: ftp: loaded support on port[0] = 21 [ 358.455286] IPVS: ftp: loaded support on port[0] = 21 13:46:27 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000980)=""/230, 0xe6}], 0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x10001, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) r4 = dup2(r3, r2) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000140)) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1}) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) 13:46:27 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="0401050005000000000001f4ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:27 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='team0\x00', 0x4a1b}) readlinkat(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/158, 0x9e) ioctl(r0, 0x0, &(0x7f0000000200)="622cbbdc8487d3018c0586d4330e3472bb3c5a5f4d11a71271da51fdb0292a313e1d25b70c07bceccbeb480b31c9c4f045dde10de60303a6bdde7ca7954ff0e154d869ef81e19f0c54ff60068698e490bfa36d5a18278535a67c52c619f01b91d1db07cb08e23212d65cd3c4b874388413cec612169d447c79c46e7460c9ce03a406b8995a16c397b1e56fd57656b0be875bef") getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) recvfrom$llc(r0, &(0x7f0000000340)=""/4096, 0x1000, 0x100, &(0x7f0000001340)={0x1a, 0x205, 0x400000000000, 0x400, 0x9c, 0x8, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x11}}, 0x10) close(r0) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000001380)) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f00000013c0)={0xffffffffffffffff}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001400)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f0000001440)=0x10) fcntl$notify(r1, 0x402, 0x1) connect$bt_sco(r0, &(0x7f0000001480)={0x1f, {0xdf3, 0x1, 0x2, 0x5fc, 0x1, 0x2}}, 0x8) getsockname$llc(r0, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000001540)=""/158) fchdir(r0) r2 = syz_open_dev$amidi(&(0x7f0000001600)='/dev/amidi#\x00', 0xffffffff, 0x4100) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000001640)={0x0, 0x7}, &(0x7f0000001680)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000016c0)=@sack_info={r3, 0xbf, 0x7}, 0xc) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001700)=0x102, 0x4) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000001740)) connect$vsock_stream(r0, &(0x7f0000001780)={0x28, 0x0, 0x2711, @any=0xffffffff}, 0x10) syz_open_dev$sndctrl(&(0x7f00000017c0)='/dev/snd/controlC#\x00', 0x80, 0x10080) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000001800)={r3, 0xd029}, &(0x7f0000001840)=0x8) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000001880)={0x0, 0x10000}) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000018c0)={0x3}, 0x1) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000001900)) getpeername$unix(r2, &(0x7f0000001940)=@abs, &(0x7f00000019c0)=0x6e) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) 13:46:27 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="040105000500060000000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:27 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) getsockname$unix(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x6e) fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fanotify_mark(r0, 0xc4, 0x8000, r0, &(0x7f0000000080)='./file1\x00') ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000180)) clone(0x800, &(0x7f00000001c0)="ec4755b966859ac45f5af4042eb95c1286a16b1431d7c93ae924fa30abfb52aa1a6c93972cbad4e6cbaf9dacd5a83cf612ce85eccd484f480b3a5b5884a63a9978", &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000380)="d0862338c3734fec91d0955fa9bb841e1a891b992cbb5ef293f2703fe7c894a1cfc098307580a4b86049b74834fd9229348971b71f149a0855a6187f8229c9e4134d21f936b7b93e888864a72bb3e6d60a39f43a8d6f4d6c3f386087211178aad0bc17b711c608de94b6d96668a9da565e0f8a21692378dc22f3d52905220f566cc8005ff5eb10676894463251976daf2c5e2c71964a1c86d4d949bfb21a3421dfaf53682ee0f045b2f5465783") fcntl$getown(r0, 0x9) setregid(0x0, r1) keyctl$session_to_parent(0x12) 13:46:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00007a8000)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0) 13:46:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCSSOFTCAR(r1, 0x5450, &(0x7f0000000000)=0xec03) 13:46:27 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000000e80300ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:27 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x0, 0x0) ioctl$FICLONE(r1, 0x40049409, r1) ioctl(r0, 0x8a0, &(0x7f0000000080)="2905020080000877671070") r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000030707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) close(r0) 13:46:27 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000080)=[{r1, 0x100}], 0x1, 0x0) 13:46:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x800, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040), 0x4) 13:46:27 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$void(0x1f) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x9, 0x2) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f00000002c0)) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x41, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f0000000180)={0x400, 0x3, {0x0, 0x3, 0x3, 0x3, 0x1}}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x900810}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r4, 0x22, 0x70bd29, 0x25dfdbfc, {0x2}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x31cd}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0xfffffffffffffffd}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x62}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x11}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x840}, 0x80) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x4e20, 0x80000001, @loopback={0x0, 0x1}, 0xf85}, {0xa, 0x4e21, 0xf52, @local={0xfe, 0x80, [], 0xaa}, 0x6}, 0x1000, [0x9f, 0x2, 0x0, 0x8001, 0x9, 0x800, 0xffffffff]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000200)={{0xa, 0x4e21, 0x100000000, @mcast2={0xff, 0x2, [], 0x1}, 0x7fff}, {0xa, 0x4e20, 0x100000001, @loopback={0x0, 0x1}, 0x6}, 0x7, [0x6, 0x3, 0x4, 0x6, 0xa7ad, 0x2, 0x4, 0x2]}, 0x5c) 13:46:27 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000000260000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:28 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x3000008, 0x31, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000880)=r0) sync_file_range(r1, 0x8001, 0x0, 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") fcntl$setstatus(r2, 0x4, 0x67fe) preadv(r2, &(0x7f00000075c0)=[{&(0x7f0000006200)=""/220, 0xdc}, {&(0x7f0000000000)=""/90, 0x5a}, {&(0x7f0000000780)=""/247, 0xf7}, {&(0x7f0000006400)=""/4096, 0x1000}, {&(0x7f0000007400)=""/204, 0xcc}, {&(0x7f0000007500)=""/192, 0xc0}], 0x6, 0x0) preadv(r2, &(0x7f0000000580)=[{&(0x7f0000000140)=""/21, 0x15}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f00000003c0)=""/46, 0x2e}, {&(0x7f0000000400)=""/181, 0xb5}, {&(0x7f00000004c0)=""/173, 0xad}], 0x5, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x25, &(0x7f0000000080)={@dev, @multicast2, @broadcast}, &(0x7f00000000c0)=0xc) recvfrom$llc(r2, &(0x7f00000002c0)=""/227, 0xe3, 0x40000001, &(0x7f0000000100)={0x1a, 0xffff, 0x5, 0x200, 0x80000001, 0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) shmget(0x1, 0x1000, 0x80, &(0x7f0000012000/0x1000)=nil) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000640)={0x3, 0x0, 0x5, 0x0, 0x0}, &(0x7f0000000680)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000006c0)={r3, 0x6b, "db01bf334d9afbee7acb41d4027e96304976af9dad849750d6d1e1fd80c68999174737edcd2be650e5cc742640c66c3c08bac45c46b6efb56f5297457a04633845a967598baf2ecf9733dcf280024069a1195744899dc686e73144f6f1c50226cdc43331e37cb4e13fbe01"}, &(0x7f0000000740)=0x73) [ 359.222797] netlink: 20 bytes leftover after parsing attributes in process `syz-executor1'. [ 359.264226] netlink: 20 bytes leftover after parsing attributes in process `syz-executor1'. 13:46:28 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000000110000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:28 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000080)="2957e1311f16f477671070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x100, 0x80) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x88, r2, 0x100, 0x70bd28, 0x25dfdbfd, {0x3}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10001}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3a}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfe}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x88}, 0x1}, 0x40) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x3, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000200], 0x0, &(0x7f0000000000), &(0x7f0000000200)=[{}, {}, {0x0, '\x00', 0x2}]}, 0x108) 13:46:28 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000980)=""/230, 0xe6}], 0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x4, 0x8280) ioctl$TIOCCBRK(r2, 0x5428) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x4a}) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000140)=0x3, 0x4) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000280)={0x0, 0x0, 0x2000, &(0x7f0000000240)=0x80000001}) ioctl$EVIOCGMTSLOTS(r4, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1}) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) 13:46:28 executing program 3: r0 = socket$inet6(0xa, 0x4, 0x0) ioctl(r0, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000001c0)={'HL\x00'}, &(0x7f0000000200)=0x1e) bind$alg(r1, &(0x7f0000000700)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000380), 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x20302, 0x0) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000100)={0x1000, 0x8, 0x10001}) recvfrom$packet(r2, &(0x7f0000000140)=""/127, 0x353, 0x4, 0x0, 0x25d) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) 13:46:28 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="0401050005004a0000000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:28 executing program 1: rmdir(&(0x7f0000000180)='//file0\x00') read(0xffffffffffffffff, &(0x7f00000000c0)=""/3, 0x3) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0xc5, "da023b0e05cde6dab797ec876b61329d919117d6bb731804ecc4c372d26db0592ba37a4d0056255e0441e87d4e03464f45c8ea958161b6e5fabcbf6b1ff1597384f25a225774d6e63e857cceae91a2725d6c1e44309d5569748696bc2b0f3d76083f291cd6b67017c680c0968155fa6c0108b2cde6bab87244a3e6657b63a2a14e10ed7cf8741bd9928193f57ad7152bca1a2f95639616dda3d6ce35aa2a2833b9693a44f2ab618312ccc9f090ebc7f59da4502c3d448c17b98cc25e76cfa8061658a4dc44"}, &(0x7f0000000000)=0xe9) r1 = getpid() r2 = accept(0xffffffffffffff9c, 0x0, &(0x7f00000004c0)) sendmsg$nl_netfilter(r2, &(0x7f0000001640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001600)={&(0x7f0000000540)=ANY=[@ANYBLOB="c01000000d0b00002dbd6000ffdbdf250c000100ac106b00428d843cb0210f68922d896cb9263798b78521f45827e99dd12e79795165181b032108000000", @ANYRES32=r1, @ANYBLOB="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"], 0x10c0}, 0x1, 0x0, 0x0, 0x40004}, 0x1) mkdir(&(0x7f0000000140)='//file0\x00', 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e21, @multicast2=0xe0000002}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000440)={r5, 0x7}, &(0x7f0000000480)=0x8) ioctl$sock_bt(r4, 0xdd1f, &(0x7f00000002c0)="479df7429bd1b4f90297da85fb422cdd9e90edc88690a77073d3b3e8c3134272643a15ef1e0b1b30fa53bdf51b7689e45fb9f9e1ad813c037e194c404d517378a5e60cfb4d136163720070ba4287232c65e6390d2d2c54292996a7a3eac44d7fb5c42309fd19e33bd82f1f355eaba91d5e1014cf11b6c294fb5e6d46a66032bf47657776750f8d170c8422c473f85c99da759b69d625a2df9e") 13:46:28 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x9, 0x149000) sendmmsg(r0, &(0x7f0000000b80)=[{{&(0x7f0000000100)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x100200}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000180)="c1ec12f6a48d1b6a8bc9a060c711917f03d34a52e4da6b987941dc7fa5984210651ecc403fe243783c6ec7bd49d5012b04fe97fec22c1215dda939af89", 0x3d}, {&(0x7f0000000200)="9903b0c5a87350c2db2fde32399b1c39850ae4344266bb453fcd0eea09034bbf3af901cf261cffd4521da63194a6a05345b83016bd3a31bd30bca079b074eee89d503195", 0x44}, {&(0x7f0000000280)="5b5fb89651f3f06dfa3dfec6cf64739ff8f4c49d99f92ddfc411b0fa16504705b7f749b384ede603371f3bd48d27c124b3c2f579df5c76e13b401d5e808628510b06e2e4bf737e1f501cf0d88d5c4dbb85a63f7c9c82b7c9f76b628f3c565daedb7ef6e292e96e5e21d1d25195a1fb3b52b126cd8d90d47ad7db734e1418f32c3bf3693bd889d2c5328347939dec033b7ece5829f6a4a11ffb5e2c7af14d1693b8dce92faa8b522f4246c6a8b5f49d223d630901d6860ff537a32d1255e46472e96dd8", 0xc3}, {&(0x7f0000000380)="b2f474e541fb89b820183fb9cac73e6724dca0f4a8e8b3d97c68", 0x1a}, {&(0x7f00000003c0)="3c478036af036047d55c017fe9006b13f19a554373f5c8d784cff99970d5bf3a8eef638fa19c0dd95f1165ed3fff05140d9de85cc74e8e2abe35ac4a53b7e4fe349ed9b108c2aec356f237b9979a556ac3e487e64b830d16", 0x58}, {&(0x7f0000000440)="cd696138d994a87961fe4bb8af060f1f75e7b1e9b4de86bff1fa9487c050ab7e74646953eb705d14510dc22823b96777c4b164a90c3a8defec1cf4f1e86cecb6af7b4fdf6d42878964910c331e21667ed6c9c5535944019c118200ab5b0033624a6df884e2c830fbc6150ae3d7005adfd8347818e979669a89eed7ed3747d55b6164b2a071233ee6c397d793f361f2b89563516addfd116fb180dd12b0c32302e79bafc4a65b245690dfc8ecee3273acbbfd2b60428af1b6895cb5559ca3583a7acdc029e3ae8b2d081d01bdcbca", 0xce}, {&(0x7f0000000540)="ce91983202d1506c989c3f2a98527262c22b95b350c8f03d7c1b95626bc8afc91ae18cb9722a3e01acc3ba0c0e6dfd50f406e0b39a29bde18ab87bf124605cf7ffe4279b6996c4641adbafbfa797a460510a70754513961d11e4ea0281fe4f714ed8d7094bdf35faad4a3ba2ec3469618d15f9696003844173da03f82908a7c043d63c7393303801", 0x88}], 0x7, &(0x7f0000000680)=[{0x108, 0x114, 0x1, "175f6026e55b84011ffc77f10befa6bab40a8908ac9849ccd4db4363ea1c2e9227f3676f492c735d350e091a27f0025fedf3224a0b73536b516aced441cdad567da5d0674c473b52a245330bb7a0d39fea4274b34d4c3480e7e84c5eee9d0913bf181e73206014aee597e26900f06f6be36746b88d048f2cf6f46ef715ddb2f50a1c70aad3864b90b410d94dfc1be243d56c1b8f2fa4a1f7365714b063a39749ab12af72bf375cc71b53e4c9fecfdd064cc68cc31225fead43c9a83056916fb9e7d6f78627f4bc78bd9906a90a4d900a758952b17f79d833792d4033fbbca18fbc08807e0eacb60de9654327a11a24b04fd4"}], 0x108, 0x80}}, {{&(0x7f00000007c0)=@rc={0x1f, {0x9, 0x9, 0x800, 0x1f, 0xfffffffffffffffb, 0x9}, 0x1}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000840)="24679d59ba5b71f08e42bb279c80d79e6181565c65216546a2fabfcaa240e2cd307aacaf9d80868973d04cab0b9201b0c2a66c78ce48e7ada379955524985881b373707a62571758e7422c36221621fd387fb9fd0f3701e62c6d3eca64a210dc06a52d7b24db221f58e7268d782f1cd2072ddf5c53635d417733dc3598caa7ea3090711f0e6d8de568cbc06b61cef78b350465fb1bedb163beab1e44cc9006eafa52b9cc2f26", 0xa6}, {&(0x7f0000000900)="0ecc30fee729a2bcb927631fc434e7100f0b696b35e3435b3d7a8f2e9a0e3b9e41dc0a4edc485b02e746812ad267c21b5663941ba8fbd84b79910672c3a2b081716b5fd658524077accca0c475ae74214f99dfcfbf1c268bba8d0331fccaf28dc0bf19443d486246855a614aa4f6fd5e24f8a3493d95ea38a2", 0x79}], 0x2, &(0x7f00000009c0)=[{0xf0, 0x119, 0x6, "b375fd687b1571a66ef5e8b2954c07fda96011e98cc8fdd068e325948484fcdf4c620bbb2008c42f2cf39b4a2c4865b43d1564a7c8e5706d6d10ef47942ecdc48f03ff51b1a0ce902c8cee2d29f33bcfadc2a26f792797a606a37582ea7c0937b5ea5ee4debe538e547632c6b95e74758e10aaa925c60fcad2484528ac0eb437736e30b2e0be5c5b1db1e806e10eb0dd33be2c63faea6a55e8f7e95d08844d79b8af76cda934cf924493b3f240ade526f46eb15a06b987998215ff206264f8af479fd73ca32b7171e5792aa1c2f0461239176f32f49480ed6b0d28f8a32c5f"}, {0x30, 0x108, 0x80000000, "cef4bbd5e5cd046ac603690d01b1df63a24c99be6eede5bf5d89f1e9899479"}, {0x90, 0x18f, 0x3, "caeb5d6374666641fd4da4a04631016cb90992d88b1bf9f4def68571caa815db63361fbb355672c8c93c539e96bb042e07d5b3100aae11366eaf92bf7eab014f21551aa05d3bd834863c806f690ee848707f54aa1c0ad80f1561b9685ece5f40166be63bb85efddc749672c78f63a734fd11b0ffb683f311b1c413"}], 0x1b0, 0x20040010}, 0x8}], 0x2, 0x20000000) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000040)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 13:46:28 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000000003f00ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCSSOFTCAR(r1, 0x5428, &(0x7f0000000000)=0xec03) 13:46:28 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getxattr(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)=@random={'user.', '}\'(\x00'}, &(0x7f0000000280)=""/4096, 0x1000) keyctl$reject(0x13, 0x0, 0x0, 0x0, 0x0) link(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file1\x00') syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab4240200040000040000000000000000000000000c090a020c", 0x7d}], 0x0, &(0x7f0000000100)=ANY=[]) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={0xffffffffffffffff, 0x7, 0x0, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3}, 0x20) 13:46:28 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000000000a00ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000279ffc)=0x7fff, 0x4) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x3, 0x101040) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000040)) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 13:46:29 executing program 1: r0 = memfd_create(&(0x7f0000000040)='\x00', 0x1) fstatfs(r0, &(0x7f00000000c0)=""/52) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x1, 0x8000000000000032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$sndseq(r5, &(0x7f0000011fd2), 0xffffffee) write$sndseq(r4, &(0x7f0000000240)=[{0x9b, 0x5, 0x0, 0x2, @time={0x0, 0x989680}, {0x81, 0x3}, {0x1, 0x7}, @result={0x8, 0x2}}, {0x7f6, 0xf42, 0x20, 0x81, @tick=0x1ad4cecb, {0x1000, 0x2}, {0x5, 0x400}, @addr={0xb91, 0x6a9}}, {0x101, 0x8, 0xfffffffffffffe01, 0xd5b5, @time, {0x100000000, 0x1}, {0x100, 0x6}, @ext={0xdf, &(0x7f0000000140)="c6a9eea0778aa915b81c363bc18ca447027ca53f050ad3b8f2329457f504bf9c3f518f0d9526fc678343bfd6ce0c582cd425643671df9cedd3f98a6c4fbf0f20141e9adc50b0848ae6a1593f8993ad5f577e390f8476ac5908ce3e70bbcbb62b79dbdecdf2b089c0e35ff30f2edefb4928ecae30c495f5e8325f7ac98bd807a7ef9514070818bf993d300caaf8cbf99b6665e013e2c764311dc8f45eb0d7c1fab543155346ecaaccb97ae0d0efe9c7eeab87941cdb7f5b45c62cd684aebafd4a353773c3063c7bbcbe5c516c4325f6334756a4f95ba077ab87b057b87b91be"}}, {0x3, 0x4, 0x4, 0x9, @tick=0xffffffffffffffc0, {0x200, 0x4}, {0x1f}, @queue={0x3, {0x0, 0x6490d1b3}}}, {0x329, 0x200, 0x545, 0x10001, @tick=0x7, {0x10, 0x100000001}, {0x7fffffff, 0x100000000000}, @result={0x1ff, 0x200}}, {0x1, 0x20fa7f3a, 0x5, 0xfffffffffffffffb, @time={0x0, 0x1c9c380}, {0x8, 0x401}, {0x100000000, 0x8}, @result={0x5, 0x5}}, {0x400, 0xfffffffffffffc01, 0x7fff, 0x347, @tick=0x6, {0x8, 0x7}, {0x101, 0x1ff}, @queue={0x8, {0x9, 0x800000000000}}}], 0x150) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x6) dup2(r2, r3) 13:46:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x6b, 0x0, &(0x7f0000000000)="2bae53e35e88ba0961c82490c86c906885253aa80bfa42eb866a247c4030459a57fb06b65e3ad37a52f82dd79a63f1ebf141c6d865e51ca3d9090000000000000028d8157e751b2b1443155295b7b14d458eee0692cc62fb501666facfebbc919e8558ec6a466c11e02bd6"}) ioctl(r0, 0x200, &(0x7f0000000240)="f4d1679a1b300ba1e854405f5f1b49a719966e1dcc0c8f650e9eb0a63a140d87f0e00733f376b68c499fdcb289b32b9a8e33fc91048552b2bcb9907ae6e9e9c955ee6cb6d4f58a4c6724fa2ecb3d6029e26133a666bb6b7e7794f7a93a767380b7c1322dfa46ef53121340baac30a4f869fe4cd5fb6b3898c7fc12bd47d298f0280988c896a50c8c1c8c2f0fb906511d671d1b1e0fb5956178d1ae940690c8cafbefc867472d2412b485ebc63a25e6813aec4cc190940803e1b7d1bb71a8e411d6") r2 = socket$inet6(0xa, 0x1, 0x0) poll(&(0x7f0000000200)=[{r1}, {r2}], 0x2, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfdfd, &(0x7f00000000c0)="ac"}) socketpair$inet6(0xa, 0x8000a, 0x8, &(0x7f0000000140)) 13:46:29 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="04010500050000000003e800ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 360.348545] binder: 23832:23833 ioctl 200 20000240 returned -22 [ 360.370256] binder: 23832:23833 ioctl c0306201 20000180 returned -11 13:46:29 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) pwrite64(r0, &(0x7f0000000100)="7ec293567aae2d435d63de7776f58c0a27425446c828bd4c7276a3a88143f5605efa80e477352623d56e476cc934ff21", 0x30, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffff86ce69c71822f2ffffaaaaaaaa00ff91002a008100490086dd6076605100303afffe8000000000000000000000000000b55200a400000000000000000000000001860090780b14890060c5961e00000000ff01000080001803000000000001ff020000000000000000008daabd9e2ea925cde725bc510f4ae2dc9dda995c37245d0e62dcf34d6038c75a41ef597105046e05b54105b1b8bb090c99efb1208135f1d51412fb8f90a91afd87675a0312b9100cfd872cf27f152d8e"], 0x0) socket$inet(0x2, 0xfffffffffffffffe, 0xa94) 13:46:29 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="0401050005000a0000000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 360.397987] XFS (loop4): Mounting V4 Filesystem [ 360.441660] XFS (loop4): totally zeroed log [ 360.481203] XFS (loop4): Metadata corruption detected at xfs_agi_verify+0x188/0x5a0, xfs_agi block 0x2 [ 360.491671] XFS (loop4): Unmount and run xfs_repair [ 360.496840] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 360.503571] 0000000014789adc: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 360.512748] 0000000077c25051: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 360.521640] 00000000b01f03a5: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 13:46:29 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x80002, 0x0) write$eventfd(r0, &(0x7f0000000040), 0x28ccfc94) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/95, 0x5f}], 0x1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x29) [ 360.530823] 00000000c63612e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 360.539790] 00000000f94fd294: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 360.548694] 000000008897bdb0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 360.557594] 000000000afd5b1c: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 360.566666] 0000000096a04a4c: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 360.582369] XFS (loop4): metadata I/O error in "xfs_trans_read_buf_map" at daddr 0x2 len 1 error 117 [ 360.591893] XFS (loop4): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0 [ 360.600979] XFS (loop4): Failed to read root inode 0xd88, error 117 [ 360.652864] XFS (loop4): unknown mount option [ÿÿÿÿ]. [ 360.741172] binder: send failed reply for transaction 35 to 23832:23833 [ 360.753044] binder: undelivered TRANSACTION_ERROR: 29189 [ 361.046097] FAULT_FLAG_ALLOW_RETRY missing 30 [ 361.050768] CPU: 1 PID: 23867 Comm: syz-executor6 Not tainted 4.18.0-rc1+ #111 [ 361.058138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 361.067502] Call Trace: [ 361.070106] dump_stack+0x1c9/0x2b4 [ 361.073744] ? dump_stack_print_info.cold.2+0x52/0x52 [ 361.078950] ? kasan_check_write+0x14/0x20 [ 361.083186] ? do_raw_spin_lock+0xc1/0x200 [ 361.087432] handle_userfault.cold.32+0x47/0x62 [ 361.092287] ? userfaultfd_ioctl+0x4fd0/0x4fd0 [ 361.096932] ? debug_check_no_locks_freed+0x310/0x310 [ 361.102130] ? perf_event_update_userpage+0xd30/0xd30 [ 361.107328] ? print_usage_bug+0xc0/0xc0 [ 361.111404] ? print_usage_bug+0xc0/0xc0 [ 361.115471] ? __perf_event_task_sched_in+0x24f/0xbb0 [ 361.120670] ? userfaultfd_ctx_put+0x810/0x810 [ 361.125257] ? find_held_lock+0x36/0x1c0 [ 361.129333] ? __lock_acquire+0x7fc/0x5020 [ 361.133573] ? lock_downgrade+0x8f0/0x8f0 [ 361.137731] ? graph_lock+0x170/0x170 [ 361.141556] ? find_held_lock+0x36/0x1c0 [ 361.145659] ? lock_downgrade+0x8f0/0x8f0 [ 361.149848] ? kasan_check_read+0x11/0x20 [ 361.154092] ? do_raw_spin_unlock+0xa7/0x2f0 [ 361.158763] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 361.163361] ? kasan_check_write+0x14/0x20 [ 361.167614] ? do_raw_spin_lock+0xc1/0x200 [ 361.171865] __handle_mm_fault+0x3a0a/0x4460 [ 361.176323] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 361.181172] ? graph_lock+0x170/0x170 [ 361.184996] ? lock_downgrade+0x8f0/0x8f0 [ 361.189153] ? kasan_check_read+0x11/0x20 [ 361.193305] ? rcu_is_watching+0x8c/0x150 [ 361.197473] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 361.201899] ? handle_mm_fault+0x8c4/0xc80 [ 361.206147] handle_mm_fault+0x53e/0xc80 [ 361.210220] ? __handle_mm_fault+0x4460/0x4460 [ 361.214809] ? find_vma+0x34/0x190 [ 361.218357] __do_page_fault+0x620/0xe50 [ 361.222432] ? mm_fault_error+0x380/0x380 [ 361.226582] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 361.231601] ? graph_lock+0x170/0x170 [ 361.235408] do_page_fault+0xf6/0x8c0 [ 361.239212] ? vmalloc_sync_all+0x30/0x30 [ 361.243368] ? find_held_lock+0x36/0x1c0 [ 361.247444] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 361.252340] page_fault+0x1e/0x30 [ 361.255808] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 361.261419] Code: 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f [ 361.280790] RSP: 0018:ffff880188ae77f0 EFLAGS: 00010202 [ 361.286156] RAX: 0000000000000004 RBX: 0000000000000004 RCX: 0000000000000004 [ 361.293426] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff880188ae7890 [ 361.300699] RBP: ffff880188ae7828 R08: ffffed003115cf13 R09: ffffed003115cf12 [ 361.307973] R10: ffffed003115cf12 R11: 0000000000000003 R12: 0000000020013004 [ 361.315251] R13: 0000000020013000 R14: ffff880188ae7890 R15: 00007ffffffff000 [ 361.322552] ? _copy_from_user+0x10d/0x150 [ 361.326805] evdev_do_ioctl+0xb69/0x21a0 [ 361.330878] ? lock_downgrade+0x8f0/0x8f0 [ 361.335035] ? str_to_user+0x90/0x90 [ 361.338754] ? do_futex+0x249/0x27d0 [ 361.342470] ? rcu_is_watching+0x8c/0x150 [ 361.346623] ? graph_lock+0x170/0x170 [ 361.350423] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 361.354846] ? find_held_lock+0x36/0x1c0 [ 361.358918] ? lock_downgrade+0x8f0/0x8f0 [ 361.363073] ? kasan_check_read+0x11/0x20 [ 361.367219] ? rcu_is_watching+0x8c/0x150 [ 361.371369] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 361.375788] ? __fget+0x414/0x670 [ 361.379254] evdev_ioctl_handler+0x144/0x1a0 [ 361.383671] evdev_ioctl+0x27/0x2e [ 361.387213] ? evdev_ioctl_compat+0x30/0x30 [ 361.391536] do_vfs_ioctl+0x1de/0x1720 [ 361.395424] ? rcu_is_watching+0x8c/0x150 [ 361.400345] ? ioctl_preallocate+0x300/0x300 [ 361.404757] ? __fget_light+0x2f7/0x440 [ 361.408734] ? fget_raw+0x20/0x20 [ 361.412190] ? putname+0xf2/0x130 [ 361.415649] ? rcu_read_lock_sched_held+0x108/0x120 [ 361.420699] ? kmem_cache_free+0x25c/0x2d0 [ 361.424943] ? __x64_sys_futex+0x47f/0x6a0 [ 361.429184] ? do_futex+0x27d0/0x27d0 [ 361.432984] ? security_file_ioctl+0x94/0xc0 [ 361.437398] ksys_ioctl+0xa9/0xd0 [ 361.440872] __x64_sys_ioctl+0x73/0xb0 [ 361.444765] do_syscall_64+0x1b9/0x820 [ 361.448914] ? syscall_return_slowpath+0x5e0/0x5e0 [ 361.453846] ? syscall_return_slowpath+0x31d/0x5e0 [ 361.458957] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 361.464332] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 361.469195] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 361.474388] RIP: 0033:0x455b29 [ 361.477570] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 361.496944] RSP: 002b:00007f2451247c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 361.504656] RAX: ffffffffffffffda RBX: 00007f24512486d4 RCX: 0000000000455b29 [ 361.511927] RDX: 0000000020013000 RSI: 00000000400445a0 RDI: 0000000000000016 [ 361.519205] RBP: 000000000072bf50 R08: 0000000000000000 R09: 0000000000000000 [ 361.526474] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 361.533746] R13: 00000000004bd250 R14: 00000000004cb350 R15: 0000000000000001 13:46:30 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012c") r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f00000ddff8), 0x102002f01) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000480)="09da000000000000ce2d43f963ff00", 0x48da1b5212aab4f6) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000440)=0x1) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000400)) socket$inet6_udp(0xa, 0x2, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0xe8f, 0x40201) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f00000001c0), 0x4) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000240)=""/237) r4 = timerfd_create(0x0, 0x0) readv(r4, &(0x7f0000000180)=[{&(0x7f0000000980)=""/230, 0xe6}], 0x1) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000380)=""/94) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r6 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r6, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e20}}, 0x4, 0x1, 0x0, 0x3f, 0x4}, &(0x7f00000004c0)=0x98) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000500)={r7, 0x7}, &(0x7f0000000540)=0x8) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1}) 13:46:30 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000000000e00ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:30 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000300)="0047fc2f07d82c99240970435e8286e5a76291b1abd76f574918a16b21a0474ab2c1d540c713cbc5fefc95ad0b69a2c202ce29eb8f51ab6633e8d92158f45416439cd803dfc2ce1ea74046f6d4aa7318d1d2170aee5cd497dd65ec7a81436a6d2d1866676ecaf5d24f652e6eded3fa28694f874da7fa5639bd") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt(r1, 0x107, 0xd, &(0x7f0000001000), 0xc5) r2 = openat$cgroup_int(0xffffffffffffff9c, &(0x7f0000000280)='io.bfq.weight\x00', 0x2, 0x0) prctl$setmm(0x23, 0x0, &(0x7f0000ffc000/0x1000)=nil) write$cgroup_int(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b702b5d5f7d8cd56299b60f101e60f9bf38e6d2671b3408b56454229710096d37ce6ed66964b35a5a08095efefd4b6ca39c66d2c7acb6647537b450441aa030f3439f46bb1c537904d960d9d4373d27f76420fcf1049592718ab5a610bded6372a758b5e52f2bf69b934852dd5d0e3c25a6090efabb1ee9438956dcb74d38e6d3a5a3a598ffe94d9f9ae719fe4504293738550ed557b2c4f59812171680045be6093aea3d748fe8716"], 0x3) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f00000001c0)={0x10000, 0x3, 'client1\x00', 0x2, "2a6d9aa68b46ce85", "981e41cfecb1482e3b74c3cd36c7366742b946385e5063fcb58b3a16ea9455fc", 0x6e, 0x7f}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000100)={0xd004, &(0x7f0000000040), 0xa, r3, 0x2}) poll(&(0x7f0000000000)=[{r1}, {0xffffffffffffffff, 0x20}, {r1, 0x100}], 0x3, 0x0) 13:46:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCSSOFTCAR(r1, 0x540d, &(0x7f0000000000)=0xec03) 13:46:30 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x3e1, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80100, 0x0) recvmsg(r3, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=""/20, 0x14}, 0x100) shutdown(r2, 0x1) 13:46:30 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="040105000500c0ffffff0000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:30 executing program 1: execve(&(0x7f0000000500)='./file0\x00', &(0x7f0000000740)=[&(0x7f0000000540)='\x00', &(0x7f0000000580)='[md5sumppp1+ppp0\x00', &(0x7f00000005c0)='\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='/dev/snd/pcmC#D#p\x00', &(0x7f0000000680)='/dev/snd/pcmC#D#p\x00', &(0x7f00000006c0)='\x00', &(0x7f0000000700)='posix_acl_access%)GPLppp0,wlan1\x00'], &(0x7f00000008c0)=[&(0x7f0000000780)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)="5d76626f786e65743176626f786e657430ff00", &(0x7f0000000840)='user\x00', &(0x7f0000000880)='/dev/snd/pcmC#D#p\x00']) r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xa590000, 0x480202) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000080)={0xf000, 0x2000}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score\x00') setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000940)=0xffffffffffffffff, 0x8) finit_module(r1, &(0x7f00000000c0)='\x00', 0x0) open(&(0x7f00000009c0)='./file0\x00', 0x0, 0x1) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f0000000100)={"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"}) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000900)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000980)=[{0x4, 0x8}], 0x1) socket$rds(0x15, 0x5, 0x0) 13:46:30 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, @remote}, &(0x7f0000000080)=0x10) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f00000000c0)={'HL\x00'}, &(0x7f00000001c0)=0x1e) r2 = socket$inet6(0xa, 0x80009, 0x3f) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f0000000040)=0x4) ioctl(r2, 0x400000890e, &(0x7f0000000100)="295ee1311f16f477671070") dup(r0) 13:46:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/udplite\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40000, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2000, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000180)={0xffffffffffffffe0, 0x8000, 0x1000, 0x40, 0x0}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000240)={r5, 0xfffffffffffffffc, 0x2, 0x8, 0x6, 0x7}, 0x14) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000140)="0f2120f3650f01c90f20970f01c90f01c80f01df260f35bad10466edb800008ed00fc79ba1b4", 0x26}], 0x1, 0x10, &(0x7f0000000200), 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="440f20c0350e000000440f22c00f9d5bd5f20f5f3626460fba26f48f490801332e0f792d0000c0fec402e3f5e266baa100b838000000ef430fc71ec744240005000000c7442402dfd0628fc7442406000000000f011c24", 0x57}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 13:46:30 executing program 1: r0 = socket$inet6(0xa, 0x4, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000080)={'nat\x00'}, &(0x7f0000000100)=0x54) r1 = dup2(r0, r0) setsockopt$packet_buf(r1, 0x107, 0x6, &(0x7f0000000180)="a64e8215e5a7", 0x6) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000040)) r3 = socket$alg(0x26, 0x5, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000140)=[0x3772, 0x7f]) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001780)=[@textreal={0x8, &(0x7f00000017c0)="64f3a666b99f0200000f320f09b809008ec8360fa3e70f20d7660fd2190f01cb0f20e06635004000000f22e036fa"}], 0xaaaaaaaaaaaad8c, 0x0, &(0x7f0000000580), 0x0) 13:46:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x2000, 0x0) pwrite64(r0, &(0x7f0000000200)="87d32e5c4b3e70aeb738e78c6ef88f5054d5a2c3357b2bce49e5fbddae2430e34387ac6628a3a2a0c96bffef139fde92aa0633fd2d2557983c87fe4993f470d2ae08809fba60f42b9ceed4b26c79a80d2514dad59b19ad1d705157d5f2010b974496f7283f803f09af9db2b85c2c5a27b9a73bb4ee3879c77c39c23d28a69114bac25691bc6751cf010bafb872b0d385f7146140d508936d46", 0x99, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x8000, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000180)={{0x32, @loopback=0x7f000001, 0x4e21, 0x1, 'lc\x00', 0x28, 0x80000001, 0x50}, {@multicast1=0xe0000001, 0x4e23, 0x6, 0x5bc, 0x5, 0xa5}}, 0x44) r4 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r1, 0x49, 0xfffffffffffffffd, 0x73e0) io_setup(0x0, &(0x7f0000000040)=0x0) io_cancel(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x34, r0, &(0x7f0000000100)="ba7401c5237016a30719d4bff7ce5539ab", 0x11, 0x3, 0x0, 0x0, r3}, &(0x7f0000000300)) sendfile(r2, r4, &(0x7f00007ed000)=0x6, 0x2000) 13:46:30 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="0401050005000000004a0000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:30 executing program 2: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0xa, 0x1, 0x0) readahead(r0, 0x6, 0xffffffffffff0cee) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x12, 0xe, 0x4, 0xf728}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r2, &(0x7f00000001c0)="ed", &(0x7f0000000080)=""/164}, 0x18) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000200)) 13:46:30 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000080)) timerfd_settime(r0, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x5}}, &(0x7f0000005fe0)) timerfd_gettime(r0, &(0x7f0000000040)) 13:46:31 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="0401050005000000000e0000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:31 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x14) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0xa1, 0x3cf, 0x36, 0x4, 0xffe000000000000}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x80000000, 0x206, 0x400000000, 0x2, r2}, 0x10) [ 362.777238] FAULT_FLAG_ALLOW_RETRY missing 30 [ 362.781872] CPU: 1 PID: 23966 Comm: syz-executor6 Not tainted 4.18.0-rc1+ #111 [ 362.789416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 362.798774] Call Trace: [ 362.801374] dump_stack+0x1c9/0x2b4 [ 362.805030] ? dump_stack_print_info.cold.2+0x52/0x52 [ 362.810317] ? kasan_check_write+0x14/0x20 [ 362.814583] ? do_raw_spin_lock+0xc1/0x200 [ 362.818865] handle_userfault.cold.32+0x47/0x62 [ 362.823935] ? userfaultfd_ioctl+0x4fd0/0x4fd0 [ 362.828620] ? debug_check_no_locks_freed+0x310/0x310 [ 362.833839] ? perf_event_update_userpage+0xd30/0xd30 [ 362.839142] ? print_usage_bug+0xc0/0xc0 [ 362.843214] ? print_usage_bug+0xc0/0xc0 [ 362.847307] ? __perf_event_task_sched_in+0x24f/0xbb0 [ 362.852506] ? perf_trace_lock+0xde/0x920 [ 362.856670] ? perf_trace_lock+0xde/0x920 [ 362.861095] ? find_held_lock+0x36/0x1c0 [ 362.865171] ? zap_class+0x740/0x740 [ 362.869007] ? __lock_acquire+0x7fc/0x5020 [ 362.873285] ? lock_downgrade+0x8f0/0x8f0 [ 362.877486] ? graph_lock+0x170/0x170 [ 362.881325] ? find_held_lock+0x36/0x1c0 [ 362.885589] ? lock_downgrade+0x8f0/0x8f0 [ 362.889764] ? kasan_check_read+0x11/0x20 [ 362.893957] ? do_raw_spin_unlock+0xa7/0x2f0 [ 362.898392] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 362.904481] ? kasan_check_write+0x14/0x20 [ 362.908709] ? do_raw_spin_lock+0xc1/0x200 [ 362.912949] __handle_mm_fault+0x3a0a/0x4460 [ 362.917371] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 362.922388] ? graph_lock+0x170/0x170 [ 362.926308] ? lock_downgrade+0x8f0/0x8f0 [ 362.930463] ? rcu_is_watching+0x8c/0x150 [ 362.934789] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 362.939193] ? handle_mm_fault+0x8c4/0xc80 [ 362.943434] handle_mm_fault+0x53e/0xc80 [ 362.947501] ? __handle_mm_fault+0x4460/0x4460 [ 362.952094] ? find_vma+0x34/0x190 [ 362.955894] __do_page_fault+0x620/0xe50 [ 362.959950] ? mm_fault_error+0x380/0x380 [ 362.964095] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 362.969121] ? graph_lock+0x170/0x170 [ 362.973015] do_page_fault+0xf6/0x8c0 [ 362.976814] ? vmalloc_sync_all+0x30/0x30 [ 362.980953] ? find_held_lock+0x36/0x1c0 [ 362.985110] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 362.989967] page_fault+0x1e/0x30 [ 362.993420] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 362.999028] Code: 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f [ 363.018457] RSP: 0018:ffff8801811277f0 EFLAGS: 00010202 [ 363.023821] RAX: 0000000000000004 RBX: 0000000000000004 RCX: 0000000000000004 [ 363.031091] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff880181127890 [ 363.038348] RBP: ffff880181127828 R08: ffffed0030224f13 R09: ffffed0030224f12 [ 363.045616] R10: ffffed0030224f12 R11: 0000000000000003 R12: 0000000020013004 [ 363.052888] R13: 0000000020013000 R14: ffff880181127890 R15: 00007ffffffff000 [ 363.060188] ? _copy_from_user+0x10d/0x150 [ 363.064428] evdev_do_ioctl+0xb69/0x21a0 [ 363.068513] ? str_to_user+0x90/0x90 [ 363.072222] ? do_futex+0x249/0x27d0 [ 363.075949] ? rcu_is_watching+0x8c/0x150 [ 363.080089] ? graph_lock+0x170/0x170 [ 363.083888] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 363.088370] ? zap_class+0x740/0x740 [ 363.092105] ? find_held_lock+0x36/0x1c0 [ 363.096172] ? lock_downgrade+0x8f0/0x8f0 [ 363.100311] ? rcu_is_watching+0x8c/0x150 [ 363.104463] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 363.108874] ? __fget+0x414/0x670 [ 363.112333] evdev_ioctl_handler+0x144/0x1a0 [ 363.116733] evdev_ioctl+0x27/0x2e [ 363.120291] ? evdev_ioctl_compat+0x30/0x30 [ 363.124614] do_vfs_ioctl+0x1de/0x1720 [ 363.128498] ? rcu_is_watching+0x8c/0x150 [ 363.132646] ? ioctl_preallocate+0x300/0x300 [ 363.137052] ? __fget_light+0x2f7/0x440 [ 363.141030] ? fget_raw+0x20/0x20 [ 363.144477] ? putname+0xf2/0x130 [ 363.147918] ? rcu_read_lock_sched_held+0x108/0x120 [ 363.152937] ? kmem_cache_free+0x25c/0x2d0 [ 363.157170] ? __x64_sys_futex+0x47f/0x6a0 [ 363.161404] ? do_futex+0x27d0/0x27d0 [ 363.165213] ? security_file_ioctl+0x94/0xc0 [ 363.169610] ksys_ioctl+0xa9/0xd0 [ 363.173060] __x64_sys_ioctl+0x73/0xb0 [ 363.176940] do_syscall_64+0x1b9/0x820 [ 363.180820] ? syscall_return_slowpath+0x5e0/0x5e0 [ 363.185749] ? syscall_return_slowpath+0x31d/0x5e0 [ 363.190679] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 363.196069] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 363.200913] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 363.206090] RIP: 0033:0x455b29 [ 363.209279] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 363.228668] RSP: 002b:00007f2451247c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 363.236371] RAX: ffffffffffffffda RBX: 00007f24512486d4 RCX: 0000000000455b29 [ 363.243721] RDX: 0000000020013000 RSI: 00000000400445a0 RDI: 0000000000000019 [ 363.250995] RBP: 000000000072bf50 R08: 0000000000000000 R09: 0000000000000000 [ 363.258269] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 363.265532] R13: 00000000004bd250 R14: 00000000004cb350 R15: 0000000000000001 13:46:32 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000980)=""/230, 0xe6}], 0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1}) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0xfffffffffffffffc, 0x0) 13:46:32 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x48, 0x0, 0x0, 0xffffffffffffdffe}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f0000003040)=[{{&(0x7f00000012c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}}}, 0x80, &(0x7f00000001c0)}}, {{&(0x7f00000018c0)=@un=@abs, 0x80, &(0x7f0000002f80)}}], 0x2, 0x0) 13:46:32 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="04010500050000000000f000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:32 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="040105000500000000040000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:32 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) syz_mount_image$minix(&(0x7f0000001380)='minix\x00', &(0x7f00000013c0)='./file0\x00', 0x401, 0x0, &(0x7f0000001400), 0x80, 0x0) fcntl$setstatus(r0, 0x4, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1f, &(0x7f00000001c0)=0x1, 0x4) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0xc) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000200)={0x3, 0x3, 0x4, 0x80}, 0x10) getsockname(r0, &(0x7f00000012c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, &(0x7f0000001340)=0x80) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x9, 0x4) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000001400)={'filter\x00', 0x4}, 0x68) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) recvfrom$unix(r0, &(0x7f0000000080)=""/159, 0x9f, 0x40002140, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f00000002c0)=""/4096) 13:46:32 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)=0x0) ptrace(0x4207, r0) syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x302, 0x2, &(0x7f00000002c0)=[{&(0x7f00000000c0)="4a4fd808f22b993e03a2f035626e54d306b051597ab3c2ed3f4f1b08aeecd98b2b40beeded486eebb75ace603a3a8a29e270a94761dbf79550018a09b4134b36a375c48223ba6ad01a1e5eaed84e8f683fca9bd65af7d68797619021bba65fbb1e304db4724988f58e0cc3120fdab69120b0ef3f6f5eb5e101de54a9542b76c394f91a27163a522f79fad7efa1f13838a2f7a6dfa68b4b752f261f1296d6d3e1efd113b3ccdf2931aa6eac7e73228b6eb26f939fe4ccb6829e8c8d2a2b88dd257256fc10", 0xc4, 0x9}, {&(0x7f00000001c0)="6466dec48f6bc1f23a73c0d88eaa511517b33239e22b6ad6ed5f169ac9e09e3f99e7910267e6a245dbcc1c984da7100d5f378b7b95f2f119c81cb2165015e503d8d6f9665c03a95c2528013d70a7de9ca89c194be03fbd0724542649bd68b12b90a5c32475cd773daaec01f32776c334b6d78b54c05c241fe65349c9c0c39f359723cec0ad4dc81d79e988965a1170391ad233c098ae1b13ec622e01ca14c37439abf803afc86209d5ba69d8b3920ad99e7775644352df4145bc3d772b11107ec5453ecd70dfe06a0ee6676f633fe54b8fe52ee7af41dfa7e9039bfc160b1dfca06612", 0xe3, 0x6}], 0x105000, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rfkill\x00', 0x400500, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000340)) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000380)) sched_getattr(r0, &(0x7f00000003c0), 0x30, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer\x00', 0x420000, 0x0) getsockopt$sock_buf(r3, 0x1, 0x3b, &(0x7f0000000440)=""/92, &(0x7f00000004c0)=0x5c) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000500)={0x2800000000000000, 0x5004, 0x2, 0x1, 0x3}) sendmsg$rds(r3, &(0x7f0000001c40)={&(0x7f0000000540)={0x2, 0x4e20, @rand_addr=0x718}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000580)=""/197, 0xc5}], 0x1, &(0x7f0000001b00)=[@rdma_args={0x48, 0x114, 0x1, {{0x40}, {&(0x7f00000006c0)=""/240, 0xf0}, &(0x7f00000019c0)=[{&(0x7f00000007c0)=""/145, 0x91}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/223, 0xdf}, {&(0x7f0000001980)=""/34, 0x22}], 0x4, 0x72, 0x7}}, @mask_cswp={0x58, 0x114, 0x9, {{0x100000001}, &(0x7f0000001a00)=0x6, &(0x7f0000001a40)=0xff, 0x9, 0x4, 0x9, 0x4, 0x19}}, @rdma_dest={0x18, 0x114, 0x2, {0x800, 0x4}}, @fadd={0x58, 0x114, 0x6, {{0x6, 0x8000}, &(0x7f0000001a80)=0x9, &(0x7f0000001ac0)=0x5, 0x2, 0xc0000000, 0x2, 0x9, 0x8, 0x79}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x100000000}], 0x128, 0x8011}, 0x50) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000001c80)={{0x0, 0x748}, {0x6, 0x100000000}, 0xffffffff0, 0x1, 0x3}) ioctl$TIOCNXCL(r2, 0x540d) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000001d00)={0x100, 0xeb1, 0xffffffff, 0xffffffff}) r4 = shmget$private(0x0, 0x14000, 0x54000000, &(0x7f0000feb000/0x14000)=nil) shmat(r4, &(0x7f0000ffd000/0x1000)=nil, 0x5000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000001d40)={0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffff58f8, 0x3, 0x7}}) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000001dc0)={'syz_tun\x00', {0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x32f) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000001e00), &(0x7f0000001e40)=0x30) keyctl$join(0x1, &(0x7f0000001e80)={0x73, 0x79, 0x7a, 0x2}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000001ec0)={@dev={0xfe, 0x80, [], 0x1e}, 0xe0000000000000, 0x2, 0x3, 0xd, 0xffffffffffffffff, 0x9, 0x3}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000001f00)={0x100, 0x1, 0x9, 0x6, 0x9}, 0x14) r5 = accept$inet6(r3, &(0x7f0000001f40)={0x0, 0x0, 0x0, @local}, &(0x7f0000001f80)=0x1c) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000001fc0)) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000002000)={0x2, 0x660, 0x9, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'team_slave_1\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000002040)={0x1, 0x3, 0x6, 'queue1\x00', 0x200}) iopl(0x2) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000002100)={0x3, 0x0, [{}, {}, {}]}) 13:46:32 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x40002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x20000000000000) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)) 13:46:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCSSOFTCAR(r1, 0x4020940d, &(0x7f0000000000)=0xec03) [ 363.400715] MINIX-fs: unable to read superblock 13:46:32 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000200)="2100000000671070") getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x4, 0x7f, 0x0, 0x37, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @broadcast=0xffffffff}}}}, &(0x7f0000000000)=0xb0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000280)=""/211) r2 = socket$netlink(0x10, 0x3, 0x4) socket(0x2, 0x3, 0x3) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0xc) sendmsg$nl_generic(r2, &(0x7f0000005000)={&(0x7f0000000040)={0x10, 0xf0ffffff00000f00}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000014000702000000000000000002ff000600000000000000009d56c6be895a0e7913db0d7bef0a37a9df224b830d8d00a33e98820f83a910e8464f6b96199d24ff165220b558c231f91b9dcd247524f30337da0f38faa00872050a88e7a6060261694894fd93eef452559c63", @ANYRES32], 0x24c}, 0x1}, 0x0) 13:46:32 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000000f40100ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 363.516332] MINIX-fs: unable to read superblock 13:46:32 executing program 3: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) recvmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000180)=@can, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)=""/186, 0xba}, {&(0x7f0000000340)=""/83, 0x53}], 0x2, &(0x7f00000003c0)=""/92, 0x5c, 0x9}, 0x3) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)}}, 0x20) 13:46:32 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000380)=0x8000000) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}], 0x1c) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000080)=0x7ff, 0x4) syz_open_dev$midi(&(0x7f0000000340)='/dev/midi#\x00', 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x9b36}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000200)={r2, 0x3, 0x7, 0x3}, &(0x7f0000000280)=0x10) socket$inet6_sctp(0xa, 0x5, 0x84) 13:46:32 executing program 1: timer_create(0x7, &(0x7f0000000100)={0x0, 0x19, 0x7, @tid=0xffffffffffffffff}, &(0x7f0000000140)) timer_create(0x7, &(0x7f0000000180)={0x0, 0x3d, 0x7}, &(0x7f00000001c0)=0x0) timer_delete(r0) timer_create(0x2, &(0x7f0000000080)={0x0, 0x30, 0x0, @thr={&(0x7f0000000000)="e527beba2708e579ef45e227fceb7ac6909469c114a7fa284eaa330fa47c3b4b2246baefb45b993a0eb7790b209031c6c61f5e97c3977c0969d6417cea1e80a6", &(0x7f0000000040)="287617b8ba887e7084d6b06171cfb9645f063cf95290f0aba2954c"}}, &(0x7f00000000c0)) 13:46:32 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="04010500050000000001f400ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:32 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="040105000500001100000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:32 executing program 2: r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f00000004c0)) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r4 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a}, &(0x7f0000000680)='\x00', 0x1, r3) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x80, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="6c0200002c0028022cbd7000fcdbdf250000000095058fdc4c85cf075f30bbc18c211c2ab63dc09f1ead9966c93221d434", @ANYRES32=r6, @ANYBLOB="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"], 0x26c}, 0x1, 0x0, 0x0, 0x80}, 0x40) r7 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x182, r0) r8 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000280)='u', 0x1, r0) r9 = semget$private(0x0, 0x4, 0x24) semctl$GETPID(r9, 0x7, 0xb, &(0x7f0000000500)=""/37) keyctl$dh_compute(0x17, &(0x7f0000000200)={r4, r7, r8}, &(0x7f0000a53ffb)=""/5, 0x3, &(0x7f0000c61fc8)={&(0x7f0000a3dffa)={'crct10dif-generic\x00'}}) [ 364.256727] FAULT_FLAG_ALLOW_RETRY missing 30 [ 364.261527] CPU: 1 PID: 24055 Comm: syz-executor6 Not tainted 4.18.0-rc1+ #111 [ 364.268977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 364.278436] Call Trace: [ 364.281044] dump_stack+0x1c9/0x2b4 [ 364.284717] ? dump_stack_print_info.cold.2+0x52/0x52 [ 364.290012] ? kasan_check_write+0x14/0x20 [ 364.294267] ? do_raw_spin_lock+0xc1/0x200 [ 364.298691] handle_userfault.cold.32+0x47/0x62 [ 364.303479] ? userfaultfd_ioctl+0x4fd0/0x4fd0 [ 364.308077] ? debug_check_no_locks_freed+0x310/0x310 [ 364.313310] ? perf_event_update_userpage+0xd30/0xd30 [ 364.318859] ? print_usage_bug+0xc0/0xc0 [ 364.322938] ? print_usage_bug+0xc0/0xc0 [ 364.327022] ? __perf_event_task_sched_in+0x24f/0xbb0 [ 364.332261] ? userfaultfd_ctx_put+0x810/0x810 [ 364.336992] ? find_held_lock+0x36/0x1c0 [ 364.341083] ? __lock_acquire+0x7fc/0x5020 [ 364.345335] ? lock_downgrade+0x8f0/0x8f0 [ 364.349580] ? graph_lock+0x170/0x170 [ 364.353423] ? find_held_lock+0x36/0x1c0 [ 364.357504] ? lock_downgrade+0x8f0/0x8f0 [ 364.361671] ? kasan_check_read+0x11/0x20 [ 364.365828] ? do_raw_spin_unlock+0xa7/0x2f0 [ 364.370254] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 364.374850] ? kasan_check_write+0x14/0x20 [ 364.379455] ? do_raw_spin_lock+0xc1/0x200 [ 364.383995] __handle_mm_fault+0x3a0a/0x4460 [ 364.388421] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 364.393353] ? graph_lock+0x170/0x170 [ 364.397157] ? lock_downgrade+0x8f0/0x8f0 [ 364.401307] ? kasan_check_read+0x11/0x20 [ 364.405454] ? rcu_is_watching+0x8c/0x150 [ 364.409590] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 364.413987] ? handle_mm_fault+0x8c4/0xc80 [ 364.418314] handle_mm_fault+0x53e/0xc80 [ 364.423168] ? __handle_mm_fault+0x4460/0x4460 [ 364.427943] ? find_vma+0x34/0x190 [ 364.431477] __do_page_fault+0x620/0xe50 [ 364.435534] ? mm_fault_error+0x380/0x380 [ 364.439675] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 364.445375] ? graph_lock+0x170/0x170 [ 364.449182] do_page_fault+0xf6/0x8c0 [ 364.452990] ? vmalloc_sync_all+0x30/0x30 [ 364.457134] ? mark_held_locks+0xc9/0x160 [ 364.461380] ? retint_kernel+0x10/0x10 [ 364.465271] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 364.470279] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 364.475114] page_fault+0x1e/0x30 [ 364.478570] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 364.484261] Code: 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f [ 364.503757] RSP: 0018:ffff8801882177f0 EFLAGS: 00010202 [ 364.509111] RAX: 0000000000000004 RBX: 0000000000000004 RCX: 0000000000000004 [ 364.516379] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff880188217890 [ 364.523724] RBP: ffff880188217828 R08: ffffed0031042f13 R09: ffffed0031042f12 [ 364.531072] R10: ffffed0031042f12 R11: 0000000000000003 R12: 0000000020013004 [ 364.538518] R13: 0000000020013000 R14: ffff880188217890 R15: 00007ffffffff000 [ 364.545795] ? _copy_from_user+0x10d/0x150 [ 364.550027] evdev_do_ioctl+0xb69/0x21a0 [ 364.554180] ? lock_downgrade+0x8f0/0x8f0 [ 364.558418] ? str_to_user+0x90/0x90 [ 364.562122] ? do_futex+0x249/0x27d0 [ 364.565920] ? rcu_is_watching+0x8c/0x150 [ 364.570317] ? graph_lock+0x170/0x170 [ 364.574107] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 364.578513] ? find_held_lock+0x36/0x1c0 [ 364.582657] ? lock_downgrade+0x8f0/0x8f0 [ 364.586888] ? kasan_check_read+0x11/0x20 [ 364.591032] ? rcu_is_watching+0x8c/0x150 [ 364.595166] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 364.599567] ? __fget+0x414/0x670 [ 364.603026] evdev_ioctl_handler+0x144/0x1a0 [ 364.607599] evdev_ioctl+0x27/0x2e [ 364.611126] ? evdev_ioctl_compat+0x30/0x30 [ 364.615445] do_vfs_ioctl+0x1de/0x1720 [ 364.619317] ? rcu_is_watching+0x8c/0x150 [ 364.623452] ? ioctl_preallocate+0x300/0x300 [ 364.627849] ? __fget_light+0x2f7/0x440 [ 364.631812] ? fget_raw+0x20/0x20 [ 364.635260] ? putname+0xf2/0x130 [ 364.638962] ? rcu_read_lock_sched_held+0x108/0x120 [ 364.643964] ? kmem_cache_free+0x25c/0x2d0 [ 364.648209] ? __x64_sys_futex+0x47f/0x6a0 [ 364.652529] ? do_futex+0x27d0/0x27d0 [ 364.656416] ? security_file_ioctl+0x94/0xc0 [ 364.660815] ksys_ioctl+0xa9/0xd0 [ 364.664259] __x64_sys_ioctl+0x73/0xb0 [ 364.668136] do_syscall_64+0x1b9/0x820 [ 364.672017] ? syscall_return_slowpath+0x5e0/0x5e0 [ 364.677292] ? syscall_return_slowpath+0x31d/0x5e0 [ 364.682416] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 364.687964] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 364.692804] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 364.697980] RIP: 0033:0x455b29 [ 364.701167] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 364.720405] RSP: 002b:00007f2451247c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 364.728115] RAX: ffffffffffffffda RBX: 00007f24512486d4 RCX: 0000000000455b29 [ 364.735473] RDX: 0000000020013000 RSI: 00000000400445a0 RDI: 0000000000000015 [ 364.742832] RBP: 000000000072bf50 R08: 0000000000000000 R09: 0000000000000000 [ 364.751503] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 364.759138] R13: 00000000004bd250 R14: 00000000004cb350 R15: 0000000000000001 13:46:33 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x687d, 0x10000) socket$inet6(0xa, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x0, 0x0, 0xffffffb8}) 13:46:33 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10010, r1, 0x26) r2 = inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0xa4) inotify_rm_watch(r1, r2) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) 13:46:33 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") getsockopt$inet6_buf(r0, 0x29, 0x7f, &(0x7f0000000400)=""/4096, &(0x7f0000000000)=0x1000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000100)={0x13, 0x10, 0xfa00, {&(0x7f0000000200), r2, 0x1}}, 0x18) 13:46:33 executing program 2: r0 = socket$inet(0x2, 0x3, 0x1) getsockopt(r0, 0xff, 0x1, &(0x7f0000000080)=""/166, &(0x7f0000000040)=0x86) 13:46:33 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000980)=""/230, 0xe6}], 0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) fcntl$setflags(r1, 0x2, 0x1) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) fcntl$setpipe(r3, 0x407, 0xf5) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1}) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) 13:46:33 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000000002600ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCSSOFTCAR(r1, 0x5412, &(0x7f0000000000)=0xec0a) 13:46:33 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="040105000500002600000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:33 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000000001100ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:33 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfffffffffffffffd, 0x1ffffe) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000040)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(rmd320-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="fb5c31db43a7b5415e8ee0983e7887a5689d51517938ac65df898ea1bdd3b96a215579447dc73b225cc4c1a2507cb2abc84a37f9622df3a7a07e85921430bdfc4a4697d1c7976aa5124a7ed4fd26293ab20acda58819a890bbe8ea20820b0a8b32865104ba09eb0960569112e11d01aa37bbdba99d99bc4e9a41b7f03ea58cc5", 0x80) 13:46:33 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f000087d000/0x4000)=nil, 0x4000, 0x0, 0x32, r0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f000087cf79)={@in, 0x0, 0x0, 0x0, "d858834181332e435893f760968f541b42c41db0f53229e10458031e411acc910b07deaa85a7158cb72317b9229c05a260f51652df313a01eba60958f71aa48ae177e2e4fe748f1a5499840c5abde9e6"}, 0x160) 13:46:33 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000000)={[{@type={'type', 0x3d, "b82cb0a5"}, 0x2c}]}) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)) 13:46:34 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000d4b000)=0x2) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x9, 0x10001) write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000601eff0e06151620a8be81aaaaa2aaaad25ab29fbfddc455e3aaaaaaaaaabb5be26ee9fa1979c31cb23f0920404dd935fc1be0cc6599b90883"], 0x31) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000035d000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000efb000)='/dev/sequencer2\x00', 0x0, 0x0) [ 365.266949] hfsplus: type requires a 4 character value [ 365.272511] hfsplus: unable to parse mount options 13:46:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="090087d3949ba2ee1332e200000000080000020000000000000074"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:46:34 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet6(0xa, 0x80003, 0xff) r2 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) dup3(r1, r2, 0x0) 13:46:34 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000000020000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:34 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="040105000500040000000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 365.392641] hfsplus: type requires a 4 character value [ 365.398249] hfsplus: unable to parse mount options 13:46:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000053c0)='tls\x00', 0x4) connect(r0, &(0x7f0000000040)=@un=@abs, 0x80) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='stat\x00') sendfile(r0, r1, &(0x7f0000000000), 0x10000) 13:46:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bond_slave_1\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="5d0020100200000042b71a50ae1649ff0000000000000000"]}) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x3ff, 0x20000) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x100, 0x400, 0xff, 0x1, 0x3, 0x3ff, 0x9, 0x0, 0x0, 0xfffffffffffffffb, 0x8, 0x2, 0x9, 0x0, 0x40], 0x0, 0x8902}) 13:46:34 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000000000600ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 365.584394] tls_set_device_offload: netdev not found [ 365.629108] tls_set_device_offload: netdev not found [ 365.968752] FAULT_FLAG_ALLOW_RETRY missing 30 [ 365.973404] CPU: 1 PID: 24155 Comm: syz-executor6 Not tainted 4.18.0-rc1+ #111 [ 365.980769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 365.990176] Call Trace: [ 365.992786] dump_stack+0x1c9/0x2b4 [ 365.996437] ? dump_stack_print_info.cold.2+0x52/0x52 [ 366.001701] ? kasan_check_write+0x14/0x20 [ 366.005944] ? do_raw_spin_lock+0xc1/0x200 [ 366.010195] handle_userfault.cold.32+0x47/0x62 [ 366.014875] ? userfaultfd_ioctl+0x4fd0/0x4fd0 [ 366.019466] ? debug_check_no_locks_freed+0x310/0x310 [ 366.024665] ? print_usage_bug+0xc0/0xc0 [ 366.028733] ? print_usage_bug+0xc0/0xc0 [ 366.032794] ? graph_lock+0x170/0x170 [ 366.036600] ? userfaultfd_ctx_put+0x810/0x810 [ 366.041195] ? find_held_lock+0x36/0x1c0 [ 366.045271] ? __lock_acquire+0x7fc/0x5020 [ 366.049516] ? lock_downgrade+0x8f0/0x8f0 [ 366.053666] ? graph_lock+0x170/0x170 [ 366.059581] ? find_held_lock+0x36/0x1c0 [ 366.063657] ? lock_downgrade+0x8f0/0x8f0 [ 366.067812] ? kasan_check_read+0x11/0x20 [ 366.071991] ? do_raw_spin_unlock+0xa7/0x2f0 [ 366.076400] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 366.080989] ? kasan_check_write+0x14/0x20 [ 366.085245] ? do_raw_spin_lock+0xc1/0x200 [ 366.089575] __handle_mm_fault+0x3a0a/0x4460 [ 366.093991] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 366.098836] ? graph_lock+0x170/0x170 [ 366.102652] ? lock_downgrade+0x8f0/0x8f0 [ 366.106806] ? kasan_check_read+0x11/0x20 [ 366.110954] ? rcu_is_watching+0x8c/0x150 [ 366.115225] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 366.119639] ? handle_mm_fault+0x8c4/0xc80 [ 366.123886] handle_mm_fault+0x53e/0xc80 [ 366.127958] ? __handle_mm_fault+0x4460/0x4460 [ 366.132551] ? find_vma+0x34/0x190 [ 366.136106] __do_page_fault+0x620/0xe50 [ 366.140192] ? mm_fault_error+0x380/0x380 [ 366.144351] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 366.149375] ? graph_lock+0x170/0x170 [ 366.153191] do_page_fault+0xf6/0x8c0 [ 366.157003] ? vmalloc_sync_all+0x30/0x30 [ 366.161160] ? find_held_lock+0x36/0x1c0 [ 366.165253] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 366.170111] page_fault+0x1e/0x30 [ 366.173574] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 366.179194] Code: 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f [ 366.198545] RSP: 0018:ffff8801887f77f0 EFLAGS: 00010202 [ 366.203926] RAX: 0000000000000004 RBX: 0000000000000004 RCX: 0000000000000004 [ 366.211209] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff8801887f7890 [ 366.218578] RBP: ffff8801887f7828 R08: ffffed00310fef13 R09: ffffed00310fef12 [ 366.225861] R10: ffffed00310fef12 R11: 0000000000000003 R12: 0000000020013004 [ 366.233143] R13: 0000000020013000 R14: ffff8801887f7890 R15: 00007ffffffff000 [ 366.240450] ? _copy_from_user+0x10d/0x150 [ 366.244704] evdev_do_ioctl+0xb69/0x21a0 [ 366.248783] ? lock_downgrade+0x8f0/0x8f0 [ 366.252947] ? str_to_user+0x90/0x90 [ 366.256663] ? do_futex+0x249/0x27d0 [ 366.260378] ? rcu_is_watching+0x8c/0x150 [ 366.264528] ? graph_lock+0x170/0x170 [ 366.268327] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 366.272753] ? find_held_lock+0x36/0x1c0 [ 366.276835] ? lock_downgrade+0x8f0/0x8f0 [ 366.280998] ? kasan_check_read+0x11/0x20 [ 366.285145] ? rcu_is_watching+0x8c/0x150 [ 366.289301] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 366.293727] ? __fget+0x414/0x670 [ 366.297195] evdev_ioctl_handler+0x144/0x1a0 [ 366.301592] evdev_ioctl+0x27/0x2e [ 366.305120] ? evdev_ioctl_compat+0x30/0x30 [ 366.309426] do_vfs_ioctl+0x1de/0x1720 [ 366.313321] ? uprobe_notify_resume.cold.34+0x11e/0x11e [ 366.318670] ? ioctl_preallocate+0x300/0x300 [ 366.323060] ? __fget_light+0x2f7/0x440 [ 366.327027] ? fget_raw+0x20/0x20 [ 366.330477] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 366.335492] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 366.340493] ? kvm_on_user_return+0x2cd/0x3f0 [ 366.344993] ? security_file_ioctl+0x94/0xc0 [ 366.349391] ksys_ioctl+0xa9/0xd0 [ 366.352830] __x64_sys_ioctl+0x73/0xb0 [ 366.356704] do_syscall_64+0x1b9/0x820 [ 366.360577] ? finish_task_switch+0x1d3/0x890 [ 366.365067] ? syscall_return_slowpath+0x5e0/0x5e0 [ 366.369985] ? syscall_return_slowpath+0x31d/0x5e0 [ 366.374925] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 366.380281] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 366.385117] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 366.390293] RIP: 0033:0x455b29 [ 366.393473] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 366.412657] RSP: 002b:00007f2451247c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 366.420358] RAX: ffffffffffffffda RBX: 00007f24512486d4 RCX: 0000000000455b29 [ 366.427624] RDX: 0000000020013000 RSI: 00000000400445a0 RDI: 0000000000000015 [ 366.434879] RBP: 000000000072bf50 R08: 0000000000000000 R09: 0000000000000000 [ 366.442135] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 366.449393] R13: 00000000004bd250 R14: 00000000004cb350 R15: 0000000000000001 13:46:35 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000980)=""/230, 0xe6}], 0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) r4 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x2, 0x80) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f00000001c0)=0xfff, 0x4) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1}) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) timerfd_create(0x7, 0x80000) 13:46:35 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x1, 0x0) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="60cabb3000440000000000000000000000000000000099d72e3c2b443400000000000000000000000000010420880b2400000000000800000086dd080088be00000000100000000100000000000000080022eb00cb64cf3d6700000020000000020000000000000000000000080065"], 0x6c) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x6) 13:46:35 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200, &(0x7f0000000280)="025cc8ff7f00008f760070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa, 0x20000000000004}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f0000000140)="1b39e0222fb284371de1c47c4038f60c930179f05743eae7aeb8ecb377f3c323ac8b16ad9ba9057306cde12b7516189d1b120c21a87f5bb61342b7ca9f93e9d6c072b43878279d16d65d79b21aa4869fd7fff1d3c5b86170c97937294f82f9a12232d723c369effa4a6e83b26174426c172c0b4096ac5184ed31f4deb0cb2f7fe9cc1c6191c5ced5bf7113d809fb0551bc47cbf1e90e5330e34dfdd9ee1a8fba8e49bcb47a4971c610add4e037d7a1dc930799fd6529d374357d"}, 0x10) getrlimit(0xd, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="3b0000000500ea0034be6e4bb1"]}) close(r0) close(r1) 13:46:35 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000000040000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:35 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="0401050005000000000e0000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCSSOFTCAR(r1, 0x5412, &(0x7f0000000000)=0xec0d) 13:46:35 executing program 4: io_setup(0x0, &(0x7f0000000000)=0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) io_cancel(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x7caf, r1, &(0x7f0000000040)="145ab901306d6756eea5e8c7a8de46c55d75c6b1c749072bd3c208af10", 0x1d, 0x2, 0x0, 0x1, r2}, &(0x7f00000000c0)) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000180)=""/89) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r3, 0x1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = accept4(r3, &(0x7f00000003c0)=@in={0x0, 0x0, @multicast1}, &(0x7f0000000440)=0x80, 0x0) sendto$inet6(r4, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000140), 0x4) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0x6c, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14}}}}}, &(0x7f00000002c0)=0xff8b) 13:46:35 executing program 3: mknod$loop(&(0x7f0000000180)='./file0\x00', 0xc000, 0xffffffffffffffff) truncate(&(0x7f0000000080)='./file0\x00', 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x3) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x20000000032, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000180)={{}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 13:46:35 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000100)) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000002c0)={@dev={0xac, 0x14, 0x14}, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) 13:46:35 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000000060000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:35 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet(0x10, 0x4, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000010807041dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c824392986ad06b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 13:46:35 executing program 2: r0 = socket(0x0, 0x805, 0x0) bind$inet(r0, &(0x7f00000a9000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000dbf000), 0x14c, 0x0, &(0x7f0000000040)={0x2, 0x0, @loopback=0x7f000001}, 0x10) r1 = socket(0x15, 0x80005, 0x0) getsockopt(r1, 0x114, 0x2715, &(0x7f0000000000)=""/13, &(0x7f000033bffc)=0x19) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 13:46:35 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000000)={0x5000, 0xe000}) lseek(r0, 0xfffffffffffffff5, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x80000000}, &(0x7f0000000140)=0x8) timer_create(0x7, &(0x7f0000000040)={0x0, 0x1b, 0x0, @thr={&(0x7f00000001c0)="89484b4b86d84771f8663231ff39a8ac834d3bbc0133c9371a99e16c83ba8596f2a1e31a071e5885256b3ca16492f5a76d43a61f51a9be60704be8aa8bdd11b20e3185306d658b96f78c3e6d5658f594d596af21b491c2ade7913fd62d67634b731232b4645fd52a0daabde91a9071e8a443ab254dd51c1407a62474d9f63a12a654f3c4891604087f03a0c48bdd5237fc7ad4cea57fe300e3913a8929d3d33a2ae6ccb3d305f9f135a0e5fe1e3b0968016ad4cf55de6550d0f73bd02010004117fed5ea202766c96672f7", &(0x7f00000002c0)="3582816b3c26b62c9ad9c9a7adee97be19f7e1e88b47d7691ac402a63d2123c19a38ee8dbf54d4a03ee9df8754a926b5c5769f2404a7ba8230d21bd0ad3b8b8f7c876cf1884e3c37706a00109039ad37fb994b4fcf02b32259cd01d96aff73e5d96133ddb5cee0b0a44adc"}}, &(0x7f0000000340)=0x0) timer_getoverrun(r2) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000180)={r1, 0x81}, 0x8) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 13:46:35 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="0401050005000000000a0000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:35 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x1, 0x0) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000080)='X', 0x1}], 0x1) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, r1) 13:46:35 executing program 2: capset(&(0x7f00000fc000)={0x819980330}, &(0x7f000047efe8)) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x800, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000001100)=@ll={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x80) recvfrom$packet(r0, &(0x7f0000000100)=""/4096, 0x1000, 0x1, &(0x7f0000001180)={0x11, 0xf7, r1, 0x1, 0x400, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x15}}, 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='nr0\x00'}) [ 367.677711] FAULT_FLAG_ALLOW_RETRY missing 30 [ 367.682385] CPU: 0 PID: 24239 Comm: syz-executor6 Not tainted 4.18.0-rc1+ #111 [ 367.689740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 367.699085] Call Trace: [ 367.701688] dump_stack+0x1c9/0x2b4 [ 367.705330] ? dump_stack_print_info.cold.2+0x52/0x52 [ 367.710530] ? kasan_check_write+0x14/0x20 [ 367.714773] ? do_raw_spin_lock+0xc1/0x200 [ 367.719018] handle_userfault.cold.32+0x47/0x62 [ 367.723697] ? userfaultfd_ioctl+0x4fd0/0x4fd0 [ 367.728289] ? debug_check_no_locks_freed+0x310/0x310 [ 367.733489] ? print_usage_bug+0xc0/0xc0 [ 367.737561] ? print_usage_bug+0xc0/0xc0 [ 367.741622] ? graph_lock+0x170/0x170 [ 367.745434] ? userfaultfd_ctx_put+0x810/0x810 [ 367.750024] ? find_held_lock+0x36/0x1c0 [ 367.754098] ? __lock_acquire+0x7fc/0x5020 [ 367.758335] ? lock_downgrade+0x8f0/0x8f0 [ 367.762488] ? graph_lock+0x170/0x170 [ 367.766312] ? find_held_lock+0x36/0x1c0 [ 367.770384] ? lock_downgrade+0x8f0/0x8f0 [ 367.774541] ? kasan_check_read+0x11/0x20 [ 367.778692] ? do_raw_spin_unlock+0xa7/0x2f0 [ 367.783104] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 367.787691] ? kasan_check_write+0x14/0x20 [ 367.791929] ? do_raw_spin_lock+0xc1/0x200 [ 367.796267] __handle_mm_fault+0x3a0a/0x4460 [ 367.800683] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 367.805526] ? graph_lock+0x170/0x170 [ 367.809345] ? lock_downgrade+0x8f0/0x8f0 [ 367.813502] ? kasan_check_read+0x11/0x20 [ 367.817655] ? rcu_is_watching+0x8c/0x150 [ 367.821804] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 367.826220] ? handle_mm_fault+0x8c4/0xc80 [ 367.830466] handle_mm_fault+0x53e/0xc80 [ 367.834530] ? __handle_mm_fault+0x4460/0x4460 [ 367.839115] ? find_vma+0x34/0x190 [ 367.842676] __do_page_fault+0x620/0xe50 [ 367.846749] ? mm_fault_error+0x380/0x380 [ 367.850899] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 367.855917] ? graph_lock+0x170/0x170 [ 367.859725] do_page_fault+0xf6/0x8c0 [ 367.863528] ? vmalloc_sync_all+0x30/0x30 [ 367.867710] ? find_held_lock+0x36/0x1c0 [ 367.871787] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 367.876650] page_fault+0x1e/0x30 [ 367.880114] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 367.885733] Code: 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f [ 367.905109] RSP: 0018:ffff8801811677f0 EFLAGS: 00010202 [ 367.910489] RAX: 0000000000000004 RBX: 0000000000000004 RCX: 0000000000000004 [ 367.917765] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff880181167890 [ 367.925076] RBP: ffff880181167828 R08: ffffed003022cf13 R09: ffffed003022cf12 [ 367.932349] R10: ffffed003022cf12 R11: 0000000000000003 R12: 0000000020013004 [ 367.939605] R13: 0000000020013000 R14: ffff880181167890 R15: 00007ffffffff000 [ 367.946879] ? _copy_from_user+0x10d/0x150 [ 367.951110] evdev_do_ioctl+0xb69/0x21a0 [ 367.955157] ? lock_downgrade+0x8f0/0x8f0 [ 367.959297] ? str_to_user+0x90/0x90 [ 367.962996] ? do_futex+0x249/0x27d0 [ 367.966696] ? rcu_is_watching+0x8c/0x150 [ 367.970839] ? graph_lock+0x170/0x170 [ 367.974622] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 367.979039] ? find_held_lock+0x36/0x1c0 [ 367.983093] ? lock_downgrade+0x8f0/0x8f0 [ 367.987240] ? kasan_check_read+0x11/0x20 [ 367.991383] ? rcu_is_watching+0x8c/0x150 [ 367.995526] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 367.999922] ? __fget+0x414/0x670 [ 368.003365] evdev_ioctl_handler+0x144/0x1a0 [ 368.007763] evdev_ioctl+0x27/0x2e [ 368.011292] ? evdev_ioctl_compat+0x30/0x30 [ 368.015598] do_vfs_ioctl+0x1de/0x1720 [ 368.019478] ? rcu_is_watching+0x8c/0x150 [ 368.023610] ? ioctl_preallocate+0x300/0x300 [ 368.028005] ? __fget_light+0x2f7/0x440 [ 368.031972] ? fget_raw+0x20/0x20 [ 368.035408] ? putname+0xf2/0x130 [ 368.038847] ? rcu_read_lock_sched_held+0x108/0x120 [ 368.043849] ? kmem_cache_free+0x25c/0x2d0 [ 368.048071] ? __x64_sys_futex+0x47f/0x6a0 [ 368.052289] ? do_futex+0x27d0/0x27d0 [ 368.056086] ? security_file_ioctl+0x94/0xc0 [ 368.060494] ksys_ioctl+0xa9/0xd0 [ 368.063932] __x64_sys_ioctl+0x73/0xb0 [ 368.067824] do_syscall_64+0x1b9/0x820 [ 368.071701] ? syscall_return_slowpath+0x5e0/0x5e0 [ 368.076621] ? syscall_return_slowpath+0x31d/0x5e0 [ 368.081804] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 368.087168] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 368.092008] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 368.097198] RIP: 0033:0x455b29 [ 368.100377] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 368.119569] RSP: 002b:00007f2451247c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 368.127264] RAX: ffffffffffffffda RBX: 00007f24512486d4 RCX: 0000000000455b29 [ 368.134519] RDX: 0000000020013000 RSI: 00000000400445a0 RDI: 0000000000000015 [ 368.141775] RBP: 000000000072bf50 R08: 0000000000000000 R09: 0000000000000000 [ 368.149038] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 368.156322] R13: 00000000004bd250 R14: 00000000004cb350 R15: 0000000000000001 13:46:37 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000980)=""/230, 0xe6}], 0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x34, r1, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1}) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) 13:46:37 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="040105000500000000060000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:37 executing program 2: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000100), 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x101200, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) listen(r0, 0x110000000012) accept(r0, &(0x7f0000000040)=@hci, &(0x7f00000000c0)=0x80) 13:46:37 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) ptrace$cont(0xf, r1, 0x4a, 0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x200c0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x101) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) sendto$inet6(r2, &(0x7f0000000140)='a', 0x1, 0x3ffc, 0x0, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="119a0e63c9476288b671afdbd53a5994e137381f62021d1951b627b8dda57a5d17d744648c81c5703ed8146ab1b0171f89091b1dd323ff07dbb633fb3804849f7768e586df460963245dedb4013ee555af99499e44ad420dbf65fd46fbc9ba1274429e2d5783751815828ec8cb3553110cca66460215353d19f6d8bbd8fb08ad0491634ac2fd10e2cd30bcd7fede24263a7fff16e53ea293f3551b7147c33a44ea437fb1f77f94db4e65807582990a0a5efddf12de3caea6611173f964de99645e2c02bef138b406ca0644146ae4bb91e0438f8c47beddb0ed22f56bc0851def35824ca6c7258c", 0xe7}], 0x1, &(0x7f0000003b40)}, 0x0) 13:46:37 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000001540)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f0000000080)) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x4000) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000080)=0xbc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x658003, 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='affs\x00', 0x81404c, &(0x7f00000002c0)="97792eee023b70399ef02629269a8356d9deecaf12c5dcdc4ab597726250977571791357b4005688dde3a174c39d10dc7173948d69411df8d4a8364d107c9e779a1c873f938a06be87c41da9e91ee2d97acc844ef02b52c0e3dc0cc5e80b3bafa985e1d0248a3c2829c435a8324633eeacd5ad0ddadc0ebc7fd76c0dddac35ee9c012034cda58d95ee3bd394b4ee134d9fe7120da0f4860819316873385e6fdd38fe0e39bc1ccb60db2a5dbf08da9ea5a2beb324643d33fa04d598ea4e0d8171b7b452cefeeb") 13:46:37 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000000004a00ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 13:46:37 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f00000002c0)={0x0, 0x3, 0x0, [{0x6, 0x5, 0x8, 0x1, 0xfffffffffffffffb, 0x6, 0xa499}, {0x1ff, 0x1a9d040c, 0x800, 0x7f, 0x3, 0x81, 0x5e5}, {0x9, 0x101, 0x7, 0x8, 0x401, 0x9, 0x80000000}]}) ioctl(r0, 0x4000008912, &(0x7f0000000280)="295ee1311f16f477671070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000180)=0x40000000000074, 0x315) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0xfee8) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000000)={&(0x7f0000d55000)={0x10}, 0xc, &(0x7f0000c8d000)={&(0x7f0000bfdfdc)={0x20, 0x7501, 0x1, 0x800000001, 0x0, 0x0, {}, [@nested={0xc, 0x2, [@typed={0x8, 0x1, @ipv4=@multicast2=0xe0000002}]}]}, 0x20}, 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x461, 0x9, 0x8004, 0x7fffffff, 0x1fe000000, 0x4, 0x100000000, 0x101, 0x0}, &(0x7f00000003c0)=0x20) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={r4, 0x3}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x8, 0x0, 0x7f, 0xfffffffffffffffc}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000000c0)={r5, @in={{0x2, 0x4e23, @broadcast=0xffffffff}}}, &(0x7f0000000200)=0x84) sendto$inet(r1, &(0x7f0000a88f88), 0x2f0c, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f00000004c0)=0x1) 13:46:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f00000003c0)="85ee3411e0fda0dde4afbc30109c5c6610b1524ba5043eee243d5473355a5e3bb0553b48713711d77014b8bdf7a9cf6d386c42200aa4275f3a09d372e19774bf42b529059c83d9fdf04fbeb1025b63124c29a1db2d7744200bfb911ec1e51c39768aab63814a43e90501606e036d31fea3ec095b72651075cc265978a1b4cfaa9aa691924c0537d3cf021d3b115fac4350cfe3ce8d4c52c1c6dc6800a8a82ee0747233a1a3de93a30f828adeb7b871ccbe83a74961f3556f5766e90d5f0ef338", 0xffffff3a) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCSSOFTCAR(r1, 0x5412, &(0x7f0000000000)=0xec03) syz_open_dev$dmmidi(&(0x7f0000000380)='/dev/dmmidi#\x00', 0x4, 0x4000) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000300)={&(0x7f00000000c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)=""/145, 0x91}], 0x1, &(0x7f0000000240)=""/175, 0xaf, 0x7ff}, 0x40000000) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000340)) 13:46:37 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000b31000)="f9", 0x1, 0x0, &(0x7f00009e1000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) accept(r0, 0x0, &(0x7f0000000000)) listen(r0, 0x87) r1 = accept(r0, &(0x7f00005a4000)=@rc, &(0x7f0000000040)=0xd) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000001c0), 0x8) 13:46:37 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000f700034000fbdbdf25030006000000000002000000e0000001000000000000bf0002000100000000000000000200000000030005000000e00000010000000000000000000000000000"], 0x50}, 0x1}, 0x0) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000200)=""/4096, &(0x7f0000000000)=0x1000) 13:46:37 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000000f00000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 368.411245] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 13:46:37 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="040105000500000000000011ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 368.534937] QAT: Invalid ioctl 13:46:37 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0xffffffffffffffff, 0x6, 0x1, 0x803, &(0x7f0000000000)=[0x0, 0x0], 0x2}, 0x20) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000300)) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000400)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4dd2f873574f257e0a01e2a6a02f5e071383fa5a669a53f2fe9eb4eb7918628af41b035fd98372e7c2a6970f550441f0b263dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fde52268a81e1154b80f7076f32b6eb8614c672ecdecd385a1a7b8cac7cca0eb0cdbf1c", 0xca, 0x10000}], 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="00e1797aeb76d990a66d3700793102f18ebd452cc6fa6d26706d0e5efcea7dbbb156add34b4a9feb637009989faa666ea3f4586959db381ab4a717e25c0e810437808f014e910c565e92216290165c95cf0e3a90fec1fc88f8ad5ab7597af75e616474edc524e4e6e31fcd5d827a54adeb71992f298224fafdce0cf267f3a09faa317047330c6a25153c62e1ce08f20718391067939a7bcae8a082c9b614b5cb163b57187afa7b3abc850b34f37c585841a2e45e49117bd112fd067bde512fc92e964f30b1d0b18bc8cafb16b7108c1ecbcef14e4700348a050a7c000200eb6c9ca199bcaadd4a2afb320c4b7a69abf96a1bb1f1a756852c00f16c0481c952d0f54fc067e1b70ee75ef51c5b4e8a2462e0e9b167990200e5abe913a8637781b22ebdda4daa741a5687259364aba9e4e1e4ae68354ecf0500000092636a65e1966b676342e4454b5c755916503d02ebb31a918cfb0f4bd1a49abc59cf4042300c24484bd6cc755317fe716d993d3a9a8b3f14d4bb65b7841734e952e1be649db55a238e1cc8b98a5e664bc5a2409d5550d34e161e3ebf5f9a70ea123c66f672bdd3c9"]) fcntl$notify(r0, 0x402, 0x0) clock_gettime(0xfffffffffffffffc, &(0x7f00000001c0)={0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r0, 0x10}], 0x1, &(0x7f0000000200)={r2, r3+10000000}, &(0x7f0000000240)={0x8}, 0x8) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000340)=0x1, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2000, 0xa) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0xff05) 13:46:37 executing program 5: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r0, &(0x7f0000000300)="040105000500fffff0000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 368.576262] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 13:46:37 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$inet(r0, &(0x7f00000004c0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x7fffffff, 0x400400) pwritev(r1, &(0x7f0000000240)=[{&(0x7f0000000140)="913d0493e49ddfd757c0976eed3e4798e355b09a8fb1e5e9aae388a7de115b819f65911a45319512aa3fea2037d7bc34a9364b7cd7d3a3eda0b758d62c7a2ff4b09738401202f3eaf10e9a3a6cbb5d19b2a72eea2e3106138641f0c75c1ca936660f7aaa013de149242fb25e87f25c43055cb11e71879bb18c14b9fc0e85b80380076ad8df2e424edc1125f00ff4bf73c57936c73f45fae3e84095dcb4894b83cb568b17c581b0b3ccf907996bd7bbb63b4b3f518acab59da4a428c78efdb3386f1e3e2b85129383432d92694962ffa29acb8e659a7385644a6cd46511af28285cffe5592c93d5f4fc", 0xe9}, {&(0x7f0000000000)="de09879a7346a4e8d1c96845a084", 0xe}], 0x2, 0x0) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000000c0)=""/32) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000040)={0x7, 0x4}) 13:46:37 executing program 7: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x100000044) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300)="04010500050000000000003fffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 368.639920] BTRFS: device fsid ecf6f2a2-2997-48ae-b81e-1b00920efd9a devid 28 transid 756082810144684242 /dev/loop3 [ 368.672682] BTRFS error (device loop3): unsupported checksum algorithm 3786 [ 368.679908] BTRFS error (device loop3): superblock checksum mismatch [ 368.731270] BTRFS error (device loop3): open_ctree failed [ 368.792475] BTRFS error (device loop3): unsupported checksum algorithm 3786 [ 368.799868] BTRFS error (device loop3): superblock checksum mismatch [ 368.820315] BTRFS error (device loop3): open_ctree failed [ 492.512531] INFO: task syz-executor0:24251 blocked for more than 120 seconds. [ 492.519882] Not tainted 4.18.0-rc1+ #111 [ 492.524489] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 492.532474] syz-executor0 D22952 24251 12668 0x80000002 [ 492.538127] Call Trace: [ 492.540736] __schedule+0x87c/0x1ed0 [ 492.544474] ? __sched_text_start+0x8/0x8 [ 492.548642] ? lock_downgrade+0x8f0/0x8f0 [ 492.552808] ? graph_lock+0x170/0x170 [ 492.556631] ? graph_lock+0x170/0x170 [ 492.560453] ? debug_check_no_locks_freed+0x310/0x310 [ 492.565662] ? print_usage_bug+0xc0/0xc0 [ 492.569741] ? mark_held_locks+0xc9/0x160 [ 492.573908] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 492.578518] schedule+0xfb/0x450 [ 492.581902] ? lock_downgrade+0x8f0/0x8f0 [ 492.586066] ? __schedule+0x1ed0/0x1ed0 [ 492.590062] ? mark_held_locks+0xc9/0x160 [ 492.594223] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 492.598828] ? _raw_spin_unlock_irq+0x27/0x70 [ 492.603349] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 492.608391] __rwsem_down_write_failed_common+0x95d/0x1630 [ 492.614041] ? rwsem_spin_on_owner+0xa40/0xa40 [ 492.618642] ? __lock_acquire+0x7fc/0x5020 [ 492.622900] ? debug_check_no_locks_freed+0x310/0x310 [ 492.628113] ? debug_check_no_locks_freed+0x310/0x310 [ 492.633327] ? debug_check_no_locks_freed+0x310/0x310 [ 492.638533] ? tty_lock+0x70/0xa0 [ 492.642014] ? destroy_inode+0x200/0x200 [ 492.646112] ? mutex_trylock+0x2b0/0x2b0 [ 492.650194] ? graph_lock+0x170/0x170 [ 492.654016] ? graph_lock+0x170/0x170 [ 492.657858] ? graph_lock+0x170/0x170 [ 492.661677] ? find_held_lock+0x36/0x1c0 [ 492.665763] ? lock_acquire+0x1e4/0x540 [ 492.669794] ? n_tty_flush_buffer+0x21/0x320 [ 492.674227] ? lock_release+0xa30/0xa30 [ 492.678219] ? check_same_owner+0x340/0x340 [ 492.682561] rwsem_down_write_failed+0xe/0x10 [ 492.687076] ? rwsem_down_write_failed+0xe/0x10 [ 492.691758] call_rwsem_down_write_failed+0x17/0x30 [ 492.696792] down_write+0xaa/0x130 [ 492.700366] ? n_tty_flush_buffer+0x21/0x320 [ 492.704789] ? down_read+0x1d0/0x1d0 [ 492.708526] ? ldsem_down_read_trylock+0xc7/0xf0 [ 492.713300] ? n_tty_poll+0xab0/0xab0 [ 492.717137] n_tty_flush_buffer+0x21/0x320 [ 492.721388] tty_ldisc_hangup+0x89/0x640 [ 492.725468] __tty_hangup.part.21+0x2da/0x6e0 [ 492.729985] tty_vhangup+0x21/0x30 [ 492.733544] pty_close+0x3bd/0x510 [ 492.737099] ? pty_cleanup+0x50/0x50 [ 492.740834] tty_release+0x4b3/0x1300 [ 492.744698] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 492.749123] ? release_one_tty+0x540/0x540 [ 492.753376] ? kasan_check_read+0x11/0x20 [ 492.757544] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 492.763102] ? locks_remove_file+0x402/0x5c0 [ 492.767528] ? fcntl_setlk+0x1040/0x1040 [ 492.771607] ? check_same_owner+0x340/0x340 [ 492.775946] ? rcu_note_context_switch+0x730/0x730 [ 492.780897] ? kobject_put+0x8e/0x280 [ 492.784718] ? release_one_tty+0x540/0x540 [ 492.788970] __fput+0x35b/0x8b0 [ 492.792268] ? fput+0x1a0/0x1a0 [ 492.795564] ? check_same_owner+0x340/0x340 [ 492.799905] ? _raw_spin_unlock_irq+0x27/0x70 [ 492.804419] ____fput+0x15/0x20 [ 492.807717] task_work_run+0x1ec/0x2a0 [ 492.811634] ? task_work_cancel+0x250/0x250 [ 492.815974] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 492.821531] ? switch_task_namespaces+0xa2/0xd0 [ 492.826220] do_exit+0x1b08/0x2750 [ 492.829784] ? mm_update_next_owner+0x9a0/0x9a0 [ 492.834477] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 492.840040] ? find_held_lock+0x36/0x1c0 [ 492.844127] ? lock_downgrade+0x8f0/0x8f0 [ 492.848291] ? lock_downgrade+0x8f0/0x8f0 [ 492.852469] ? kasan_check_read+0x11/0x20 [ 492.856629] ? do_raw_spin_unlock+0xa7/0x2f0 [ 492.861053] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 492.865647] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 492.870242] ? rcu_read_lock+0x70/0x70 [ 492.874150] ? trace_hardirqs_off+0xd/0x10 [ 492.878405] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 492.883522] ? try_to_wake_up+0x10a/0x12b0 [ 492.887778] ? graph_lock+0x170/0x170 [ 492.891619] ? find_held_lock+0x36/0x1c0 [ 492.895699] ? retint_kernel+0x10/0x10 [ 492.899605] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 492.904641] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 492.909429] ? retint_kernel+0x10/0x10 [ 492.913346] do_group_exit+0x177/0x440 [ 492.917252] ? __ia32_sys_exit+0x50/0x50 [ 492.921327] ? __ia32_sys_clock_settime+0x290/0x290 [ 492.926360] ? do_syscall_64+0x9a/0x820 [ 492.930353] __x64_sys_exit_group+0x3e/0x50 [ 492.934693] do_syscall_64+0x1b9/0x820 [ 492.938598] ? syscall_slow_exit_work+0x500/0x500 [ 492.943460] ? syscall_return_slowpath+0x5e0/0x5e0 [ 492.948424] ? syscall_return_slowpath+0x31d/0x5e0 [ 492.953376] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 492.958770] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 492.963635] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 492.968840] RIP: 0033:0x455b29 [ 492.972043] Code: Bad RIP value. [ 492.975440] RSP: 002b:00007ffe4ba06ac8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 492.983163] RAX: ffffffffffffffda RBX: 00000000000000be RCX: 0000000000455b29 [ 492.990444] RDX: 000000000005a168 RSI: 0000000000730aa0 RDI: 0000000000000000 [ 492.997727] RBP: 0000000000000013 R08: 0000000000000000 R09: 0000000000000000 [ 493.005036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 493.012319] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000001380 [ 493.019617] [ 493.019617] Showing all locks held in the system: [ 493.025955] 6 locks held by kworker/u4:0/7: [ 493.030294] 1 lock held by khungtaskd/898: [ 493.034533] #0: 000000001dbfb7b7 (rcu_read_lock){....}, at: debug_show_all_locks+0xd0/0x428 [ 493.043180] 1 lock held by rsyslogd/4456: [ 493.047341] 2 locks held by getty/4546: [ 493.051320] #0: 000000005dc53ccb (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 493.059590] #1: 00000000199d5274 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 493.068475] 2 locks held by getty/4547: [ 493.072454] #0: 00000000f9b64f19 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 493.080725] #1: 000000002f5a3389 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 493.089609] 2 locks held by getty/4548: [ 493.093592] #0: 00000000cb9c97a2 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 493.101861] #1: 0000000041d18857 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 493.110748] 2 locks held by getty/4549: [ 493.114727] #0: 00000000c8d11832 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 493.122998] #1: 00000000ea241585 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 493.131903] 2 locks held by getty/4550: [ 493.135883] #0: 0000000013321244 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 493.144152] #1: 00000000e59be29d (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 493.153033] 2 locks held by getty/4551: [ 493.157030] #0: 000000006de86571 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 493.165301] #1: 00000000c6e6d7a5 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 493.174182] 2 locks held by getty/4552: [ 493.178163] #0: 00000000170f0645 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 493.186432] #1: 00000000802f664c (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 493.195331] 4 locks held by syz-executor0/24251: [ 493.200090] #0: 00000000990a4f3f (&tty->legacy_mutex){+.+.}, at: tty_lock+0x70/0xa0 [ 493.208026] #1: 00000000f5b3d188 (&tty->legacy_mutex/1){+.+.}, at: tty_lock+0x70/0xa0 [ 493.216124] #2: 000000004693e4fc (&tty->ldisc_sem){++++}, at: tty_ldisc_ref+0x22/0x90 [ 493.224220] #3: 00000000fec2c95a (&o_tty->termios_rwsem/1){++++}, at: n_tty_flush_buffer+0x21/0x320 [ 493.233538] [ 493.235173] ============================================= [ 493.235173] [ 493.242198] NMI backtrace for cpu 1 [ 493.245846] CPU: 1 PID: 898 Comm: khungtaskd Not tainted 4.18.0-rc1+ #111 [ 493.252761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 493.262102] Call Trace: [ 493.264684] dump_stack+0x1c9/0x2b4 [ 493.268306] ? dump_stack_print_info.cold.2+0x52/0x52 [ 493.273490] ? vprintk_default+0x28/0x30 [ 493.277553] nmi_cpu_backtrace.cold.4+0x19/0xce [ 493.282214] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 493.286616] ? lapic_can_unplug_cpu.cold.27+0x3f/0x3f [ 493.291807] nmi_trigger_cpumask_backtrace+0x151/0x192 [ 493.297078] arch_trigger_cpumask_backtrace+0x14/0x20 [ 493.302260] watchdog+0x9c4/0xf80 [ 493.305714] ? reset_hung_task_detector+0xd0/0xd0 [ 493.310556] ? __schedule+0x1ed0/0x1ed0 [ 493.314543] ? do_raw_spin_unlock+0xa7/0x2f0 [ 493.318944] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 493.323520] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 493.329047] ? __kthread_parkme+0x111/0x1d0 [ 493.333370] ? parse_args.cold.15+0x1b3/0x1b3 [ 493.337858] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 493.342959] ? trace_hardirqs_on+0xd/0x10 [ 493.347106] kthread+0x345/0x410 [ 493.350486] ? reset_hung_task_detector+0xd0/0xd0 [ 493.355320] ? kthread_bind+0x40/0x40 [ 493.359120] ret_from_fork+0x3a/0x50 [ 493.362869] Sending NMI from CPU 1 to CPUs 0: [ 493.367377] NMI backtrace for cpu 0 [ 493.367387] CPU: 0 PID: 7 Comm: kworker/u4:0 Not tainted 4.18.0-rc1+ #111 [ 493.367391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 493.367405] Workqueue: events_unbound flush_to_ldisc [ 493.367418] RIP: 0010:__sanitizer_cov_trace_pc+0x14/0x50 [ 493.367419] Code: 4a 89 74 10 e8 4a 89 54 10 f0 4a 89 4c d8 20 4c 89 08 5d c3 66 90 55 65 48 8b 04 25 40 ee 01 00 65 8b 15 7f de 85 7e 48 89 e5 <81> e2 00 01 1f 00 48 8b 75 08 75 2b 8b 90 90 12 00 00 83 fa 02 75 [ 493.367535] RSP: 0018:ffff8801d9a9f238 EFLAGS: 00000213 [ 493.367542] RAX: ffff8801d9a8c1c0 RBX: 0000000272be327a RCX: ffffffff83a43b9c [ 493.367547] RDX: 0000000000000000 RSI: 00000000000000ff RDI: 0000000000000001 [ 493.367552] RBP: ffff8801d9a9f238 R08: ffff8801d9a8c1c0 R09: 0000000000000006 [ 493.367557] R10: ffff8801d9a8c1c0 R11: 0000000000000000 R12: ffffc900020d4000 [ 493.367562] R13: 00000000000013d6 R14: 0000000272be327a R15: 0000000000000000 [ 493.367570] FS: 0000000000000000(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 493.367575] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 493.367580] CR2: 00007f5abf12fdb8 CR3: 0000000008e6a000 CR4: 00000000001406f0 [ 493.367587] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 493.367592] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 493.367594] Call Trace: [ 493.367603] __process_echoes+0x264/0x8d0 [ 493.367613] commit_echoes+0x163/0x1d0 [ 493.367623] n_tty_receive_buf_common+0x205b/0x2c60 [ 493.367635] ? save_stack+0x43/0xd0 [ 493.367644] ? __kasan_slab_free+0x11a/0x170 [ 493.367656] ? n_tty_receive_char_lnext+0x710/0x710 [ 493.367665] ? lock_release+0xa30/0xa30 [ 493.367674] ? trace_hardirqs_off+0xd/0x10 [ 493.367684] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 493.367693] ? debug_check_no_obj_freed+0x30b/0x595 [ 493.367703] n_tty_receive_buf2+0x33/0x40 [ 493.367712] tty_ldisc_receive_buf+0xb0/0x190 [ 493.367721] ? n_tty_receive_buf_common+0x2c60/0x2c60 [ 493.367732] tty_port_default_receive_buf+0x115/0x180 [ 493.367742] ? tty_port_lower_dtr_rts+0x90/0x90 [ 493.367750] ? trace_hardirqs_on+0xd/0x10 [ 493.367761] flush_to_ldisc+0x3fd/0x570 [ 493.367771] ? tty_buffer_free+0x160/0x160 [ 493.367781] ? __lock_is_held+0xb5/0x140 [ 493.367792] process_one_work+0xc73/0x1ba0 [ 493.367802] ? debug_check_no_locks_freed+0x310/0x310 [ 493.367813] ? pwq_dec_nr_in_flight+0x4a0/0x4a0 [ 493.367821] ? lock_repin_lock+0x430/0x430 [ 493.367832] ? __sched_text_start+0x8/0x8 [ 493.367842] ? graph_lock+0x170/0x170 [ 493.367853] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 493.367865] ? lock_acquire+0x1e4/0x540 [ 493.367873] ? worker_thread+0x3dc/0x13c0 [ 493.367881] ? lock_downgrade+0x8f0/0x8f0 [ 493.367891] ? lock_release+0xa30/0xa30 [ 493.367899] ? kasan_check_read+0x11/0x20 [ 493.367907] ? do_raw_spin_unlock+0xa7/0x2f0 [ 493.367915] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 493.367925] ? kasan_check_write+0x14/0x20 [ 493.367932] ? do_raw_spin_lock+0xc1/0x200 [ 493.367941] worker_thread+0x189/0x13c0 [ 493.367952] ? process_one_work+0x1ba0/0x1ba0 [ 493.367962] ? graph_lock+0x170/0x170 [ 493.367970] ? find_held_lock+0x36/0x1c0 [ 493.367981] ? find_held_lock+0x36/0x1c0 [ 493.367992] ? __schedule+0x1ed0/0x1ed0 [ 493.368000] ? do_raw_spin_unlock+0xa7/0x2f0 [ 493.368014] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 493.368027] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 493.368034] ? __kthread_parkme+0x111/0x1d0 [ 493.368042] ? parse_args.cold.15+0x1b3/0x1b3 [ 493.368051] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 493.368060] ? trace_hardirqs_on+0xd/0x10 [ 493.368068] kthread+0x345/0x410 [ 493.368076] ? process_one_work+0x1ba0/0x1ba0 [ 493.368083] ? kthread_bind+0x40/0x40 [ 493.368092] ret_from_fork+0x3a/0x50 [ 493.368380] Kernel panic - not syncing: hung_task: blocked tasks [ 493.729161] CPU: 1 PID: 898 Comm: khungtaskd Not tainted 4.18.0-rc1+ #111 [ 493.736075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 493.745418] Call Trace: [ 493.748009] dump_stack+0x1c9/0x2b4 [ 493.751635] ? dump_stack_print_info.cold.2+0x52/0x52 [ 493.756825] ? printk_safe_log_store+0x2f0/0x2f0 [ 493.761577] panic+0x238/0x4e7 [ 493.764774] ? add_taint.cold.5+0x16/0x16 [ 493.768919] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 493.774464] ? nmi_trigger_cpumask_backtrace+0x13a/0x192 [ 493.779907] ? printk_safe_flush+0xd7/0x130 [ 493.784228] watchdog+0x9d5/0xf80 [ 493.787685] ? reset_hung_task_detector+0xd0/0xd0 [ 493.792530] ? __schedule+0x1ed0/0x1ed0 [ 493.796500] ? do_raw_spin_unlock+0xa7/0x2f0 [ 493.800900] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 493.805477] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 493.811020] ? __kthread_parkme+0x111/0x1d0 [ 493.815336] ? parse_args.cold.15+0x1b3/0x1b3 [ 493.819824] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 493.824834] ? trace_hardirqs_on+0xd/0x10 [ 493.828979] kthread+0x345/0x410 [ 493.832341] ? reset_hung_task_detector+0xd0/0xd0 [ 493.837173] ? kthread_bind+0x40/0x40 [ 493.840969] ret_from_fork+0x3a/0x50 [ 493.845283] Dumping ftrace buffer: [ 493.848809] (ftrace buffer empty) [ 493.852497] Kernel Offset: disabled [ 493.856107] Rebooting in 86400 seconds..