Warning: Permanently added '10.128.0.255' (ECDSA) to the list of known hosts.
2020/08/12 04:41:06 fuzzer started
2020/08/12 04:41:06 dialing manager at 10.128.0.105:45719
2020/08/12 04:41:06 syscalls: 1925
2020/08/12 04:41:06 code coverage: enabled
2020/08/12 04:41:06 comparison tracing: enabled
2020/08/12 04:41:06 extra coverage: enabled
2020/08/12 04:41:06 setuid sandbox: enabled
2020/08/12 04:41:06 namespace sandbox: enabled
2020/08/12 04:41:06 Android sandbox: enabled
2020/08/12 04:41:06 fault injection: enabled
2020/08/12 04:41:06 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2020/08/12 04:41:06 net packet injection: enabled
2020/08/12 04:41:06 net device setup: enabled
2020/08/12 04:41:06 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2020/08/12 04:41:06 devlink PCI setup: PCI device 0000:00:10.0 is not available
2020/08/12 04:41:06 USB emulation: enabled
2020/08/12 04:41:06 hci packet injection: /dev/vhci does not exist
04:41:49 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
syncfs(r1)
symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000000000)='./file0\x00')
faccessat(r0, &(0x7f0000000080)='./file0\x00', 0x0)

04:41:49 executing program 1:
r0 = eventfd(0xdffffffe)
write$P9_ROPEN(r0, &(0x7f00000007c0)={0x18}, 0xfffffe35)
r1 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000040))
close(r0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0)
tkill(r1, 0x13)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)

04:41:49 executing program 2:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000080)=0x1000)

04:41:49 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
pipe(&(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10)
connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
ioctl$int_in(r5, 0x5452, &(0x7f00000001c0)=0x1)
write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xff01)
splice(r3, 0x0, r5, 0x0, 0x10003, 0x0)

04:41:49 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xc, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x5, 0xc}, @fastopen={0x22, 0xe, "980698a1ed5efe10d771934f"}]}}}}}}}, 0x0)

04:41:49 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0x400454da, 0x40000d)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1})

[*     ] A start job is running for dev-ttyS0.device (9s / 1min 30s)
[**    ] A start job is running for dev-ttyS0.device (9s / 1min 30s)
[***   ] A start job is running for dev-ttyS0.device (10s / 1min 30s)
[ ***  ] A start job is running for dev-ttyS0.device (10s / 1min 30s)
[  *** ] A start job is running for dev-ttyS0.device (11s / 1min 30s)
[   ***] A start job is running for dev-ttyS0.device (11s / 1min 30s)
[    **] A start job is running for dev-ttyS0.device (12s / 1min 30s)
[     *] A start job is running for dev-ttyS0.device (12s / 1min 30s)
[    **] A start job is running for dev-ttyS0.device (13s / 1min 30s)
[   ***] A start job is running for dev-ttyS0.device (13s / 1min 30s)
[  *** ] A start job is running for dev-ttyS0.device (14s / 1min 30s)
[ ***  ] A start job is running for dev-ttyS0.device (14s / 1min 30s)
[***   ] A start job is running for dev-ttyS0.device (15s / 1min 30s)
[**    ] A start job is running for dev-ttyS0.device (15s / 1min 30s)
[*     ] A start job is running for dev-ttyS0.device (16s / 1min 30s)
[**    ] A start job is running for dev-ttyS0.device (16s / 1min 30s)
[***   ] A start job is running for dev-ttyS0.device (17s / 1min 30s)
[ ***  ] A start job is running for dev-ttyS0.device (17s / 1min 30s)
[  *** ] A start job is running for dev-ttyS0.device (18s / 1min 30s)
[   ***] A start job is running for dev-ttyS0.device (18s / 1min 30s)
[    **] A start job is running for dev-ttyS0.device (19s / 1min 30s)
[     *] A start job is running for dev-ttyS0.device (19s / 1min 30s)
[    **] A start job is running for dev-ttyS0.device (20s / 1min 30s)
[   ***] A start job is running for dev-ttyS0.device (20s / 1min 30s)
[  *** ] A start job is running for dev-ttyS0.device (21s / 1min 30s)
[ ***  ] A start job is running for dev-ttyS0.device (21s / 1min 30s)
[***   ] A start job is running for dev-ttyS0.device (22s / 1min 30s)
[**    ] A start job is running for dev-ttyS0.device (22s / 1min 30s)
[*     ] A start job is running for dev-ttyS0.device (23s / 1min 30s)
[**    ] A start job is running for dev-ttyS0.device (23s / 1min 30s)
[***   ] A start job is running for dev-ttyS0.device (24s / 1min 30s)
[ ***  ] A start job is running for dev-ttyS0.device (24s / 1min 30s)
[  *** ] A start job is running for dev-ttyS0.device (25s / 1min 30s)
[   ***] A start job is running for dev-ttyS0.device (25s / 1min 30s)
[    **] A start job is running for dev-ttyS0.device (26s / 1min 30s)
[     *] A start job is running for dev-ttyS0.device (26s / 1min 30s)
[    **] A start job is running for dev-ttyS0.device (27s / 1min 30s)
[   ***] A start job is running for dev-ttyS0.device (27s / 1min 30s)
[  *** ] A start job is running for dev-ttyS0.device (28s / 1min 30s)
[ ***  ] A start job is running for dev-ttyS0.device (28s / 1min 30s)
[***   ] A start job is running for dev-ttyS0.device (29s / 1min 30s)
[**    ] A start job is running for dev-ttyS0.device (29s / 1min 30s)
[*     ] A start job is running for dev-ttyS0.device (30s / 1min 30s)
[**    ] A start job is running for dev-ttyS0.device (30s / 1min 30s)
[***   ] A start job is running for dev-ttyS0.device (31s / 1min 30s)
[ ***  ] A start job is running for dev-ttyS0.device (31s / 1min 30s)
[  *** ] A start job is running for dev-ttyS0.device (32s / 1min 30s)
[   ***] A start job is running for dev-ttyS0.device (32s / 1min 30s)
[    **] A start job is running for dev-ttyS0.device (33s / 1min 30s)
[     *] A start job is running for dev-ttyS0.device (33s / 1min 30s)
[    **] A start job is running for dev-ttyS0.device (34s / 1min 30s)
[   ***] A start job is running for dev-ttyS0.device (34s / 1min 30s)
[  *** ] A start job is running for dev-ttyS0.device (35s / 1min 30s)
[ ***  ] A start job is running for dev-ttyS0.device (35s / 1min 30s)
[***   ] A start job is running for dev-ttyS0.device (36s / 1min 30s)
[**    ] A start job is running for dev-ttyS0.device (36s / 1min 30s)
[*     ] A start job is running for dev-ttyS0.device (37s / 1min 30s)
[**    ] A start job is running for dev-ttyS0.device (37s / 1min 30s)
[***   ] A start job is running for dev-ttyS0.device (38s / 1min 30s)
[ ***  ] A start job is running for dev-ttyS0.device (38s / 1min 30s)
[  *** ] A start job is running for dev-ttyS0.device (39s / 1min 30s)
[   ***] A start job is running for dev-ttyS0.device (39s / 1min 30s)
[    **] A start job is running for dev-ttyS0.device (40s / 1min 30s)
[     *] A start job is running for dev-ttyS0.device (40s / 1min 30s)
[    **] A start job is running for dev-ttyS0.device (41s / 1min 30s)
[   ***] A start job is running for dev-ttyS0.device (41s / 1min 30s)
[  *** ] A start job is running for dev-ttyS0.device (42s / 1min 30s)
[ ***  ] A start job is running for dev-ttyS0.device (42s / 1min 30s)
[***   ] A start job is running for dev-ttyS0.device (43s / 1min 30s)
[**    ] A start job is running for dev-ttyS0.device (43s / 1min 30s)
[*     ] A start job is running for dev-ttyS0.device (44s / 1min 30s)
[**    ] A start job is running for dev-ttyS0.device (44s / 1min 30s)
[***   ] A start job is running for dev-ttyS0.device (45s / 1min 30s)
[ ***  ] A start job is running for dev-ttyS0.device (45s / 1min 30s)
[  *** ] A start job is running for dev-ttyS0.device (46s / 1min 30s)
[   ***] A start job is running for dev-ttyS0.device (46s / 1min 30s)
[    **] A start job is running for dev-ttyS0.device (47s / 1min 30s)
[     *] A start job is running for dev-ttyS0.device (47s / 1min 30s)
[    **] A start job is running for dev-ttyS0.device (48s / 1min 30s)
[   ***] A start job is running for dev-ttyS0.device (48s / 1min 30s)
[  *** ] A start job is running for dev-ttyS0.device (49s / 1min 30s)
[ ***  ] A start job is running for dev-ttyS0.device (49s / 1min 30s)
[***   ] A start job is running for dev-ttyS0.device (50s / 1min 30s)
[**    ] A start job is running for dev-ttyS0.device (50s / 1min 30s)
[*     ] A start job is running for dev-ttyS0.device (51s / 1min 30s)
[**    ] A start job is running for dev-ttyS0.device (51s / 1min 30s)
[***   ] A start job is running for dev-ttyS0.device (52s / 1min 30s)
[ ***  ] A start job is running for dev-ttyS0.device (52s / 1min 30s)
[  *** ] A start job is running for dev-ttyS0.device (53s / 1min 30s)
[   ***] A start job is running for dev-ttyS0.device (53s / 1min 30s)
[    **] A start job is running for dev-ttyS0.device (54s / 1min 30s)
[     *] A start job is running for dev-ttyS0.device (54s / 1min 30s)
[    **] A start job is running for dev-ttyS0.device (55s / 1min 30s)
[   ***] A start job is running for dev-ttyS0.device (55s / 1min 30s)
[  *** ] A start job is running for dev-ttyS0.device (56s / 1min 30s)
[ ***  ] A start job is running for dev-ttyS0.device (56s / 1min 30s)
[***   ] A start job is running for dev-ttyS0.device (57s / 1min 30s)
[**    ] A start job is running for dev-ttyS0.device (57s / 1min 30s)
[*     ] A start job is running for dev-ttyS0.device (58s / 1min 30s)
[**    ] A start job is running for dev-ttyS0.device (58s / 1min 30s)[   66.163611][   T22] audit: type=1400 audit(1597207309.069:8): avc:  denied  { execmem } for  pid=338 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
[   66.212383][  T342] cgroup1: Unknown subsys name 'perf_event'
[   66.218841][  T342] cgroup1: Unknown subsys name 'net_cls'
[   66.271158][  T347] cgroup1: Unknown subsys name 'perf_event'
[   66.277313][  T347] cgroup1: Unknown subsys name 'net_cls'
[   66.322167][  T349] cgroup1: Unknown subsys name 'perf_event'
[   66.328337][  T349] cgroup1: Unknown subsys name 'net_cls'
[   66.336491][  T350] cgroup1: Unknown subsys name 'perf_event'
[   66.340819][  T351] cgroup1: Unknown subsys name 'perf_event'
[   66.344767][  T350] cgroup1: Unknown subsys name 'net_cls'
[   66.348505][  T351] cgroup1: Unknown subsys name 'net_cls'
[   66.356131][  T352] cgroup1: Unknown subsys name 'perf_event'
[   66.365585][  T352] cgroup1: Unknown subsys name 'net_cls'
04:41:52 executing program 2:

04:41:52 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_emit_ethernet(0x300cce, 0x0, 0x0)

04:41:52 executing program 2:
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00')
pread64(r0, 0x0, 0x2d, 0x400000000000dbde)
pipe2(0x0, 0x81000)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

04:41:52 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x3a)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@mcast1, 0x0, r3})

04:41:52 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x5, 0xcc, 0x9}, 0x40)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, &(0x7f0000000180), 0x0}, 0x20)

04:41:52 executing program 2:
syz_emit_ethernet(0x25e, &(0x7f00000019c0)={@multicast, @empty=[0x5, 0xfc], @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0f009", 0x228, 0x3a, 0xff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0, [{0x0, 0xb, "a78ce540cd4f791153d5dea6b259fe8000000000000023493b87aa0568f00b1c71a8242373244ad2439adc07df0a69748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac15084dbaf736b41e5a81802"}, {0x0, 0x1, "ffffefffa0f8ca1cc8000800"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92326a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb99e5ff38403946f5ab6560d2d0124624cc383bf15d4fe6b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d255518751501f4d980e61c2d908a95c5f4a1a2367bc591dd8b094822ff0642a18b79f7c5eba31fb68b2d734a6671e27182aee4de24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba423999086baa39eb8164e240069f656d3a057ecf894222a141123f5acaa556b9f30dcab2b90aa23e667016effc5dc49dfb58d8931"}]}}}}}}, 0x0)

04:41:52 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x2, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00000000000000000800000009000100666c6f77000000002800020024000b80080001008e6f9f00180002801400010000000700000000000000d1d6"], 0x58}}, 0x0)


[***   ] A start job is running for dev-ttyS0.device (59s / 1min 30s)
[ ***  ] A start job is running for dev-ttyS0.device (59s / 1min 30s)
[  *** ] A start job is running for dev-ttyS0.device (1min / 1min 30s)
[   ***] A start job is running for dev-ttyS0.device (1min / 1min 30s)
[    **] A start job is running for dev-ttyS0.device (1min 1s / 1min 30s)
[     *] A start job is running for dev-ttyS0.device (1min 1s / 1min 30s)
[    **] A start job is running for dev-ttyS0.device (1min 2s / 1min 30s)[   69.825080][ T2820] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
04:41:52 executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000300)={0x1, 0x1})

04:41:52 executing program 2:
syz_emit_ethernet(0x25e, &(0x7f00000019c0)={@multicast, @empty=[0x5, 0xfc], @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0f009", 0x228, 0x3a, 0xff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0, [{0x0, 0xb, "a78ce540cd4f791153d5dea6b259fe8000000000000023493b87aa0568f00b1c71a8242373244ad2439adc07df0a69748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac15084dbaf736b41e5a81802"}, {0x0, 0x1, "ffffefffa0f8ca1cc8000800"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92326a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb99e5ff38403946f5ab6560d2d0124624cc383bf15d4fe6b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d255518751501f4d980e61c2d908a95c5f4a1a2367bc591dd8b094822ff0642a18b79f7c5eba31fb68b2d734a6671e27182aee4de24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba423999086baa39eb8164e240069f656d3a057ecf894222a141123f5acaa556b9f30dcab2b90aa23e667016effc5dc49dfb58d8931"}]}}}}}}, 0x0)

[   69.869208][ T2838] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[   69.904676][ T2853] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
04:41:52 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00')
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socket$packet(0x11, 0x2, 0x300)
preadv(r0, &(0x7f0000000140)=[{&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000040)=""/82, 0x52}], 0x2, 0x1, 0x0)

04:41:52 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
keyctl$set_timeout(0x11, 0x0, 0x0)

04:41:52 executing program 4:
syz_emit_ethernet(0x7a, &(0x7f0000000580)={@multicast, @empty=[0x5, 0xfc], @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "2add36", 0x44, 0x2f, 0x0, @empty, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}}, 0x0)

04:41:52 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00')
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0)
sendfile(r1, r0, 0x0, 0x7ffff000)

04:41:52 executing program 1:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086602, &(0x7f0000000040))
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x5)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xda00)
write$cgroup_int(r1, &(0x7f0000000200), 0x32000)

04:41:52 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xc, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x5, 0xc}, @fastopen={0x22, 0xe, "980698a1ed5efe10d771934f"}]}}}}}}}, 0x0)

04:41:52 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r3], 0x38}}, 0x0)

04:41:52 executing program 4:
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="ee29b2988a"], 0x1c}, 0x1, 0x2000000}, 0x0)
r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000002c0)='X', 0x1, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000640)='user\x00', &(0x7f0000000540)={'syz'}, &(0x7f00000000c0), 0xc6, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000300)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={'rmd256-generic\x00'}})

04:41:52 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xc, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x5, 0xc}, @fastopen={0x22, 0xe, "980698a1ed5efe10d771934f"}]}}}}}}}, 0x0)

04:41:52 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
io_setup(0x2, &(0x7f0000000140)=<r2=>0x0)
io_submit(r2, 0x0, 0x0)
io_cancel(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)

04:41:52 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xc, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x5, 0xc}, @fastopen={0x22, 0xe, "980698a1ed5efe10d771934f"}]}}}}}}}, 0x0)

04:41:53 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r3], 0x38}}, 0x0)

04:41:53 executing program 3:
syz_emit_ethernet(0x25e, &(0x7f00000019c0)={@multicast, @empty=[0x5, 0xfc], @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0f009", 0x228, 0x3a, 0xff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x256, 0x0, 0x0, [{0x0, 0xb, "a78ce540cd4f791153d5dea6b259fe8000000000000023493b87aa0568f00b1c71a8242373244ad2439adc07df0a69748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac15084dbaf736b41e5a81802"}, {0x0, 0x1, "ffffefffa0f8ca1cc8000800"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92326a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb99e5ff38403946f5ab6560d2d0124624cc383bf15d4fe6b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d255518751501f4d980e61c2d908a95c5f4a1a2367bc591dd8b094822ff0642a18b79f7c5eba31fb68b2d734a6671e27182aee4de24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba423999086baa39eb8164e240069f656d3a057ecf894222a141123f5acaa556b9f30dcab2b90aa23e667016effc5dc49dfb58d8931"}]}}}}}}, 0x0)

04:41:53 executing program 2:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00')
pread64(r0, 0x0, 0x2d, 0x400000000000dbde)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000003800)={0x0, 0x0, &(0x7f00000037c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800046e8248a9a55256f31fd33ff774512643fe74e0efe3743e19a3b2808cae02000000000000003ea82f1ce8ec3d370738422ba201796817c739110be65d00ace208929737260bbd0af1470502c826a14ad6f40c", @ANYRESOCT, @ANYRES64, @ANYRES16, @ANYRES16], 0x28}, 0x1, 0x0, 0x0, 0x809}, 0x4004800)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x4010)

04:41:53 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000100)='pkcs7_test\x00', 0x0, 0x0, 0x0, r0)

04:41:53 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x2, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x1}}]}}]}, 0x3c}}, 0x0)

04:41:53 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xc, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x5, 0xc}, @fastopen={0x22, 0xe, "980698a1ed5efe10d771934f"}]}}}}}}}, 0x0)

04:41:53 executing program 3:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000780)=[{&(0x7f0000000400)=""/128, 0x80}], 0x1, 0x0, 0x0)

04:41:53 executing program 0:
r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r0, 0x711, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)

04:41:53 executing program 1:
syz_emit_ethernet(0x25e, &(0x7f00000019c0)={@multicast, @empty=[0x5, 0xfc], @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0f009", 0x228, 0x3a, 0xff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x1800, 0x0, 0x0, [{0x0, 0xb, "a78ce540cd4f791153d5dea6b259fe8000000000000023493b87aa0568f00b1c71a8242373244ad2439adc07df0a69748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac15084dbaf736b41e5a81802"}, {0x0, 0x1, "ffffefffa0f8ca1cc8000800"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92326a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb99e5ff38403946f5ab6560d2d0124624cc383bf15d4fe6b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d255518751501f4d980e61c2d908a95c5f4a1a2367bc591dd8b094822ff0642a18b79f7c5eba31fb68b2d734a6671e27182aee4de24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba423999086baa39eb8164e240069f656d3a057ecf894222a141123f5acaa556b9f30dcab2b90aa23e667016effc5dc49dfb58d8931"}]}}}}}}, 0x0)

04:41:53 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xc, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x5, 0xc}, @fastopen={0x22, 0xe, "980698a1ed5efe10d771934f"}]}}}}}}}, 0x0)

04:41:53 executing program 4:
r0 = memfd_create(&(0x7f00000000c0)='[\xdbX\xae[\x1a\xa9\xfd\xfe\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x90\x93\x12l\xb6Z\x95\xab\x00{\xe9\xc2Y\xd1c\x81\x9eG\xf9,\xe2\xc6a\x8b\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x8a\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\x95\xd2q#\xc6\xca\x97!*\x886Ka\x13\xf9\x0fSe\x9c.\xf1\xcd\xd7\xdf< K\\\xb7\xa0\xfbf\x00'/127, 0x0)
write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0xd8)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

04:41:53 executing program 3:
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209211", 0x14, 0x6, 0x0, @dev, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

04:41:53 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xc, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x5, 0xc}, @fastopen={0x22, 0xe, "980698a1ed5efe10d771934f"}]}}}}}}}, 0x0)

04:41:53 executing program 1:
syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209211", 0x14, 0x6, 0x0, @dev, @ipv4={[], [], @loopback}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)


[   ***] A start job is running for dev-ttyS0.device (1min 2s / 1min 30s)[   70.142295][ T2921] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
04:41:53 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000100)='pkcs7_test\x00', 0x0, 0x0, 0x0, r0)

04:41:53 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x25e, &(0x7f00000019c0)={@multicast, @empty=[0x5, 0xfc], @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0f009", 0x228, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xb, "a78ce540cd4f791153d5dea6b259fe8000000000000023493b87aa0568f00b1c71a8242373244ad2439adc07df0a69748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac15084dbaf736b41e5a81802"}, {0x0, 0x1, "ffffefffa0f8ca1cc8000800"}, {0x3, 0x18, "fe909393fe089393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92326a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb99e5ff38403946f5ab6560d2d0124624cc383bf15d4fe6b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d255518751501f4d980e61c2d908a95c5f4a1a2367bc591dd8b094822ff0642a18b79f7c5eba31fb68b2d734a6671e27182aee4de24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba423999086baa39eb8164e240069f656d3a057ecf894222a141123f5acaa556b9f30dcab2b90aa23e667016effc5dc49dfb58d8931"}]}}}}}}, 0x0)

04:41:53 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x20, 0x2, 0x9, 0x401, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0)

04:41:53 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, 0x0, 0xb, 0x5, 0x0, 0x0, {0x7}, [@NFTA_COMPAT_NAME={0x11, 0x1, '/dev/snd/seq\x00'}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}]}, 0x38}}, 0x0)

04:41:53 executing program 3:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000780)=[{&(0x7f0000000400)=""/128, 0x80}], 0x1, 0x2, 0x0)

04:41:53 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r0, 0x0)
syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xc, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x5, 0xc}, @fastopen={0x22, 0xe, "980698a1ed5efe10d771934f"}]}}}}}}}, 0x0)

04:41:53 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/vmstat\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000780)=[{&(0x7f0000000400)=""/128, 0x80}], 0x1, 0x0, 0x0)

04:41:53 executing program 0:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0)
ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000080))

[   70.202913][ T2936] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
04:41:53 executing program 1:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x2fd, 0x69, 0x0, &(0x7f0000000280)="b95b03b700030700009e40f088641fffffe103004000638477fbac14143fe0004301c699da153f08a0e6e380f6010af683317585d7473f1cab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b33", 0x0, 0xfd, 0x5b00}, 0x28)

04:41:53 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x50}, 0x20)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xfffffffffffffd87}, {0x0}, {&(0x7f00000003c0)=""/102387, 0x18ff3}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

04:41:53 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r0, 0x0)
syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xc, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x5, 0xc}, @fastopen={0x22, 0xe, "980698a1ed5efe10d771934f"}]}}}}}}}, 0x0)

04:41:53 executing program 0:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0)
ioctl$TIOCCBRK(r0, 0x5428)

04:41:53 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @remote}, @dev={0xfe, 0x80, [0xb, 0x14, 0x8, 0x8, 0x2, 0x2, 0x7, 0xb, 0x4, 0xb, 0x2, 0x14, 0x8]}, 0x0, 0x11, 0x2})

04:41:53 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})

04:41:53 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r0, 0x0)
syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xc, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x5, 0xc}, @fastopen={0x22, 0xe, "980698a1ed5efe10d771934f"}]}}}}}}}, 0x0)

04:41:53 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffd8)

04:41:53 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/icmp\x00')
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0)
sendfile(r1, r0, 0x0, 0x7ffff000)

04:41:53 executing program 5:
bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xc, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x5, 0xc}, @fastopen={0x22, 0xe, "980698a1ed5efe10d771934f"}]}}}}}}}, 0x0)

04:41:53 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})

04:41:53 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00')
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/82, 0x52}], 0x1, 0x0, 0x0)

04:41:53 executing program 5:
bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xc, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x5, 0xc}, @fastopen={0x22, 0xe, "980698a1ed5efe10d771934f"}]}}}}}}}, 0x0)

04:41:56 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})

04:41:56 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000780)=[{&(0x7f0000000400)=""/128, 0x80}], 0x1, 0x0, 0x0)

04:41:56 executing program 3:
r0 = memfd_create(&(0x7f00000000c0)='[\xdbX\xae[\x1a\xa9\xfd\xfe\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x90\x93\x12l\xb6Z\x95\xab\x00{\xe9\xc2Y\xd1c\x81\x9eG\xf9,\xe2\xc6a\x8b\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x8a\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\x95\xd2q#\xc6\xca\x97!*\x886Ka\x13\xf9\x0fSe\x9c.\xf1\xcd\xd7\xdf< K\\\xb7\xa0\xfbf\x00'/127, 0x0)
write$binfmt_elf32(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c466000002ed8e4f96765ce27b90300060000c002004f01385b66e4f3cf000035f4c38422a3bc82200005"], 0xd8)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

04:41:56 executing program 5:
bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xc, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x5, 0xc}, @fastopen={0x22, 0xe, "980698a1ed5efe10d771934f"}]}}}}}}}, 0x0)

04:41:56 executing program 1:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x25e, &(0x7f00000019c0)={@multicast, @empty=[0x5, 0xfc], @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0f009", 0x228, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xb, "a78ce540cd4f791153d5dea6b259fe8000000000000023493b87aa0568f00b1c71a8242373244ad2439adc07df0a69748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac15084dbaf736b41e5a81802"}, {0x0, 0x1, "ffffefffa0f8ca1cc8040800"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92326a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb99e5ff38403946f5ab6560d2d0124624cc383bf15d4fe6b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d255518751501f4d980e61c2d908a95c5f4a1a2367bc591dd8b094822ff0642a18b79f7c5eba31fb68b2d734a6671e27182aee4de24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba423999086baa39eb8164e240069f656d3a057ecf894222a141123f5acaa556b9f30dcab2b90aa23e667016effc5dc49dfb58d8931"}]}}}}}}, 0x0)

04:41:56 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/udp6\x00')
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0)
sendfile(r1, r0, 0x0, 0x7ffff000)

04:41:56 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})

04:41:56 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})

04:41:56 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xc, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x5, 0xc}, @fastopen={0x22, 0xe, "980698a1ed5efe10d771934f"}]}}}}}}}, 0x0)

04:41:56 executing program 0:
r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$set_timeout(0xb, r0, 0x0)

04:41:56 executing program 3:
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x6)
r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00')
sendfile(r0, r1, &(0x7f0000000240), 0x4000000000dc)

04:41:56 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})

04:41:56 executing program 1:
syz_emit_ethernet(0x25e, &(0x7f00000019c0)={@multicast, @empty=[0x5, 0xfc], @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0f009", 0x228, 0x3a, 0xff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x1900, 0x0, 0x0, [{0x0, 0xb, "a78ce540cd4f791153d5dea6b259fe8000000000000023493b87aa0568f00b1c71a8242373244ad2439adc07df0a69748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac15084dbaf736b41e5a81802"}, {0x0, 0x1, "ffffefffa0f8ca1cc8000800"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92326a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb99e5ff38403946f5ab6560d2d0124624cc383bf15d4fe6b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d255518751501f4d980e61c2d908a95c5f4a1a2367bc591dd8b094822ff0642a18b79f7c5eba31fb68b2d734a6671e27182aee4de24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba423999086baa39eb8164e240069f656d3a057ecf894222a141123f5acaa556b9f30dcab2b90aa23e667016effc5dc49dfb58d8931"}]}}}}}}, 0x0)

04:41:56 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xc, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x5, 0xc}, @fastopen={0x22, 0xe, "980698a1ed5efe10d771934f"}]}}}}}}}, 0x0)

04:41:56 executing program 0:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0)
ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080))

04:41:56 executing program 2:

04:41:56 executing program 1:
syz_emit_ethernet(0x25e, &(0x7f00000019c0)={@multicast, @empty=[0x5, 0xfc], @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0f009", 0x228, 0x3a, 0xff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x1900, 0x0, 0x0, [{0x0, 0xb, "a78ce540cd4f791153d5dea6b259fe8000000000000023493b87aa0568f00b1c71a8242373244ad2439adc07df0a69748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac15084dbaf736b41e5a81802"}, {0x0, 0x1, "ffffefffa0f8ca1cc8000800"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92326a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb99e5ff38403946f5ab6560d2d0124624cc383bf15d4fe6b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d255518751501f4d980e61c2d908a95c5f4a1a2367bc591dd8b094822ff0642a18b79f7c5eba31fb68b2d734a6671e27182aee4de24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba423999086baa39eb8164e240069f656d3a057ecf894222a141123f5acaa556b9f30dcab2b90aa23e667016effc5dc49dfb58d8931"}]}}}}}}, 0x0)

04:41:56 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getitimer(0xa0cd6c2038cd5855, &(0x7f0000000040))

04:41:56 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xc, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x5, 0xc}, @fastopen={0x22, 0xe, "980698a1ed5efe10d771934f"}]}}}}}}}, 0x0)

04:41:56 executing program 3:
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0x31, &(0x7f0000000000)=0x6bc, 0x4)

04:41:56 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})

04:41:56 executing program 0:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0)
ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080))

04:41:56 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/wireless\x00')
pread64(r0, 0x0, 0x0, 0x0)

04:41:56 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, 0x0, 0x0)
listen(r0, 0x0)
syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xc, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x5, 0xc}, @fastopen={0x22, 0xe, "980698a1ed5efe10d771934f"}]}}}}}}}, 0x0)

04:41:56 executing program 2:
r0 = socket$inet6(0xa, 0x6, 0x0)
listen(r0, 0x0)
connect(r0, &(0x7f0000000200)=@l2, 0x80)

04:41:56 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})

04:41:56 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}]}, 0x34}}, 0x0)

04:41:56 executing program 0:
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f365342, 0x4)
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0x6be, 0x4)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:41:56 executing program 1:
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={<r0=>0x0, <r1=>0x0})
close(r0)
recvmmsg(r1, &(0x7f000000abc0)=[{{0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000000240)=""/76, 0x4c}], 0x1, &(0x7f0000003880)=""/167, 0xa7}}], 0x1, 0x0, 0x0)

04:41:56 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})

04:41:56 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, 0x0, 0x0)
listen(r0, 0x0)
syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xc, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x5, 0xc}, @fastopen={0x22, 0xe, "980698a1ed5efe10d771934f"}]}}}}}}}, 0x0)

04:41:56 executing program 1:
r0 = socket(0x2, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000)=0x81, 0x4)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:41:56 executing program 3:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000280)=""/146, 0x92}], 0x1, 0x6, 0x0)

04:41:56 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})


[  *** ] A start job is running for dev-ttyS0.device (1min 3s / 1min 30s)
[ ***  ] A start job is running for dev-ttyS0.device (1min 3s / 1min 30s)
[***   ] A start job is running for dev-ttyS0.device (1min 4s / 1min 30s)
[**    ] A start job is running for dev-ttyS0.device (1min 4s / 1min 30s)
[*     ] A start job is running for dev-ttyS0.device (1min 5s / 1min 30s)
[**    ] A start job is running for dev-ttyS0.device (1min 5s / 1min 30s)[   73.480003][   T22] audit: type=1400 audit(1597207316.390:9): avc:  denied  { create } for  pid=3064 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1
[   73.487212][ T3074] raw_sendmsg: syz-executor.0 forgot to set AF_INET. Fix it!
04:41:56 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, 0x0, 0x0)
listen(r0, 0x0)
syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xc, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x5, 0xc}, @fastopen={0x22, 0xe, "980698a1ed5efe10d771934f"}]}}}}}}}, 0x0)

04:41:56 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000400)={'gre0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x0, 0x1, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev}}}})

04:41:56 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x4000091005d7d, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
recvmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000003c0)=""/150, 0x96}], 0x1}}], 0x1, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='personality\x00')
exit(0x0)
preadv(r2, &(0x7f0000000500), 0x37d, 0x0, 0x0)

04:41:56 executing program 3:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000180)=0x78)

04:41:56 executing program 1:
r0 = socket(0x2, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000)=0x81, 0x4)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:41:56 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})

04:41:56 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380), 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xc, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x5, 0xc}, @fastopen={0x22, 0xe, "980698a1ed5efe10d771934f"}]}}}}}}}, 0x0)

04:41:56 executing program 3:
pipe(0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0)
setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0)

04:41:56 executing program 1:
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f365342, 0x4)
setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000)=0x6bc, 0x4)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:41:56 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})

04:41:56 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380), 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xc, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x5, 0xc}, @fastopen={0x22, 0xe, "980698a1ed5efe10d771934f"}]}}}}}}}, 0x0)

04:41:56 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0xd27}, 0x24}}, 0x0)

04:41:56 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})

04:41:56 executing program 1:
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000300)={@multicast1, @local, 0x0, 0x1, [@remote]}, 0x14)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)

04:41:57 executing program 2:
r0 = socket$inet(0x10, 0x2000000003, 0x0)
sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f00000064c0), 0x40000000000004b, 0x0, 0x0)

04:41:57 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380), 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xc, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x5, 0xc}, @fastopen={0x22, 0xe, "980698a1ed5efe10d771934f"}]}}}}}}}, 0x0)

04:41:57 executing program 3:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='fd/3\x00')

04:41:57 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})

04:41:57 executing program 1:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff2}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0)

04:41:57 executing program 0:
r0 = socket(0x40000000002, 0x3, 0x2)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x148, 0x4)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:41:57 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xc, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x5, 0xc}, @fastopen={0x22, 0xe, "980698a1ed5efe10d771934f"}]}}}}}}}, 0x0)

04:41:57 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})

04:41:57 executing program 0:
r0 = socket(0x40000000002, 0x3, 0x2)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x148, 0x4)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:41:57 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0xd8, 0xd8, 0x0, 0xd8, 0x230, 0x268, 0x268, 0x230, 0x268, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x7}}}}, {{@uncond, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@hbh={{0x48, 'hbh\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360)

04:41:57 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xc, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x5, 0xc}, @fastopen={0x22, 0xe, "980698a1ed5efe10d771934f"}]}}}}}}}, 0x0)

04:41:57 executing program 0:
r0 = socket(0x40000000002, 0x3, 0x2)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x148, 0x4)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)


[***   ] A start job is running for dev-ttyS0.device (1min 6s / 1min 30s)
[ ***  ] A start job is running for dev-ttyS0.device (1min 6s / 1min 30s)[   74.481665][ T3152] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'.
[   74.511615][ T3166] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'.
04:41:58 executing program 2:
r0 = socket$inet(0x10, 0x2000000003, 0x0)
sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f00000064c0), 0x40000000000004b, 0x0, 0x0)

04:41:58 executing program 4:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})

04:41:58 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xc, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x5, 0xc}, @fastopen={0x22, 0xe, "980698a1ed5efe10d771934f"}]}}}}}}}, 0x0)

04:41:58 executing program 0:
r0 = socket(0x40000000002, 0x3, 0x2)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x148, 0x4)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:41:58 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0)

04:41:58 executing program 3:
r0 = socket(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0xb0, 0x0, 0xb0, 0x1e8, 0x1a8, 0x1a8, 0x1e8, 0x1a8, 0x3, 0x0, {[{{@ip={@broadcast, @empty}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3b4272585404f97920335dabc5b3abeb5f79f5865c671cba15e125d11e4e"}}, {{@uncond, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@inet=@iprange={{0x68, 'iprange\x00'}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@mcast1, @ipv6=@ipv4={[], [], @remote}, @ipv4=@empty}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10)
connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000002b8, 0x0)

04:41:58 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)

04:41:58 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8c}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{0x0}, {&(0x7f00000004c0)=""/115, 0x73}], 0x2, &(0x7f0000000540)=""/48, 0x30}, 0x5}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e23, @empty}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r2, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001340)="f15c93cb35c215fe339d1e9060c5b23e77cb58a87329a00288504db389cc6e395885fa906ac30eeae99fa388c31b5717e641e1586a90961b5f99b26c939d944f6cb1cf6817b7e51402a8459f9db642e97d3c05db56250a665d3ff188eb47e5b036d508aa5a5796fb8806b6a41487e0bfc3df087c18269bd7d2f477104c5d5db497ceaf3e1b11a5d63a2b7035dc69fa701f3b46fe701880800a7d38dccd4b3e8014aa15c96968359533ce2c5ffdd5f0d3297018bd7c025150940cdead92eb1e6bc6ba45eecf067b32425b6000b2f376ef9172426ae7fa97e5a84ef4dc540bbf5dd458ffcb75724135bd32fa04db6d6a75aedda7ab6e8501fc94e209dc3b2525ae24c954255d3247ca9c1b9525ce68179a52a87333", 0x114}], 0x3)
sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)

04:41:58 executing program 0:
r0 = socket(0x40000000002, 0x3, 0x2)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:41:58 executing program 4:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})

04:41:58 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00')
preadv(r0, &(0x7f0000000140)=[{&(0x7f00000002c0)=""/34, 0x22}], 0x1, 0x0, 0x0)

04:41:58 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)

04:41:59 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4}, 0x0)
r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x0, 0x2)
r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)

04:41:59 executing program 2:
r0 = socket(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0xb0, 0x0, 0xb0, 0x1e8, 0x1a8, 0x1a8, 0x1e8, 0x1a8, 0x3, 0x0, {[{{@ip={@broadcast, @empty}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3b4272585404f97920335dabc5b3abeb5f79f5865c671cba15e125d11e4e"}}, {{@uncond, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@inet=@iprange={{0x68, 'iprange\x00'}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@mcast1, @ipv6=@ipv4={[], [], @remote}, @ipv4=@empty}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10)
connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000002b8, 0x0)

04:41:59 executing program 0:
r0 = socket(0x40000000002, 0x3, 0x2)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:41:59 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)

04:41:59 executing program 4:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})

04:41:59 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xc, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x5, 0xc}, @fastopen={0x22, 0xe, "980698a1ed5efe10d771934f"}]}}}}}}}, 0x0)

04:41:59 executing program 0:
r0 = socket(0x40000000002, 0x3, 0x2)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:41:59 executing program 1:
r0 = socket(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0xb0, 0x0, 0xb0, 0x1e8, 0x1a8, 0x1a8, 0x1e8, 0x1a8, 0x3, 0x0, {[{{@ip={@broadcast, @empty}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3b4272585404f97920335dabc5b3abeb5f79f5865c671cba15e125d11e4e"}}, {{@uncond, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@inet=@iprange={{0x68, 'iprange\x00'}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@mcast1, @ipv6=@ipv4={[], [], @remote}, @ipv4=@empty, 0x12}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10)
connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000002b8, 0x0)

04:41:59 executing program 4:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})

04:41:59 executing program 2:
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000)=0x6bc, 0x4)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:41:59 executing program 0:
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x148, 0x4)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:41:59 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xc, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x5, 0xc}, @fastopen={0x22, 0xe, "980698a1ed5efe10d771934f"}]}}}}}}}, 0x0)

04:41:59 executing program 4:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})

04:42:00 executing program 3:
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KDSKBLED(r3, 0x4b65, 0x6)
prctl$PR_SET_KEEPCAPS(0x8, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000380)={0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={r4}, 0xc)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x1, r4}, 0x8)
write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0x37cb1133)
socket$inet(0x2, 0x3, 0x33)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10)
splice(r0, 0x0, r2, 0x0, 0x19404, 0x0)

04:42:00 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)

04:42:00 executing program 2:
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000)=0x6bc, 0x4)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:00 executing program 4:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})

04:42:00 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xc, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x5, 0xc}, @fastopen={0x22, 0xe, "980698a1ed5efe10d771934f"}]}}}}}}}, 0x0)

04:42:00 executing program 0:
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x148, 0x4)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:00 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)

04:42:00 executing program 4:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})

04:42:00 executing program 2:
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000)=0x6bc, 0x4)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:00 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xc, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x5, 0xc}, @fastopen={0x22, 0xe, "980698a1ed5efe10d771934f"}]}}}}}}}, 0x0)

04:42:00 executing program 4:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})

04:42:00 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)

04:42:01 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x9f9}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
pipe(&(0x7f00000004c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r3 = creat(0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
lseek(r3, 0x0, 0x0)
open(0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
poll(&(0x7f00000000c0)=[{r2}], 0x1, 0xffffff59)

04:42:01 executing program 2:
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000)=0x6bc, 0x4)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:01 executing program 4:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})

04:42:01 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xc, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x5, 0xc}, @fastopen={0x22, 0xe, "980698a1ed5efe10d771934f"}]}}}}}}}, 0x0)

04:42:01 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)

04:42:01 executing program 0:
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x148, 0x4)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:01 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)

04:42:01 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xc, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x5, 0xc}, @fastopen={0x22, 0xe, "980698a1ed5efe10d771934f"}]}}}}}}}, 0x0)

04:42:01 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})

04:42:01 executing program 2:
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000)=0x6bc, 0x4)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:01 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)

04:42:01 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x42, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x5, 0xc}]}}}}}}}, 0x0)

04:42:01 executing program 3:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
fsync(r0)

04:42:01 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)

04:42:01 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})

04:42:01 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)

04:42:01 executing program 0:
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x148, 0x4)
recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:01 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)

04:42:01 executing program 0:
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x148, 0x4)
recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:02 executing program 2:
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000)=0x6bc, 0x4)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:02 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})

04:42:02 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00')
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
preadv(r0, &(0x7f0000000140)=[{&(0x7f00000002c0)=""/34, 0x22}, {&(0x7f0000000040)=""/90, 0x5a}], 0x2, 0x0, 0x0)

04:42:02 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)

04:42:02 executing program 0:
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x148, 0x4)
recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:02 executing program 3:

04:42:02 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})

04:42:02 executing program 5:
prlimit64(0x0, 0xe, 0x0, 0x0)
getpid()
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000005c40), 0x0, 0x20, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0)
ftruncate(r1, 0x800)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0)
sendfile(r1, r2, 0x0, 0x8400f7fffff8)
creat(&(0x7f0000000680)='./bus\x00', 0x0)

04:42:02 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)

04:42:02 executing program 3:

04:42:02 executing program 0:
r0 = socket(0x0, 0x3, 0x2)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x148, 0x4)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:02 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})

04:42:02 executing program 3:

04:42:02 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)

04:42:02 executing program 2:
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000)=0x6bc, 0x4)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:02 executing program 0:
r0 = socket(0x0, 0x3, 0x2)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x148, 0x4)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:02 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})

04:42:02 executing program 5:

04:42:02 executing program 5:

04:42:02 executing program 3:

04:42:02 executing program 0:
r0 = socket(0x0, 0x3, 0x2)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x148, 0x4)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:02 executing program 5:

04:42:02 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})

04:42:02 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)

04:42:02 executing program 5:

04:42:02 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)

04:42:03 executing program 2:
r0 = socket(0x40000000002, 0x3, 0x2)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:03 executing program 3:

04:42:03 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})

04:42:03 executing program 0:
r0 = socket(0x40000000002, 0x0, 0x2)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x148, 0x4)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:03 executing program 5:

04:42:03 executing program 1:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)

04:42:03 executing program 5:

04:42:03 executing program 3:

04:42:03 executing program 3:

04:42:03 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})

04:42:03 executing program 1:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)

04:42:03 executing program 0:
r0 = socket(0x40000000002, 0x0, 0x2)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x148, 0x4)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:03 executing program 2:
r0 = socket(0x40000000002, 0x3, 0x2)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:03 executing program 5:

04:42:03 executing program 3:

04:42:03 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r2 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})

04:42:03 executing program 5:

04:42:03 executing program 3:

04:42:03 executing program 1:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)

04:42:03 executing program 2:
r0 = socket(0x40000000002, 0x3, 0x2)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:03 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r2 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})

04:42:03 executing program 5:

04:42:03 executing program 3:

04:42:03 executing program 0:
r0 = socket(0x40000000002, 0x0, 0x2)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x148, 0x4)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:03 executing program 1:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)

04:42:03 executing program 5:

04:42:03 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r2 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})

04:42:03 executing program 3:

04:42:03 executing program 2:
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000000)=0x6bc, 0x4)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:03 executing program 0:
r0 = socket(0x40000000002, 0x3, 0x0)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x148, 0x4)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:03 executing program 5:

04:42:03 executing program 3:
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4113, 0x1006}], 0x46, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/icmp6\x00')
preadv(r0, &(0x7f00000017c0), 0xf2, 0x0, 0x0)

04:42:03 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})

04:42:03 executing program 1:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)

04:42:03 executing program 2:
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000000)=0x6bc, 0x4)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:03 executing program 5:

04:42:03 executing program 1:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)

04:42:03 executing program 0:
r0 = socket(0x40000000002, 0x3, 0x0)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x148, 0x4)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:03 executing program 5:

04:42:03 executing program 1:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)

04:42:03 executing program 5:

04:42:03 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})

04:42:03 executing program 2:
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000000)=0x6bc, 0x4)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:03 executing program 3:

04:42:03 executing program 1:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)

04:42:03 executing program 0:
r0 = socket(0x40000000002, 0x3, 0x0)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x148, 0x4)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:03 executing program 5 (fault-call:3 fault-nth:0):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)

04:42:03 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})

04:42:03 executing program 2:
r0 = socket(0x0, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000)=0x6bc, 0x4)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:03 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, 0x0)

04:42:03 executing program 0:
r0 = socket(0x40000000002, 0x3, 0x2)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x148, 0x4)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:03 executing program 2:
r0 = socket(0x0, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000)=0x6bc, 0x4)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:04 executing program 3:
unshare(0x20000400)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$HIDIOCGFLAG(r1, 0x8004480e, &(0x7f0000000080))
r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = pidfd_open(r2, 0x0)
pidfd_send_signal(r3, 0x0, &(0x7f0000000000), 0x0)

04:42:04 executing program 1:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)

04:42:04 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, 0x0)

04:42:04 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)

04:42:04 executing program 2:
r0 = socket(0x0, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000)=0x6bc, 0x4)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)


[  *** ] A start job is running for dev-ttyS0.device (1min 7s / 1min 30s)
[   ***] A start job is running for dev-ttyS0.device (1min 7s / 1min 30s)
[    **] A start job is running for dev-ttyS0.device (1min 8s / 1min 30s)
[     *] A start job is running for dev-ttyS0.device (1min 8s / 1min 30s)
[    **] A start job is running for dev-ttyS0.device (1min 9s / 1min 30s)
[   ***] A start job is running for dev-ttyS0.device (1min 9s / 1min 30s)
[  *** ] A start job is running for dev-ttyS0.device (1min 10s / 1min 30s)
[ ***  ] A start job is running for dev-ttyS0.device (1min 10s / 1min 30s)
[***   ] A start job is running for dev-ttyS0.device (1min 11s / 1min 30s)
[**    ] A start job is running for dev-ttyS0.device (1min 11s / 1min 30s)
[*     ] A start job is running for dev-ttyS0.device (1min 12s / 1min 30s)
[**    ] A start job is running for dev-ttyS0.device (1min 12s / 1min 30s)
[***   ] A start job is running for dev-ttyS0.device (1min 13s / 1min 30s)[   81.056055][ T3485] FAULT_INJECTION: forcing a failure.
[   81.056055][ T3485] name fail_page_alloc, interval 1, probability 0, space 0, times 1
04:42:04 executing program 2:
r0 = socket(0x40000000002, 0x0, 0x2)
setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000)=0x6bc, 0x4)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)


[ ***  ] A start job is running for dev-ttyS0.device (1min 13s / 1min 30s)[   81.122437][ T3485] CPU: 1 PID: 3485 Comm: syz-executor.5 Not tainted 5.4.58-syzkaller-00202-g7fc27297c44d #0
[   81.132531][ T3485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   81.142573][ T3485] Call Trace:
[   81.145854][ T3485]  dump_stack+0x14a/0x1ce
[   81.151480][ T3485]  ? devkmsg_release+0x11c/0x11c
[   81.156418][ T3485]  ? show_regs_print_info+0x12/0x12
[   81.161613][ T3485]  ? avc_has_perm+0xd5/0x280
[   81.166198][ T3485]  ? avc_has_perm+0x176/0x280
[   81.170869][ T3485]  should_fail+0x6fb/0x860
[   81.175278][ T3485]  ? setup_fault_attr+0x3d0/0x3d0
[   81.180292][ T3485]  ? memset+0x1f/0x40
[   81.184268][ T3485]  __alloc_pages_nodemask+0x1ee/0x7c0
[   81.189632][ T3485]  ? gfp_pfmemalloc_allowed+0x130/0x130
[   81.195170][ T3485]  ? memset+0x1f/0x40
[   81.199160][ T3485]  ? unwind_next_frame+0x1c90/0x2330
[   81.204435][ T3485]  ? __rcu_read_lock+0x50/0x50
[   81.209189][ T3485]  skb_page_frag_refill+0xf9/0x370
[   81.214294][ T3485]  tun_build_skb+0x157/0xbe0
[   81.218868][ T3485]  ? unwind_get_return_address_ptr+0x130/0x130
[   81.225012][ T3485]  ? tun_get_user+0x34e0/0x34e0
[   81.231305][ T3485]  ? stack_trace_save+0x1f0/0x1f0
[   81.236319][ T3485]  ? __kernel_text_address+0x93/0x110
[   81.241661][ T3485]  ? unwind_get_return_address+0x48/0x90
[   81.247260][ T3485]  ? arch_stack_walk+0xd8/0x120
[   81.252075][ T3485]  tun_get_user+0x619/0x34e0
[   81.256648][ T3485]  ? kstrtouint_from_user+0x22d/0x2b0
[   81.261997][ T3485]  ? tun_do_read+0x1ed0/0x1ed0
[   81.266734][ T3485]  ? __kasan_slab_free+0x1f2/0x230
[   81.271817][ T3485]  ? __rcu_read_lock+0x50/0x50
[   81.276550][ T3485]  ? trace_event_raw_event_ext4_mballoc_alloc+0x28a/0xaa0
[   81.283625][ T3485]  ? entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   81.289662][ T3485]  ? __rcu_read_lock+0x50/0x50
[   81.294393][ T3485]  ? proc_fail_nth_write+0x18f/0x250
[   81.299646][ T3485]  ? proc_fail_nth_read+0x1d0/0x1d0
[   81.304811][ T3485]  tun_chr_write_iter+0x121/0x1a0
[   81.309811][ T3485]  __vfs_write+0x59d/0x720
[   81.314199][ T3485]  ? __kernel_write+0x340/0x340
[   81.319016][ T3485]  ? avc_policy_seqno+0x17/0x70
[   81.323877][ T3485]  ? security_file_permission+0x128/0x300
[   81.329579][ T3485]  vfs_write+0x217/0x4f0
[   81.333797][ T3485]  ksys_write+0x18c/0x2c0
[   81.338107][ T3485]  ? file_open_root+0x450/0x450
[   81.342928][ T3485]  ? __ia32_sys_read+0x80/0x80
[   81.347848][ T3485]  do_syscall_64+0xcb/0x150
[   81.352355][ T3485]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   81.358215][ T3485] RIP: 0033:0x4168c1
[   81.362078][ T3485] Code: 75 14 b8 01 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 c4 1b 00 00 c3 48 83 ec 08 e8 ca fc ff ff 48 89 04 24 b8 01 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 13 fd ff ff 48 89 d0 48 83 c4 08 48 3d 01
[   81.381651][ T3485] RSP: 002b:00007ff59fc59c60 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[   81.390118][ T3485] RAX: ffffffffffffffda RBX: 000000000118bf20 RCX: 00000000004168c1
[   81.398057][ T3485] RDX: 0000000000000036 RSI: 00000000200003c0 RDI: 00000000000000f0
[   81.408600][ T3485] RBP: 00007ff59fc59ca0 R08: 0000000000000000 R09: 0000000000000000
04:42:04 executing program 5 (fault-call:3 fault-nth:1):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)

04:42:04 executing program 2:
r0 = socket(0x40000000002, 0x0, 0x2)
setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000)=0x6bc, 0x4)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:04 executing program 3:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x5, &(0x7f0000000100)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0x7, 0x7, 0x9, 0x2, 0x9}, @exit, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x100, 0x0, [0x0, 0x0, 0xff], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r3 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
dup3(r3, r2, 0x0)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
dup(r4)
getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000000040), &(0x7f00000000c0)=0x30)

04:42:04 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, 0x0)

[   81.416539][ T3485] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000000
[   81.424491][ T3485] R13: 00007ffffb5071af R14: 00007ff59fc5a9c0 R15: 000000000118bf2c
[   81.470272][ T3531] FAULT_INJECTION: forcing a failure.
[   81.470272][ T3531] name failslab, interval 1, probability 0, space 0, times 1
[   81.491298][ T3531] CPU: 1 PID: 3531 Comm: syz-executor.5 Not tainted 5.4.58-syzkaller-00202-g7fc27297c44d #0
[   81.501373][ T3531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   81.511415][ T3531] Call Trace:
[   81.514701][ T3531]  dump_stack+0x14a/0x1ce
[   81.519024][ T3531]  ? devkmsg_release+0x11c/0x11c
[   81.523977][ T3531]  ? show_regs_print_info+0x12/0x12
[   81.529161][ T3531]  should_fail+0x6fb/0x860
[   81.533545][ T3531]  ? setup_fault_attr+0x3d0/0x3d0
[   81.538537][ T3531]  ? gfp_pfmemalloc_allowed+0x130/0x130
[   81.544048][ T3531]  ? build_skb+0x29/0x450
[   81.548342][ T3531]  should_failslab+0x5/0x20
[   81.552814][ T3531]  kmem_cache_alloc+0x36/0x260
[   81.557546][ T3531]  ? copy_page_from_iter+0x3f3/0x660
[   81.562802][ T3531]  build_skb+0x29/0x450
[   81.566924][ T3531]  tun_build_skb+0x47b/0xbe0
[   81.571480][ T3531]  ? tun_get_user+0x34e0/0x34e0
[   81.576322][ T3531]  ? stack_trace_save+0x1f0/0x1f0
[   81.576336][ T3531]  ? __kernel_text_address+0x93/0x110
[   81.586695][ T3531]  ? unwind_get_return_address+0x48/0x90
[   81.592312][ T3531]  ? arch_stack_walk+0xd8/0x120
[   81.597168][ T3531]  tun_get_user+0x619/0x34e0
[   81.601763][ T3531]  ? kstrtouint_from_user+0x22d/0x2b0
[   81.607115][ T3531]  ? tun_do_read+0x1ed0/0x1ed0

[   81.611860][ T3531]  ? __kasan_slab_free+0x1f2/0x230
[   81.617294][ T3531]  ? __rcu_read_lock+0x50/0x50
[   81.622045][ T3531]  ? trace_event_raw_event_ext4_mballoc_alloc+0x28a/0xaa0
[   81.629133][ T3531]  ? entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   81.635195][ T3531]  ? __rcu_read_lock+0x50/0x50
[  *[0;1[   81.639938][ T3531]  ? proc_fail_nth_write+0x18f/0x250
[   81.646580][ T3531]  ? proc_fail_nth_read+0x1d0/0x1d0
;31m*[   81.651756][ T3531]  tun_chr_write_iter+0x121/0x1a0
[   81.658159][ T3531]  __vfs_write+0x59d/0x720
[   81.662568][ T3531]  ? __kernel_write+0x340/0x340
* ] [   81.667408][ T3531]  ? avc_policy_seqno+0x17/0x70
[   81.672928][ T3531]  ? security_file_permission+0x128/0x300
[   81.678647][ T3531]  vfs_write+0x217/0x4f0
[   81.682903][ T3531]  ksys_write+0x18c/0x2c0
A start job is r[   81.687214][ T3531]  ? file_open_root+0x450/0x450
[   81.693422][ T3531]  ? __ia32_sys_read+0x80/0x80
[   81.698168][ T3531]  do_syscall_64+0xcb/0x150
[   81.702662][ T3531]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
unning for dev-t[   81.708530][ T3531] RIP: 0033:0x4168c1
[   81.715607][ T3531] Code: 75 14 b8 01 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 c4 1b 00 00 c3 48 83 ec 08 e8 ca fc ff ff 48 89 04 24 b8 01 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 13 fd ff ff 48 89 d0 48 83 c4 08 48 3d 01
tyS0.device (1mi[   81.735479][ T3531] RSP: 002b:00007ff59fc59c60 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[   81.745262][ T3531] RAX: ffffffffffffffda RBX: 000000000118bf20 RCX: 00000000004168c1
[   81.753212][ T3531] RDX: 0000000000000036 RSI: 00000000200003c0 RDI: 00000000000000f0
n 14s / 1min 30s[   81.761166][ T3531] RBP: 00007ff59fc59ca0 R08: 0000000000000000 R09: 0000000000000000
[   81.770499][ T3531] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000001
[   81.778449][ T3531] R13: 00007ffffb5071af R14: 00007ff59fc5a9c0 R15: 000000000118bf2c
04:42:04 executing program 0:
r0 = socket(0x40000000002, 0x3, 0x2)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x148, 0x4)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:04 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)

04:42:04 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x0, 0x1})

04:42:04 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x40000000ad}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f00000006c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, 0x0, 0x0)
write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x73, 0x0, {{0x20, 0x2}, 0x45a2}}, 0x18)
socket$inet_udplite(0x2, 0x2, 0x88)
mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '{!(^'}}, {@fowner_eq={'fowner'}}, {@appraise='appraise'}, {@appraise_type='appraise_type=imasig'}, {@smackfstransmute={'smackfstransmute', 0x3d, 'rootmode'}}, {@obj_role={'obj_role', 0x3d, '\xd4\f\xe9\xbd\x9b\xc9\x1d\xc3'}}, {@euid_gt={'euid>'}}]}})

04:42:04 executing program 2:
r0 = socket(0x40000000002, 0x0, 0x2)
setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000)=0x6bc, 0x4)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:04 executing program 5 (fault-call:3 fault-nth:2):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)

04:42:04 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x0, 0x1})

04:42:04 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)

04:42:04 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)

04:42:04 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x0, 0x1})

)[   81.918793][ T3553] FAULT_INJECTION: forcing a failure.
[   81.918793][ T3553] name failslab, interval 1, probability 0, space 0, times 0
[   81.931429][ T3553] CPU: 0 PID: 3553 Comm: syz-executor.5 Not tainted 5.4.58-syzkaller-00202-g7fc27297c44d #0
[   81.941477][ T3553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   81.951521][ T3553] Call Trace:
[   81.954804][ T3553]  dump_stack+0x14a/0x1ce
[   81.959128][ T3553]  ? devkmsg_release+0x11c/0x11c
[   81.964063][ T3553]  ? show_regs_print_info+0x12/0x12
04:42:04 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)

04:42:04 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8})

[   81.969253][ T3553]  ? fib_info_nh_uses_dev+0x1d0/0x1d0
[   81.974617][ T3553]  should_fail+0x6fb/0x860
[   81.979022][ T3553]  ? setup_fault_attr+0x3d0/0x3d0
[   81.984034][ T3553]  ? memset+0x1f/0x40
[   81.988015][ T3553]  ? unwind_next_frame+0x1c90/0x2330
[   81.993286][ T3553]  ? dst_alloc+0x137/0x4f0
[   81.997697][ T3553]  should_failslab+0x5/0x20
[   82.002189][ T3553]  kmem_cache_alloc+0x36/0x260
[   82.006944][ T3553]  dst_alloc+0x137/0x4f0
[   82.011164][ T3553]  ip_route_input_rcu+0x16c1/0x3540
[   82.016338][ T3553]  ? ip_route_input_noref+0x110/0x110
[   82.021680][ T3553]  ? ipt_do_table+0x189b/0x1b10
[   82.026499][ T3553]  ? inet_ehashfn+0x86/0x1f0
[   82.031059][ T3553]  ? __inet_lookup_established+0x720/0x770
[   82.036834][ T3553]  ip_route_input_noref+0xbd/0x110
[   82.041915][ T3553]  ? ip_mc_validate_source+0x350/0x350
[   82.047346][ T3553]  ? tcp_v4_early_demux+0x474/0x7c0
[   82.052515][ T3553]  ip_rcv_finish_core+0x1fe/0xee0
[   82.057508][ T3553]  ip_rcv+0x254/0x320
[   82.061462][ T3553]  ? ip_local_deliver_finish+0x210/0x210
[   82.067061][ T3553]  ? ip_rcv_core+0xa30/0xa30
[   82.071618][ T3553]  ? ip_local_deliver_finish+0x210/0x210
[   82.077218][ T3553]  __netif_receive_skb+0x20a/0x4f0
[   82.082296][ T3553]  ? build_skb+0x29/0x450
[   82.086592][ T3553]  ? nf_ingress+0x530/0x530
[   82.091062][ T3553]  ? skb_put+0x114/0x1e0
[   82.095295][ T3553]  ? ktime_get_with_offset+0x186/0x1c0
[   82.100726][ T3553]  netif_receive_skb_internal+0x1cc/0x220
[   82.106412][ T3553]  ? netif_receive_skb+0x2b0/0x2b0
[   82.111490][ T3553]  ? _local_bh_enable+0x30/0x30
[   82.116308][ T3553]  ? unwind_get_return_address+0x48/0x90
[   82.121920][ T3553]  ? arch_stack_walk+0xd8/0x120
[   82.126741][ T3553]  netif_receive_skb+0x14a/0x2b0
[   82.131659][ T3553]  tun_get_user+0x2926/0x34e0
[   82.136306][ T3553]  ? kstrtouint_from_user+0x22d/0x2b0
[   82.141675][ T3553]  ? tun_do_read+0x1ed0/0x1ed0
[   82.146415][ T3553]  ? __kasan_slab_free+0x1f2/0x230
[   82.151515][ T3553]  ? entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   82.157563][ T3553]  ? __rcu_read_lock+0x50/0x50
[   82.162313][ T3553]  ? proc_fail_nth_write+0x18f/0x250
[   82.167569][ T3553]  ? proc_fail_nth_read+0x1d0/0x1d0
[   82.172754][ T3553]  tun_chr_write_iter+0x121/0x1a0
[   82.177764][ T3553]  __vfs_write+0x59d/0x720
[   82.182162][ T3553]  ? __kernel_write+0x340/0x340
[   82.186996][ T3553]  ? avc_policy_seqno+0x17/0x70
[   82.191822][ T3553]  ? security_file_permission+0x128/0x300
[   82.197511][ T3553]  vfs_write+0x217/0x4f0
[   82.201726][ T3553]  ksys_write+0x18c/0x2c0
[   82.206027][ T3553]  ? file_open_root+0x450/0x450
[   82.210851][ T3553]  ? __ia32_sys_read+0x80/0x80
[   82.215584][ T3553]  do_syscall_64+0xcb/0x150
[   82.220073][ T3553]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   82.225948][ T3553] RIP: 0033:0x4168c1
[   82.229814][ T3553] Code: 75 14 b8 01 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 c4 1b 00 00 c3 48 83 ec 08 e8 ca fc ff ff 48 89 04 24 b8 01 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 13 fd ff ff 48 89 d0 48 83 c4 08 48 3d 01
[   82.249386][ T3553] RSP: 002b:00007ff59fc59c60 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[   82.257796][ T3553] RAX: ffffffffffffffda RBX: 000000000118bf20 RCX: 00000000004168c1
[   82.265740][ T3553] RDX: 0000000000000036 RSI: 00000000200003c0 RDI: 00000000000000f0
[   82.273683][ T3553] RBP: 00007ff59fc59ca0 R08: 0000000000000000 R09: 0000000000000000
[   82.281627][ T3553] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000002
[   82.289576][ T3553] R13: 00007ffffb5071af R14: 00007ff59fc5a9c0 R15: 000000000118bf2c
04:42:05 executing program 0:
r0 = socket(0x40000000002, 0x3, 0x2)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x148, 0x4)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:05 executing program 2:
r0 = socket(0x40000000002, 0x3, 0x0)
setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000)=0x6bc, 0x4)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:05 executing program 5 (fault-call:3 fault-nth:3):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)

04:42:05 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)

04:42:05 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8})

04:42:05 executing program 3:
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x217, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x6, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x0, 0x0, 0x10, {0x10, 0x0, "351f0529fdfe820e1f015c2c4667"}}, 0x0}, 0x0)

04:42:05 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)

04:42:05 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)

04:42:05 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8})

04:42:05 executing program 2:
r0 = socket(0x40000000002, 0x3, 0x0)
setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000)=0x6bc, 0x4)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:05 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0xe, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)

04:42:05 executing program 4 (fault-call:5 fault-nth:0):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})


[   ***] A start job is running for dev-ttyS0.device (1min 15s / 1min 30s)[   82.806569][ T3611] FAULT_INJECTION: forcing a failure.
[   82.806569][ T3611] name failslab, interval 1, probability 0, space 0, times 0
[   82.822317][ T3611] CPU: 1 PID: 3611 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00202-g7fc27297c44d #0
[   82.832395][ T3611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   82.842437][ T3611] Call Trace:
[   82.845700][ T3611]  dump_stack+0x14a/0x1ce
[   82.850001][ T3611]  ? devkmsg_release+0x11c/0x11c
[   82.854908][ T3611]  ? show_regs_print_info+0x12/0x12
[   82.860162][ T3611]  ? entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   82.866224][ T3611]  should_fail+0x6fb/0x860
[   82.870613][ T3611]  ? setup_fault_attr+0x3d0/0x3d0
[   82.875672][ T3611]  ? __down_read+0xf1/0x210
[   82.880182][ T3611]  ? stack_trace_save+0x1f0/0x1f0
[   82.885177][ T3611]  ? ion_buffer_alloc+0x141/0x630
[   82.890168][ T3611]  should_failslab+0x5/0x20
[   82.894662][ T3611]  kmem_cache_alloc_trace+0x39/0x280
[   82.899914][ T3611]  ? arch_stack_walk+0xd8/0x120
[   82.904754][ T3611]  ion_buffer_alloc+0x141/0x630
[   82.909613][ T3611]  ion_dmabuf_alloc+0xcb/0x230
[   82.914349][ T3611]  ? track_buffer_created+0x1c0/0x1c0
[   82.920475][ T3611]  ? check_stack_object+0x5a/0x90
[   82.925470][ T3611]  ion_ioctl+0x2e8/0x9c0
[   82.929684][ T3611]  ? get_pid_task+0x86/0x90
[   82.934157][ T3611]  ? proc_fail_nth_write+0x18f/0x250
[   82.939410][ T3611]  ? debug_shrink_set+0x1b0/0x1b0
[   82.944400][ T3611]  ? proc_fail_nth_read+0x1d0/0x1d0
[   82.949565][ T3611]  ? memset+0x1f/0x40
[   82.953517][ T3611]  ? fsnotify+0x13a0/0x1460
[   82.957998][ T3611]  ? debug_shrink_set+0x1b0/0x1b0
[   82.962990][ T3611]  do_vfs_ioctl+0x770/0x1750
[   82.967569][ T3611]  ? selinux_file_ioctl+0x73b/0x990
[   82.972740][ T3611]  ? ioctl_preallocate+0x250/0x250
[   82.977817][ T3611]  ? __fget+0x37c/0x3c0
[   82.981941][ T3611]  ? vfs_write+0x427/0x4f0
[   82.986326][ T3611]  ? fget_many+0x20/0x20
[   82.990533][ T3611]  ? ksys_write+0x25d/0x2c0
[   82.995018][ T3611]  ? file_open_root+0x450/0x450
[   82.997632][   T12] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   82.999841][ T3611]  ? security_file_ioctl+0xad/0xc0
[   82.999849][ T3611]  __x64_sys_ioctl+0xd4/0x110
[   82.999861][ T3611]  do_syscall_64+0xcb/0x150
[   83.021495][ T3611]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   83.027354][ T3611] RIP: 0033:0x45ce69
[   83.031215][ T3611] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[   83.050785][ T3611] RSP: 002b:00007ffab22d2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   83.059172][ T3611] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045ce69
[   83.067112][ T3611] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000006
[   83.075052][ T3611] RBP: 00007ffab22d2ca0 R08: 0000000000000000 R09: 0000000000000000
[   83.082991][ T3611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   83.090930][ T3611] R13: 00007ffef6f7796f R14: 00007ffab22d39c0 R15: 000000000118bf2c

[    **] A start job is running for dev-ttyS0.device (1min 15s / 1min 30s)[   83.357658][   T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   83.368549][   T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   83.378862][   T12] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[   83.391957][   T12] usb 4-1: New USB device found, idVendor=05ac, idProduct=0217, bcdDevice= 0.40
[   83.401255][   T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.410124][   T12] usb 4-1: config 0 descriptor??
04:42:06 executing program 0:
r0 = socket(0x40000000002, 0x3, 0x2)
sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x148, 0x4)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:06 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)

04:42:06 executing program 2:
r0 = socket(0x40000000002, 0x3, 0x0)
setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000)=0x6bc, 0x4)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:06 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x76, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)

04:42:06 executing program 4 (fault-call:5 fault-nth:1):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})

[   83.547948][ T3626] FAULT_INJECTION: forcing a failure.
[   83.547948][ T3626] name failslab, interval 1, probability 0, space 0, times 0
[   83.569626][ T3626] CPU: 1 PID: 3626 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00202-g7fc27297c44d #0
[   83.579715][ T3626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   83.579723][ T3626] Call Trace:
[   83.593043][ T3626]  dump_stack+0x14a/0x1ce
[   83.597376][ T3626]  ? devkmsg_release+0x11c/0x11c
[   83.602401][ T3626]  ? __kasan_kmalloc+0x189/0x1c0

[   83.607364][ T3626]  ? show_regs_print_info+0x12/0x12
[   83.612889][ T3626]  ? kmem_cache_alloc_trace+0xc3/0x280
[   83.618336][ T3626]  ? ion_buffer_alloc+0x141/0x630
[   83.623495][ T3626]  ? ion_dmabuf_alloc+0xcb/0x230
[   83.628416][ T3626]  ? do_vfs_ioctl+0x770/0x1750
[   83.633205][ T3626]  ? __x64_sys_ioctl+0xd4/0x110
[   83.638043][ T3626]  ? do_syscall_64+0xcb/0x150
[   83.642704][ T3626]  ? entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   83.648751][ T3626]  should_fail+0x6fb/0x860
[   83.653152][ T3626]  ? setup_fault_attr+0x3d0/0x3d0
[   83.658159][ T3626]  ? mutex_lock+0xa6/0x110
[   83.662562][ T3626]  ? mutex_trylock+0xb0/0xb0
[   83.667136][ T3626]  ? ion_system_heap_allocate+0x584/0xbf0
[   83.672862][ T3626]  should_failslab+0x5/0x20
[     *[[   83.677353][ T3626]  kmem_cache_alloc_trace+0x39/0x280
[   83.684005][ T3626]  ? ion_page_pool_alloc+0x2c1/0x490
0m] A start job [   83.689281][ T3626]  ion_system_heap_allocate+0x584/0xbf0
is running for d[   83.696204][ T3626]  ? ion_system_heap_destroy_pools+0x70/0x70
[   83.703554][ T3626]  ? kmem_cache_alloc_trace+0xc3/0x280
ev-ttyS0.device [   83.709006][ T3626]  ? arch_stack_walk+0xd8/0x120
[   83.715223][ T3626]  ion_buffer_alloc+0x20f/0x630
[   83.720062][ T3626]  ion_dmabuf_alloc+0xcb/0x230
(1min 16s / 1min[   83.724805][ T3626]  ? track_buffer_created+0x1c0/0x1c0
[   83.731634][ T3626]  ? check_stack_object+0x5a/0x90
[   83.736733][ T3626]  ion_ioctl+0x2e8/0x9c0
 30s)[   83.740957][ T3626]  ? get_pid_task+0x86/0x90
[   83.745858][ T3626]  ? proc_fail_nth_write+0x18f/0x250
[   83.751118][ T3626]  ? debug_shrink_set+0x1b0/0x1b0
[   83.756153][ T3626]  ? proc_fail_nth_read+0x1d0/0x1d0
[   83.761338][ T3626]  ? memset+0x1f/0x40
[   83.765290][ T3626]  ? fsnotify+0x13a0/0x1460
[   83.767588][   T12] usbhid 4-1:0.0: can't add hid device: -71
[   83.769768][ T3626]  ? debug_shrink_set+0x1b0/0x1b0
[   83.769776][ T3626]  do_vfs_ioctl+0x770/0x1750
[   83.769789][ T3626]  ? selinux_file_ioctl+0x73b/0x990
[   83.775730][   T12] usbhid: probe of 4-1:0.0 failed with error -71
[   83.780648][ T3626]  ? ioctl_preallocate+0x250/0x250
[   83.780657][ T3626]  ? __fget+0x37c/0x3c0
[   83.780663][ T3626]  ? vfs_write+0x427/0x4f0
[   83.780670][ T3626]  ? fget_many+0x20/0x20
[   83.780676][ T3626]  ? ksys_write+0x25d/0x2c0
[   83.780682][ T3626]  ? file_open_root+0x450/0x450
[   83.780695][ T3626]  ? security_file_ioctl+0xad/0xc0
[   83.795005][   T12] usb 4-1: USB disconnect, device number 2
[   83.796721][ T3626]  __x64_sys_ioctl+0xd4/0x110
[   83.796733][ T3626]  do_syscall_64+0xcb/0x150
[   83.843828][ T3626]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   83.849702][ T3626] RIP: 0033:0x45ce69
[   83.853563][ T3626] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[   83.873151][ T3626] RSP: 002b:00007ffab22d2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   83.881548][ T3626] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045ce69
[   83.889521][ T3626] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000006
[   83.897461][ T3626] RBP: 00007ffab22d2ca0 R08: 0000000000000000 R09: 0000000000000000
[   83.905419][ T3626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   83.913360][ T3626] R13: 00007ffef6f7796f R14: 00007ffab22d39c0 R15: 000000000118bf2c
[   84.257512][   T12] usb 4-1: new high-speed USB device number 3 using dummy_hcd

[    **] A start job is running for dev-ttyS0.device (1min 17s / 1min 30s)[   84.637549][   T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   84.648473][   T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   84.658208][   T12] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[   84.670999][   T12] usb 4-1: New USB device found, idVendor=05ac, idProduct=0217, bcdDevice= 0.40
[   84.680015][   T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.688589][   T12] usb 4-1: config 0 descriptor??

[   ***] A start job is running for dev-ttyS0.device (1min 17s / 1min 30s)[   85.168151][   T12] apple 0003:05AC:0217.0001: unknown main item tag 0x1
[   85.175036][   T12] apple 0003:05AC:0217.0001: unknown main item tag 0x0
[   85.183237][   T12] apple 0003:05AC:0217.0001: item fetching failed at offset 4/5
[   85.191562][   T12] apple 0003:05AC:0217.0001: parse failed
[   85.197285][   T12] apple: probe of 0003:05AC:0217.0001 failed with error -22

[  *** ] A start job is running for dev-ttyS0.device (1min 18s / 1min 30s)[   85.368621][   T70] usb 4-1: USB disconnect, device number 3

[ ***  ] A start job is running for dev-ttyS0.device (1min 18s / 1min 30s)[   86.137405][   T12] usb 4-1: new high-speed USB device number 4 using dummy_hcd

[***   ] A start job is running for dev-ttyS0.device (1min 19s / 1min 30s)[   86.497441][   T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   86.508345][   T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   86.518778][   T12] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[   86.531905][   T12] usb 4-1: New USB device found, idVendor=05ac, idProduct=0217, bcdDevice= 0.40
04:42:09 executing program 3:
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x217, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x6, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x0, 0x0, 0x10, {0x10, 0x0, "351f0529fdfe820e1f015c2c4667"}}, 0x0}, 0x0)

04:42:09 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)

04:42:09 executing program 2:
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000000)=0x6bc, 0x4)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:09 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0xfdef, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)

04:42:09 executing program 4 (fault-call:5 fault-nth:2):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})

04:42:09 executing program 0:
r0 = socket(0x40000000002, 0x3, 0x2)
sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x148, 0x4)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:09 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)

[   86.541460][   T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.550263][   T12] usb 4-1: config 0 descriptor??
[   86.594496][   T12] usb 4-1: can't set config #0, error -71
[   86.599811][ T3656] FAULT_INJECTION: forcing a failure.
[   86.599811][ T3656] name failslab, interval 1, probability 0, space 0, times 0
[   86.606992][   T12] usb 4-1: USB disconnect, device number 4
[   86.617687][ T3656] CPU: 1 PID: 3656 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00202-g7fc27297c44d #0
[   86.628695][ T3656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   86.638735][ T3656] Call Trace:
[   86.642021][ T3656]  dump_stack+0x14a/0x1ce
[   86.646351][ T3656]  ? devkmsg_release+0x11c/0x11c
[   86.651261][ T3656]  ? show_regs_print_info+0x12/0x12
[   86.656445][ T3656]  should_fail+0x6fb/0x860
[   86.660833][ T3656]  ? setup_fault_attr+0x3d0/0x3d0
[   86.665825][ T3656]  ? sg_alloc_table+0x108/0x630
[   86.670666][ T3656]  should_failslab+0x5/0x20
[   86.675140][ T3656]  __kmalloc+0x5f/0x2d0
[   86.679265][ T3656]  sg_alloc_table+0x108/0x630
[   86.683916][ T3656]  ion_system_heap_allocate+0x5ab/0xbf0
[   86.689431][ T3656]  ? ion_system_heap_destroy_pools+0x70/0x70
[   86.695380][ T3656]  ? kmem_cache_alloc_trace+0xc3/0x280
[   86.700807][ T3656]  ? arch_stack_walk+0xd8/0x120
[   86.705628][ T3656]  ion_buffer_alloc+0x20f/0x630
[   86.710451][ T3656]  ion_dmabuf_alloc+0xcb/0x230
[   86.715207][ T3656]  ? track_buffer_created+0x1c0/0x1c0
[   86.720575][ T3656]  ? check_stack_object+0x5a/0x90
[   86.725586][ T3656]  ion_ioctl+0x2e8/0x9c0
[   86.729799][ T3656]  ? get_pid_task+0x86/0x90
[   86.734272][ T3656]  ? proc_fail_nth_write+0x18f/0x250
[   86.739523][ T3656]  ? debug_shrink_set+0x1b0/0x1b0
[   86.744515][ T3656]  ? proc_fail_nth_read+0x1d0/0x1d0
[   86.749683][ T3656]  ? memset+0x1f/0x40
[   86.753650][ T3656]  ? fsnotify+0x13a0/0x1460
[   86.758123][ T3656]  ? debug_shrink_set+0x1b0/0x1b0
[   86.763118][ T3656]  do_vfs_ioctl+0x770/0x1750
[   86.767679][ T3656]  ? selinux_file_ioctl+0x73b/0x990
[   86.772852][ T3656]  ? ioctl_preallocate+0x250/0x250
[   86.777932][ T3656]  ? __fget+0x37c/0x3c0
[   86.782147][ T3656]  ? vfs_write+0x427/0x4f0
[   86.786632][ T3656]  ? fget_many+0x20/0x20
[   86.790843][ T3656]  ? ksys_write+0x25d/0x2c0
[   86.795329][ T3656]  ? file_open_root+0x450/0x450
[   86.800150][ T3656]  ? security_file_ioctl+0xad/0xc0
[   86.805230][ T3656]  __x64_sys_ioctl+0xd4/0x110
[   86.809903][ T3656]  do_syscall_64+0xcb/0x150
[   86.814465][ T3656]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   86.820675][ T3656] RIP: 0033:0x45ce69
[   86.824541][ T3656] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00
04:42:09 executing program 2:
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000000)=0x6bc, 0x4)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

[   86.844154][ T3656] RSP: 002b:00007ffab22d2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   86.852538][ T3656] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045ce69
[   86.860484][ T3656] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000006
[   86.868426][ T3656] RBP: 00007ffab22d2ca0 R08: 0000000000000000 R09: 0000000000000000
[   86.876367][ T3656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   86.884398][ T3656] R13: 00007ffef6f7796f R14: 00007ffab22d39c0 R15: 000000000118bf2c
04:42:09 executing program 2:
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000000)=0x6bc, 0x4)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:09 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)

04:42:09 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x200003f6, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)

04:42:09 executing program 2:
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000000)=0x6bc, 0x4)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)


[**    ] A start job is running for dev-ttyS0.device (1min 19s / 1min 30s)[   87.247279][   T12] usb 4-1: new high-speed USB device number 5 using dummy_hcd

[*     ] A start job is running for dev-ttyS0.device (1min 20s / 1min 30s)[   87.627361][   T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   87.638359][   T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   87.648181][   T12] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[   87.661012][   T12] usb 4-1: New USB device found, idVendor=05ac, idProduct=0217, bcdDevice= 0.40
[   87.670031][   T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.678564][   T12] usb 4-1: config 0 descriptor??

[**    ] A start job is running for dev-ttyS0.device (1min 20s / 1min 30s)[   88.027271][   T12] usbhid 4-1:0.0: can't add hid device: -71
[   88.033337][   T12] usbhid: probe of 4-1:0.0 failed with error -71
[   88.041821][   T12] usb 4-1: USB disconnect, device number 5

[***   ] A start job is running for dev-ttyS0.device (1min 21s / 1min 30s)[   88.497216][   T12] usb 4-1: new high-speed USB device number 6 using dummy_hcd

[ ***  ] A start job is running for dev-ttyS0.device (1min 21s / 1min 30s)[   88.857255][   T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   88.868148][   T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   88.878594][   T12] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[   88.891680][   T12] usb 4-1: New USB device found, idVendor=05ac, idProduct=0217, bcdDevice= 0.40
[   88.900953][   T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.909750][   T12] usb 4-1: config 0 descriptor??

[  *** ] A start job is running for dev-ttyS0.device (1min 22s / 1min 30s)[   89.387775][   T12] apple 0003:05AC:0217.0002: unknown main item tag 0x1
[   89.394722][   T12] apple 0003:05AC:0217.0002: unknown main item tag 0x0
[   89.402868][   T12] apple 0003:05AC:0217.0002: item fetching failed at offset 4/5
[   89.411340][   T12] apple 0003:05AC:0217.0002: parse failed
[   89.417842][   T12] apple: probe of 0003:05AC:0217.0002 failed with error -22
[   89.592776][   T12] usb 4-1: USB disconnect, device number 6
04:42:13 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0xfdef, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)

04:42:13 executing program 2:
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000000)=0x6bc, 0x4)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:13 executing program 4 (fault-call:5 fault-nth:3):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})

04:42:13 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)

04:42:13 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x7ffff000, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)

04:42:13 executing program 0:
r0 = socket(0x40000000002, 0x3, 0x2)
sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x148, 0x4)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:13 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)

04:42:13 executing program 2:
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000000)=0x6bc, 0x4)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:13 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0xfffffdef, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)

04:42:13 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)

04:42:13 executing program 3:
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6(0xa, 0x800, 0x7fff)
dup(r2)
ioctl$sock_ifreq(r2, 0x8932, &(0x7f0000000000)={'syzkaller0\x00', @ifru_addrs=@rc={0x1f, @fixed={[], 0x10}, 0x8d}})
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
dup(r4)
r5 = accept$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c)
r6 = socket(0x11, 0x800000003, 0x0)
bind(r6, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7, 0x1, 'mq\x00'}]}, 0x2c}}, 0x0)
ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000100)={@ipv4={[], [], @loopback}, @loopback, @ipv4={[], [], @rand_addr=0x64010101}, 0x0, 0x9, 0x0, 0x400, 0x0, 0x40000108, r7})


[   ***] A start job is running for dev-ttyS0.device (1min 22s / 1min 30s)[   90.139957][ T3700] FAULT_INJECTION: forcing a failure.
[   90.139957][ T3700] name failslab, interval 1, probability 0, space 0, times 0
[   90.160041][ T3700] CPU: 1 PID: 3700 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00202-g7fc27297c44d #0
[   90.170145][ T3700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   90.180187][ T3700] Call Trace:
[   90.183471][ T3700]  dump_stack+0x14a/0x1ce
[   90.187795][ T3700]  ? devkmsg_release+0x11c/0x11c
[   90.192839][ T3700]  ? show_regs_print_info+0x12/0x12
[   90.198025][ T3700]  ? memset+0x1f/0x40
[   90.202012][ T3700]  ? sg_alloc_table+0x313/0x630
[   90.206853][ T3700]  ? sg_next+0x8b/0xa0
[   90.210926][ T3700]  should_fail+0x6fb/0x860
[   90.215332][ T3700]  ? setup_fault_attr+0x3d0/0x3d0
[   90.220350][ T3700]  ? __up_read+0x6f/0x1b0
[   90.224672][ T3700]  ? _raw_spin_lock+0xa1/0x170
[   90.229944][ T3700]  ? kzalloc+0x1b/0x30
[   90.234005][ T3700]  should_failslab+0x5/0x20
[   90.238504][ T3700]  __kmalloc+0x5f/0x2d0
[   90.242649][ T3700]  kzalloc+0x1b/0x30
[   90.246536][ T3700]  dma_buf_export+0x166/0x7b0
[   90.251206][ T3700]  ion_dmabuf_alloc+0x199/0x230
[   90.256049][ T3700]  ? track_buffer_created+0x1c0/0x1c0
[   90.261415][ T3700]  ? check_stack_object+0x5a/0x90
[   90.266431][ T3700]  ion_ioctl+0x2e8/0x9c0
[   90.271621][ T3700]  ? get_pid_task+0x86/0x90
[   90.276115][ T3700]  ? proc_fail_nth_write+0x18f/0x250
[   90.281390][ T3700]  ? debug_shrink_set+0x1b0/0x1b0
[   90.286417][ T3700]  ? proc_fail_nth_read+0x1d0/0x1d0
[   90.291607][ T3700]  ? memset+0x1f/0x40
[   90.295610][ T3700]  ? fsnotify+0x13a0/0x1460
[   90.295623][ T3700]  ? debug_shrink_set+0x1b0/0x1b0
[   90.305103][ T3700]  do_vfs_ioctl+0x770/0x1750
[   90.309710][ T3700]  ? selinux_file_ioctl+0x73b/0x990
[   90.314891][ T3700]  ? ioctl_preallocate+0x250/0x250
[   90.320007][ T3700]  ? __fget+0x37c/0x3c0
[   90.324269][ T3700]  ? vfs_write+0x427/0x4f0
[   90.328671][ T3700]  ? fget_many+0x20/0x20
[   90.332897][ T3700]  ? ksys_write+0x25d/0x2c0
[   90.337484][ T3700]  ? file_open_root+0x450/0x450
[   90.342348][ T3700]  ? security_file_ioctl+0xad/0xc0
[   90.347446][ T3700]  __x64_sys_ioctl+0xd4/0x110
[   90.352112][ T3700]  do_syscall_64+0xcb/0x150
[   90.356707][ T3700]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   90.362584][ T3700] RIP: 0033:0x45ce69
[   90.366464][ T3700] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00
04:42:13 executing program 2:
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0xd, 0x0, 0x0)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:13 executing program 2:
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0xd, 0x0, 0x0)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:13 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0xfffffffffffffdef, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)

[   90.386798][ T3700] RSP: 002b:00007ffab22d2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   90.395196][ T3700] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045ce69
[   90.403155][ T3700] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000006
[   90.412588][ T3700] RBP: 00007ffab22d2ca0 R08: 0000000000000000 R09: 0000000000000000
[   90.420610][ T3700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003

[    [   90.428567][ T3700] R13: 00007ffef6f7796f R14: 00007ffab22d39c0 R15: 000000000118bf2c
04:42:13 executing program 4 (fault-call:5 fault-nth:4):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})

04:42:13 executing program 2:
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0xd, 0x0, 0x0)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:13 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @random="e791991805c4", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)

**] A start job is running for dev-ttyS0.device (1min 23s / 1min 30s)[   90.469944][ T3736] FAULT_INJECTION: forcing a failure.
[   90.469944][ T3736] name failslab, interval 1, probability 0, space 0, times 0
[   90.489041][ T3736] CPU: 0 PID: 3736 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00202-g7fc27297c44d #0
[   90.499113][ T3736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   90.509157][ T3736] Call Trace:
[   90.512434][ T3736]  dump_stack+0x14a/0x1ce
[   90.516734][ T3736]  ? devkmsg_release+0x11c/0x11c
[   90.521641][ T3736]  ? show_regs_print_info+0x12/0x12
[   90.526933][ T3736]  should_fail+0x6fb/0x860
[   90.531326][ T3736]  ? setup_fault_attr+0x3d0/0x3d0
[   90.536320][ T3736]  ? new_inode_pseudo+0x131/0x240
[   90.541312][ T3736]  should_failslab+0x5/0x20
[   90.545785][ T3736]  kmem_cache_alloc+0x36/0x260
[   90.550517][ T3736]  new_inode_pseudo+0x131/0x240
[   90.555335][ T3736]  alloc_anon_inode+0x1a/0x2e0
[   90.560122][ T3736]  dma_buf_export+0x433/0x7b0
[   90.564767][ T3736]  ion_dmabuf_alloc+0x199/0x230
[   90.569585][ T3736]  ? track_buffer_created+0x1c0/0x1c0
[   90.574985][ T3736]  ? check_stack_object+0x5a/0x90
[   90.579977][ T3736]  ion_ioctl+0x2e8/0x9c0
[   90.584193][ T3736]  ? get_pid_task+0x86/0x90
[   90.588671][ T3736]  ? proc_fail_nth_write+0x18f/0x250
[   90.593934][ T3736]  ? debug_shrink_set+0x1b0/0x1b0
[   90.598926][ T3736]  ? proc_fail_nth_read+0x1d0/0x1d0
[   90.604092][ T3736]  ? memset+0x1f/0x40
[   90.608041][ T3736]  ? fsnotify+0x13a0/0x1460
[   90.612519][ T3736]  ? debug_shrink_set+0x1b0/0x1b0
[   90.617515][ T3736]  do_vfs_ioctl+0x770/0x1750
[   90.622074][ T3736]  ? selinux_file_ioctl+0x73b/0x990
[   90.627382][ T3736]  ? ioctl_preallocate+0x250/0x250
[   90.632463][ T3736]  ? __fget+0x37c/0x3c0
[   90.636588][ T3736]  ? vfs_write+0x427/0x4f0
[   90.640972][ T3736]  ? fget_many+0x20/0x20
[   90.645184][ T3736]  ? ksys_write+0x25d/0x2c0
[   90.649689][ T3736]  ? file_open_root+0x450/0x450
[   90.654537][ T3736]  ? security_file_ioctl+0xad/0xc0
[   90.659622][ T3736]  __x64_sys_ioctl+0xd4/0x110
[   90.664269][ T3736]  do_syscall_64+0xcb/0x150
[   90.668744][ T3736]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   90.674605][ T3736] RIP: 0033:0x45ce69
[   90.678468][ T3736] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[   90.698063][ T3736] RSP: 002b:00007ffab22d2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   90.706475][ T3736] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045ce69
[   90.714420][ T3736] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000006
[   90.722371][ T3736] RBP: 00007ffab22d2ca0 R08: 0000000000000000 R09: 0000000000000000
[   90.730312][ T3736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[   90.738258][ T3736] R13: 00007ffef6f7796f R14: 00007ffab22d39c0 R15: 000000000118bf2c
04:42:13 executing program 0:
r0 = socket(0x40000000002, 0x3, 0x2)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x148, 0x4)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:13 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)

04:42:13 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @random="e791991807c4", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)

04:42:13 executing program 2:
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000), 0x4)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:13 executing program 4 (fault-call:5 fault-nth:5):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})

04:42:13 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
r4 = dup(r3)
ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000040)=0x800)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet6(0xa, 0x800000000000002, 0x0)
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f0000000000)=0xec9)
write$binfmt_elf32(r4, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x0, 0x1, 0x7f, 0x8, 0x2, 0x6, 0x5, 0x199, 0x38, 0x163, 0x800, 0x800, 0x20, 0x1, 0x1, 0x800, 0x3}, [{0x70000000, 0xffff, 0x0, 0x4b, 0x9, 0x6, 0x2f}, {0x1, 0x80000001, 0x7fffffff, 0x401, 0xffff, 0x8, 0x9, 0x8}], "779bfa635cbf59fd8e369a9ce036047f909aa2186104f889ebe61e3ef383e379ffd1475b279b2dd408e17015511e0243bf788e78d832ccfa0aafb6ac0544efec76036411872cf1dff835240464cdaaba8454ca1c3016ffa2e645fd4bf8e949c8b22c3d7e88e8b8b3c6b8b2b9d29fa450c29b7dfb040a86c108482d85078eabcce595f92ea639442c4308fb6d4c8c3f1c073e9fed3f7907f1228a", [[], [], [], [], [], [], [], [], [], []]}, 0xb12)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
pwritev2(r7, &(0x7f0000000100)=[{&(0x7f0000001440)="203f5f8a9d581546337ccc0192706f9c36b560f66fa7055a750f891375bd6fc6de6baa9f3df25c56101aabff51cf3b0d61c877faf2dc27f87aa718fead09df7ca9a4b3e921efb19af8617cf58aea4b11673e3926d733a1dda64ffa5f2bd3f8890676a62a25df1bf64739f8afb1e247a12fd0c83d4fe15754bb471209b9f8ea6de15144338032e1f8f681c08700eb1288bf4930149e5ef4fb3c854369c80a8a1f16844e21c76add945907bd37fde8eb7a0cc85a51ee5f1c9c7ecae7ed33c1eb52d9025375f58323bbd92a1f6acf5f65ea67a85197b2bd2207e30bfc3d988a3cd1cea1164d95f8e05e18a66ef8009ef33e0dc3106a1f7011358bed076f7e45a6ae70f240c52cfcb07eeda77193920f44babdbbd44f3e67a815399d74b82b4eb3e1d861bc980cb0725586a358211b52559695ac026b61a11f799a86832cb96974a070ab9e827c592cf8aeb51923b99011886f82a39bf71bd087ba14e211dca408f47df6aa5546d50c43651fe39270182f6b4c99c27ec43c433d0caa0dc40771a6f63b996ba3afb17beb856afcd31a2f4f5b07a8713e558624d163c3a3ac468ccdb03f850ada5096bdaa7454124eb134ffd3eed84eba903f0ba37ac199a40c399658685504e455cd5f555c5eaa43c186fd7d6befb0eb94c6242fc8fbedf510ed4127a9f067b0055bcb49fcf546a41ed35d80a621fc6f59f2d2d3728823e948eb243069960973aa9cc5eff98a178e4b333df9c35ec0181961d1eee42e9b0bdeaa1606df3cb2c48414810a1580e6971013dfafecccd0b33bb589b38596ee036961cf066202f949e40d57efab80766c301fa641df2af700830920f497d6cc2975472932c7ce0c40f30c620403871574824b413eaadded1afc4b308252ef33594fdfde0ed7f739ff7121935358b8aa5f94437f07beb3945e7fd7aaf5939e69a9ddf9abf900bb92922d06201d32e0b92d97919d35ef79abe20ef17364fa6fb33e21a9bd054a9403749aab3652dd72704b8754dac629319353c5ac211a9d6f68633bacf3dfcfb023311d76be1ab18982ede123750171d905060efa5708cf3f5e0fafa8f37405f543c3da37872bdb30bf20d1336630f8c3e8f8d3c73843bae0774a4f368617fc17d4b59c3d1daa1903996a6b43957daf31d36582a61c651512bd7f214ce4ad51021966ab1c13a25af38feea25d9fddc9726c18baf643e2dcb2f0f5b1d7cd163320f023fc34880d9c086a5e39ba02e6ee9b1e4aa79c229ca1783f41c3352d199f6676f9ca6fa0b625ab114eaba47674bbd9629aa0909a2ddadce463c909e4efb25c3510b7acd058abacc1223aef811a7ba35689aefe8ddb3115f195d29f861a2b9acef1b71a34d984dd01235651140a9e0c13c8b0dde942fdea3777bd2d4a166094d442044198a784994283938b07fa8840ee78b7414721de5435c979aed4b5867bb3559dcca4cb5ce18d0f43ae7ce14c53afd303e5db01ec74d4cc5a688ccf86fca73dc5321c95a2652339d04db4f106ad02697bc06ce5a506f9aa57ac6b3e6e17e1d9c04def185a5bb6dc537fcd8bce4d7272597ef0862a7edcd8dac68e0873d2e617b47fe53d6df3403b28eed09175f3390985cd226c3c371348084fc0e223a060a25f28a6371c880f5054a2e519e57019b2ae5323254d13ae7bb07baad876b42346a7f87f45ae514815826f4ac41aaa5cb91ad7a1672f78d6376a632149e988e34a9510029063478974e114de31f818b4cb3ce89d87c8b83750033560eb02d80c84e9433141fba74acbbb3c3508c9f4f3541aae372b45ee43207c3e8407b61ad31b7fd85f7a029782cd5b17e3c32e315ec14710319f3a1020afb801b4c67650c74a7f3a38b8735cc05b20352eb50019506de9e64dba040bc85fe6c42c83a22adf20e03adb1e6f28f3dacdcdaddc17731df0d31856be58b86b658446f3d28011114daae0aacbb6e99ead0c40f786cc5bcab9deedc3a01de53e9072af06cca94aa9d546a2773b70d5a27e8c9ecc6f13f705e2487c8dbb49d907319c394f361cfed7c5cec2f67d19dd0251d85058734be3cdde3cebdb5cf89f47faed50867ee40acd59eda3e53d6f99d60ff16c4a0fe407d28be6b8aca308a3884caa0e2d7e976f127e3add9fc232d906e3f579a91bc56472ac1483710c1ee00b13d5a02ce765ff05aa00ea07e3d707107e0ffe5900aa0ca381190cb4908ff32c556de1320f5dfc2216dc7be9b57d3b337600cd0c53d389187828697c36a3abd47d896a4c8e4ad45c55af818ed254478e5cebedbfb4c490a39762275cb973a5f16d89a2823458cbc9babd77e3b2a0e5c8af140128402630e5153385e297408bb6f915990f7e8374998febfb826505411f0fdd26a10d7aabb42496b3881d42697ffa2bf8dc3b86f5d0c6303794e81700b55ab069c51e848e713044be4920fbf6b6dc176759cb4631fa825e2228485039da70e9bde2fb711e135326100f217483e2df5eb24e6daf45aa32b48defc82b18f3ddef8f2812efb121c0d25e02edd6e154b75e9f5220cfe9ab1aa594c91f5e66f68e821f644791c2b82082a152365bae3e7ae2304743888e5739921c9d17d819670e694c132b2811c85ffe7902b16db48c37ab60b90e2bdf0e02bb59ab78deed7790babe7315833d287704e6add3c098670a9b70f575ce97ac226fc1a25e50f5724c856c65b165b68d10cbee161ec2c09581b1c8c89e90ee7b654f6b3d55f400e6d62f444f0f97d4e1837639b58770cea105d409aa433759cc945f71d1f74535444dc7d9d4f4aea4e5a3de86f6eca083663aa0a33c463096db1b11ee8a000a9aa3c21d0eee252710ead96f21c3462e8fc94d1fef8a8b461bf35af59e4b80f717016e7d2b216264b528f2ae414839a233498f173fc64511c677f083c8dc1ccad8322d07b6139d039cc7e80581f0c1bfa560e3de099e49515f1ba5c367dec2d031bd30e72c3f2c4b5b193df13fbfa6bb6066111c97cbab9a3a90023c9e3c358b749781b1547c7f739d8c23852d66c958e9004c30e6a6d91489e829620cca84dbd0167609f471a0827219c62f245232517d4be02eb77cc3ae88cc6a8bb4a3935af637964ebd1c9b28a966a3cecca2e100c97e70417bd299e4f4299005050b0acefe2a8df393be6ed3dbf02ebcbb2a459d36a3cdef4a0d2cc0775fa21bc23997d269327a3cc9e4627715ac0ea0f385ca8bc094b95b2c8c7199c0a0d6d4f286c8884d9ea773c0fc0537fa40890e7ebc8de976112d665966a857357c592a43296039588dfaf9dc5d4bd382f7bbafcde9d81280b54994618259cefe1e250b2eca40fb9a154aa1c1050f6765b242b5d3895345b2101ce2369aef72f58ececae008ebbfae3d55a145a9ba5cbcfb63613f8b1216df2bf52104754b681fb731b74f4dc52f4f77836b952d389bcca96acbb4422533194bf9a75138f92fd9ababe2cd3c2a4bb98bb52c41e2a4d576e8cbe48e661148e72ee2f708cc477a37ab22fd794580ce7759382eb49155d70d6b2d77b2d9cca23609c5fde8088c0680fe60f05f197b3b0f83283a55fb73e34e882a9132e1fc5768eae34304677550f27bfc7ade497acb7297c4fdaa3c24467b4317108a79f796295272b01e03345e038f9ffbe07601c32ec3d8073b4e154d3dd85be02030cae3a0922e9e35238ee2af9e09aa39cdf473b643d2588286a96ab9d78e46ce74f8cfc4e735392b4c4b2b5bc0a8e10153806a47218e470498ffa59ae73c0f131aaa1e083e5594688abb81d4ac7e2b3d5c56ea480d33ac34a178e83007bdb3a7110c6a9032568d09de7f98b7726dd1a9761357f0493225e77e835549179deaa274f78ab1cba84cf7ec7dde6679256920c3f285df68df37738740e5075a314f64439e69cfc48a1fd58da5debf37ce394137b49db9ad13ba6e898bfe1f462d8442916bf886f0b2e0b718a9fcafb814df34c63bf38efe38a15fa0901eb79649c81cbf4a434ae2d840d04421196f0b481c1c9448f5c1b645066f8dd70f4e324b5a2525133867fcb32314680f8dace0f41e19b80333161bcef782979aa48ebe3ffc300459b407709fffe5f4206a0b90ac80cd96fc456e6b5bf5353084466be5ce269d8f3df67c7488e8aeacef3422f3117f39745402ac033732f2b35e3e798f5b4c15156ed79f92a1952e8e7077075512eb7de80ca680dad317921945e44afa27405bfdbbc6680d2b69c0d6f078e317e17ef38d33a6c8076deef6b24939dac9da65f432dad2b1d58ae3acbef05f9c3911809c2973ede153301f4d0d2972882a02827c676acde9b25464f268b864aacb28fbc06cdd25843c1cf4c25bee20e47b9ca245450e222171f5416da61ac8cada93c30e9c8ec29d82118dd1261b2f859d83fbf5e8377eff86b42e0efb93570dae23aa73a16023bc9037081e884b5d15d67126ff160f6b1df95ed35ff7e88c1f8b381e46aad0cb4ccc6e4a3b0a3a9bae23a036fac42d2698e11c79f9698f87d50ae0ae9d9f536cba557cc436c4fa2c0d7dd432af0458f495daa16c5580960ddc823995190988241a72eb241bd8f92a4e959ce05f76b7d18db514ff64dd45a1a4f3db2994db6803e7f6543001bf7c8b602027f5989dac3ce41e9bd579b1331de559f518c14a1d22dfe582be8525a720665aecb892a894041f38e039fecca5e0e4f5fcacf990be5a171cd83be276be017b47b6cb6fb8f78ef02d8814e13f3a54990ae4bd6637cbee8b00a969c8ae8b2222fc29f707ac065e8627a2e61a7704db6653d7c532aa85f12b124123b799fab39d3b33653cde9ae7136e70ee21c884fb1529b5a6ed3a099e6a569abe73f016a022695455de90ed1aae240c3e8e5d24aaa7f740bccb43baeedcdde78b06d079deba216406d4b0d7ba686d78902c4551a60d019ceeebb3386e0f64d12404ef2425cc1c7f6a9972be9094ba71d1183b4205bafb1669775cbb263ce9ab4930e823b086731a79b8d2d2e47870de03dcf1f39e7e729f606aeca0583f1c508e89d7efadad41a50a2e2f21bdb5817ab04df59cae7579456aa09e4f14def350735343b1f0da0c3657a9b556276843859812d3eea1195dc5a959a25ec0955e1b7ec72a78151e746fd8ef40097dc415e45628b90d285b337dc6207a99e8b2b647eff443e98d0568d5542c9c776ea38076348b70fea57ec637f4d219031e233062324a0fe96976b2ccfbecfb5d2a10609808648eb8e17ab62c62f26c528a9cc0b1dd64aa8ca9472af236a402c1b975910bf6879a28868cddccd8a734d3934b9f76971977a3677d7e289b04fa1e55676d37301cec7c44b0043ac514693e0a5c0204addc53d7f1285a31112ea48254075963a5b3c070f9bb6621b7180c3e8c39f43415c7d71e001c53a54f65c2e03532e188a50f1fe5cc30e7d6be13b7543c2fa1a596884720eb44125aa5e0586fddcaf2f3b45098e456e3b636ca3212b83e1dbd7386578e5e4ec140535d4705df43de31349430fb485e6e138c31220c63e96246d4697bcfd9748247ec0f6fb57eb92092f045bc9924ce820215cfe4ebf78f8b7cbb59aa49717aec3491a6acc9a8f44cac454472846482735a6f3233b7eae82bb9c960b6f0b0dadda3ae330ef8cbd9b23ea6cc556986f2fd1fef24e02af3edccb6b4c390814dc6c2c04208b7411ce602bb8e975f9d73b990332415d60e9988ac022baa20328d9fad045a18560184ec2f6941930a00fd7ee86817fc54e8925e32eee56a752c9e2a1a1f6cf667f0c7a7fab285615b197d2b02b84190029d30f09a04058d943344b1e8af517031d147e9f6a072bed2cb4d", 0x1000}, {&(0x7f0000000080)="7bd1019c7eacc6763c249d74496bc9fe2fef9d04f730affcc050784b2cddc061a0bd4ae75e1e5f2ebfbd6c20a8f59f131dbb6044c9196adcf6225f187e4fedc8b28daebec95dac700544896d8afedbb859bf843b125fd21014cd2c", 0x5b}], 0x2, 0xfb8, 0xfffffe00, 0xa)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x458, 0x0, 0x138, 0xa0, 0x2f8, 0xa0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'caif0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@dccp={{0x30, 'dccp\x00'}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8)

04:42:13 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100))
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)

04:42:13 executing program 2:
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000), 0x4)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:13 executing program 0:
r0 = socket(0x40000000002, 0x3, 0x2)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x148, 0x4)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:13 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x500, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)

04:42:13 executing program 0:
r0 = socket(0x40000000002, 0x3, 0x2)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x148, 0x4)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)


[     *] A start job is running for dev-ttyS0.device (1min 23s / 1min 30s)[   90.951437][ T3757] FAULT_INJECTION: forcing a failure.
[   90.951437][ T3757] name failslab, interval 1, probability 0, space 0, times 0
04:42:13 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x8)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, 0x0)
ioctl$FIOCLEX(r0, 0x5451)
ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000180)=""/82)
preadv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1, 0xd990, 0x0)
sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00')
syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x2f80000, 0x0)
preadv(r1, &(0x7f00000017c0), 0x1a1, 0x0, 0x0)

[   90.992249][ T3757] CPU: 1 PID: 3757 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00202-g7fc27297c44d #0
[   91.002337][ T3757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   91.012480][ T3757] Call Trace:
[   91.015768][ T3757]  dump_stack+0x14a/0x1ce
[   91.020092][ T3757]  ? devkmsg_release+0x11c/0x11c
[   91.025026][ T3757]  ? show_regs_print_info+0x12/0x12
[   91.030207][ T3757]  should_fail+0x6fb/0x860
[   91.034704][ T3757]  ? setup_fault_attr+0x3d0/0x3d0
[   91.039702][ T3757]  ? security_inode_alloc+0x32/0x1f0
[   91.044972][ T3757]  should_failslab+0x5/0x20
[   91.049461][ T3757]  kmem_cache_alloc+0x36/0x260
[   91.054196][ T3757]  ? from_kuid_munged+0x3b0/0x3b0
[   91.059207][ T3757]  security_inode_alloc+0x32/0x1f0
[   91.064288][ T3757]  inode_init_always+0x37c/0x800
[   91.069195][ T3757]  new_inode_pseudo+0x7b/0x240
[   91.073929][ T3757]  alloc_anon_inode+0x1a/0x2e0
[   91.078667][ T3757]  dma_buf_export+0x433/0x7b0
[   91.083316][ T3757]  ion_dmabuf_alloc+0x199/0x230
[   91.088136][ T3757]  ? track_buffer_created+0x1c0/0x1c0
[   91.093477][ T3757]  ? check_stack_object+0x5a/0x90
[   91.098472][ T3757]  ion_ioctl+0x2e8/0x9c0
[   91.102685][ T3757]  ? get_pid_task+0x86/0x90
[   91.107160][ T3757]  ? proc_fail_nth_write+0x18f/0x250
[   91.112429][ T3757]  ? debug_shrink_set+0x1b0/0x1b0
[   91.117529][ T3757]  ? proc_fail_nth_read+0x1d0/0x1d0
[   91.122802][ T3757]  ? memset+0x1f/0x40
[   91.126768][ T3757]  ? fsnotify+0x13a0/0x1460
[   91.131250][ T3757]  ? debug_shrink_set+0x1b0/0x1b0
[   91.136263][ T3757]  do_vfs_ioctl+0x770/0x1750
[   91.140828][ T3757]  ? selinux_file_ioctl+0x73b/0x990
[   91.145997][ T3757]  ? ioctl_preallocate+0x250/0x250
[   91.151081][ T3757]  ? __fget+0x37c/0x3c0
[   91.155208][ T3757]  ? vfs_write+0x427/0x4f0
[   91.159607][ T3757]  ? fget_many+0x20/0x20
[   91.163925][ T3757]  ? ksys_write+0x25d/0x2c0
[   91.168411][ T3757]  ? file_open_root+0x450/0x450
[   91.173256][ T3757]  ? security_file_ioctl+0xad/0xc0
[   91.178341][ T3757]  __x64_sys_ioctl+0xd4/0x110
[   91.182995][ T3757]  do_syscall_64+0xcb/0x150
[   91.187475][ T3757]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   91.193451][ T3757] RIP: 0033:0x45ce69
[   91.197319][ T3757] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[   91.216894][ T3757] RSP: 002b:00007ffab22d2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   91.225290][ T3757] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045ce69
[   91.233234][ T3757] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000006
04:42:14 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100))
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)

04:42:14 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x802, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)

04:42:14 executing program 2:
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000), 0x4)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:14 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100))
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)

[   91.241177][ T3757] RBP: 00007ffab22d2ca0 R08: 0000000000000000 R09: 0000000000000000
[   91.249120][ T3757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[   91.257063][ T3757] R13: 00007ffef6f7796f R14: 00007ffab22d39c0 R15: 000000000118bf2c
04:42:14 executing program 4 (fault-call:5 fault-nth:6):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})

04:42:14 executing program 0:
r0 = socket(0x40000000002, 0x3, 0x2)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, &(0x7f0000000040)=0x148, 0x4)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:14 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)

04:42:14 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x803, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)

04:42:14 executing program 2:
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000)=0x6bc, 0x4)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)


[    **] A start job is running for dev-ttyS0.device (1min 24s / 1min 30[   91.331357][ T3791] FAULT_INJECTION: forcing a failure.
[   91.331357][ T3791] name failslab, interval 1, probability 0, space 0, times 0
s)[   91.354917][ T3791] CPU: 1 PID: 3791 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00202-g7fc27297c44d #0
[   91.364985][ T3791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   91.375377][ T3791] Call Trace:
[   91.378665][ T3791]  dump_stack+0x14a/0x1ce
[   91.382987][ T3791]  ? devkmsg_release+0x11c/0x11c
[   91.387918][ T3791]  ? do_syscall_64+0xcb/0x150
[   91.392589][ T3791]  ? show_regs_print_info+0x12/0x12
[   91.397776][ T3791]  should_fail+0x6fb/0x860
[   91.402178][ T3791]  ? setup_fault_attr+0x3d0/0x3d0
[   91.407179][ T3791]  ? __d_alloc+0x2a/0x6b0
[   91.411552][ T3791]  should_failslab+0x5/0x20
[   91.416029][ T3791]  kmem_cache_alloc+0x36/0x260
[   91.420913][ T3791]  __d_alloc+0x2a/0x6b0
[   91.425055][ T3791]  d_alloc_pseudo+0x19/0x70
[   91.429526][ T3791]  alloc_file_pseudo+0x15b/0x340
[   91.434434][ T3791]  ? alloc_empty_file_noaccount+0x70/0x70
[   91.440126][ T3791]  ? alloc_anon_inode+0x213/0x2e0
[   91.445128][ T3791]  ? memcpy+0x38/0x50
[   91.449089][ T3791]  ? alloc_anon_inode+0x213/0x2e0
[   91.454106][ T3791]  dma_buf_export+0x4e0/0x7b0
[   91.458756][ T3791]  ion_dmabuf_alloc+0x199/0x230
[   91.463577][ T3791]  ? track_buffer_created+0x1c0/0x1c0
[   91.468920][ T3791]  ? check_stack_object+0x5a/0x90
[   91.473912][ T3791]  ion_ioctl+0x2e8/0x9c0
[   91.478129][ T3791]  ? get_pid_task+0x86/0x90
[   91.482608][ T3791]  ? proc_fail_nth_write+0x18f/0x250
[   91.487864][ T3791]  ? debug_shrink_set+0x1b0/0x1b0
[   91.492859][ T3791]  ? proc_fail_nth_read+0x1d0/0x1d0
[   91.498027][ T3791]  ? memset+0x1f/0x40
[   91.501979][ T3791]  ? fsnotify+0x13a0/0x1460
[   91.506457][ T3791]  ? debug_shrink_set+0x1b0/0x1b0
[   91.511459][ T3791]  do_vfs_ioctl+0x770/0x1750
[   91.516026][ T3791]  ? selinux_file_ioctl+0x73b/0x990
[   91.521193][ T3791]  ? ioctl_preallocate+0x250/0x250
[   91.526285][ T3791]  ? __fget+0x37c/0x3c0
[   91.530407][ T3791]  ? vfs_write+0x427/0x4f0
[   91.534791][ T3791]  ? fget_many+0x20/0x20
[   91.539001][ T3791]  ? ksys_write+0x25d/0x2c0
[   91.543471][ T3791]  ? file_open_root+0x450/0x450
[   91.548463][ T3791]  ? security_file_ioctl+0xad/0xc0
[   91.553541][ T3791]  __x64_sys_ioctl+0xd4/0x110
[   91.558188][ T3791]  do_syscall_64+0xcb/0x150
[   91.562662][ T3791]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   91.568527][ T3791] RIP: 0033:0x45ce69
[   91.572395][ T3791] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[   91.592154][ T3791] RSP: 002b:00007ffab22d2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   91.600545][ T3791] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045ce69
[   91.608489][ T3791] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000006
[   91.616452][ T3791] RBP: 00007ffab22d2ca0 R08: 0000000000000000 R09: 0000000000000000
04:42:14 executing program 0:
r0 = socket(0x40000000002, 0x3, 0x2)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, &(0x7f0000000040)=0x148, 0x4)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:14 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x804, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)

04:42:14 executing program 3:
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000), 0x4)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:14 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)

04:42:14 executing program 4 (fault-call:5 fault-nth:7):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1})

04:42:14 executing program 0:
r0 = socket(0x40000000002, 0x3, 0x2)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, &(0x7f0000000040)=0x148, 0x4)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

[   91.624496][ T3791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[   91.632438][ T3791] R13: 00007ffef6f7796f R14: 00007ffab22d39c0 R15: 000000000118bf2c
04:42:14 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x806, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)

04:42:14 executing program 3:
unshare(0x64040600)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x615, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0)
pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0)

04:42:14 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)

04:42:14 executing program 0:
r0 = socket(0x40000000002, 0x3, 0x2)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:14 executing program 1 (fault-call:5 fault-nth:0):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)

[   91.712054][ T3813] FAULT_INJECTION: forcing a failure.
[   91.712054][ T3813] name failslab, interval 1, probability 0, space 0, times 0
[   91.727585][ T3813] CPU: 1 PID: 3813 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00202-g7fc27297c44d #0
[   91.737665][ T3813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   91.747713][ T3813] Call Trace:
[   91.751000][ T3813]  dump_stack+0x14a/0x1ce
[   91.755326][ T3813]  ? devkmsg_release+0x11c/0x11c
[   91.760258][ T3813]  ? show_regs_print_info+0x12/0x12
[   91.765447][ T3813]  should_fail+0x6fb/0x860
[   91.769857][ T3813]  ? setup_fault_attr+0x3d0/0x3d0
[   91.774872][ T3813]  ? __alloc_file+0x26/0x390
[   91.779453][ T3813]  should_failslab+0x5/0x20
[   91.783950][ T3813]  kmem_cache_alloc+0x36/0x260
[   91.788701][ T3813]  ? _raw_spin_trylock_bh+0x190/0x190
[   91.794065][ T3813]  __alloc_file+0x26/0x390
[   91.798474][ T3813]  ? alloc_empty_file+0x49/0x1b0
[   91.803421][ T3813]  alloc_empty_file+0xa9/0x1b0
[   91.808166][ T3813]  alloc_file+0x58/0x4a0
[   91.812377][ T3813]  alloc_file_pseudo+0x28c/0x340
[   91.817283][ T3813]  ? alloc_empty_file_noaccount+0x70/0x70
[   91.822970][ T3813]  ? alloc_anon_inode+0x213/0x2e0
[   91.827961][ T3813]  ? memcpy+0x38/0x50
[   91.831911][ T3813]  ? alloc_anon_inode+0x213/0x2e0
[   91.836905][ T3813]  dma_buf_export+0x4e0/0x7b0
[   91.841562][ T3813]  ion_dmabuf_alloc+0x199/0x230
[   91.846387][ T3813]  ? track_buffer_created+0x1c0/0x1c0
[   91.851726][ T3813]  ? check_stack_object+0x5a/0x90
[   91.856730][ T3813]  ion_ioctl+0x2e8/0x9c0
[   91.860942][ T3813]  ? get_pid_task+0x86/0x90
[   91.865436][ T3813]  ? proc_fail_nth_write+0x18f/0x250
[   91.870687][ T3813]  ? debug_shrink_set+0x1b0/0x1b0
[   91.875678][ T3813]  ? proc_fail_nth_read+0x1d0/0x1d0
[   91.880841][ T3813]  ? memset+0x1f/0x40
[   91.884793][ T3813]  ? fsnotify+0x13a0/0x1460
[   91.889262][ T3813]  ? debug_shrink_set+0x1b0/0x1b0
[   91.894255][ T3813]  do_vfs_ioctl+0x770/0x1750
[   91.898815][ T3813]  ? selinux_file_ioctl+0x73b/0x990
[   91.903980][ T3813]  ? ioctl_preallocate+0x250/0x250
[   91.909063][ T3813]  ? __fget+0x37c/0x3c0
[   91.913203][ T3813]  ? vfs_write+0x427/0x4f0
[   91.917597][ T3813]  ? fget_many+0x20/0x20
[   91.921808][ T3813]  ? ksys_write+0x25d/0x2c0
[   91.926279][ T3813]  ? file_open_root+0x450/0x450
[   91.931099][ T3813]  ? security_file_ioctl+0xad/0xc0
[   91.936178][ T3813]  __x64_sys_ioctl+0xd4/0x110
[   91.940831][ T3813]  do_syscall_64+0xcb/0x150
[   91.945302][ T3813]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   91.951167][ T3813] RIP: 0033:0x45ce69
[   91.955034][ T3813] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[   91.974605][ T3813] RSP: 002b:00007ffab22d2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   91.982984][ T3813] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045ce69
[   91.990945][ T3813] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000006
[   91.999061][ T3813] RBP: 00007ffab22d2ca0 R08: 0000000000000000 R09: 0000000000000000
[   92.007010][ T3813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[   92.015040][ T3813] R13: 00007ffef6f7796f R14: 00007ffab22d39c0 R15: 000000000118bf2c
[   92.027040][ T3813] kasan: CONFIG_KASAN_INLINE enabled
[   92.032332][ T3813] kasan: GPF could be caused by NULL-ptr deref or user memory access
[   92.043990][ T3813] general protection fault: 0000 [#1] PREEMPT SMP KASAN
[   92.051027][ T3813] CPU: 1 PID: 3813 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00202-g7fc27297c44d #0
[   92.061100][ T3813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   92.071135][ T3813] RIP: 0010:dma_buf_release+0x44/0x2f0
[   92.076577][ T3813] Code: fe 48 83 c3 78 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 2b ef 07 ff 4c 8b 23 49 8d 5c 24 48 48 89 d8 48 c1 e8 03 <42> 8a 04 28 84 c0 0f 85 34 02 00 00 8b 1b 31 ff 89 de e8 35 c0 d9
[   92.076582][ T3813] RSP: 0018:ffff8881cf88f7e0 EFLAGS: 00010206
[   92.103432][ T3813] RAX: 0000000000000009 RBX: 0000000000000048 RCX: 0000000000040000
[   92.111398][ T3813] RDX: ffffc9000607d000 RSI: 0000000000035e22 RDI: 0000000000035e23
[ 
  92.1193[   **[0;31][ T3m*] A start 813] job is running fRBP:or dev-ttyS0.dev dffffc0000000000 R08: ffffffff817b504f R09: 000000000ice (1min 24s / 001min 30s)00003
[   92.136893][ T3813] R10: ffffed1039f11ee5 R11: 0000000000000004 R12: 0000000000000000
[   92.144978][ T3813] R13: dffffc0000000000 R14: 1ffff1103a7996aa R15: 1ffff1103a7996bc
[   92.152944][ T3813] FS:  00007ffab22d3700(0000) GS:ffff8881db900000(0000) knlGS:0000000000000000
04:42:15 executing program 2:
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000)=0x6bc, 0x4)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:15 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)

04:42:15 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
write(r2, &(0x7f0000000440)="bc", 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES64], 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0)
getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r4 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$IP_VS_SO_GET_INFO(r4, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc)
writev(r4, &(0x7f0000000500)=[{&(0x7f0000000280)='{', 0x1}], 0x1)
close(r4)

04:42:15 executing program 0:
r0 = socket(0x40000000002, 0x3, 0x2)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

04:42:15 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @random="e791991803c4", @void, {@ipv4={0x814, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)

[   92.161845][ T3813] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   92.168408][ T3813] CR2: 00007ffe36d88630 CR3: 00000001cdf07002 CR4: 00000000001606e0
[   92.176377][ T3813] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   92.184349][ T3813] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   92.192289][ T3813] Call Trace:
[   92.195554][ T3813]  ? dma_buf_fs_init_context+0x60/0x60
[   92.200990][ T3813]  __dentry_kill+0x41b/0x5a0
[   92.205566][ T3813]  dput+0x2e1/0x5e0
[   92.209365][ T3813]  path_put+0x35/0x60
[   92.213334][ T3813]  alloc_file_pseudo+0x2ac/0x340
[   92.218259][ T3813]  ? alloc_empty_file_noaccount+0x70/0x70
[   92.223965][ T3813]  ? alloc_anon_inode+0x213/0x2e0
[   92.229496][ T3813]  ? memcpy+0x38/0x50
[   92.233465][ T3813]  ? alloc_anon_inode+0x213/0x2e0
[   92.238478][ T3813]  dma_buf_export+0x4e0/0x7b0
[   92.243149][ T3813]  ion_dmabuf_alloc+0x199/0x230
[   92.247988][ T3813]  ? track_buffer_created+0x1c0/0x1c0
[   92.253351][ T3813]  ? check_stack_object+0x5a/0x90
[   92.258363][ T3813]  ion_ioctl+0x2e8/0x9c0
[   92.262599][ T3813]  ? get_pid_task+0x86/0x90
[   92.267091][ T3813]  ? proc_fail_nth_write+0x18f/0x250
[   92.272361][ T3813]  ? debug_shrink_set+0x1b0/0x1b0
[   92.277411][ T3813]  ? proc_fail_nth_read+0x1d0/0x1d0
[   92.282601][ T3813]  ? memset+0x1f/0x40
[   92.286639][ T3813]  ? fsnotify+0x13a0/0x1460
[   92.291137][ T3813]  ? debug_shrink_set+0x1b0/0x1b0
[   92.296131][ T3813]  do_vfs_ioctl+0x770/0x1750
[   92.300695][ T3813]  ? selinux_file_ioctl+0x73b/0x990
[   92.305863][ T3813]  ? ioctl_preallocate+0x250/0x250
[   92.310949][ T3813]  ? __fget+0x37c/0x3c0
[   92.315142][ T3813]  ? vfs_write+0x427/0x4f0
[   92.319537][ T3813]  ? fget_many+0x20/0x20
[   92.323822][ T3813]  ? ksys_write+0x25d/0x2c0
[   92.328316][ T3813]  ? file_open_root+0x450/0x450
[   92.333136][ T3813]  ? security_file_ioctl+0xad/0xc0
[   92.338217][ T3813]  __x64_sys_ioctl+0xd4/0x110
[   92.342866][ T3813]  do_syscall_64+0xcb/0x150
[   92.347351][ T3813]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   92.353387][ T3813] RIP: 0033:0x45ce69
[   92.357250][ T3813] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[   92.376824][ T3813] RSP: 002b:00007ffab22d2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   92.387811][ T3813] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045ce69
[   92.395750][ T3813] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000006
[   92.403689][ T3813] RBP: 00007ffab22d2ca0 R08: 0000000000000000 R09: 0000000000000000
[   92.411631][ T3813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[   92.419580][ T3813] R13: 00007ffef6f7796f R14: 00007ffab22d39c0 R15: 000000000118bf2c
[   92.427529][ T3813] Modules linked in:
[   92.431661][ T3813] ---[ end trace cfddd1e118a5822d ]---
[   92.437959][ T3813] RIP: 0010:dma_buf_release+0x44/0x2f0
[   92.443406][ T3813] Code: fe 48 83 c3 78 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 2b ef 07 ff 4c 8b 23 49 8d 5c 24 48 48 89 d8 48 c1 e8 03 <42> 8a 04 28 84 c0 0f 85 34 02 00 00 8b 1b 31 ff 89 de e8 35 c0 d9
[   92.463271][ T3813] RSP: 0018:ffff8881cf88f7e0 EFLAGS: 00010206
[   92.469354][ T3813] RAX: 0000000000000009 RBX: 0000000000000048 RCX: 0000000000040000
[   92.477330][ T3813] RDX: ffffc9000607d000 RSI: 0000000000035e22 RDI: 0000000000035e23
[   92.485285][ T3813] RBP: dffffc0000000000 R08: ffffffff817b504f R09: 0000000000000003
[   92.493254][ T3813] R10: ffffed1039f11ee5 R11: 0000000000000004 R12: 0000000000000000
[   92.501232][ T3813] R13: dffffc0000000000 R14: 1ffff1103a7996aa R15: 1ffff1103a7996bc
[   92.509231][ T3813] FS:  00007ffab22d3700(0000) GS:ffff8881db900000(0000) knlGS:0000000000000000
[   92.518164][ T3813] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   92.524743][ T3813] CR2: 00007ffe36d88630 CR3: 00000001cdf07002 CR4: 00000000001606e0
[   92.532715][ T3813] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   92.540716][ T3813] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   92.548701][ T3813] Kernel panic - not syncing: Fatal exception
[   92.555328][ T3813] Kernel Offset: disabled
[   92.559663][ T3813] Rebooting in 86400 seconds..